last executing test programs: 9.849280379s ago: executing program 3 (id=1641): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x8}}}}}}, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) (async) sendto$inet(r1, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 8.801002336s ago: executing program 3 (id=1645): r0 = socket$kcm(0x2, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000001bc0)=0x3ff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000280)=0x7ff) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000340)={&(0x7f00000007c0)=[0x8, 0x5, 0xfffffff2, 0x56a2, 0x10001, 0x1, 0x2, 0xb, 0x9ac, 0x8, 0xffffffc0, 0x7, 0x0, 0x7, 0x7fffffff, 0x6, 0x5, 0x1, 0x35d, 0x9, 0x7ff, 0x0, 0x6, 0xfffffff7, 0x900, 0x4, 0x2, 0x9, 0x19d7, 0x1, 0xfffffff9, 0x0, 0xa, 0x0, 0x4, 0xfffffff9, 0x4, 0xffffff00, 0x0, 0x5, 0x7, 0x6000, 0xc0, 0x0, 0x4, 0x3, 0x3, 0x4, 0x6, 0x2, 0xb37, 0x4, 0x1, 0x3, 0x11c6, 0xa7, 0x7, 0x40, 0x7, 0x6, 0x4, 0x8, 0x2, 0x4, 0x8001, 0x1000, 0x9, 0x1eb, 0xa1, 0x0, 0x5, 0x63ca, 0xec8, 0x1, 0xffffffff, 0x24d400, 0xffff, 0x6, 0x7fff, 0x6, 0x5, 0x9, 0xfc, 0x3bbf08f0, 0x3, 0x7, 0x40, 0x8, 0x7, 0x7, 0x1, 0x2, 0x101, 0x1, 0x2, 0x6, 0x6, 0x8, 0x2, 0x401, 0x6, 0x9, 0xf72, 0xf603, 0x4, 0xd, 0xfffffff7, 0x3, 0x2, 0xa, 0x8000, 0x4, 0x8001, 0x5, 0x2, 0x0, 0xb69e, 0x1, 0x8, 0x2, 0x0, 0x0, 0x80000001, 0x4, 0x8000, 0x10, 0x7, 0x6, 0x1, 0x4c18, 0x8, 0x8d7, 0x542, 0xfffffc00, 0x7, 0xe0aa, 0x1, 0x2, 0x7fffffff, 0x3, 0x5, 0x0, 0x7, 0x100, 0xfffffff7, 0x7, 0xa68, 0x1ff, 0x6, 0x7ecc, 0x0, 0x7, 0x9, 0x4, 0x80000000, 0x6, 0x2, 0x6, 0x8000, 0xa75c, 0x263, 0xe, 0x6, 0xd0e, 0xd7, 0x1, 0xfffff592, 0x8, 0x9f, 0x3, 0x9, 0xfd, 0x235a, 0x2, 0x6, 0x6, 0xb, 0x100, 0x7, 0xfffffff9, 0x2, 0x0, 0x70ac811, 0xffffffff, 0xd6e, 0x10001, 0x4ff2, 0x5, 0x0, 0x6, 0x6, 0x9, 0xfffffffb, 0x7, 0x0, 0x9, 0x3, 0x76c0, 0x0, 0x2, 0x7, 0x38000, 0x6, 0x8, 0xff, 0xfffffff7, 0x7ff, 0x2, 0x8, 0x7, 0x3, 0xffff, 0x2, 0x4, 0x0, 0x8, 0x9, 0x3ad9, 0x9a, 0x2, 0x7fff, 0x6, 0x7f, 0x0, 0x3f, 0x1000, 0x6, 0x69d5, 0x7, 0x0, 0x9, 0x5, 0x80, 0x1, 0xfffeffff, 0x1d00000, 0x2, 0x2d, 0xdd0d, 0x9, 0x4, 0x6, 0x964, 0xd, 0x8, 0xc, 0x200, 0xffffffff, 0x6, 0x4, 0x6, 0x62, 0xf60, 0x355, 0x48, 0xe7, 0x4360, 0x400, 0x6, 0x6, 0x40, 0x2, 0x0, 0xc, 0x7ff, 0x40, 0x1, 0x3ff, 0x3, 0xfffffff8, 0xfffeffff, 0x4, 0x4, 0x2, 0x1, 0x0, 0xe, 0x3, 0x9, 0xfffffff8, 0x1, 0x6, 0x11e5, 0x0, 0x7, 0xa, 0x4, 0xd13, 0x1000, 0x80000000, 0x3, 0x5e58, 0x8, 0x9, 0xcc, 0x4, 0x3, 0x4, 0x2, 0x2, 0xf, 0x0, 0x0, 0x7fffffff, 0xe, 0xfffffffd, 0x0, 0x4, 0x0, 0xfffffffd, 0x10000, 0xe, 0x1, 0x0, 0x0, 0x3, 0x3, 0xffffffff, 0x6, 0x1, 0x1, 0x10001, 0x5a, 0x4, 0x2, 0x5, 0x8, 0x7f, 0xe, 0x81, 0x5, 0xe2de, 0x9, 0x4, 0x3, 0x100, 0x9, 0x2, 0x7, 0x9, 0x7fff, 0x2, 0x9ce8, 0x8, 0x7f, 0x3, 0x89b8, 0x8001, 0x6, 0xb, 0x542, 0xdfb5, 0x7, 0x8, 0xe, 0x4, 0x79, 0x3, 0x2, 0x8, 0xfff, 0xfffffff7, 0x4, 0x0, 0x9, 0x160, 0xffff, 0xac47, 0x7, 0x823093ca, 0xffff, 0x2, 0x0, 0x0, 0x10001, 0xceb, 0x3, 0x17, 0x5, 0x4, 0x5, 0x7f, 0x9ded, 0x3, 0x200, 0x80, 0x2, 0xffff702f, 0x7, 0x6, 0x200, 0xfffffff9, 0x2, 0x57, 0x1, 0x8, 0x0, 0x439, 0x6, 0x14b, 0x8, 0x8, 0x85, 0x8, 0x2, 0x3, 0x1, 0x6, 0x9, 0x1, 0x9e5, 0x1, 0xa66, 0x0, 0x7, 0x0, 0x3548, 0xd, 0x508, 0x3, 0x5, 0x2, 0x9, 0x80000001, 0x78b7, 0x9, 0x40, 0x8e, 0x4, 0x7f, 0x6, 0x3, 0x2, 0x8001, 0x8, 0x6, 0x0, 0x5, 0x7fffffff, 0x1, 0x5, 0x1000000, 0x4, 0x401, 0x6, 0x3, 0x0, 0x0, 0xfe, 0x3, 0x6, 0x3168f3d, 0x414, 0xb, 0x3, 0x50, 0x1, 0xf, 0xd, 0x1, 0x2, 0x9, 0xfffff801, 0x4, 0x0, 0x0, 0x9, 0x80000000, 0xf8, 0x3, 0x2, 0x10001, 0x2, 0x1, 0x3, 0x3, 0xe, 0xb681, 0xda6, 0x3, 0x1ff, 0x5, 0x3, 0x9, 0x5, 0x7, 0xfffffffc, 0x1, 0x34, 0x4, 0xfb7, 0x3ff, 0x5, 0x7, 0x5, 0x1ff, 0xd, 0x9, 0x6, 0xe44, 0x8a1, 0x1, 0x5, 0x5, 0xfd, 0x1, 0x9, 0x5, 0x1, 0x5, 0x8, 0x4, 0xc, 0x1, 0x8, 0x5, 0x0, 0x431, 0xfffffc01, 0x8, 0xbe, 0x3, 0x7ff, 0xb1f9, 0x7ab, 0xa, 0x8, 0x1, 0x4, 0x988, 0x8, 0x2, 0x3, 0xc3b4, 0x6, 0xcf, 0x8e9, 0xd7dc, 0xd, 0x1, 0x9, 0x100, 0x0, 0x5, 0x8, 0xfffffffa, 0x86a, 0x0, 0x1ff, 0x7, 0xc51, 0x99, 0x9053, 0x401, 0x10000, 0x2, 0xfffff001, 0x2, 0x7f, 0x4, 0xa23, 0x4a, 0x8c, 0x3ff, 0x0, 0x10001, 0x4, 0x4f6e, 0x80000001, 0x6, 0xfd, 0x0, 0x4, 0x101, 0x8, 0xfffffffc, 0x6, 0x4d39, 0x9, 0x0, 0x5, 0x5, 0xa6af, 0x7, 0x33, 0x9, 0x488, 0x5, 0x8, 0x8, 0x0, 0x1ff, 0x5, 0x9, 0x1, 0x5e9, 0x3, 0x1, 0xd, 0x4, 0x4, 0x7, 0xff, 0xc2, 0x400, 0x9df9, 0x7, 0x10001, 0x37b7, 0xe93, 0x96, 0x1dfc, 0x1, 0x2, 0x57, 0x7fffffff, 0xed7b, 0x4, 0x5, 0x1, 0x126, 0x3, 0x81, 0xfffffffa, 0x7, 0x1, 0x2, 0xffffffff, 0x7, 0x5, 0xfff, 0x3ff, 0x7ff, 0x100, 0xffffc00d, 0x8c, 0x8, 0x161, 0x7, 0x1736, 0x3, 0xc83, 0xffffff43, 0x2, 0x9, 0x2336, 0x80, 0xffff, 0x0, 0xca, 0x81, 0x5, 0x729, 0x6, 0x1, 0x8, 0x100, 0x79951b4e, 0x9, 0x8000, 0x1, 0xfffffffb, 0xb, 0x9, 0x401, 0x6, 0x4, 0x80000000, 0x666, 0x1, 0x12ef0000, 0xf, 0x5, 0x5, 0x6, 0x1ff, 0x0, 0x98b, 0x10, 0x1400, 0xa, 0x60d10fdc, 0x10, 0xfffffffa, 0x0, 0xe54, 0x80000001, 0x10, 0x2, 0x826, 0x2, 0x7fffffff, 0x2, 0x9, 0x9df, 0x6, 0x8, 0x2, 0x4, 0x23e2e000, 0x4, 0x2, 0x2400000, 0x3, 0x6, 0x816d, 0xfffff8e0, 0x2, 0x2, 0x9, 0x1, 0x7fffffff, 0x80000001, 0x2, 0x5, 0x1e2, 0x4, 0x80000001, 0x7, 0x4, 0x6, 0x0, 0xb0, 0x8, 0x10001, 0x0, 0x6, 0x493ae93e, 0xd, 0x7, 0xe4a, 0x9, 0x1, 0x7, 0x401, 0x8001, 0x4d44, 0x10000, 0x1, 0xfffffffb, 0x4, 0x400, 0xffffffff, 0x401, 0x1, 0x40, 0xc, 0xffffffff, 0x7, 0x40, 0xfffffffe, 0x0, 0x8, 0x76, 0x8, 0x9, 0xf, 0xfffffff6, 0xe, 0x9, 0x3, 0x5, 0x80, 0x6, 0xe8, 0x1, 0x3, 0xaf41, 0x6, 0x1ff, 0x6, 0x9, 0x8ac7, 0x2, 0xb8, 0xffffffff, 0x8, 0x8000, 0xfffffffa, 0x3, 0x9, 0x4, 0x59f, 0x4, 0x800, 0x8, 0x1, 0x90, 0x80000001, 0xc0, 0x0, 0x1, 0x4, 0x1, 0x82, 0x3, 0x2, 0x6, 0x1000, 0x1ff, 0xe, 0x7, 0x3, 0x72f9, 0x14fa, 0x8, 0xeb7, 0x4c51, 0xd, 0x3c23, 0xe, 0x100, 0x7, 0xfd, 0x3, 0x1490, 0x0, 0x4, 0x80, 0x2, 0x3, 0x5ea, 0x8, 0x10000, 0x0, 0x7, 0xffff, 0x9, 0x0, 0x9, 0x1, 0x1, 0x7ff, 0x0, 0xcdbe, 0x6, 0x3, 0x7, 0x1, 0x80, 0x0, 0x3, 0x8, 0x467, 0x2, 0x8, 0x2, 0x3, 0x4, 0x3, 0xfffffff4, 0x5, 0x0, 0x9, 0x0, 0x39440e7b, 0xd3b, 0x6, 0x1, 0x0, 0x6, 0x8001, 0x1, 0x8, 0x7c, 0x1, 0x7, 0x101, 0x7, 0xfffffffa, 0x8, 0x2, 0x80000001, 0x7ff, 0x7, 0xfffffffe, 0x0, 0xfffffffd, 0x3, 0xc7, 0x10000, 0x4, 0x3d73, 0x100, 0xffffffff, 0xb, 0x6, 0xc, 0x4, 0x9, 0x367, 0x47, 0x7, 0x6, 0x800, 0x7, 0x4, 0x4, 0x1, 0x4, 0x80, 0x3ff, 0x5, 0x2, 0xfffffff7, 0x4, 0x9, 0xb6, 0xc000, 0x0, 0x5, 0x5a, 0x1000, 0xca9, 0x3, 0x7fffffff, 0x6, 0x0, 0x7ff, 0x1, 0x4d, 0x28a, 0x8fd, 0x8, 0x7, 0x6, 0xffff, 0xf3, 0x1e00, 0x80, 0x10001, 0x0, 0x8, 0x5, 0x301, 0x4, 0x8000, 0x10001, 0x6, 0xe48, 0x2c0000, 0x9, 0x4, 0x8, 0x6b0, 0x0, 0x6, 0x4, 0x0, 0x9, 0x7, 0x7fffffff, 0x8, 0x5, 0xfffffffc, 0xc76, 0x1, 0x8, 0xe, 0xff, 0x8, 0x2, 0x10000, 0x7, 0x2, 0x0, 0x7, 0x6, 0x5, 0x1, 0x6, 0x4670, 0x80000001, 0x8, 0x1000, 0xf, 0x200, 0xb1d0, 0x8, 0x4, 0x1, 0x0, 0x3a0c, 0x10000, 0xe, 0x1e4e645a, 0x1, 0x8, 0x2, 0x800, 0x6d, 0x0, 0x401, 0x9d5, 0xc, 0x9, 0x736, 0x5, 0x4, 0x86, 0x2, 0x3c5, 0x1, 0xe809, 0x400, 0x0, 0x913f, 0xa, 0x4, 0x5, 0xaa, 0xf, 0x7, 0x7f, 0x1, 0xbcd9, 0xf, 0x1, 0x2, 0xb8e, 0x8001, 0x10, 0x5, 0xcb], 0x1, 0x400, 0xfff}) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15932de0994c6b645832eb306dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f4fddca2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617981a6310195ddd8619b1a733a7122304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad4"}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0xf, 0xb4, "0240cc30dc10efdb7aaf63cda8c15180fd798cf3c766ff825d44cb09e22534411b5672bd193be764580d28810527a6120d7e61ede394b4fa004ba49548007a5fa4bc593ba03d12f920e83739fced64b47a30f66ff216c47e5375b3ae2aafbfdbc6f04852fb96cc38aa036bd1a3f929f71ba2bda380cd6ec4b77388adf105df4fc2efc3a51f9286bc7425579f26d948afa6aab55351b51621af887f3e3b417d94bb57c10e8a527d1e849ae8979b700796a20283e0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c00)=@newtaction={0x2844, 0x30, 0x20, 0x70bd28, 0x25dfdbfb, {}, [{0x2830, 0x1, [@m_bpf={0x138, 0x1d, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfd, 0x6, "98469cf1aeed674aa7cafcdaf0705df7cd03236b14bf638b367973570686619a16de3bc4df50e618d26e81f5e396a5fb257b40ac27c34a3e0a50e9046e519c423002367f4e1f8f3d6d96fe3063f8dcf4735b9619dcf5968f4f481685c8b89492e11999289bf391cb4753f4a52c87b83ebcef9b208dd5be94c767762cec05a305e5736b819472684b55b8ec2bfd7d27f7a32139fa2bd9fd30b3ad9198d237045b27805b06823c22a2fc7c28817b5deb17d352eba38ae476e79905eaecd795c1e5057742709101f7417f9328309a006d53586ee5afd6681ac9f357c89b11a3dfaf5e3eeff15c76f45b5a14dc7b46be5d57301af1d2c4e341efe0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x14c, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x80, 0x1, 0x3, 0x3ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26da, 0x7}}]}, {0xf9, 0x6, "8202b8c38ae1e895a2d5aa51bc77626ef5527dc550a12eed7f0725266435888597620c86c53f8816dbfb790a1b0f94e8835de7315f6d301b3f7a8e3d0fdf30cf6538f478b005b5437d23abc5b9b02d5fc9b0bf5dcfe386f7727feea2e065379029409ff1d7c5bf9c62e76cc4183e719469eb0e3fb26187fa4f63112af27dabf2ccc96dbee1def65026a8adf75b2802f84113ed15d950aa0680280cfbdc69dc9e424a5b3b0ae950cea8250e5754f4c863ca95e0a4221fb7562fcd81ebd6c8ab558e10b4d8b0131f61e09c31ee014d1e32a54b73359148958351715235d69aa415101542b977786315251f0e972915a5f12bda0aa719"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xa8, 0x1a, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7, 0x20000000, 0x4, 0xba1e}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x18, 0xffffffffffffffff, 0xe5, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xef7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffff827, 0x11, 0x6, 0xfffffc75, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1177, 0x6}}]}, {0x19, 0x6, "7966c639a49fcbe55ed4fbebbbc8fa0f7ce029c6ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x510, 0xb, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x7, 0x40, 0x8, 0x3, 0x6, 0x5, 0x80000001, 0xf8, 0x1, 0x8, 0x4, 0xfffffff7, 0x9, 0x1, 0x2, 0xffffff7f, 0x80000001, 0x6, 0x0, 0x232, 0x0, 0x9, 0x8, 0x6, 0x1ff, 0x7, 0xfffffffd, 0x10, 0x3, 0x3, 0x1ff, 0x10001, 0xfffffffa, 0x1, 0x5, 0x4, 0x9, 0x7, 0x80000000, 0x5, 0x4, 0x1, 0x1c000, 0x0, 0x1, 0x8, 0x5, 0x9, 0x1, 0x3, 0x4, 0x5, 0xfffffff9, 0x1, 0x0, 0x8, 0xfffffe00, 0x0, 0x401, 0x100, 0x8, 0x9, 0x34, 0x5, 0x5c5, 0x3, 0xaf6, 0x2, 0x7, 0x510, 0x45a1, 0x5e, 0x4, 0x6, 0xf, 0xa, 0x6, 0x0, 0x1ff, 0x6ba, 0xa, 0x7, 0x1, 0x340, 0xf57, 0x10001, 0xb, 0xffffffff, 0x101, 0xfffffff7, 0x10001, 0x8, 0x7f, 0x2000000, 0xd, 0xffff5dfa, 0x6, 0x40, 0x3, 0x2, 0x7, 0xd, 0x8, 0x20000, 0x8, 0x5f, 0x9, 0x8, 0x9, 0x5, 0x4, 0x3, 0x80000000, 0xfffffffa, 0x101, 0x0, 0x10000, 0x3, 0x4, 0x34, 0xc2b3f49, 0x5, 0x1800000, 0x3, 0x0, 0x81, 0x9, 0x8001, 0x7f, 0x1, 0x80000000, 0x2, 0x7, 0x7f, 0x800, 0x60, 0x800, 0xfffff000, 0x8, 0x5, 0x7, 0x8, 0x0, 0x9, 0x0, 0x8001, 0x4, 0x0, 0x5, 0x4, 0xffffffff, 0x71edd163, 0x8, 0x80000001, 0xe, 0xfffffff9, 0x1, 0x5, 0x7, 0x2, 0x2, 0x80000001, 0x2, 0x396, 0x8, 0x8000, 0x675b, 0x2, 0xfffffffa, 0x4, 0x8, 0xb98b, 0x800, 0x8000, 0x7fffffff, 0x2, 0x7, 0x2, 0x6, 0x10001, 0x4, 0x1, 0x200, 0x728f, 0x1, 0x6a, 0x2, 0xf, 0xd, 0x2bee, 0x3ff, 0x2, 0x5, 0x0, 0x6, 0x6, 0x4, 0x3, 0x5, 0x7fff, 0x1, 0x5, 0x1, 0x70, 0x8, 0x1, 0x8, 0x19b, 0x280, 0x94a9, 0x9, 0x800000, 0x100, 0x7, 0x0, 0x4, 0x3, 0x348c, 0x400, 0x5, 0x3, 0x0, 0xd, 0xffffffff, 0x1, 0x4, 0x8000, 0x3, 0xb337, 0x9, 0x101, 0x7fffffff, 0x5, 0x8, 0xffffff00, 0x10, 0x2, 0x1, 0x5, 0x3, 0xf, 0x80000001, 0x40, 0x1, 0xebc, 0x9, 0x9, 0x33, 0xb, 0xcd, 0xff, 0x80000001, 0xffffff81, 0x4aed]}]]}, {0xdf, 0x6, "147c592857a5b065661c92788b899aa9ca7b42c09064eeae4cc4fc4ec6a322801cde1b499dac85a0701d2801636bf9a5353484b67e5104534c410398a5ff7f769e67ef2822d2bae7aac7f3eab43c1ea09449eab5e5d0d52dd8738e85e07d4e0fbd26aeac0ef3ddf27a69d9c5d7ca9e61e8a4dcb5e15d7cc894c7b5c7349a9980fee3ee760c7bc2122e9c21349c50f8f65d063fb037645ba79d2654db45444cdbb39e3176f0eb631f40ab8455aaa3b37b4804bc5d13fe7d9936c5fc8711645448aedfc220be3a2fd10d36e84617dc98f7b61366abeb37380464aff6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x18c, 0x81, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xfffffff7, 0x0, 0x5, 0x6}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x1, 0x1, 0x5f56, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x4, 0x4, 0x6, 0x8}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xf, 0x2, 0x40, 0x7115}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xca, 0x6, "c51336c7473e1ac507a3d94626eafe0151652bfd87d1bab847ebaab53781979d8e805a66b64563849d2d112ae7dff34a7b4a841f0b2ebf7c5bcde18a2849c097e7e18e15ac6eff2e783aff1873086df4c720cfa2861c0ec3b0e799cbddb3aecb5372ca96c52eabe332958450f7eae191853d263ad2f4448d074dc3d9770d199f283ab8fe5780b5549cf50aca5b1a2fe3410dc9506e99c3ab374c5cad760fcfe713b9caee8de36e9b1415c92252931767d83279b5ffcfb72296cf09260849c459e5f3b0fdb303"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x1e64, 0x13, 0x0, 0x0, {{0xa}, {0x1d8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0xac3, 0xc, 0x2, 0x6, 0x5}, 0x4, 0xae, [{0x8, 0x3, 0x5, 0xbd, 0x4, 0xfffffffb}, {0x3, 0xfff, 0x9, 0x66, 0x8, 0x288c}, {0x6, 0x1, 0x0, 0x6c, 0x2, 0x7091}, {0x5, 0x1ff, 0x3, 0x8, 0xab, 0x9}]}, [{0x7fff, 0xffffffff, 0xe882, 0x78, 0x101, 0x5}, {0x6789, 0x0, 0x5, 0x2, 0x7, 0x40100}, {0x9, 0xf, 0x55, 0x7, 0x3, 0x7}, {0x7, 0xfffffffe, 0x14c00000, 0x400, 0x8, 0x2}, {0xc, 0x2, 0x4, 0x7, 0x1, 0xbfd4}, {0x2, 0x80000001, 0x2, 0xec13, 0xffff, 0x800}, {0x9c8, 0x9, 0x5, 0x9, 0x9, 0x200}, {0x3, 0x1ff, 0x9, 0xfffffffa, 0x1, 0x4}, {0x4, 0x5, 0x316142b2, 0x0, 0x19c0, 0x3}, {0x6, 0x5, 0x1, 0x3, 0x8001, 0x8}, {0xfffffff7, 0xf834, 0x6, 0xffffffff, 0x8, 0x8}, {0x5, 0x1, 0xa1, 0x9, 0x5, 0x380}, {0x81, 0x3, 0x0, 0x1, 0x69, 0x8}, {0xc0, 0xf, 0x200, 0xfd4, 0x5, 0x7a800000}, {0x2844, 0x0, 0x4, 0x788, 0x80, 0x200}, {0x9, 0xff, 0x8001, 0x0, 0x8c, 0xffffffff}, {0x7, 0x5, 0x5, 0x9, 0x80, 0x1}, {0xfffff209, 0x3, 0x3, 0x77, 0xffffff74, 0xffff936d}, {0x1, 0x5, 0x5, 0x0, 0x1, 0x8}, {0xac, 0x3, 0x75c, 0xffffff25, 0xfffffff7, 0x7}, {0x8, 0x19000, 0x7ff, 0xffffffff, 0x7fff, 0x20}, {0xfffffff1, 0xfffffffb, 0xfff, 0xe021, 0xf3, 0x164}, {0x9, 0x6d6, 0x200, 0x1, 0x9f, 0x6c9e}, {0x8e9, 0x70, 0x0, 0x4e1, 0x77c, 0x101}, {0x8, 0x100, 0x8, 0xff, 0x9d5, 0x9}, {0x8001, 0x6, 0x7, 0x10001, 0x814c, 0xa2}, {0x7, 0x2, 0xfffffffc, 0x200, 0x0, 0xfff}, {0x0, 0x7fff, 0x80, 0x8, 0x5, 0xd}, {0x6, 0x0, 0x4, 0xffff, 0x7, 0x8}, {0x10000, 0xfffffff9, 0x7fff, 0xb5a, 0xfffffffc, 0xff}, {0x6, 0xfffff800, 0x7c61, 0xffffffff, 0x3, 0x5}, {0x7, 0x8, 0x6, 0x4, 0x7, 0x7f}, {0x0, 0x9, 0x5, 0xc, 0x2, 0x4}, {0x1860000, 0x3, 0x3, 0xffff8001, 0x3ff, 0x1}, {0xfffffff9, 0x400, 0x9, 0x2, 0x6, 0x6}, {0x6, 0x0, 0x3, 0x3, 0x9, 0xc0}, {0xcf35, 0xb406, 0xf, 0x7, 0xffffffff, 0x8dd9}, {0x9, 0x3, 0x0, 0x8, 0x5, 0x5}, {0x9, 0x6, 0x9, 0x80, 0x6, 0x8}, {0xdf6a, 0x0, 0xfffffff8, 0x1, 0x1, 0x9}, {0x8000, 0x1000, 0x7, 0x5, 0xb78, 0x4}, {0x0, 0x1, 0x7, 0x6, 0x5f2, 0xffff}, {0x1, 0x7, 0xffff, 0x5, 0x200, 0x4}, {0x2c3d, 0xe71c, 0x1, 0xc332, 0xf, 0xf126}, {0x7467, 0x9, 0x9, 0x2, 0x2, 0x4}, {0x7, 0x4, 0x2, 0x49, 0x9}, {0xfffffffb, 0x3, 0x9, 0x40, 0x9, 0xb}, {0x10001, 0x7, 0xa2fa, 0x1, 0xe, 0x2}, {0x4, 0xe, 0x80000000, 0x8, 0x7fffffff, 0x4}, {0x180000, 0x5, 0x400, 0x5, 0x1, 0x800}, {0xf7e, 0x8, 0xfffffffc, 0x7, 0x80000000, 0x3ff}, {0xfffffff6, 0x81, 0x4, 0xffff, 0x1, 0x9}, {0x10001, 0x23, 0xf64a, 0x80, 0x4, 0xe5f}, {0x6, 0x1, 0x4, 0x8, 0x100, 0x3}, {0x7fffffff, 0x4, 0x9, 0x7ff, 0xffffff01, 0x7}, {0x3, 0x0, 0x3, 0x3, 0x3, 0x6}, {0x4, 0xb9, 0x6, 0x10000, 0x5, 0x10001}, {0x80000001, 0x0, 0x8, 0xffffffcb, 0x3, 0xe}, {0x3, 0x6, 0x2, 0x1, 0x81, 0x552c}, {0x3, 0xd, 0x0, 0x5, 0x814d, 0x263}, {0x4, 0x0, 0x45c819be, 0x1, 0x7, 0x564c}, {0x1000, 0x9, 0x1, 0x6, 0x7fffffff, 0x1a}, {0x0, 0x7f, 0x2, 0xf4, 0x7, 0x7}, {0x2, 0x4, 0x5, 0x5, 0x7, 0xffff}, {0xd44, 0x100, 0x9, 0x7, 0xfffffffd, 0x8b}, {0x0, 0x7, 0x7, 0xed, 0xe, 0xffff}, {0x6, 0x2f, 0xb, 0x1ff, 0x8, 0x8001}, {0x0, 0x5, 0xffffffff, 0x5, 0x8, 0x6}, {0x7f, 0xd, 0x6, 0x800, 0x3}, {0x1ff, 0xa4, 0xbf, 0x4, 0x101, 0x40}, {0xb, 0x2, 0x4, 0x0, 0x2f5c}, {0xffffff80, 0x8, 0x8, 0x0, 0xf6, 0x8}, {0xffffffc0, 0x2, 0x5, 0xfffffff7, 0x80000001, 0xef}, {0xe, 0x40b8, 0x6, 0x1, 0x7, 0x3}, {0x0, 0x3, 0xff, 0x6, 0x2, 0x8}, {0xffff, 0x4, 0x9, 0x100, 0x0, 0x80000000}, {0x74c8, 0x84, 0xaaed, 0x8000, 0x0, 0x23f87809}, {0x5, 0x9, 0x7ff, 0x7, 0x0, 0xfa}, {0x8, 0x115, 0x0, 0x1000, 0x6, 0x9}, {0x7, 0x6, 0x7, 0x7, 0x9, 0x8}, {0x7, 0x3, 0x9, 0xb, 0xffff}, {0xd, 0x1, 0x3, 0x1, 0x2, 0xc59}, {0x9, 0x9, 0x3ff, 0x3, 0xe7f0, 0x1ff}, {0xfffffffd, 0x2, 0x1, 0x2, 0xa, 0x9}, {0x8, 0x288, 0x627, 0x5390, 0x7f, 0x200}, {0x1c30, 0x7, 0x8, 0x7ff, 0x3dcd, 0xe1}, {0x2, 0x80000000, 0xa, 0x7, 0x5e57}, {0x3ff, 0x200, 0x7, 0x5, 0x4, 0xff}, {0x3ff, 0x9, 0x7, 0x1, 0x9, 0x2}, {0xffff2419, 0x1, 0x2bc2, 0x2, 0x81, 0xe}, {0x1e164105, 0x2, 0x0, 0x2f8e, 0x7, 0x4}, {0x6, 0x0, 0x100, 0x9, 0x4, 0x7}, {0xa, 0x800, 0xdc, 0x4, 0x7, 0x1}, {0x5, 0xfff, 0xd, 0xffff, 0x81, 0x6}, {0x9, 0x7, 0x6, 0x3, 0x6}, {0x2, 0x9, 0x5, 0x7, 0x4, 0x6}, {0x1, 0x7, 0xfff, 0x3, 0x4, 0xb5b}, {0xd3c, 0x1ff, 0x3, 0x49, 0xae6, 0xcb}, {0xd79, 0x3, 0x0, 0xfffffff9, 0x295cdcbb, 0x7}, {0x20, 0x8, 0x3, 0xf737, 0xe, 0x4}, {0x6, 0x6, 0x4, 0x8, 0x8, 0xc4}, {0x401, 0x267, 0x6, 0x8, 0x3, 0x5}, {0x7f, 0x6, 0x1ff, 0x1000, 0x4ba6, 0x81}, {0x1, 0x2, 0x6, 0x8, 0x10001, 0x3}, {0x39dbbcc3, 0xfff, 0x0, 0x6, 0x81, 0x5}, {0xb0, 0xe, 0x7, 0x1, 0x9, 0x4}, {0x6, 0x400, 0x2, 0x2, 0xff, 0xffffffff}, {0xc, 0x30000000, 0x7, 0x1, 0x4, 0x4}, {0x7, 0x6, 0x7, 0x1, 0xf3, 0x6}, {0x5, 0x7, 0xffffffff, 0x1c4e, 0x7, 0x2}, {0x6, 0x2, 0x7, 0x6, 0x5, 0xff}, {0x7, 0x7, 0xc, 0x100, 0x8, 0x4}, {0x7, 0x4, 0xfffffff7, 0x8, 0x3, 0x10001}, {0x4000000, 0xe5, 0x3, 0x80000001, 0x200, 0x7}, {0x2, 0x55e, 0x3, 0x9, 0x46, 0x9}, {0x80, 0x1000, 0xde, 0x100, 0x81}, {0x0, 0x4000000, 0x93b, 0x4, 0x8, 0x4}, {0x3, 0x6, 0x2a94, 0x1, 0xfe, 0x7}, {0xe13, 0xff, 0xff, 0x6, 0x7e, 0x8}, {0x9, 0x121a, 0xfff, 0x1, 0xfffffffb, 0x10001}, {0x7f, 0x7, 0x1, 0x3, 0x0, 0x8}, {0xffffffff, 0x6, 0x9, 0x5, 0x0, 0xfffffca4}, {0x7, 0x3, 0x3, 0x80000001, 0x1, 0x100}, {0x9, 0x0, 0x4, 0xe0ce, 0x9, 0x6}, {0x8, 0x2, 0x3, 0x6, 0xffffffff, 0xff}, {0x80000000, 0xf, 0x1, 0x4, 0x1, 0x8}, {0x6, 0xb7f, 0x0, 0x8000, 0xe, 0x7fff}, {0x2, 0x2, 0x1, 0x0, 0x8}], [{0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x92fb332b8050b6f9}, {0x6}, {}, {0x3}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x7, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0xc, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {}, {0xb, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x4, 0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x99f85a5b7cde1533}, {0x5, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x6, 0xfff, 0x20000000, 0x7, 0x81}, 0x5, 0x8, [{0x3, 0x8, 0x9, 0x4, 0x10, 0x4}, {0x64aa, 0x5, 0x3, 0xef04, 0x7ff, 0x3}, {0x2, 0x2, 0x5, 0x9, 0x8, 0x6}, {0xfc000000, 0x57f, 0x5, 0x9, 0x6, 0x2}, {0x4, 0x9, 0x0, 0x6, 0x1a7f, 0xa275}, {0x5, 0x6, 0x8, 0xf, 0x9, 0xbc}]}, [{0x0, 0x40, 0x8000, 0x3, 0x40, 0x3}, {0x7, 0x9, 0x1, 0x7, 0x3, 0x5}, {0x401, 0x6, 0x6ff, 0x916, 0x6, 0xd}, {0x7, 0x8, 0xff, 0x5, 0x200, 0x5}, {0x800, 0x3, 0x4, 0x4, 0x8, 0x3}, {0x8, 0x5, 0x7, 0x1, 0x6, 0xffff}, {0x6, 0x9f, 0xffffff81, 0x35e, 0x1000, 0x4}, {0x8, 0x400, 0x0, 0x9, 0x5, 0x400}, {0x2, 0x9, 0x7, 0xffff, 0x7, 0x9}, {0xd, 0x1, 0xaf05, 0xfffffff8, 0x1ff, 0x1}, {0x9d9, 0xffffff93, 0xdd, 0x80000000, 0x0, 0x717327c9}, {0x2, 0x10001, 0x3ff, 0x6, 0x8}, {0x80000000, 0x4, 0x3, 0x4, 0xcd48, 0x8001}, {0x8, 0xce6b, 0x5, 0x580, 0x80000000, 0x5}, {0x0, 0x1, 0x3, 0x1, 0x7ff, 0x2b}, {0xe73, 0x6, 0x1, 0x16, 0x3, 0x9}, {0x2, 0x2, 0xac, 0xbc, 0x3, 0x7}, {0x5d47, 0x6, 0x9, 0x3, 0x1}, {0x5, 0x4, 0xfffffeff, 0xa1e, 0x400, 0x8}, {0x9, 0x2, 0x3, 0x7, 0x7, 0x9}, {0xffffffc2, 0x9, 0x800, 0x7a, 0xfed1, 0x4}, {0x0, 0xe, 0xfffffffb, 0x7, 0x81, 0x9}, {0x7, 0x7, 0x401, 0x6, 0xc, 0x3}, {0x4, 0x2, 0xf6d9, 0x1, 0x2, 0x80}, {0x4, 0x9, 0xee9, 0xdce0, 0x4, 0xb09}, {0x8, 0xfffff800, 0x8, 0x1, 0x4, 0x6}, {0x6, 0x2, 0xb6, 0x5, 0x3, 0x1}, {0x2, 0x1, 0x9, 0x3, 0x4, 0x6}, {0x9be1, 0x7fffffff, 0xfffffff7, 0x4, 0xffff, 0xfffffff7}, {0x3, 0x400, 0xa1c, 0xfffffffb, 0x0, 0xb}, {0x8, 0x1d2, 0x7ff, 0x3, 0x4, 0x4}, {0x80000001, 0x0, 0x7, 0x401, 0x9, 0x7a1}, {0x5, 0x8, 0x800, 0x1ff, 0x7fffffff, 0x5}, {0x544, 0xac, 0x1000, 0x101, 0x3, 0x56e}, {0x4, 0x2, 0x87a, 0x4, 0x60, 0x100}, {0x6, 0x5, 0x6, 0x101, 0xa2, 0x7fff}, {0x5532707c, 0xbc, 0x80, 0x7, 0x92cf, 0x3}, {0x1, 0x101, 0x200000, 0x6f, 0xf, 0x1}, {0x55, 0x5, 0x1, 0x81, 0x0, 0x9}, {0x2, 0x400, 0xf, 0x6, 0x7ff, 0x5}, {0x6, 0x72, 0x80000001, 0xfe48, 0x1, 0x4}, {0x800, 0x3, 0x4, 0x0, 0x75c, 0x4}, {0x0, 0x3, 0x52, 0x2, 0x1, 0x1}, {0x7f, 0x7ff, 0x7c90e74c, 0x3, 0x3, 0x2}, {0x7ff, 0x4, 0x10000, 0x0, 0x3, 0x4}, {0x8a3, 0x6, 0x6, 0x21, 0x5, 0x6}, {0x8, 0x2d38, 0x4, 0xb68, 0x10, 0x2}, {0x1000, 0x4, 0x8, 0x5, 0x2, 0x95d}, {0x1, 0x2, 0x100, 0x0, 0x2, 0xb2}, {0x10001, 0x8, 0x10, 0x744b, 0x6, 0x5}, {0x0, 0x2, 0x3e856269, 0x8, 0x7, 0xf9c}, {0x7d, 0x40, 0x0, 0x5, 0x0, 0x101}, {0x30, 0x101, 0x800, 0x10001, 0xd}, {0xfffffffd, 0x1000, 0x8, 0xfffffff7, 0x95ea, 0xffffffff}, {0x6, 0x4, 0x4, 0xb, 0x7ff, 0x7ff}, {0x0, 0xe19c, 0x1, 0x20000000, 0xd2, 0x5}, {0x5, 0x1, 0x8, 0x7, 0xffff, 0x7}, {0x7, 0x7, 0x8000, 0x80, 0x7, 0x4}, {0xd, 0x0, 0x0, 0x538, 0x9, 0x7}, {0x0, 0x6, 0x3, 0x9, 0xffffffff, 0x200}, {0x100, 0x80000, 0x5, 0x9, 0x8, 0x7}, {0x66, 0x3, 0x10000, 0x80000001, 0x81, 0xec5}, {0xfffffffc, 0x5, 0xfffffffe, 0xf, 0xf, 0x75}, {0xed6, 0x1, 0x0, 0x8a3, 0x6, 0xfffffff9}, {0x5, 0x7, 0xffffb5f6, 0x2, 0x9, 0x5}, {0xffff8001, 0x10, 0x3f00, 0xffff, 0x1, 0x7}, {0x7, 0x58c, 0x3, 0x401, 0xfff}, {0x5, 0x5, 0x8, 0xfffffff9, 0x7, 0x7ff}, {0x9, 0x3, 0xc6a, 0x6, 0x1, 0x6}, {0xb, 0x4, 0xb3, 0x9, 0x5, 0x6}, {0x80000001, 0x6, 0x9, 0xfffffeff, 0x3, 0x6}, {0x7, 0x3, 0x200, 0x6, 0xdd, 0x5}, {0x2d, 0x2, 0xfffffffe, 0xfffff801, 0x2a6, 0x2}, {0x0, 0x7, 0xb, 0x400, 0x4, 0x10001}, {0x7fff, 0x6, 0x200, 0x3, 0x8, 0x400}, {0x7, 0x9, 0x4, 0x5, 0xd673, 0x2}, {0x7, 0x5, 0x1, 0x0, 0xfffffe00}, {0x9a5, 0x3, 0x7c7, 0xe2, 0x9, 0x8}, {0x8, 0x1, 0x7, 0x0, 0x4, 0xe}, {0xc, 0x10000, 0x9a, 0x8, 0x4, 0x1ff}, {0x2, 0x8a90, 0x2, 0x800, 0x8, 0x7fffffff}, {0x2, 0x6, 0x7, 0x655d, 0x7f96, 0x200}, {0x10, 0x9, 0xe94, 0x6, 0x0, 0x2}, {0x100, 0x100, 0x10000000, 0x1000, 0x2, 0x3}, {0x4, 0x3, 0x7fffffff, 0x6, 0x9, 0xdb}, {0x42, 0xa88, 0x80, 0x3, 0x3, 0x3}, {0x5, 0x9, 0x3b, 0x6, 0x80000001, 0xfffffff9}, {0x9, 0x10, 0x8, 0xe654, 0x0, 0xb}, {0x9, 0x2f2, 0x6, 0x7f, 0x3, 0x3}, {0x81, 0x800, 0x0, 0x40, 0xec5, 0x7182a045}, {0x1, 0xb505, 0x7, 0x7, 0x7f, 0x4}, {0x1, 0x5, 0x4, 0x7, 0x3, 0x4}, {0x0, 0x9, 0x862, 0x24000000, 0x1, 0x3}, {0x1, 0x81, 0x5aef, 0x0, 0x6, 0xc}, {0x80000000, 0x3, 0x8e, 0x7fff, 0x1ff, 0x6}, {0x9c, 0x4, 0x0, 0x1, 0xc0, 0x24}, {0xe, 0x0, 0x19, 0x8, 0x8001, 0x2}, {0x8000, 0x0, 0x2, 0x5, 0x7fffffff, 0x100}, {0x2, 0x7, 0x8001, 0xe, 0x7fffffff, 0x7fffffff}, {0x40, 0xa377, 0xd, 0xc, 0x0, 0x10000}, {0xfffffffc, 0x1ff, 0x6, 0x7, 0x3, 0xb406}, {0x3, 0x0, 0x8, 0x10, 0x80, 0xe}, {0x3, 0x10001, 0x4f62, 0x49, 0x9, 0x2}, {0xc, 0x5, 0x400, 0x3, 0x1, 0x5}, {0x7, 0x9, 0x401, 0xf5dd, 0xcc5d, 0x4}, {0x8, 0x1ff, 0xab25, 0x8, 0x7, 0xb1}, {0x8, 0x5, 0x3, 0x5, 0x0, 0x1}, {0x1, 0x0, 0x1734, 0x80, 0x4, 0x40}, {0x0, 0x4, 0x0, 0x1, 0x4, 0x8}, {0x5, 0x3, 0x293a, 0x10, 0x2, 0x5}, {0xffffffff, 0x401, 0x10000, 0xeef, 0x4, 0x5}, {0x6, 0x2b2, 0x101, 0x0, 0x1000, 0xfffffff8}, {0x101, 0xfffffffa, 0x5, 0x0, 0x9, 0xff}, {0x800, 0x800, 0x7, 0x1, 0x5, 0xd}, {0x3, 0x8, 0xffffcbe3, 0x8000, 0x3, 0x9}, {0x7, 0x7fffffff, 0x6, 0x8, 0x2, 0x6}, {0x6, 0x2, 0x5, 0x8, 0xffffff10, 0x7ff}, {0x7, 0xfffffffb, 0x1, 0x3, 0x40, 0x7}, {0xd, 0xcd82, 0x10, 0xf, 0x3, 0x3}, {0x5, 0x8, 0x9, 0x5, 0x9, 0x2}, {0xb, 0x5, 0x2b6, 0x6, 0x1, 0x2}, {0x5, 0x8000, 0x6c, 0x0, 0x1, 0x4}, {0xc, 0x1, 0xc2, 0x9, 0x1, 0x4}, {0x3ff, 0x80000000, 0x1, 0x5, 0xd, 0xfffffffb}, {0xe12, 0x9, 0x7, 0xffff98d5, 0x2}, {0x2, 0x1, 0x8001, 0x6, 0x4, 0x9}, {0x7, 0x7, 0xc5, 0xcb6, 0x10, 0x2}, {0x1, 0x7, 0xffff8f97, 0x1, 0x2, 0x2}], [{0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {}, {0x4, 0x1}, {}, {0x5}, {0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x4}, {}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x94805ee95e9dc901}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x4}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x2}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x1}], 0x40}}]}, {0xad, 0x6, "c3766ccf1a2646b27d411c1062e1e1bef17511699b3494a77539ba18dcb8b0dc73ba278adc5ab6672001e1924eaa427307e4bfb7b6ffc939969c11590df29cb9376c1689e869e818d2476304775e9bce86c4f9f0e6bd662d59e97ac50f9811859c8ec6b61b2f9ac58d17a90e53af2b8a58011181e3b651b23d0953c31db0ef343ba5846e0e9c4c4b9f7b0f991cf9f876a69f66d086d9eda15e1c91539d3ef9a7cfc24d8a820bd7cea3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x2844}}, 0x0) 8.252675704s ago: executing program 0 (id=1649): syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000300)=0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) 8.112640977s ago: executing program 4 (id=1650): openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) dup(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00'}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x10, 0x30, 0x7, 0x0, 0x0, 0x4, 0x10}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20844}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.041788142s ago: executing program 0 (id=1651): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x8, 0x3ff, {{0x3d, 0x4, 0x0, 0x2b, 0xf4, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @multicast2, {[@generic={0x89, 0x5, "54a76a"}, @timestamp_addr={0x44, 0x54, 0xe4, 0x1, 0x3, [{@multicast1, 0x81}, {@multicast2, 0x100}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x17}, {@multicast2, 0x8}, {@rand_addr=0x64010100, 0x10000}, {@remote, 0x6}, {@loopback}, {@private=0xa010101, 0x9}, {@multicast1, 0x6}, {@loopback, 0x9}]}, @generic={0x94, 0xe, "d7a86037eb72c71853b88492"}, @rr={0x7, 0xf, 0x7d, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x40}]}, @ssrr={0x89, 0x13, 0x38, [@multicast1, @loopback, @multicast2, @rand_addr=0x64010100]}, @cipso={0x86, 0xb, 0x3, [{0x2, 0x3, "9d"}, {0x44cfec505d781fe4, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@private=0xa010100, 0x401}]}, @lsrr={0x83, 0x2b, 0x44, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @rand_addr=0x64010102, @remote, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @generic={0x82, 0xb, "a8bac304a7cc8f15f6"}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getchain={0x34, 0x66, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0x5}, {0x7, 0xd}, {0xd, 0x7}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1c}]}, 0x34}, 0x1, 0x0, 0x0, 0x40015}, 0x44004) 7.983425123s ago: executing program 0 (id=1652): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000880), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x9, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESHEX=r2, @ANYRES64=r5, @ANYRES64=r3], 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e00, @broadcast}]}, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 7.962027009s ago: executing program 4 (id=1653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x24, &(0x7f0000004300)={@broadcast, @remote, @void, {@llc_tr={0x11, {@llc={0x42, 0x6, "c3", "8219c45ad551e7de9d0503b1eac1fc900dcd4c"}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffff7f, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0x80d05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0xa79, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x3fc8a9e1, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x800, 0x4000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000080)={0x1000, 0x0, '\x00', {0x0, @reserved}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b40000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801200500180012800e0001007769726567756172640000000400028074001a80eaff028014000180080012000400000008001d000d000000580002805408018008000000ff0100000800130005000000080007000800000008001c000200000008000a0004000000080012001000000008000300ffffffff08000c006707000008000a000080000008001400faffffff080004"], 0xb4}}, 0x440088c4) 7.673754598s ago: executing program 4 (id=1654): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1337, &(0x7f0000000040)={0x0, 0xe472, 0x0, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./cgroup/../file0\x00') (async, rerun: 64) r2 = socket(0x840000000002, 0x3, 0xfa) (rerun: 64) getsockname$inet(r2, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6c, r3}, 0x38) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r5], 0x27) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) (async) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x6, 0x0, 0xfe, 0x7fff0000}, {0x5, 0x5, 0xff, 0x7}]}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 64) accept4(r8, 0x0, 0x0, 0x0) (rerun: 64) 7.108105594s ago: executing program 1 (id=1658): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf250a01010200000000000000000000000020010000000000000000000000000001000000004e00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@multiplanar_fd={0x5, 0xa, 0x4, 0x8, 0x6, {}, {0x3, 0xc, 0x9, 0x5, 0xda, 0x3, "3ac24235"}, 0x1, 0x4, {0x0}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) r9 = syz_open_dev$mouse(0x0, 0x7, 0x80000) getresgid(&(0x7f00000003c0)=0x0, 0x0, &(0x7f0000000440)) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getresuid(0x0, &(0x7f0000000580), &(0x7f00000005c0)) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8020, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',roGtmode=00000000000005000100000,user_yd=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',max_read=0x000000000000053f,fowner<', @ANYRESDEC=r11, @ANYBLOB=',appraise,hash,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=,smackfsdef=,\x00']) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) syz_emit_ethernet(0x1046, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 5.270198805s ago: executing program 4 (id=1659): syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1}}]}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1110c1, 0x0) connect$inet(r5, 0x0, 0xffec) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c0102030109021b0081010000000904690201ff"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 5.075154118s ago: executing program 3 (id=1661): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_dump={0x19, 0x80000000}}) creat(&(0x7f0000000040)='./file0\x00', 0x80) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='ro'}]}}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtaction={0x4530, 0x30, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{0x720, 0x1, [@m_ctinfo={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xeea9, 0x3, 0x6, 0x3, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xd187}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7e6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4e, 0x6, "734b5cd0eba565f6657ae9231ea82a62118f3806a8501820c818b0bf1e8844847d25e9660b2ebb87f3823c325163478752a02504f7f39c68d0c6b48a96901de2ad791c10d7828472ebc9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x134, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x7, 0x9, 0x22f}, 0x1}}]}, {0xf0, 0x6, "9aac458238c5f8b8d6836e2f17f6d990eab92673f532c711de6c62fd79f992d39dac4223f795e217efa30b0cbbb0e2791277f1b4ae23be5df881a29926bf1f18101c732dc9cee47cc8e0976567ff0472f46dddaec076b5b54a18faf3203f954b2c31eecdd54fa15808ddc1b8dcc26723041627a97361e4231d049742aa16285a923bfb0e5edc2397ea2b2ac25c63398eaf20356fbd8d43b8feb737705c662030c89ba5bf82d6d32f5fb9afa56cc5266475015a1873bc4872d99b694c7f777583c2620442462ed63e52831c42ed87ad67a4bfb106b709a6be007e90208cea88638029e1dbbff6c49f250de826"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0xcc, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x0, 0x2, 0x800}, 0x61}}]}, {0x84, 0x6, "1fc6d0a34bc17b666e474fcf92885adc330b2d8649a359e3e3d6a64d29c90455c8599cfa608a2bc4775574bf87b8db6c0a5f0bbeb79390a7bf0dad6d699b95cebcc37061748b35b37860565e0ca9068483f4279f065d297577daa7b8eaa67bb9c88c9b368d9315772534a73f8ccd55df9096109aafd1d246bdd9b2aeedc2bf87"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80000001, 0x6, 0x7, 0x9, 0x6}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x73b, 0x4, 0x7, 0x8, 0x10000}}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x6b, 0x6, "00265201b772d20d9c18406f174e16abe785b98cc67d4e5a2d3aa6a3ad23595a6d646393c4961cedd81d36a8483fca7d6ba5ee0c35bc8edbdb817ee8b8ff815ddd1e3fa40e6d8487661c0ce40beaec2c8ff2d0e4999cf95dd8c8687c61eac6c68caf1d4d8632a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x1b0, 0x13, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x4, 0x20000000, 0xd459, 0x2}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x414, 0x4, 0x2, 0x4, 0x1ff}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xf, 0x8, 0xf, 0x200}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x8, 0x7, 0x9, 0xfff}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x4, 0x6, 0x7f}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x76, 0xff, 0x1, 0x7, 0x400}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ad569a2, 0x10, 0x4, 0xdfc, 0x3b}, 0x3ff}}]}, {0x9e, 0x6, "e3da91ce8c208be455e1178ca3f50f9a5477653e68e9060f6785c56b1e805e93dbfc4f0b0287f65532d3b425380f3611e92ad22d1aad991d97376c108c8e21c4ab292b16153b3433a949fb4f6e62fe579417635adedf98ffa0dd869f0e5d4763d21706caea57557da340d67d1b2c4e29a9fd23193913dc26ec6159439462e04e0e25b433d822bb8161afb5dcc5e8a0c9e09da4643caf50f7a4e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x1a4, 0x18, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x2, 0x8000, 0xdbc3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x328, 0x7, 0x2, 0x6eea10f5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x79bf, 0xe3b9, 0x4, 0x1000, 0x9749}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xec2, 0x3, 0x1, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfffffffe, 0x0, 0x8, 0x7}, 0x8001}}]}, {0xe7, 0x6, "197b52bf3d06e1859c2e767e0d179ab06d6e16d6869924cb8524e50ab98b6dd68069ee26836de111b81b6077aca58f7db446b41fc5a81289683fb0f212e79e3fc57fca0c26938be92dbb81bd891deb63c5c554640d9347fe1eba9b895339ebc6afbe33edcd61d0d40a092482302ec4d1a1266c5399dbfef688411d2fd2f7b0d73e140e77a5ef2933b83bdfaba31573151fb71c07a0d635325dc02aabfed74d08b721d8866df71ea36743bdc51369bcf401e6b772a3819f33b42efc113eb71f98f3f0c24f4d703b356c76df98beeacca1bde942615e55163233ba9f5ab42bf508a940b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x3dfc, 0x1, [@m_sample={0xd0, 0x3, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x19}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x3, 0x2, 0x401, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x2, 0x5, 0xb}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x5b, 0x6, "3fed8fe83bbe549fcf8735950a06d87c27184f0f3b656cc33d68d69476c3be0cede858a42b65850c8ee905fc7d83cd042dca7bc951b0c7cf504d2329bdef80912887ff8ee73b64c1c12d9a86f420d20ea9e005e906adc0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x154, 0x18, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff000, 0x3, 0x6, 0x9, 0xfffffffb}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x3, 0xffffffffffffffff, 0x4, 0x80}, 0xfffd}}]}, {0xec, 0x6, "4f08adfe75ad6a84f4ce892ae5156ee2487078386dd51dbc3586ddddaf215b2ee88a2f14f6b8711e2a3140919aafbaee4d8a12ad15fbfefba3659e010cad0910ca5b6568a5ac7a223c29464d26664f28cda7ccc382198b89e57a976aaa2f92322174ee2a39058a8d4ab6df8f17052bbee3952247788a0ae46173c63ea66f528e23fe6e91fd44543ed8a5d68a2d1a147a91e33c0fc2eeed91f122c5ed788771930721736700e612fea5b6f969a75f136e1a92611b012e5066b9b5ec59fe32a1b3af59aa79e1a32879e56defc4670aa3d6b688594ee035c12e6e9c6f6a94d326000000000000000000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x3b2c, 0x15, 0x0, 0x0, {{0xa}, {0x3a84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0xfffffc06, 0xffffffff, 0xffffffffffffffff, 0x8, 0x4}, 0x1, 0x4, [{0x6, 0x6, 0xbcb, 0x9, 0x9, 0x4}, {0x0, 0x6, 0x3ff, 0x5, 0x3, 0x3}, {0x843, 0x401, 0x200, 0x4, 0x766d, 0x3bf}, {0x1, 0x78, 0x10000, 0xeb8f, 0x9, 0x5}, {0x0, 0xffffff0d, 0xb7a, 0x1, 0x0, 0xc4}, {0x3, 0xffff, 0x200, 0x2, 0x38a, 0x12}]}, [{0x8, 0xffffffff, 0xe, 0x10, 0x6, 0xfffffffe}, {0xd, 0x800, 0x6, 0x9, 0xff, 0x401}, {0x9, 0x400, 0x2, 0x1, 0x6, 0x9}, {0x5, 0xd, 0xfff, 0x81, 0x8, 0x8000}, {0x7, 0x6, 0xfffff0dd, 0x6, 0x6, 0x1000}, {0xffffff80, 0x8, 0xffffffff, 0x9, 0x2, 0x8000}, {0x80000000, 0x8000, 0x2, 0x5, 0x7}, {0xe3a, 0x8, 0x5, 0xffffff81, 0x0, 0x4}, {0x3fe8fc56, 0x6, 0x694c, 0x0, 0x600, 0x80}, {0xd6, 0x7f, 0xfffffe00, 0x80000001, 0x1}, {0x8, 0x1ff, 0x6, 0x7, 0x2, 0x1}, {0x751, 0xff, 0x4, 0x6, 0x40, 0x3}, {0x3, 0xa, 0x9, 0x4, 0xbc, 0x4}, {0x6, 0x8000, 0xdfb, 0x1, 0x1, 0x1}, {0x0, 0x7b140f57, 0x800, 0xffffffff, 0x4, 0x9}, {0xe, 0x4, 0x1000, 0x0, 0x7, 0x8001}, {0x10, 0x6, 0x8000, 0x7fffffff, 0x4, 0x7f}, {0x8, 0x8001000, 0x8, 0x5, 0x2, 0x23}, {0xffff, 0x5, 0x5, 0x2502, 0xa86b, 0x1}, {0x5, 0x1, 0x2, 0x8000, 0x8001, 0x9}, {0x5, 0x4, 0x1, 0x421, 0x8, 0x48}, {0x40, 0x5, 0x3, 0x401, 0x44f7, 0x4}, {0x81, 0x8, 0xfffffff2, 0x8, 0x10, 0x5}, {0x80, 0x5, 0x8000, 0x5, 0xffff, 0x2}, {0x8001, 0xc, 0x5, 0x3, 0x0, 0x5}, {0x9, 0xf9, 0xe, 0x1, 0xb, 0x6}, {0x2, 0x8, 0x3, 0x8, 0x6d2c, 0x8000}, {0xa, 0xe, 0xe, 0x1000, 0xed, 0x5}, {0x80, 0x4076, 0x10001, 0x50, 0x4}, {0x2d, 0x2, 0xef8, 0x7fffffff, 0x7, 0x8}, {0x3, 0x9, 0x1, 0x1, 0x2, 0xfffffffc}, {0x1, 0xfb, 0x3ff, 0x3, 0x40, 0xe9}, {0xfd9a, 0x10000, 0x0, 0x4, 0x1, 0x2}, {0x4, 0x0, 0x1, 0x2, 0x4, 0xb}, {0x9, 0x87f, 0x8, 0x6, 0x40, 0x10001}, {0x4f, 0x7f, 0x8001, 0x6, 0x8, 0x8}, {0x9, 0x2, 0x10001, 0x40, 0x2, 0x3}, {0x9, 0x6dc, 0x2, 0x8000, 0x9, 0x4}, {0x2, 0x4, 0x1, 0x2, 0x5, 0xffffffff}, {0x2, 0x8, 0x96, 0x0, 0x0, 0x41}, {0x8, 0x8, 0xa, 0x8001, 0x7, 0x4}, {0x5, 0x18000000, 0x7, 0x3, 0x6, 0xfff}, {0x10001, 0x41c, 0x4, 0x216f, 0xffffffd4, 0x1}, {0xfffffffd, 0xffff073f, 0xa, 0x80000000, 0x81, 0x3}, {0x6, 0x3, 0x2, 0x6, 0x3, 0x1}, {0x961, 0xa54, 0x8000, 0xcd4e, 0x3, 0xffffffff}, {0x7, 0x7, 0x4, 0x3, 0x8f, 0xfffffff5}, {0x73e, 0xffff8000, 0x10000, 0x515, 0x80, 0x3ff}, {0x1, 0x6, 0x1c, 0x2, 0x1000, 0x5}, {0x3ff, 0x1, 0xbadb, 0x3, 0xadd, 0x7}, {0x3b9a, 0x948, 0x7, 0x97b, 0x1, 0xb}, {0xb9, 0x8, 0x8, 0x7, 0x7ff, 0xfffffff9}, {0xb, 0x9, 0x7ff, 0x8001, 0x7ff, 0x7}, {0xc, 0x3, 0x200, 0x7, 0x800, 0x8}, {0xf72, 0x1de9, 0x401, 0x7, 0x8, 0x2}, {0xb53a, 0x81, 0xfffffffa, 0x6, 0xeb82, 0xffffff7f}, {0x91, 0x7a3a, 0x8, 0xc4e, 0x211, 0xffffffff}, {0xf, 0xf2, 0x8, 0xe, 0xc, 0x80000001}, {0x9, 0x9, 0x7, 0x4, 0x80000001, 0x2}, {0x40000000, 0x800, 0x5, 0x1, 0x7ff, 0x7fffffff}, {0xc113, 0x80, 0x4000, 0x9571, 0x0, 0x1}, {0xfff, 0x7, 0x3, 0x4, 0x6, 0x80000001}, {0xe, 0x244b, 0xdff, 0x3, 0x0, 0x2}, {0xfffffbff, 0xffffff81, 0x9, 0x7, 0x9, 0x888}, {0x80, 0x2, 0x0, 0x80000000, 0x6, 0xd13}, {0x8, 0x1, 0x7, 0xfff, 0x8000, 0x5}, {0x1, 0x2, 0xfe1, 0x283, 0x3, 0x7fffffff}, {0x36, 0x3, 0x5, 0x708, 0x1000}, {0xc, 0xfffffffc, 0x8001, 0x8, 0xfff}, {0x5, 0x0, 0x2fc9, 0x23, 0x600000, 0xffffff7f}, {0x7f, 0x476c, 0x8, 0xdec, 0xf, 0x2}, {0x1, 0x3, 0x1, 0x6, 0x120, 0x5}, {0x1, 0x7fff, 0x9, 0x8, 0x4, 0x401}, {0xfb5, 0x3, 0x3, 0x80000000, 0xd72, 0x6}, {0xb, 0x1, 0x2e, 0x0, 0x10001, 0x401}, {0x6, 0x9, 0x7, 0x1000, 0x1ff, 0x7}, {0x4, 0xb5ee, 0xe, 0x0, 0x0, 0x9}, {0x2, 0x4b, 0x7, 0x2, 0x65ab1c8f, 0x7f}, {0x0, 0x6, 0xa, 0x0, 0x2eed61e8}, {0x8, 0x3, 0x53ca, 0x0, 0x40, 0x1}, {0x5, 0x7ff, 0x6, 0x200, 0x9, 0x5}, {0x0, 0x0, 0x10001, 0x5, 0x7}, {0x3, 0xb, 0x2, 0x6, 0x0, 0xd}, {0x101, 0x6, 0x80, 0x5, 0xfffffc00, 0x9}, {0x1, 0x2d4, 0xe1, 0x8, 0x6, 0x2}, {0x9, 0x2, 0x0, 0xbf, 0x3, 0x1}, {0x8, 0x1000, 0x4, 0x2, 0x6, 0xc0aa}, {0x1480, 0x7, 0x3, 0xc1dd, 0x37d, 0x22}, {0x91a, 0x10001, 0x2, 0x6bb, 0x1}, {0x4, 0x100, 0xffff0000, 0x9, 0x4, 0x8}, {0x1, 0x1, 0x1, 0x401, 0xffffff50, 0x14c}, {0x288, 0x2, 0x7f, 0xefd3, 0x8, 0xfff}, {0x3, 0x101, 0xffff, 0x5, 0x0, 0x2}, {0x3, 0x1, 0x738, 0x8, 0x2, 0xe}, {0x6, 0x6b, 0x81, 0x7, 0x803e, 0x9}, {0x70000, 0x3, 0x5, 0xf, 0xe, 0xfffff637}, {0x375, 0xa28cb45c, 0x2, 0xfff, 0x2eca, 0x8}, {0x9, 0x81, 0x4, 0x2, 0x5, 0x7fffffff}, {0x8, 0xdda, 0x8, 0x0, 0x1e, 0x1480}, {0x3, 0xb, 0x6b6, 0x6}, {0x2, 0x0, 0x7, 0x424, 0x22, 0x3}, {0x0, 0x0, 0xffff8001, 0x40, 0x3, 0x4}, {0xfff, 0x5, 0x4, 0x5, 0xffff8a26, 0xb3}, {0x401, 0x0, 0x8, 0x400, 0x4, 0x4}, {0x9, 0xe9, 0x631, 0x7, 0xd, 0xdd0a000}, {0x80000000, 0x4, 0x7fff, 0x7f, 0xfff, 0x1}, {0xd, 0x5, 0x2, 0x8000, 0x0, 0x5}, {0x0, 0xc2e, 0x3, 0x4, 0xbd}, {0x3, 0x7, 0x8000000, 0x9, 0x3d2, 0x7fffffff}, {0x101, 0x4e89cd7d, 0x6, 0x9, 0x64, 0x12}, {0x0, 0x8, 0x400, 0x1800000, 0x9, 0x79}, {0x9, 0x6, 0x3, 0x2, 0x3, 0xe}, {0xd1, 0xa19, 0xff, 0x6, 0x8, 0x2c2}, {0x426, 0x0, 0x3, 0x4, 0xfffffff9, 0x2}, {0x2, 0x3, 0x4, 0x8001, 0x7ff, 0x5}, {0x3, 0x2, 0x7, 0xfffffffb, 0x6, 0x7}, {0x9, 0xa, 0x9, 0x3, 0x5, 0x7}, {0x3, 0x4, 0x8000, 0xffffa447, 0xc000, 0x3}, {0x8, 0x80000000, 0x400, 0x100, 0x80, 0x7}, {0x2936, 0x7, 0xfffff100, 0x100, 0x4, 0x3}, {0x1, 0x80000000, 0x0, 0x7, 0x576, 0x8}, {0xa4, 0xb3b, 0x0, 0xfffffff1, 0x7fff, 0x7f}, {0x2, 0x1, 0x9, 0x5, 0x7fff, 0x2}, {0x9932, 0x0, 0xdc, 0x8, 0x400, 0xea}, {0x2, 0x2, 0x4, 0x4, 0x1d1, 0x44e}, {0x1, 0x8, 0x6, 0x7, 0x0, 0x3b}, {0x8, 0xea93, 0x4, 0x5, 0x0, 0x8}, {0x1, 0x6, 0x200, 0x3, 0x1000, 0x7ff}], [{0x4, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0xbe85479459002ae7, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x4}, {0x3}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x7}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {}, {0x5}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xf5c7, 0x8001, 0x4, 0x401, 0x1}, 0x7, 0x9, [{0xb, 0x9, 0x6, 0x4, 0x1, 0x6}, {0xd, 0x9bda, 0x3, 0x9, 0x0, 0xfffeffff}, {0x1, 0x5, 0x6, 0x9, 0x10000, 0x81}, {0x27c, 0x4, 0xffffffff, 0x5, 0x877, 0x3ff}]}, [{0x7, 0x2, 0x4, 0x3, 0x2, 0x7}, {0x9, 0x9, 0x80000000, 0x101, 0x80000000, 0xb5b}, {0x5, 0xffffffff, 0x4, 0x1, 0x5, 0x7}, {0x800, 0x200, 0x8001, 0x3, 0x7ff, 0x1}, {0x10001, 0x9, 0x1, 0x300, 0x6, 0x2}, {0x100, 0x800, 0x7, 0x3, 0xe, 0x401}, {0x1, 0x7, 0x6, 0x7, 0x1, 0x8001}, {0x5, 0x1000, 0x7fff, 0x6, 0x80, 0x8}, {0x23ae, 0x1, 0xff, 0x5, 0x8000, 0x3}, {0x7, 0x8, 0x10, 0x8, 0x3, 0x2}, {0x2, 0xfffffff1, 0x1, 0x7, 0x401}, {0x6, 0x3, 0x4, 0x8, 0x1, 0x6}, {0xbe0d, 0x9, 0x7d20, 0x4, 0x7fff, 0x8}, {0x1, 0x3ff, 0x3, 0x4, 0x5, 0x3}, {0xbc, 0x179b, 0x5, 0x4, 0x1dfe, 0x1}, {0x4ddd, 0x0, 0x1, 0xcb9b, 0x5, 0x5}, {0xf, 0x5, 0x140d, 0x5, 0x4463, 0x2}, {0x2, 0x116fd9de, 0x2, 0x1, 0x118, 0x8}, {0x8, 0x95b, 0x0, 0xd4adcba, 0xdf6e, 0x7}, {0x2, 0x8, 0x5, 0x7, 0x0, 0x3}, {0x6, 0x9, 0x7fffffff, 0x7fffffff, 0x87d6, 0x2}, {0x4, 0xd, 0x9, 0x4, 0xfffffffa, 0xfffffffe}, {0x0, 0x2, 0x101, 0x6, 0x8, 0x3}, {0x4, 0x3, 0xffff, 0x1, 0x7, 0x7d2}, {0xd11, 0x6, 0x4, 0x47, 0x6, 0x2}, {0x3, 0x6, 0x4, 0xffff, 0x4, 0x4}, {0x8b, 0x0, 0x1, 0x3, 0x200, 0xed}, {0x3, 0x3, 0x19e, 0x40, 0xa, 0x80000000}, {0x3, 0x5, 0x1000, 0x0, 0x4, 0xb0}, {0x0, 0x401, 0x1, 0x400, 0x1, 0xffff}, {0x4, 0x2, 0x0, 0x5, 0x1, 0xffffffff}, {0x10000, 0x4e4b18e7, 0x8, 0xda62, 0x8}, {0x3, 0x0, 0xd942, 0x81, 0x8, 0x6}, {0x6, 0x8, 0x4, 0x5, 0x5, 0x1}, {0x2, 0x7fffffff, 0x100, 0x0, 0xfffffff1, 0xfffffffe}, {0x1000, 0x0, 0x3, 0x7ff, 0x80000000, 0x1}, {0x10000, 0x2, 0x1, 0x6, 0xfffffffa, 0xc0}, {0x2, 0xc, 0xffff7fff, 0x5, 0x9d, 0xffff}, {0x6, 0x0, 0x9, 0x6, 0x8, 0xff}, {0x5, 0x4, 0x6, 0x2, 0xf9b2, 0x2}, {0x7, 0x400, 0x8, 0x3ff, 0xb, 0x3ff}, {0x2, 0x5, 0x80000000, 0x1ff, 0x2, 0x1}, {0x8001, 0x0, 0x0, 0xffff, 0xdf, 0x2}, {0x3, 0x0, 0x5b9, 0x4, 0x0, 0x9}, {0x7, 0x4, 0xfff, 0x5f, 0x6, 0xffffffff}, {0x10, 0xa3, 0x401, 0xfffffffd, 0x5, 0x3}, {0x6, 0x6, 0x9, 0x1, 0x7, 0x53ac45c1}, {0x1, 0x81, 0x770, 0x1, 0x6, 0x65ff}, {0x401, 0x3, 0xff, 0x6, 0xd, 0xa3ba}, {0xe7, 0x3, 0x7, 0x3, 0x4, 0x1e82}, {0x91, 0x1, 0xfffffffe, 0xc, 0x5, 0x7}, {0x4, 0x6, 0xe, 0x2, 0x7, 0x1}, {0x0, 0xf, 0x5, 0xda, 0x7a6de5d7, 0x8}, {0x2, 0x8000, 0x1612, 0x1, 0xffff, 0x3ff}, {0xffffff7f, 0x0, 0x8, 0x800, 0x2}, {0xe1a, 0x0, 0x0, 0x9, 0x6, 0x4be}, {0xe, 0x1, 0x1, 0x8, 0x3, 0x1}, {0xfffff2ec, 0x4, 0x4, 0x9, 0xffffffff, 0xc0000000}, {0x4, 0x3, 0x7, 0xa180, 0x80}, {0x401, 0x3, 0x3, 0x7, 0xffff7fff, 0x9}, {0xfffffffd, 0x0, 0x1, 0xc, 0x1, 0x8}, {0x2, 0x0, 0x40, 0xb906, 0x217a, 0x4}, {0x1, 0x2, 0x87, 0x7, 0x2, 0x3}, {0x6, 0x8, 0x8, 0x100, 0x2, 0xc1}, {0x2, 0xfff, 0x1, 0x3, 0x80000001, 0x81}, {0x400, 0x8, 0x6, 0x10000, 0x400, 0x89e}, {0x6, 0xffff, 0x15c, 0x3, 0x0, 0x5b}, {0x6, 0x10001, 0x101, 0x200, 0x6, 0x8}, {0x3, 0x1, 0x1, 0x5, 0x2, 0x3}, {0x0, 0x5, 0x1, 0x7fffffff, 0x400, 0xffff}, {0x5, 0x12000, 0x3, 0x1, 0xb6fa, 0x3c}, {0x6, 0x1, 0x80, 0x80000000, 0x800, 0x1}, {0x2, 0x2, 0x1, 0x3, 0xb}, {0x5, 0x4, 0x80, 0x2, 0x8}, {0xffffffff, 0x2, 0x5, 0xff, 0x4, 0x7}, {0x3, 0x1, 0x6, 0x4602fe95, 0x7f, 0x10}, {0x0, 0x7, 0x3, 0x0, 0x2, 0x4}, {0xcde, 0x3, 0x9, 0xded, 0xe, 0x10}, {0x1ff, 0x0, 0x9, 0x0, 0x0, 0xffffffff}, {0x2, 0xb, 0x2, 0x2, 0x1, 0x100}, {0x9, 0x800, 0x0, 0x5, 0x34d, 0x4}, {0x1, 0xcc3c866, 0xff, 0x8, 0xfffff739, 0x2}, {0x7, 0x7, 0x3, 0x7, 0x7, 0x3ff}, {0x80, 0xb12, 0x9, 0x1, 0xb99, 0xfe6}, {0x2, 0x9, 0x4, 0x4, 0x6, 0xb9}, {0x1, 0x2, 0x8, 0x4, 0x5, 0x9}, {0x9, 0x5, 0x6, 0xcd8, 0x4d0, 0x7}, {0x987, 0xd, 0xfffffffd, 0x0, 0x8, 0x8}, {0x50, 0x6, 0x4, 0xffff8000, 0x4, 0x7}, {0x2, 0xf, 0x7f, 0x7, 0x2, 0xd}, {0xffffd123, 0x6, 0x9, 0x483, 0x9, 0xb52}, {0x6, 0x8, 0xb, 0xdd, 0x8096}, {0x8, 0x5, 0x6, 0x3ff, 0x2, 0x54c4495b}, {0x8000, 0xcbcb, 0x9, 0x361, 0xfffffffd, 0x81}, {0x7, 0x7fffffff, 0x830, 0x6, 0x4, 0xc}, {0x80000001, 0x635, 0x49, 0xbff1, 0xc, 0x2}, {0x7fffffff, 0xfffffffa, 0xa1c, 0x10000, 0xfffffff9}, {0x5, 0x2, 0x3, 0x7c4, 0x0, 0x7ff}, {0x0, 0x1, 0x48ae, 0x5, 0x3ff}, {0x7f, 0x400, 0x1, 0x0, 0x7, 0x1}, {0x7fffffff, 0x9, 0x27380000, 0x10, 0x0, 0x1ff}, {0x7, 0x2, 0x9, 0x2, 0x6, 0x2}, {0x80000000, 0x3, 0x3f, 0x0, 0x3, 0x800000}, {0xfffffffc, 0x3, 0xaaaa, 0xb00000, 0x10000, 0xd}, {0x2, 0x7, 0xfff, 0x400, 0xb, 0x7}, {0x4d, 0x3, 0xeb, 0x2, 0x9, 0x2}, {0xc9c, 0x80000000, 0xdd8, 0x2, 0x0, 0x4}, {0x8, 0x76f7, 0x3, 0x2, 0x3ff}, {0xfffffff1, 0x100, 0xf, 0x1, 0x2, 0x7}, {0x4, 0x100, 0x9, 0x9, 0x200, 0x6}, {0x4, 0x49, 0x1, 0xff, 0x7, 0x1}, {0x1, 0xfffffffe, 0x1, 0x1000, 0x3, 0x8}, {0x0, 0x5804, 0x2, 0x9, 0x2, 0x8830}, {0x400, 0x2, 0x17, 0x500, 0x9, 0x6}, {0x4b1, 0x8, 0x47, 0x8, 0x0, 0x5}, {0x4, 0x2, 0x7ff, 0x7f, 0x8000, 0x8}, {0x7, 0x7, 0x43, 0x4c, 0x7, 0xfa0e}, {0x1d, 0x9, 0x8, 0x5, 0x2, 0x75}, {0x2, 0x8, 0x1d40, 0x2}, {0x7ff, 0xac, 0x5, 0xfffffffd, 0x744f, 0xc50}, {0x9, 0x2, 0x0, 0x1, 0x5, 0x9}, {0x1, 0xd, 0x3, 0x3, 0x6, 0xa}, {0xfa, 0x6, 0x1, 0x8, 0x0, 0x80}, {0x4, 0x9, 0x90c4, 0x40, 0xf8, 0x6000}, {0x686, 0x5, 0xa, 0x10001, 0x6, 0x7}, {0x78b, 0x8, 0x2, 0xd1d1, 0xe, 0xa}, {0xb3, 0x9, 0x0, 0x4, 0x7, 0xb}, {0x5, 0x1ff, 0x1b, 0x433, 0x7, 0x3}], [{0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x4}, {}, {0x5}, {}, {0x1}, {0x1}, {}, {0x2}, {0x6, 0x1}, {0x5}, {}, {0x4}, {0x3, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3b0b9240ca0c8882, 0x4b83e2f55eb9493f}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {}, {0x0, 0x96fe1d387701f854}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x5}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x2, 0x22ce, 0x5, 0x80000000, 0x3}, 0xfe, 0x7, [{0x6, 0x9, 0x7ff, 0x4, 0x9, 0xa22}, {0x2, 0x7, 0x5, 0x0, 0x40, 0x8}, {0x10000, 0x1000, 0x5, 0x4d, 0x5, 0x81}]}, [{0x78, 0xfff, 0x80000001, 0x1, 0x9, 0x4}, {0x8, 0x8, 0xffff, 0x2, 0x1, 0xede0}, {0xd, 0x2, 0xb, 0x3, 0x7, 0x40b}, {0x6, 0xffffffff, 0x6, 0x559, 0x10}, {0x1, 0x3ff, 0x5f, 0x1, 0x9, 0xfffffffd}, {0x66, 0x8, 0x6, 0x9c28, 0x40, 0x8}, {0x0, 0x9, 0x6, 0x81, 0x37e4, 0x5}, {0x4, 0x7, 0x3, 0x21af, 0x3, 0x10000000}, {0xfffffffb, 0x7, 0xf4ea, 0x1, 0x0, 0x3ff}, {0x2, 0x6, 0x4, 0x29, 0x0, 0x10000}, {0x7f, 0x9, 0x1ff, 0x3, 0x101, 0x5}, {0x2, 0xe, 0x2, 0x8, 0x7fff, 0x1}, {0x2, 0x80000000, 0x8, 0xfffff603, 0x3, 0xc}, {0x6, 0x6, 0x5, 0x5, 0x40}, {0xf, 0x0, 0x5, 0x3bb, 0x1, 0xb}, {0x1, 0x0, 0x1, 0x2, 0x1ff, 0xb}, {0x8, 0x2, 0x6, 0x9, 0xfffffffb, 0x2}, {0x1ff, 0x800, 0x38, 0x0, 0x8, 0x8}, {0x1, 0x2, 0xcf, 0x1, 0x8, 0x4}, {0x4, 0x1, 0x5, 0x401, 0x8001, 0xc}, {0xfffffffd, 0x1, 0x0, 0x401, 0x7, 0x3}, {0x2, 0xfffffff5, 0x800, 0x6, 0xe9, 0xb}, {0x93, 0x9, 0x6, 0xa, 0xa, 0x800}, {0xffff, 0x400, 0x1, 0x5, 0xb26, 0xffff}, {0x6, 0x7, 0x8, 0x9, 0x5, 0x5}, {0x7ff, 0x7, 0x8, 0xfff, 0x100, 0x40}, {0xffffffff, 0x2, 0x0, 0xffff, 0x2, 0x40}, {0x7fffffff, 0x4, 0x40, 0x7, 0x6, 0x7ff}, {0x1, 0xbd7, 0x6, 0x7, 0xd, 0x4}, {0x4, 0x3, 0x1, 0x1c11b960, 0xfff, 0xbc}, {0x7, 0xda3b, 0x1127, 0x3, 0x8}, {0x5, 0x4, 0x9, 0x1, 0x7fff, 0x6}, {0x32, 0x4, 0x800, 0x9, 0xdb6, 0xaa}, {0x3, 0xffff, 0x3, 0x8, 0xde, 0xb}, {0x6, 0x46d, 0x5, 0x2, 0x0, 0x3}, {0x0, 0xfffffff9, 0x0, 0x1, 0x8, 0x6}, {0x1e, 0x1, 0x439, 0x1, 0x2, 0x7f}, {0x8, 0x10, 0x2, 0x1000, 0x4, 0x1}, {0x1, 0x9, 0x0, 0x8, 0x9, 0x9}, {0x1, 0x6, 0x5, 0x6, 0x1ff, 0x8}, {0x4, 0x30000000, 0x0, 0x100000, 0x4, 0x5}, {0x80000000, 0x3fcd6017, 0x8001, 0x5, 0xf865}, {0x9, 0xffffffff, 0x7ff, 0x6, 0x7fff, 0x4}, {0x5, 0x0, 0x5, 0x7, 0x2, 0x6}, {0x80000001, 0x6b2, 0xda, 0x1, 0x10000, 0x4}, {0x1, 0x1, 0xffff, 0x10, 0x1, 0x3}, {0x800, 0x0, 0x0, 0xf, 0x9506, 0x1}, {0x1, 0x401, 0xffff, 0x3, 0x8, 0x200}, {0xffff13fe, 0x9, 0xc34, 0x3, 0x4, 0x6}, {0x200, 0x0, 0x7, 0x70a, 0x3, 0x8}, {0xfffffffa, 0x2, 0x1, 0x800, 0x8fa4, 0x8}, {0x9, 0x6, 0x1000, 0x6, 0x1, 0x2}, {0x4cc3, 0x401, 0x9e6, 0x1, 0x3, 0x332}, {0x2, 0xfcb, 0xfffffffa, 0x7, 0x6f2, 0x2bd}, {0x9, 0x4, 0x6, 0xffffaa36, 0x5, 0x78ed}, {0x2, 0x9, 0xff, 0xfffffba6, 0x6, 0x2}, {0x7fff, 0x8000, 0x4, 0x7, 0x10001, 0xe9}, {0x3, 0x3, 0x7, 0x6, 0x9f0, 0x1}, {0x2, 0x9, 0x2, 0x5, 0xc}, {0x6, 0x100, 0x7fffffff, 0xfffffff7, 0x5, 0x7ff}, {0x6, 0x0, 0x5, 0x0, 0x8, 0x2}, {0x8001, 0xfffffff6, 0x9e88, 0x6, 0x5, 0x6}, {0x9, 0x5f2, 0x80, 0x401, 0xa2}, {0xa, 0x9, 0x10001, 0x2, 0xa705, 0x40}, {0xfffffffd, 0xd, 0x9, 0xff, 0x4, 0x401}, {0x4, 0x7, 0x9, 0x4, 0x6, 0xcddb}, {0x2ca5, 0x80000001, 0xee, 0x8, 0x7}, {0x6, 0xc, 0x0, 0x7fffffff, 0xfffffff2, 0x8}, {0x3, 0x9, 0x6fe, 0x9, 0x3, 0x4}, {0x3, 0x8, 0x6, 0x11be, 0x6ac, 0xffffffc0}, {0x7, 0x4, 0x7, 0x1, 0xa8, 0x8}, {0x14, 0x5, 0x2, 0x8, 0x3, 0x5}, {0x3, 0x5, 0x7, 0x6, 0x10000, 0x80000000}, {0x8, 0x400, 0x2, 0x8, 0xfb, 0xa}, {0x3, 0x360d, 0x1, 0x3e0bed8a, 0x5, 0x8}, {0x4, 0x4, 0x9, 0x5, 0x3, 0x8}, {0x400, 0x3, 0x9, 0x868, 0xa41, 0x8}, {0x25, 0xfffffff8, 0x9, 0xe4d, 0x5, 0x4}, {0x8, 0x6, 0xe, 0x7, 0xfffffffb, 0x7}, {0x5, 0x81, 0x0, 0x5, 0x2, 0x10}, {0x5, 0x7, 0xffffffff, 0x2, 0x5, 0xa}, {0x6, 0x4d, 0x7, 0xa, 0x2, 0x3ff}, {0x9, 0x5, 0x5, 0x1, 0x3, 0xfffffffe}, {0x645, 0x64e, 0x5, 0x8, 0xffffff4f, 0x7}, {0xf, 0x3, 0x80000001, 0x8, 0xed8, 0x40}, {0x7578, 0x6, 0x10, 0x8, 0x5, 0x10}, {0x2, 0x9, 0x8001, 0x7, 0x61d, 0x8}, {0x47, 0x5f, 0x3, 0x8, 0xf, 0x8}, {0x1, 0x1, 0x0, 0x2, 0x7, 0xfffffffd}, {0x2, 0x6, 0xfffffffe, 0x7f, 0x0, 0xffff8000}, {0x8, 0x3, 0x40, 0x5, 0x200, 0x2}, {0x7000, 0x2, 0x7fff, 0x50, 0x0, 0x3}, {0x200, 0x6d, 0x7, 0x100, 0x7, 0x5834}, {0xffffff80, 0xfffffff9, 0xef22, 0xffff, 0x400, 0xffffff9f}, {0x0, 0xfffffffe, 0x3, 0x6, 0x101, 0xfffffff2}, {0x1, 0x1, 0x2, 0x9f5, 0x8, 0xedc}, {0x2, 0xc69, 0x4, 0x0, 0x2}, {0x9, 0x7ff, 0x3, 0xe6, 0x6356, 0x7b2a}, {0xfffffe63, 0x6, 0x2, 0xfffffff7, 0x8, 0x1}, {0x8, 0x0, 0x38f, 0x9, 0xfffffff9, 0xe}, {0x7fff, 0xc6e, 0x4, 0x0, 0x0, 0x6}, {0x800, 0x3, 0x1, 0x773, 0x5, 0x2}, {0x1, 0x5, 0x24000000, 0x8, 0x13, 0x63455aa8}, {0x80, 0x8, 0xe, 0x9, 0x4, 0x10}, {0x7ff, 0x3, 0x6eac, 0x3}, {0xfffffffe, 0x8, 0x8, 0x7, 0x9, 0x800}, {0x3, 0x8, 0x2, 0x5, 0x8, 0x3}, {0x0, 0xc000, 0x9, 0x80000000, 0xffffffbc, 0x3}, {0x3ff, 0x8, 0x5, 0x200, 0x4, 0x1e1}, {0xb62, 0x3, 0x7, 0x9, 0x293, 0xc}, {0x7, 0x1, 0x7, 0x4, 0x1, 0x1}, {0x6fc9, 0x70e6, 0x7, 0xa, 0x6, 0x2b4c}, {0x0, 0x2, 0x7ff, 0x1, 0x9f1, 0x1}, {0x0, 0x800, 0xab, 0xd, 0x6, 0x2}, {0x81, 0x9, 0x0, 0x10001, 0x2, 0x8}, {0x6, 0x1, 0x2, 0x9, 0xfffffffa, 0x2}, {0x400, 0x2, 0x7, 0x3, 0x1a9, 0x3}, {0x1fb, 0x8, 0x9, 0x2, 0x2fd5, 0xfffffff9}, {0x9, 0x94, 0x200, 0x2, 0x4, 0x8}, {0xfffff000, 0x1, 0x4, 0x2, 0x9, 0xa}, {0x1, 0x4, 0xd, 0x81, 0x1, 0x1}, {0xb, 0xd, 0x81, 0x101, 0x4, 0xae}, {0x9, 0x2, 0x7fffffff, 0x1, 0x9e, 0x8001}, {0x7, 0x10001, 0x80, 0x7ff, 0x9, 0x8}, {0xe, 0x4, 0x0, 0x800, 0x6, 0x6}, {0x7, 0x400, 0xd, 0x2, 0xa4af, 0xd}, {0x5c0, 0x5, 0x0, 0x8, 0x9, 0x9}, {0x4, 0x98a, 0x0, 0x7f, 0x4, 0x100}], [{0x1}, {0x0, 0x1}, {0x7}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {}, {0x3, 0x293719de7cc0919f}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x2}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x56ea42eadf8d73e2}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x6, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0xf, 0x8, 0x7, 0x9, 0x6}, 0xa4, 0x3, [{0x684, 0x200, 0x9, 0x4, 0xfffffffa, 0x2}, {0x7f, 0xfba, 0x6, 0x6, 0x1, 0xcd}, {0x8, 0x7, 0x1000000, 0xfff, 0x7ff, 0x81}, {0x3ac, 0x1, 0x0, 0x7, 0x0, 0x3}, {0x100000, 0x0, 0x6, 0x9, 0x1, 0x80000001}, {0x0, 0xfffffffe, 0x9, 0xfffff001, 0x11e, 0xa0}]}, [{0x81, 0xfffffff4, 0x5, 0x5, 0x6, 0x6}, {0xf017, 0x3, 0xbd, 0x2, 0x7, 0x5}, {0x5, 0xa, 0x7, 0x7, 0x88, 0x1}, {0x5, 0x7, 0xc, 0x3, 0x6, 0x9}, {0x2, 0x3ff, 0x9, 0x10000, 0x5, 0x9}, {0x8, 0x0, 0xfff, 0x8, 0x3, 0x5}, {0x6, 0x6e9296fe, 0x7, 0xd, 0x5, 0x7f}, {0x9, 0x0, 0x8, 0x8, 0xffffffff, 0xcab}, {0x7, 0x3, 0x1000, 0x7, 0x2b6aabe1, 0xfffffffc}, {0xfffffffe, 0x8, 0x1ff, 0x7, 0x84, 0x9}, {0x0, 0x953, 0x9, 0x8, 0x400, 0x6}, {0x6, 0x0, 0x4, 0xffff8001, 0x8, 0x9366}, {0x7, 0x5, 0xfffffffa, 0x6, 0x7506bcb1, 0xe3}, {0xfffff1c5, 0x5, 0x5, 0x7fff, 0xe, 0x6}, {0x5, 0x8, 0x4, 0x4, 0xffff, 0x3}, {0x7, 0x7, 0x0, 0xf49, 0x8, 0x2}, {0x9, 0x1, 0x0, 0x6, 0x1ff, 0x6}, {0x5, 0x3, 0x0, 0x4, 0x1000, 0x1}, {0xd69c, 0x9, 0x1, 0x4, 0x0, 0xfff}, {0x5, 0x8, 0x5, 0x5, 0x40, 0x3}, {0x9, 0x6, 0xe, 0x9, 0x7, 0x3}, {0x8001, 0x10001, 0x0, 0x180, 0x7, 0x2}, {0xa, 0x77, 0x0, 0x8, 0x1, 0x6}, {0x0, 0x101, 0x2, 0xfffffffa, 0x4be, 0x6}, {0x8, 0x47e78a9, 0x0, 0x4, 0x9, 0x6}, {0x5, 0x4, 0xe28d, 0x4, 0x3, 0x3}, {0x5, 0x1, 0x7, 0x8001, 0xc, 0x6}, {0x3, 0xfb2c, 0x5, 0xa6, 0xfc, 0x8}, {0x5, 0x80000000, 0x100, 0x1f41, 0x2, 0x6}, {0x400, 0xd, 0x908b, 0x3, 0x8, 0x2}, {0x1, 0x3, 0x3ff, 0x9, 0x6, 0x3}, {0x6, 0x1, 0x5, 0x6, 0x200000, 0x3}, {0x6, 0xacdf10bd, 0x6, 0x3, 0x21}, {0x0, 0x3f63, 0xff, 0x200, 0x4}, {0x4, 0xfffffff8, 0x1, 0x81, 0x2a, 0x6}, {0x7, 0xc34b, 0x5, 0x4, 0x7d, 0x7752}, {0x8, 0x1, 0x5, 0x6, 0xb, 0x4}, {0x7, 0x4, 0x424b, 0x0, 0x3, 0x9}, {0x800, 0x6, 0xf, 0x43e3, 0x1, 0x3}, {0x6, 0xfffffff7, 0x5, 0x5262, 0xfff, 0xf}, {0xfffffff4, 0x4, 0x3, 0x7fff, 0x3, 0x401}, {0x8001, 0x4, 0x80, 0x7, 0x1}, {0x2, 0xd13, 0x4, 0x5, 0x8, 0x3}, {0x3, 0xffff, 0x10, 0xffffffe0, 0x2, 0x40}, {0x6, 0xa, 0x430, 0x0, 0x2, 0x2}, {0xc6c7, 0x80000000, 0x1, 0x2, 0x4, 0x2}, {0xe, 0x1, 0xff, 0x0, 0x3, 0xa50}, {0xaf, 0x6, 0x1, 0x2, 0x8, 0x10001}, {0x5, 0x7, 0x80, 0x9fde, 0x80, 0x2}, {0x100, 0x6de8, 0x7, 0x8001, 0x6, 0xd}, {0x1, 0x2, 0x4, 0x48b, 0x7fff, 0x81}, {0xd4, 0x2, 0x400, 0x911, 0x1, 0x6}, {0x0, 0x6, 0x0, 0x8, 0xe1ce, 0x6}, {0xff, 0xd, 0x4, 0x9, 0x101, 0xa91}, {0x7, 0x1, 0x8001, 0x1, 0x266, 0x4e71}, {0x0, 0x8, 0x9, 0x3ca4, 0x7}, {0xc, 0x8, 0x9, 0x8d66, 0x6, 0x3}, {0x4, 0x100, 0x2, 0x1, 0x5, 0x6}, {0x39fd, 0x9, 0x8, 0x3, 0x0, 0xc}, {0x5, 0xffffffff, 0x3ea1, 0x4, 0xba53, 0x947}, {0x3, 0xffff4db7, 0x8, 0x80000001, 0x1, 0x3}, {0x2, 0x5, 0x401, 0x0, 0x24000000, 0x10000}, {0x51, 0x100, 0xffff7fff, 0x6, 0x8001, 0x200}, {0x8, 0x1, 0x8000, 0x8, 0xb4, 0x4}, {0xf3, 0x0, 0x0, 0x80, 0x7, 0xf4f}, {0x421, 0x8, 0xc, 0x80000001, 0xfffffff8}, {0xb, 0x7, 0x1ff, 0x2, 0x7}, {0x85, 0x7, 0x9, 0x0, 0x200, 0xc0d3}, {0x6, 0x4, 0x1ff, 0x1, 0x7e0, 0x400}, {0x5, 0x9650765, 0x7fff, 0x7, 0x9, 0x81}, {0x1, 0x80000000, 0x3, 0x6, 0x2a, 0xffffff01}, {0xb, 0x9, 0x0, 0xb51, 0x5, 0x2}, {0x4, 0x80000000, 0x9, 0x0, 0x9, 0x3}, {0x7fffffff, 0x10, 0x6, 0x8, 0x7, 0x3}, {0x9, 0xd, 0x400, 0x7, 0x7, 0x9e}, {0xe4f3, 0x0, 0x4, 0x9, 0x8, 0x5}, {0x2, 0x200, 0x10000, 0xff, 0x4, 0xfffffff9}, {0x9, 0x8001, 0x2, 0x7, 0x0, 0x8000}, {0xd3d, 0x4, 0x400, 0x6, 0x18, 0x1}, {0x80000001, 0xdd92, 0xb0, 0x9, 0x7f, 0x1}, {0x8, 0x7, 0x2, 0x3, 0xa, 0x80}, {0x9, 0x1, 0x0, 0xffffffff, 0x1, 0x8}, {0x4, 0x81, 0x3, 0x4, 0x3, 0x8}, {0x4, 0x8, 0x7fffffff, 0x1000, 0x3, 0x8}, {0xb, 0x186, 0x80, 0x6, 0x1, 0x7}, {0x2, 0xe, 0xece, 0x4, 0x3, 0x100}, {0x9, 0x5, 0x100, 0x9, 0x4336, 0x9}, {0x5, 0x1, 0x8a8, 0x81, 0x3, 0x7ff}, {0x7, 0x2, 0x4, 0x1, 0x246, 0x7}, {0xd, 0x4ff8, 0x9, 0x2, 0x9, 0xff}, {0x2, 0x6, 0x4083, 0x6, 0x2, 0x800}, {0x8, 0x0, 0x7, 0x4, 0x4, 0x7f}, {0x24c6, 0x0, 0xad60, 0x200, 0xe, 0x80}, {0x8b, 0xfffffffb, 0x5, 0x1, 0x8, 0x1}, {0xfffffffd, 0x6, 0x1, 0x64, 0xfffff4b1, 0x8}, {0x6, 0x8, 0xe, 0xffff, 0xffff, 0x9}, {0x9, 0xffff, 0x1, 0x40, 0x1, 0x4}, {0x4, 0x81, 0x2, 0x7, 0x4, 0x2}, {0x1, 0x1, 0xb19, 0x9, 0x1}, {0x0, 0x68aa, 0x101, 0x400, 0x4, 0x7}, {0x2, 0x8, 0x9, 0x4, 0xd7, 0x3}, {0x1000, 0x9, 0x6, 0xffff7fff, 0xffffff01, 0xd6a}, {0x6, 0x1, 0x4, 0x7ff, 0x8, 0x101}, {0x7bae, 0x5db, 0x7, 0xffff, 0x2, 0xfffffc01}, {0x6, 0x5, 0x4, 0x9, 0x2, 0x1ff}, {0xfffffff7, 0x7, 0xff3, 0xfffffffd, 0x4, 0x4}, {0x4, 0x3, 0x4, 0x7, 0x3, 0x2}, {0x7b0, 0x0, 0x2, 0x4, 0x8, 0x5}, {0x5, 0xbb7, 0x4, 0x40, 0xa1, 0x9}, {0xf, 0x7, 0x7, 0x8000, 0xd59, 0x7}, {0xfffffff7, 0x8ec, 0x274451a1, 0x3, 0x400, 0x2}, {0x4, 0x24, 0x3, 0x6662, 0x4, 0xc3c9}, {0xfffffff9, 0x2, 0xd, 0x40, 0x6, 0x6}, {0x2, 0x8000, 0xc, 0x4, 0x2, 0x43}, {0x10001, 0x80000001, 0x5, 0x9, 0xffffffb2, 0x5}, {0x7, 0x1, 0x7fffffff, 0x1, 0x70, 0x7f}, {0x4, 0x3, 0x4800, 0x6, 0xfc54, 0x1}, {0x5, 0x8, 0xbb, 0xe, 0x30000, 0x6}, {0x2, 0x7f, 0x10000, 0x5, 0x9, 0x4}, {0x4, 0xa50, 0x1ff, 0xfffff001, 0xc8, 0x8001}, {0x3ff, 0xffffff7f, 0x4893, 0xfffffffe, 0xe0b, 0x3}, {0x5, 0xc, 0xd3dd, 0x8, 0x8, 0xf}, {0x10, 0x4, 0xa, 0x276, 0x2, 0x6}, {0x6be, 0x101, 0x6, 0x6, 0xffff7661, 0x5}, {0xffff, 0x3, 0x40, 0x1eb1, 0xfe, 0x3}, {0x1000, 0x2, 0x7fff, 0x7c80, 0x1, 0x3}, {0x0, 0x0, 0x9, 0x2, 0xfb0, 0xff}, {0xb, 0x7, 0x2, 0x8, 0x1, 0x4}], [{}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4}, {0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {0x3}, {0x1}, {0x4}, {}, {0x3}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0xb01a85c25fc6d112}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2, 0x3}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x3}, {0x2}, {0x4}, {0x7, 0x1}, {0x5}, {0x2}], 0x1}}]}, {0x7e, 0x6, "ef7fa55fcf399d89e59a7c281186f27629069b5e3503a7c86a860dd03ded222ea013caedb5827a37a4a26abc4caa5a7f6a44ffcf237d6b79c9f103247d2f6af8fd7b5d178042d59a1923c0b26626bef10b55dc625becd4273bfaa7821271bb412fa86fcd69ebc65539442d730012749e8ccf8c1e50a9a5be17b5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xa8, 0x1, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0xd, 0x3, 0x5, 0x8001}, 0x909}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x8, 0x4, 0xc}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x10, 0x8}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x8, 0xfff, 0x9}, 0x8}}]}, {0x5, 0x6, "7f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x4530}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xa}, {0xa, 0xb}, {0xb, 0xfffa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0xfffffffffffffdbc, 0x2, {0xffffffff, 0x6, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_generic(0x10, 0x3, 0x10) 5.059686792s ago: executing program 0 (id=1662): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090300000000000000002a000000"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x200441c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xb}, {0xfff1, 0x5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x41}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.364518589s ago: executing program 1 (id=1664): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x1f, 0x12, 0x0, 0x4, {0x0, 0xf, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x400) 3.947370553s ago: executing program 0 (id=1665): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x1, 0x4f9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x641400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c840) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x10}, 0x24008090) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) accept4(r3, 0x0, 0x0, 0x800) 3.829679739s ago: executing program 1 (id=1667): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1802, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1, 0x0, 0x43}, 0x41) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = syz_usb_connect$cdc_ecm(0x1, 0x60, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x2, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "d4c1fa"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x3, 0x1, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x0, 0x0, 0x81}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0xd, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x0, 0x90}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0x5}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x40, 0xd, 0x1, 0x8, 0x7}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}, {0x1a, &(0x7f00000002c0)=@string={0x1a, 0x3, "eaa9e69890c50332676aaab04140a5e4a6102447feb7df64"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}]}) syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0xcf, &(0x7f0000000700)={0x0, 0x14, 0xc7, "e815eeb1c1800fe76f4d03b46414f8bf907f49f8685ae04aff7c35adbe38b5d87f6e1b19aae955e2f067599002a5406242229ca9475aed34fb95aaf2b1d4780b14a9465bd74a956ff331c8e3c94363fbff0cbbe360aa2498ab28943636fb39ca5ed40eaeeddc61d19c3aae2e13c1b3d48bc0ae9627cd32fde8152779771477f9b6d2ecfa523e06d26b7ab14011911e14ae9153270c401f410a611f4cb06ddf2ffa7bee829b7b8023efef9994800fb025dd58f9dc462d12e06547ef923db752658beb726214876f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.500653376s ago: executing program 3 (id=1668): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8, 0x7, 0x3, 0xa11, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x5, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2}}}}) ioprio_get$pid(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x59, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="1e0000", @ANYRES16=r5, @ANYBLOB="495303000000fcffffff6700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009b0008000000ed5d2b47a2eef4c87e684d91be3c6c5f6188ecf6986c136db48b8f06dea798a61cc88ae34ce8551649f6433f4de86ee252c9ec97de0bc66e4606eac62c7543bb2fca0b04f78cbfc9684b67fc5c28bbb47110f0e03a5e5dbcf1fb3054a0b8"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x0, 0x3004, 0x59091fc, 0x2}, 0x0, 0x7, 0x0, 0xffffffff, 0x0}}) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) 3.137926131s ago: executing program 4 (id=1669): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000040)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000008c0)=""/186, 0xba}], 0x4, &(0x7f0000000c00)=""/159, 0x9f}, 0x101}, {{&(0x7f0000000cc0)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/24, 0x18}, {&(0x7f0000000d40)=""/235, 0xeb}, {&(0x7f0000000e40)=""/225, 0xe1}], 0x3, &(0x7f0000000f40)=""/87, 0x57}, 0xc}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x0, 0x2, 0x80000001, 0x4c, 0x6, 0x9, 0x0, 0x3, 0xf7}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x20, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000600)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0xe0240, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x19, 0x2007, @fd_index=0x5, 0x0, &(0x7f0000000700)=""/75, 0x4b, 0xb182d2d2ea017905, 0x0, {0x0, r5}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = io_uring_setup(0x400031e0, &(0x7f0000000100)={0x0, 0x4196, 0x0, 0x0, 0x2ee, 0x0, r2}) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r7}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) 1.878868957s ago: executing program 2 (id=1675): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101b, 0xffffffffffffffff, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r2], 0x24}}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f00000001c0)={&(0x7f0000000140)="ca00d1c441f9517e5fccccef196ec866400fe2de0fae4e0af2466f660fd433c422e10399c5c12020660f69737a", 0x94000006, 0x0, {[0x400000000002]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ac, 0x4}) r5 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef63, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) 1.765535335s ago: executing program 2 (id=1676): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000ac0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b00)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001140)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, &(0x7f0000001200)=0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r6, 0x2}, 0x8) sendmmsg$inet_sctp(r5, &(0x7f0000000c00)=[{&(0x7f00000001c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000340)="1ae1b72f1dbb17f618e30a93688b67b5076a619d103730f2d6f5cce7fb917b8cba053e708b82b2c792a36e5cdd1b3cbc64fe78c192973f4619aa8c9c871bd14b7dcb16de46b6f081193eb0ff87fa065e503140ec4dc47f9b9d0eaf3507828c389296ee0261ea778bb59644f5e7ced46151b907f4059b8d48afbc0681f6ec3dca0eb745123cc3b8a551d2f835aaf3891b68d5937ec0268e90d0f0843e1dcec40bdc796d205e64553065b9ffe42d72a4108fe01f3b436b1c17858d995798d44c2c95dabafb606b089edb3ceea6ca545c126e50f6cd421668cea075c17637f28080b8", 0xe1}, {&(0x7f00000004c0)="6b9d6b492fbe2d", 0x7}, {&(0x7f0000000500)="1f384ccd6647cca1cd08e79ea3c36e04cff616baa005b909cafb007470b96fc641caea6e6ade3a5f6a37ae6b58", 0x2d}, {&(0x7f00000005c0)="f70f19416be4244a5919826443465d800a24dcb0eeaee55c26cc4e01599f86129b5051162c4664ce4d41ce004f03ba41a7f69d443090ab8166c3db75c23c361d33cca3a7b8d40d95f1b39935aee072c545e282bedb51064ec9d5f68747909aea46a0e83cb6dbb8a61eb40870fd694a806ee38e2900d3014547ef0d080d5c", 0x7e}, {&(0x7f0000000640)="e6a728dbf8b1ad69dc417f04685c72d68f783adb339e6a936dfc618a6771fd55d5c72b4f0491e41f922083e1278dd1432061b277c6a0bbf5969eb778c5f26eb9aec5d96a75a13378349d42b7a76789", 0x4f}, {&(0x7f0000000540)="969dfc91f3416969b7522e2d81bbe2b2e9892df8a408d53575bf8e2173bfe16d55588df9f9092a39026b98bb7ec7b518", 0x30}, {&(0x7f00000006c0)="a6356cf655dd9f42e54665d9867029d6916ba6c1024337803d9b1d1a5cb8c8afd608ecb95b79273d102c33de7566a39a09d0938154762cad166f23c2d755744e4cc2787fa7e5082bc89dd33b360544c80c3e88c8a8651daa72ee52ffe7c12e66d3b9165c7964e325acd7a7ab9f60fe4972f8ed385f940d84841cccebaea407478af1c6612ebe089457f7d39f", 0x8c}, {&(0x7f0000000780)="29bd314906ebf1b40cebe9aa6825663d3c1d16f6", 0x14}], 0x8, &(0x7f0000000840)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xa6}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0x8000, 0x0, 0x6, 0x8, 0xffff8075, 0x1953, 0x6, r6}}, @init={0x18, 0x84, 0x0, {0x1, 0xe7a, 0x3, 0xfffc}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8000, 0x2, 0x7, r4}}, @init={0x18, 0x84, 0x0, {0x1, 0x2, 0x6, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0xd19c}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @init={0x18, 0x84, 0x0, {0x7ff, 0x2, 0x4, 0x7}}], 0x100, 0x40080}, {&(0x7f0000000940)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000009c0)="28f8c2cba76217bf39bc38ae98c8c62c126a30df35b2c9f0b5a2d6f1fb3eb28ac37747cfbc22beafe4e23b99d127d231cc2d2701b7448be7ebedd04ad1f15c7ce647e345aad8fc", 0x47}, {&(0x7f0000000a40)="404c8f4f5881ae2a7bd87bc5f9d2486e4f76f2de9808623149605209d9050c05c9298add474cbb0c799fd15567f4532008add00d7cf5", 0x36}], 0x2, &(0x7f0000000b40)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @init={0x18, 0x84, 0x0, {0x2, 0x7ff, 0x400, 0xa}}, @init={0x18, 0x84, 0x0, {0xffff, 0x6, 0x7, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xffc}}, @init={0x18, 0x84, 0x0, {0x5, 0x8, 0xfff9, 0x709}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}], 0x98, 0x40800}], 0x2, 0x20000000) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x40, &(0x7f00000000c0)={0x0, 0x8000000, 0x0, {[0x9]}}, 0x0, 0x8, &(0x7f0000000200)) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$key(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a8, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.525629218s ago: executing program 2 (id=1677): r0 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.48639088s ago: executing program 2 (id=1678): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x40c0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac141400"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000500d0000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xffffffffffffff77, &(0x7f00000000c0)=""/45, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000005340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202400000000009050302"], 0x0) socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) 1.021655209s ago: executing program 4 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd30, 0x25dedbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@ipv4_deladdr={0x64, 0x15, 0x101, 0x70bd2b, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xfd}, [@IFA_LABEL={0x14, 0x3, 'bridge_slave_0\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x8, 0x0, 0x6}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0xffffff7f, 0x6, 0x1}}]}, 0x64}}, 0x490) unshare(0x2c020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r2 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) r3 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r3, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') ioperm(0x1ff, 0x8, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000005000000000400000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ccbf4265000000000400068900000000000000001c00000000000200b66c2008a5aa7d97c2572919dc27e504f2502e43b9491d37b4"], 0x50) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x21, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) 931.137291ms ago: executing program 1 (id=1680): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x1, 0x4f9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x641400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c840) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x10}, 0x24008090) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) accept4(r3, 0x0, 0x0, 0x800) 581.771638ms ago: executing program 2 (id=1681): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 468.056238ms ago: executing program 2 (id=1682): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000003c0)={0x3, 0x101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000400)) r6 = getpid() sched_setattr(r6, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r9, 0x0, 0x20000080) 0s ago: executing program 1 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x2, 0x4) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x24, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect(0x5, 0x15a, &(0x7f0000000000)=ANY=[@ANYBLOB="12014003d429ad10dd040680e88d"], 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x2000fb) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 404.241037][ T983] usb 3-1: USB disconnect, device number 83 [ 404.322012][T10960] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠rXY (pid: 10960 comm: syz.4.1257) [ 404.353950][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 404.353967][ T30] audit: type=1800 audit(1762634357.673:706): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1257" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0727F185805599819 dev="mqueue" ino=34443 res=0 errno=0 [ 404.599087][T10969] syzkaller1: entered promiscuous mode [ 404.607902][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'. [ 404.621876][T10970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.695142][T10969] syzkaller1: entered allmulticast mode [ 405.978819][T10986] fuse: Bad value for 'fd' [ 406.016940][ T5911] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 406.087588][T10897] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 406.140422][T10989] could not allocate digest TFM handle crc32-pclmul [ 406.167597][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 406.180359][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.191790][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.203463][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 406.230264][ T5911] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 406.239832][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.248496][T10897] usb 1-1: Using ep0 maxpacket: 16 [ 406.256006][T10897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 406.265165][T10897] usb 1-1: config 1 interface 0 has no altsetting 0 [ 406.275401][T10897] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 406.285261][ T5911] usb 3-1: config 0 descriptor?? [ 406.302064][T10897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.314019][T10897] usb 1-1: Product: syz [ 406.318880][T10897] usb 1-1: Manufacturer: syz [ 406.323599][T10897] usb 1-1: SerialNumber: syz [ 406.557994][T10897] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input32 [ 406.616408][ T5184] bcm5974 1-1:1.0: could not read from device [ 406.625191][ T5184] bcm5974 1-1:1.0: could not read from device [ 406.638040][ T5184] bcm5974 1-1:1.0: could not read from device [ 406.647801][ T5184] bcm5974 1-1:1.0: could not read from device [ 406.690278][ T5945] bcm5974 1-1:1.0: could not read from device [ 406.738161][T10897] usb 1-1: USB disconnect, device number 91 [ 406.784451][ T5184] bcm5974 1-1:1.0: could not read from device [ 406.848283][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 406.965731][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 406.982798][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 407.061259][ T5911] usb 3-1: USB disconnect, device number 84 [ 407.092212][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1270'. [ 407.108567][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1270'. [ 407.238007][ T5945] udevd[5945]: Error opening device "/dev/input/event4": No such device [ 407.259791][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 407.270740][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.286198][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.287056][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.329540][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.339218][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.375696][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.383421][ T24] usb 2-1: invalid MIDI out EP 0 [ 407.434934][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 407.454414][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.467005][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.475468][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4" [ 407.539494][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.559854][T11022] SET target dimension over the limit! [ 407.598233][ T5911] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 407.604091][T11002] fuse: Unknown parameter 'rootmod' [ 407.692466][T10897] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 407.866672][ T5911] usb 3-1: device descriptor read/64, error -71 [ 407.967477][T10897] usb 1-1: Using ep0 maxpacket: 16 [ 407.982681][T10897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.995945][T10897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.047158][T10897] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 408.106690][ T5911] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 408.114519][T10897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.153924][T10897] usb 1-1: config 0 descriptor?? [ 408.407012][ T5911] usb 3-1: device descriptor read/64, error -71 [ 408.537979][ T5911] usb usb3-port1: attempt power cycle [ 408.624224][T10897] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.001C/input/input33 [ 408.703415][T10897] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.001C/input/input34 [ 408.807191][T10897] kye 0003:0458:5012.001C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 408.836851][T10711] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 408.916798][ T5911] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 408.957711][ T5911] usb 3-1: device descriptor read/8, error -71 [ 409.008459][T10711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.018858][T10711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 409.028389][T10711] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 409.037666][T10711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.045712][T10711] usb 5-1: Product: syz [ 409.050284][T10711] usb 5-1: Manufacturer: syz [ 409.054959][T10711] usb 5-1: SerialNumber: syz [ 409.065434][T10711] usb 5-1: config 0 descriptor?? [ 409.073663][T10711] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 409.088139][T10711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.098338][T10711] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 409.107548][T10711] usb 5-1: media controller created [ 409.140506][T10711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.207722][ T5911] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 409.224191][T10711] DVB: Unable to find symbol tda10046_attach() [ 409.232118][ T5911] usb 3-1: device descriptor read/8, error -71 [ 409.241376][T10711] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 409.254766][T10711] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 409.347019][ T5911] usb usb3-port1: unable to enumerate USB device [ 409.441872][ T5911] usb 1-1: USB disconnect, device number 92 [ 409.645939][ T10] usb 2-1: USB disconnect, device number 83 [ 409.836970][ T5911] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 409.874665][T10711] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 409.896118][T10711] usb 5-1: USB disconnect, device number 110 [ 409.999434][ T5911] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.011390][ T5911] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 410.021683][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 410.030815][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.041603][T11035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.048978][ T10] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 410.059479][ T5911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.207993][ T10] usb 2-1: config 16 has an invalid interface number: 7 but max is 0 [ 410.216216][ T10] usb 2-1: config 16 has no interface number 0 [ 410.222512][ T10] usb 2-1: config 16 interface 7 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 410.226973][T10897] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 410.234192][ T10] usb 2-1: config 16 interface 7 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 410.252741][ T10] usb 2-1: New USB device found, idVendor=05c6, idProduct=9034, bcdDevice=5e.84 [ 410.261873][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.274794][T11037] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 410.392834][T10897] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 410.402118][T10897] usb 4-1: config 0 has no interface number 0 [ 410.410802][T10897] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 410.444500][T10897] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 410.474681][T10897] usb 4-1: config 0 interface 255 has no altsetting 0 [ 410.492628][T10897] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 410.505420][T10897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.506271][T11050] binder: 11049:11050 ioctl c0306201 200000000100 returned -14 [ 410.517429][T10897] usb 4-1: Product: syz [ 410.531499][T10897] usb 4-1: Manufacturer: syz [ 410.536250][T10897] usb 4-1: SerialNumber: syz [ 410.547911][T10897] usb 4-1: config 0 descriptor?? [ 410.949053][T10897] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 410.949234][T11058] syzkaller0: entered promiscuous mode [ 410.963236][T11058] syzkaller0: entered allmulticast mode [ 410.996768][T10897] f81604 4-1:0.255: Setting termination of CH#0 failed: -EPROTO [ 411.004463][T10897] f81604 4-1:0.255: probe with driver f81604 failed with error -71 [ 411.069703][T10897] usb 4-1: USB disconnect, device number 55 [ 411.071790][ T10] usb 2-1: USB disconnect, device number 84 [ 411.873231][T11079] batadv_slave_1: entered promiscuous mode [ 412.147231][ T10] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 412.324676][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 412.340380][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 412.356657][ T10] usb 5-1: config 0 has no interface number 0 [ 412.370795][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 412.413285][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.436423][ T10] usb 5-1: Product: syz [ 412.442395][ T10] usb 5-1: Manufacturer: syz [ 412.450949][ T10] usb 5-1: SerialNumber: syz [ 412.482959][ T10] usb 5-1: config 0 descriptor?? [ 412.500893][ T983] usb 1-1: USB disconnect, device number 93 [ 412.560690][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 412.783119][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 412.795718][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 413.178096][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 413.185847][ T10] usb 5-1: USB disconnect, device number 111 [ 413.193335][T11078] batadv_slave_1: left promiscuous mode [ 413.228938][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 413.364886][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 413.379587][ T10] quatech2 5-1:0.51: device disconnected [ 413.560691][T11100] xt_hashlimit: max too large, truncated to 1048576 [ 413.645809][T11100] fuse: Unknown parameter '0x00000000000003700x0000000000000009' [ 414.456954][ T10] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 414.628229][ T10] usb 5-1: config 0 has no interfaces? [ 414.636192][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 414.646325][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.719023][T11120] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 414.804909][ T10] usb 5-1: Product: syz [ 414.812755][ T10] usb 5-1: Manufacturer: syz [ 414.818620][ T10] usb 5-1: SerialNumber: syz [ 414.827292][ T10] usb 5-1: config 0 descriptor?? [ 415.039691][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1298'. [ 415.187391][T11126] netlink: 'syz.0.1303': attribute type 4 has an invalid length. [ 415.213772][T11126] netlink: 'syz.0.1303': attribute type 4 has an invalid length. [ 415.319959][ T5912] usb 5-1: USB disconnect, device number 112 [ 415.545946][T11134] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1304'. [ 416.796916][T10897] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 416.881899][ T3461] wlan0: Trigger new scan to find an IBSS to join [ 416.966760][T10897] usb 5-1: Using ep0 maxpacket: 16 [ 416.988190][T10897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.024167][T10897] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.045764][T10897] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 417.055249][T10897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.065192][T10897] usb 5-1: Product: syz [ 417.097088][T10897] usb 5-1: Manufacturer: syz [ 417.127002][T10897] usb 5-1: SerialNumber: syz [ 417.536061][T10897] usb 5-1: config 0 descriptor?? [ 418.219637][ T983] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 418.470905][ T983] usb 3-1: config 255 has an invalid interface number: 25 but max is 0 [ 418.486675][ T983] usb 3-1: config 255 has no interface number 0 [ 418.503290][ T983] usb 3-1: config 255 interface 25 altsetting 11 endpoint 0x2 has invalid maxpacket 632, setting to 64 [ 418.524822][ T983] usb 3-1: config 255 interface 25 altsetting 11 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 418.556402][ T983] usb 3-1: config 255 interface 25 has no altsetting 0 [ 418.586374][ T983] usb 3-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=1b.c2 [ 418.605842][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.619616][ T983] usb 3-1: Product: syz [ 418.623833][ T983] usb 3-1: Manufacturer: syz [ 418.646165][ T983] usb 3-1: SerialNumber: syz [ 418.665495][T11158] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 418.683124][T11158] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 418.904790][ T983] usb 5-1: USB disconnect, device number 113 [ 418.929838][T11158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.977176][T11158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.316676][ T10] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 419.422731][T11176] CUSE: info not properly terminated [ 419.456824][ T10] usb 2-1: device descriptor read/64, error -71 [ 419.696715][ T10] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 419.836970][ T10] usb 2-1: device descriptor read/64, error -71 [ 419.949422][ T10] usb usb2-port1: attempt power cycle [ 420.206954][T10711] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 420.336743][ T10] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 420.356864][T10711] usb 4-1: Using ep0 maxpacket: 32 [ 420.363548][T10711] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.372347][T10711] usb 4-1: config 0 has no interface number 0 [ 420.388093][ T10] usb 2-1: device descriptor read/8, error -71 [ 420.404306][T10711] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 420.432032][T10711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.460543][T10711] usb 4-1: Product: syz [ 420.479613][T10711] usb 4-1: Manufacturer: syz [ 420.495563][T10711] usb 4-1: SerialNumber: syz [ 420.534922][T10711] usb 4-1: config 0 descriptor?? [ 420.613174][T10711] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 420.632604][T10711] usb 4-1: selecting invalid altsetting 1 [ 420.642030][T10711] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 420.653964][T10711] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 420.658123][ T10] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 420.665393][T10711] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 420.707548][ T10] usb 2-1: device descriptor read/8, error -71 [ 420.717103][T10711] usb 4-1: media controller created [ 420.759666][T10711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.829745][ T5912] usb 3-1: USB disconnect, device number 89 [ 420.850700][ T10] usb usb2-port1: unable to enumerate USB device [ 420.939515][ T3559] wlan0: Trigger new scan to find an IBSS to join [ 421.091862][T10711] usb 4-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 421.102631][T10711] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 421.142733][T10711] DVB: Unable to find symbol mxl5005s_attach() [ 421.162477][T11211] ptrace attach of "./syz-executor exec"[9866] was attempted by "./syz-executor exec"[11211] [ 421.421850][T10711] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 421.455531][T10711] usb 4-1: USB disconnect, device number 56 [ 421.870936][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.288300][T11227] kvm: pic: non byte write [ 422.822502][T11250] netlink: 'syz.1.1333': attribute type 4 has an invalid length. [ 422.846854][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 423.016691][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 423.023800][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.041780][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 423.073610][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 423.106329][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 423.146688][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 423.175259][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.199087][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 423.205607][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 423.222677][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 423.231791][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 423.246886][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 423.256332][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 423.492154][T11270] netlink: 'syz.4.1339': attribute type 30 has an invalid length. [ 423.803833][T11275] syzkaller0: entered promiscuous mode [ 423.814728][T11275] syzkaller0: entered allmulticast mode [ 423.856713][ T10] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 424.011047][ T10] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 424.021572][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.044694][ T10] usb 5-1: Product: syz [ 424.056719][ T10] usb 5-1: Manufacturer: syz [ 424.061400][ T10] usb 5-1: SerialNumber: syz [ 424.078495][ T10] usb 5-1: config 0 descriptor?? [ 424.205843][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 424.303792][T10711] usb 5-1: USB disconnect, device number 114 [ 424.370612][T11241] usb 1-1: reset high-speed USB device number 94 using dummy_hcd [ 424.555978][T11286] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1344'. [ 424.605021][T11288] syzkaller1: entered promiscuous mode [ 424.610752][T11288] syzkaller1: entered allmulticast mode [ 424.925747][T11297] FAULT_INJECTION: forcing a failure. [ 424.925747][T11297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.959757][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.4.1349 Not tainted syzkaller #0 PREEMPT(full) [ 424.959803][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 424.959830][T11297] Call Trace: [ 424.959838][T11297] [ 424.959846][T11297] dump_stack_lvl+0x189/0x250 [ 424.959874][T11297] ? __pfx____ratelimit+0x10/0x10 [ 424.959897][T11297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.959919][T11297] ? __pfx__printk+0x10/0x10 [ 424.959938][T11297] ? __might_fault+0xb0/0x130 [ 424.959971][T11297] should_fail_ex+0x414/0x560 [ 424.960001][T11297] _copy_from_iter+0x1de/0x1790 [ 424.960027][T11297] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 424.960059][T11297] ? policy_nodemask+0x27c/0x720 [ 424.960076][T11297] ? __pfx__copy_from_iter+0x10/0x10 [ 424.960101][T11297] ? set_page_refcounted+0xa0/0x1e0 [ 424.960118][T11297] ? page_copy_sane+0x4e/0x280 [ 424.960139][T11297] copy_page_from_iter+0xdd/0x170 [ 424.960163][T11297] tun_get_user+0x1d7b/0x3e90 [ 424.960192][T11297] ? tun_get_user+0x6f6/0x3e90 [ 424.960219][T11297] ? aa_file_perm+0x44d/0x1550 [ 424.960236][T11297] ? __pfx_tun_get_user+0x10/0x10 [ 424.960255][T11297] ? _parse_integer_limit+0x1ae/0x1f0 [ 424.960280][T11297] ? __lock_acquire+0xab9/0xd20 [ 424.960303][T11297] ? ref_tracker_alloc+0x318/0x460 [ 424.960318][T11297] ? __lock_acquire+0xab9/0xd20 [ 424.960336][T11297] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 424.960364][T11297] ? tun_get+0x1c/0x2f0 [ 424.960389][T11297] ? tun_get+0x1c/0x2f0 [ 424.960408][T11297] ? tun_get+0x1c/0x2f0 [ 424.960431][T11297] tun_chr_write_iter+0x113/0x200 [ 424.960454][T11297] vfs_write+0x5c9/0xb30 [ 424.960481][T11297] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 424.960502][T11297] ? __pfx_vfs_write+0x10/0x10 [ 424.960534][T11297] ? __fget_files+0x2a/0x420 [ 424.960559][T11297] ksys_write+0x145/0x250 [ 424.960589][T11297] ? __pfx_ksys_write+0x10/0x10 [ 424.960615][T11297] ? do_syscall_64+0xbe/0xfa0 [ 424.960642][T11297] do_syscall_64+0xfa/0xfa0 [ 424.960663][T11297] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.960686][T11297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.960702][T11297] ? clear_bhb_loop+0x60/0xb0 [ 424.960722][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.960744][T11297] RIP: 0033:0x7f02a498e17f [ 424.960761][T11297] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 424.960776][T11297] RSP: 002b:00007f02a579d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 424.960795][T11297] RAX: ffffffffffffffda RBX: 00007f02a4be5fa0 RCX: 00007f02a498e17f [ 424.960809][T11297] RDX: 00000000000000be RSI: 00002000000004c0 RDI: 00000000000000c8 [ 424.960821][T11297] RBP: 00007f02a579d090 R08: 0000000000000000 R09: 0000000000000000 [ 424.960832][T11297] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 424.960842][T11297] R13: 00007f02a4be6038 R14: 00007f02a4be5fa0 R15: 00007f02a4d0fa28 [ 424.960873][T11297] [ 425.253350][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.847790][T11312] syz.2.1353 (11312): drop_caches: 2 [ 425.886726][ T5912] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 426.040409][ T5912] usb 4-1: device descriptor read/64, error -71 [ 426.106426][T11320] random: crng reseeded on system resumption [ 426.303120][ T5912] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 426.448153][ T983] usb 1-1: USB disconnect, device number 94 [ 426.466962][ T5912] usb 4-1: device descriptor read/64, error -71 [ 426.587052][ T5912] usb usb4-port1: attempt power cycle [ 426.866706][ T983] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 426.949498][ T5912] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 427.017026][ T983] usb 1-1: device descriptor read/64, error -71 [ 427.072890][T11342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.082106][T11342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.243230][T11349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1361'. [ 427.266672][ T983] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 427.386837][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 427.444549][ T5885] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 427.625948][ T5912] usb 4-1: device descriptor read/8, error -71 [ 427.688733][ T5885] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 427.699090][ T5885] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.728660][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.737935][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 427.769243][ T983] usb 1-1: device descriptor read/64, error -71 [ 427.781819][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.810364][ T5885] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 427.865776][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 427.897569][ T983] usb usb1-port1: attempt power cycle [ 427.905987][ T5885] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 427.933810][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 427.945019][ T5885] usb 2-1: Manufacturer: syz [ 427.951787][ T5885] usb 2-1: SerialNumber: syz [ 427.979984][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.991938][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 428.000097][ T10] usb 3-1: Product: syz [ 428.004270][ T10] usb 3-1: Manufacturer: syz [ 428.052827][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 428.069176][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 428.084936][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 428.091349][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 428.220166][ T5885] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 428.241739][ T5885] usb 2-1: USB disconnect, device number 89 [ 428.267602][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.274414][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.281188][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.287820][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.294264][ T983] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 428.302267][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.302292][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.309537][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.309561][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.322611][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.322636][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.329110][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.329134][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.342145][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.342172][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.349266][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.349288][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.355713][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.355748][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.362793][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 428.362816][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 428.408921][ T10] usb 3-1: USB disconnect, device number 90 [ 428.414881][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 428.437862][ T983] usb 1-1: device descriptor read/8, error -71 [ 428.468283][T10897] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 428.628069][T10897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.639291][T10897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.651028][T10897] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 428.660278][T10897] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 428.668333][T10897] usb 5-1: Manufacturer: syz [ 428.675365][T10897] usb 5-1: config 0 descriptor?? [ 428.686735][ T983] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 428.707636][ T983] usb 1-1: device descriptor read/8, error -71 [ 428.817113][ T983] usb usb1-port1: unable to enumerate USB device [ 428.925441][T11369] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 428.932226][T11369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.944494][T11369] vhci_hcd vhci_hcd.0: Device attached [ 429.088886][T10897] hid_parser_main: 9 callbacks suppressed [ 429.088909][T10897] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 429.102258][T10897] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 429.114804][T10897] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 429.122466][T10897] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 429.130553][T10897] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 429.138484][T10897] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 429.145396][T10897] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 429.161097][T10897] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 429.171929][T10897] pyra 0003:1E7D:2CF6.001D: couldn't init struct pyra_device [ 429.179473][T10711] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 429.187432][T10897] pyra 0003:1E7D:2CF6.001D: couldn't install mouse [ 429.196697][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 429.206188][T10897] pyra 0003:1E7D:2CF6.001D: probe with driver pyra failed with error -71 [ 429.215236][ T5911] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 429.227391][T10897] usb 5-1: USB disconnect, device number 115 [ 429.279750][T11380] fido_id[11380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 429.346761][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 429.355378][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 429.365351][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.373766][ T24] usb 3-1: Product: syz [ 429.378242][ T24] usb 3-1: Manufacturer: syz [ 429.383069][ T24] usb 3-1: SerialNumber: syz [ 429.388793][ T5911] usb 2-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 429.401781][ T24] usb 3-1: config 0 descriptor?? [ 429.407326][ T5911] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.418740][ T5911] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.430172][ T24] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 429.436712][ T5911] usb 2-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 429.450291][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 429.457378][ T5911] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 429.466433][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.482217][ T5911] usb 2-1: config 0 descriptor?? [ 429.499250][ T5911] hub 2-1:0.0: USB hub found [ 429.536752][T10897] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 429.716709][ T5911] hub 2-1:0.0: 4 ports detected [ 429.741256][T10897] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 429.750405][T10897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.762101][T10897] usb 5-1: Product: syz [ 429.766335][T10897] usb 5-1: Manufacturer: syz [ 429.771011][T10897] usb 5-1: SerialNumber: syz [ 429.788879][T10897] usb 5-1: config 0 descriptor?? [ 429.797534][T10897] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 429.836195][ T24] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 429.845313][ T24] visor 3-1:0.0: probe with driver visor failed with error -5 [ 429.930071][ T5911] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 429.936504][ T5911] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 429.999131][ T5911] usb 2-1: USB disconnect, device number 90 [ 430.055486][ T24] usb 3-1: USB disconnect, device number 91 [ 430.056805][T11370] vhci_hcd: connection reset by peer [ 430.082943][ T1333] vhci_hcd: stop threads [ 430.088733][ T1333] vhci_hcd: release socket [ 430.094634][ T1333] vhci_hcd: disconnect device [ 430.805412][T11398] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.812693][T11398] bridge0: port 2(bridge_slave_1) entered listening state [ 430.821404][T11398] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.828631][T11398] bridge0: port 1(bridge_slave_0) entered listening state [ 430.919377][T11400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1377'. [ 430.971739][T11398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.027177][ T5912] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 431.285627][T11399] macvlan2: entered promiscuous mode [ 431.291458][T11399] macvlan2: entered allmulticast mode [ 431.336835][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 431.347158][ T5912] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 431.359156][ T5912] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 431.397914][ T5912] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.542625][ T5912] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 431.657711][ T5912] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 431.668780][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.690384][ T5912] usb 3-1: Product: syz [ 431.694603][ T5912] usb 3-1: Manufacturer: syz [ 431.715350][ T5912] usb 3-1: SerialNumber: syz [ 431.753149][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 431.782260][ T5912] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input35 [ 431.966819][ T5912] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 431.976006][ T5912] (id 0x00) [ 432.116818][ T5912] rc_core: IR keymap rc-imon-pad not found [ 432.131930][ T5912] Registered IR keymap rc-empty [ 432.146667][T11409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.158522][T11409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.171370][T11409] kvm: emulating exchange as write [ 432.193463][ T5912] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 432.235413][ T5912] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 432.276763][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 432.287230][ T5912] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 432.299989][ T5912] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input36 [ 432.325129][ T5912] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:92> initialized [ 432.438967][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 432.455238][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.473629][ T5912] usb 3-1: USB disconnect, device number 92 [ 432.491146][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 432.502457][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 432.520150][ T10] usb 1-1: Manufacturer: syz [ 432.528798][ T10] usb 1-1: config 0 descriptor?? [ 432.636923][ T10] rc_core: IR keymap rc-hauppauge not found [ 432.643006][ T10] Registered IR keymap rc-empty [ 432.650596][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 432.663896][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 432.750451][T11406] input: syz0 as /devices/virtual/input/input38 [ 432.980465][T11423] rc rc0: two consecutive events of type space [ 433.316852][ T24] usb 1-1: USB disconnect, device number 99 [ 433.472064][T11425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 433.478629][T11425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 433.486195][T11425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 433.817531][T11425] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 433.860078][T11425] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 433.891552][T11437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'. [ 433.978951][ T65] wlan0: Trigger new scan to find an IBSS to join [ 434.047150][T11425] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 434.347797][T10711] vhci_hcd: vhci_device speed not set [ 434.392016][T11425] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 434.440503][T11439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 434.454850][T11439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.495706][ T10] usb 5-1: USB disconnect, device number 116 [ 434.937014][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 434.971940][ T65] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.981038][ T65] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.996707][ T5912] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 435.020638][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 435.058345][ T65] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.087059][ T65] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.186677][ T5912] usb 2-1: device descriptor read/64, error -71 [ 435.248392][ T10] usb 5-1: config 0 has no interfaces? [ 435.257178][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 435.278191][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.323518][ T10] usb 5-1: config 0 descriptor?? [ 435.427946][ T5912] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 435.497565][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 435.497688][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 435.565035][ T24] usb 5-1: USB disconnect, device number 117 [ 435.941972][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.948934][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 436.395921][T11471] loop9: detected capacity change from 0 to 7 [ 436.402754][T11471] Dev loop9: unable to read RDB block 7 [ 436.409109][T11471] loop9: AHDI p3 p4 [ 436.413079][T11471] loop9: partition table partially beyond EOD, truncated [ 436.432153][T11471] loop9: p3 start 1886353253 is beyond EOD, truncated [ 436.676293][ T5828] udevd[5828]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 436.921035][T11486] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1396'. [ 436.946819][T11486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.896780][ T65] wlan0: Trigger new scan to find an IBSS to join [ 437.977066][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 438.046874][ T983] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 438.411722][T11499] binder: 11493:11499 ioctl 400c620e 200000000380 returned -22 [ 438.426818][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 438.462147][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.497530][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.527036][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.537389][ T983] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 438.547635][ T983] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.608461][ T983] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.623747][ T983] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 438.633146][ T983] usb 3-1: Manufacturer: syz [ 438.638182][T11501] syzkaller0: entered promiscuous mode [ 438.643886][T11501] syzkaller0: entered allmulticast mode [ 438.644766][ T983] usb 3-1: config 0 descriptor?? [ 438.667258][T11501] Lens A: ================= START STATUS ================= [ 438.674789][T11501] Lens A: Focus, Absolute: 0 [ 438.680993][T11501] Lens A: ================== END STATUS ================== [ 438.927013][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.982065][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 439.086840][T10897] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 439.147281][ T983] rc_core: IR keymap rc-hauppauge not found [ 439.190343][ T983] Registered IR keymap rc-empty [ 439.195367][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 439.217020][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 439.257090][T10897] usb 5-1: Using ep0 maxpacket: 8 [ 439.268400][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 439.284516][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 439.292118][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.302768][ T24] usb 1-1: config 0 has no interfaces? [ 439.312236][ T24] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 439.333889][T10897] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 439.343680][T10897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 439.352366][T10897] usb 5-1: Product: syz [ 439.356969][ T24] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 439.365180][T10897] usb 5-1: Manufacturer: syz [ 439.369923][T10897] usb 5-1: SerialNumber: syz [ 439.374927][ T24] usb 1-1: Product: syz [ 439.379987][ T24] usb 1-1: Manufacturer: syz [ 439.384567][ T24] usb 1-1: SerialNumber: syz [ 439.416518][T11507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.435023][T10897] usb 5-1: config 0 descriptor?? [ 439.442678][ T24] usb 1-1: config 0 descriptor?? [ 439.456367][T10897] usbtest 5-1:0.0: FX2 device [ 439.461963][T10897] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 439.494562][ T983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 439.656506][ T983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 439.674792][T10711] usb 1-1: USB disconnect, device number 100 [ 439.682116][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 439.737119][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 439.826734][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 439.846749][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 439.897019][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 439.937024][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.006729][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.066830][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.074400][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.084789][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.091383][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.107009][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.147806][ T983] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 440.170728][ T983] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 440.246987][ T983] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 440.313481][ T983] usb 3-1: USB disconnect, device number 93 [ 440.585014][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'. [ 440.628832][T11524] tipc: Enabled bearer , priority 0 [ 440.636056][T11524] syzkaller0: entered promiscuous mode [ 440.641616][T11524] syzkaller0: entered allmulticast mode [ 440.667418][T11524] tipc: Resetting bearer [ 440.694543][T11524] tipc: Disabling bearer [ 441.510965][T11537] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1410'. [ 441.527466][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1409'. [ 441.605687][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.623274][T11540] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1409'. [ 441.645315][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.655495][ T983] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 441.745073][ T5885] usb 5-1: USB disconnect, device number 118 [ 441.791642][T11542] loop6: detected capacity change from 0 to 7 [ 441.835348][ T983] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 441.846767][ T983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.947549][T11542] Dev loop6: unable to read RDB block 7 [ 441.953141][T11542] loop6: unable to read partition table [ 441.960738][T11542] loop6: partition table beyond EOD, truncated [ 441.990649][T11542] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 442.057120][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 442.160144][ T983] usb 1-1: config 0 has no interfaces? [ 442.172038][ T983] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 442.218274][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.306424][ T983] usb 1-1: config 0 descriptor?? [ 443.547112][T11558] syzkaller0: entered promiscuous mode [ 443.552603][T11558] syzkaller0: entered allmulticast mode [ 443.592720][T11558] Lens A: ================= START STATUS ================= [ 443.602485][T11558] Lens A: Focus, Absolute: 0 [ 443.610730][T11558] Lens A: ================== END STATUS ================== [ 443.932757][T10897] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 444.086703][T10897] usb 5-1: Using ep0 maxpacket: 32 [ 444.094690][T10897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.105840][T10897] usb 5-1: config 0 has no interfaces? [ 444.118570][T10897] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 444.144385][T10897] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 444.153001][T10897] usb 5-1: Product: syz [ 444.158499][T10897] usb 5-1: Manufacturer: syz [ 444.163667][T10897] usb 5-1: SerialNumber: syz [ 444.299858][T10897] usb 5-1: config 0 descriptor?? [ 445.054143][T10711] usb 5-1: USB disconnect, device number 119 [ 445.160966][T11581] binder: 11580:11581 ioctl c0306201 200000000080 returned -14 [ 445.171619][T11581] binder: 11580:11581 ioctl c0306201 2000000003c0 returned -14 [ 445.181037][T11581] binder: 11580:11581 ioctl c0401289 200000000480 returned -22 [ 445.306708][ T5885] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 445.426911][T10897] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 445.466704][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 445.527617][T10711] usb 1-1: USB disconnect, device number 101 [ 445.576028][ T5885] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 445.587894][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.587950][T10897] usb 2-1: device descriptor read/64, error -71 [ 445.602440][ T5885] usb 3-1: Product: syz [ 445.633071][ T5885] usb 3-1: Manufacturer: syz [ 445.644548][ T5885] usb 3-1: SerialNumber: syz [ 445.661454][ T5885] usb 3-1: config 0 descriptor?? [ 445.801679][T11592] netlink: 'syz.4.1422': attribute type 4 has an invalid length. [ 445.836772][T10897] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 445.895398][ T5885] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 445.916906][ T30] audit: type=1800 audit(1762634399.233:707): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1421" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 445.973246][T10897] usb 2-1: device descriptor read/64, error -71 [ 446.097898][T10897] usb usb2-port1: attempt power cycle [ 446.181734][T11598] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 446.307140][T11598] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 446.321790][ T65] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 446.323731][T11598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.344538][T11598] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1424'. [ 446.439069][ T50] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 446.446981][T10897] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 446.478857][T10897] usb 2-1: device descriptor read/8, error -71 [ 446.603515][T11611] trusted_key: encrypted_key: insufficient parameters specified [ 446.657042][ T5912] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 446.688280][ T30] audit: type=1326 audit(1762634400.003:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.4.1427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0xffff0000 [ 446.710707][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.717357][T10897] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 446.745415][ T5885] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 446.747698][T10897] usb 2-1: device descriptor read/8, error -71 [ 446.764005][ T5885] usb 3-1: USB disconnect, device number 94 [ 446.867331][T10897] usb usb2-port1: unable to enumerate USB device [ 446.899832][ T5912] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.914697][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.929390][ T5912] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.945057][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.955216][ T5912] usb 1-1: Product: syz [ 446.960546][ T5912] usb 1-1: Manufacturer: Я [ 446.965327][ T5912] usb 1-1: SerialNumber: syz [ 447.223324][ T5912] usb 1-1: 0:2 : does not exist [ 447.286712][ T5912] usb 1-1: USB disconnect, device number 102 [ 447.317460][ T5885] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 447.354010][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.528583][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 447.544610][ T5885] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 447.564012][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.598516][ T5885] pvrusb2: Hardware description: Terratec Grabster AV400 [ 447.618714][ T5885] pvrusb2: ********** [ 447.622740][ T5885] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 447.633550][ T5885] pvrusb2: Important functionality might not be entirely working. [ 447.643285][ T5885] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 447.658645][ T5885] pvrusb2: ********** [ 447.695521][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1429'. [ 447.846855][ T2345] pvrusb2: Invalid write control endpoint [ 447.977939][ T2345] pvrusb2: Invalid write control endpoint [ 447.983685][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 448.069086][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 448.092900][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 448.127319][ T2345] pvrusb2: Device being rendered inoperable [ 448.137905][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 448.152108][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 448.260627][ T2345] pvrusb2: Attached sub-driver cx25840 [ 448.281244][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 448.403571][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 448.771576][T11635] syzkaller0: entered promiscuous mode [ 448.857958][T11635] syzkaller0: entered allmulticast mode [ 448.926742][ T5912] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 448.947889][T11631] Lens A: ================= START STATUS ================= [ 448.955328][T11631] Lens A: Focus, Absolute: 0 [ 448.960216][T11631] Lens A: ================== END STATUS ================== [ 449.096642][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 449.146256][ T5912] usb 1-1: config 0 has no interfaces? [ 449.157306][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 449.176649][ T5912] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 449.196652][ T5912] usb 1-1: Manufacturer: syz [ 449.217495][ T5912] usb 1-1: config 0 descriptor?? [ 449.400821][T10897] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 449.847205][T10897] usb 2-1: Using ep0 maxpacket: 32 [ 449.854694][T10897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.865549][T10897] usb 2-1: config 0 has no interfaces? [ 449.875344][T10897] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 449.885271][T10897] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 449.887834][T11637] fuse: Bad value for 'fd' [ 449.900434][T10897] usb 2-1: Product: syz [ 449.908204][ T50] wlan0: Trigger new scan to find an IBSS to join [ 449.921658][T10897] usb 2-1: Manufacturer: syz [ 449.947622][T10897] usb 2-1: SerialNumber: syz [ 449.974466][T10897] usb 2-1: config 0 descriptor?? [ 450.195679][T10897] usb 2-1: USB disconnect, device number 98 [ 450.291290][T11644] netlink: 'syz.4.1433': attribute type 63 has an invalid length. [ 450.348223][T11646] netlink: 'syz.4.1433': attribute type 63 has an invalid length. [ 450.634125][T11648] ip6gretap0: entered promiscuous mode [ 450.654771][T11648] macsec1: entered promiscuous mode [ 450.751342][T11648] ip6gretap0: left promiscuous mode [ 451.019546][T11654] usb 1-1: USB disconnect, device number 103 [ 451.188208][ T5912] usb 4-1: USB disconnect, device number 61 [ 451.269437][T11656] netlink: 'syz.4.1437': attribute type 5 has an invalid length. [ 451.491820][T11659] fuse: blksize only supported for fuseblk [ 451.522226][T11659] cifs: Unknown parameter 'fd' [ 451.543723][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.636932][T11664] fuse: Bad value for 'fd' [ 451.856772][T10897] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 451.996937][T10897] usb 5-1: device descriptor read/64, error -71 [ 452.046711][ T5912] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 452.217092][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 452.224493][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.232710][ T5912] usb 4-1: config 0 has no interface number 0 [ 452.239577][T10897] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 452.258184][ T5912] usb 4-1: config 0 interface 1 has no altsetting 0 [ 452.271109][ T5912] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 452.280573][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.288738][ T5912] usb 4-1: Product: syz [ 452.293084][ T5912] usb 4-1: Manufacturer: syz [ 452.298339][ T5912] usb 4-1: SerialNumber: syz [ 452.308745][ T5912] usb 4-1: config 0 descriptor?? [ 452.376952][T10897] usb 5-1: device descriptor read/64, error -71 [ 452.464863][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1444'. [ 452.486940][T10897] usb usb5-port1: attempt power cycle [ 452.553591][ T5912] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 452.758636][ T5912] usb 4-1: USB disconnect, device number 62 [ 452.837034][T10897] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 452.858015][T10897] usb 5-1: device descriptor read/8, error -71 [ 452.942750][ T3461] wlan0: Trigger new scan to find an IBSS to join [ 453.146683][T10897] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 453.167984][T10897] usb 5-1: device descriptor read/8, error -71 [ 453.280286][T10897] usb usb5-port1: unable to enumerate USB device [ 453.365125][T11681] syzkaller0: entered promiscuous mode [ 453.372479][T11681] syzkaller0: entered allmulticast mode [ 453.397390][T11681] Lens A: ================= START STATUS ================= [ 453.405059][T11681] Lens A: Focus, Absolute: 0 [ 453.410842][T11681] Lens A: ================== END STATUS ================== [ 453.546775][T10897] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 453.657036][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 453.706777][T10897] usb 2-1: Using ep0 maxpacket: 16 [ 453.718923][T10897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 453.747018][T10897] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 453.755224][T10897] usb 2-1: config 13 has no interface number 0 [ 453.786654][T10897] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 453.816173][T10897] usb 2-1: config 13 interface 50 has no altsetting 0 [ 453.826904][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 453.833704][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.867999][T10897] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 453.887300][ T43] usb 4-1: config 0 has no interfaces? [ 453.896786][T10897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.928528][ T43] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 453.946976][T10897] usb 2-1: Product: syz [ 453.951176][T10897] usb 2-1: Manufacturer: syz [ 453.955879][T10897] usb 2-1: SerialNumber: syz [ 453.961442][ T43] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 453.987052][ T43] usb 4-1: Product: syz [ 453.991503][ T43] usb 4-1: Manufacturer: syz [ 453.996251][ T43] usb 4-1: SerialNumber: syz [ 454.008338][T11679] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 454.025723][ T43] usb 4-1: config 0 descriptor?? [ 454.097003][T11683] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1447'. [ 454.137372][ T65] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 454.249139][T10897] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.269251][T10897] usb 2-1: MIDIStreaming interface descriptor not found [ 454.326933][ T5885] usb 4-1: USB disconnect, device number 63 [ 454.333113][T10897] usb 2-1: USB disconnect, device number 99 [ 454.438460][ T6433] udevd[6433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.874268][T11695] macsec2: entered promiscuous mode [ 454.884503][T11695] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 454.904754][T11695] macsec2: entered allmulticast mode [ 454.916858][T11695] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 454.930242][T11706] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.953467][T11706] netlink: 'syz.2.1452': attribute type 3 has an invalid length. [ 454.953975][T11695] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 454.975377][T11695] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 455.097175][ T5885] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 455.256906][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 455.313156][T11697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.412781][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 455.698989][ T5885] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 455.774461][ T5885] usb 5-1: can't read configurations, error -71 [ 455.796466][T11728] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 455.820208][ T30] audit: type=1800 audit(1762634409.143:709): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1458" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 455.967040][ T1333] wlan0: Trigger new scan to find an IBSS to join [ 456.567760][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 456.988479][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.230121][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1463'. [ 457.291309][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1466'. [ 457.322373][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1465'. [ 457.348397][T11758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.990624][T11796] syzkaller0: entered promiscuous mode [ 458.058079][T11796] syzkaller0: entered allmulticast mode [ 458.139556][T11796] Lens A: ================= START STATUS ================= [ 458.174823][T11796] Lens A: Focus, Absolute: 0 [ 458.257943][T11796] Lens A: ================== END STATUS ================== [ 458.426731][ T5912] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 458.436401][ T5885] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 458.586702][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 458.594487][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.607363][ T5912] usb 2-1: config 0 has no interfaces? [ 458.620247][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 458.629848][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.645351][ T5912] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 458.654774][ T5885] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 458.665905][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 458.674629][ T5885] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 458.684487][ T5912] usb 2-1: Product: syz [ 458.689134][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.698244][ T5912] usb 2-1: Manufacturer: syz [ 458.704613][ T5912] usb 2-1: SerialNumber: syz [ 458.715907][ T5885] usb 5-1: config 0 descriptor?? [ 458.725405][ T5912] usb 2-1: config 0 descriptor?? [ 458.816840][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 458.824648][ T10] usb 3-1: config 0 has an invalid interface number: 37 but max is 0 [ 458.832946][ T10] usb 3-1: config 0 has no interface number 0 [ 458.842450][ T10] usb 3-1: config 0 interface 37 has no altsetting 0 [ 458.855340][ T10] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 458.864794][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.876532][ T10] usb 3-1: Product: syz [ 458.881294][ T10] usb 3-1: Manufacturer: syz [ 458.886263][ T10] usb 3-1: SerialNumber: syz [ 458.893942][ T10] usb 3-1: config 0 descriptor?? [ 458.902770][ T10] rtl8150 3-1:0.37: couldn't find required endpoints [ 458.912082][ T10] rtl8150 3-1:0.37: probe with driver rtl8150 failed with error -5 [ 459.143346][ T5885] Bluetooth: Can't get state to change to load configuration err [ 459.152370][ T5885] Bluetooth: Loading sysconfig file failed [ 459.159643][ T5885] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 459.283885][T10897] usb 3-1: USB disconnect, device number 95 [ 459.346488][ T5885] usb 5-1: USB disconnect, device number 126 [ 459.541709][T11811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.550587][T11811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.592107][T11811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.602856][T11811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 459.609911][T11811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.637917][T10897] usb 2-1: USB disconnect, device number 100 [ 459.931169][T11841] syz_tun: entered allmulticast mode [ 459.953790][T11789] tipc: Subscription rejected, illegal request [ 460.019594][T11845] batadv0: entered promiscuous mode [ 460.028501][T11845] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 460.162021][T11853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'. [ 460.383103][ T30] audit: type=1326 audit(1762634413.683:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 460.419315][ T30] audit: type=1326 audit(1762634413.683:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 460.443294][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.786714][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 460.845383][ T30] audit: type=1326 audit(1762634413.683:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 460.906884][ T30] audit: type=1326 audit(1762634413.683:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 460.986754][ T30] audit: type=1326 audit(1762634413.683:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.035567][T11868] bond4: option lp_interval: invalid value (0) [ 461.043219][T11868] bond4: option lp_interval: allowed values 1 - 2147483647 [ 461.143812][ T30] audit: type=1326 audit(1762634413.683:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.172785][T11868] bond4 (unregistering): Released all slaves [ 461.190123][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 461.199100][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 461.359874][ T30] audit: type=1326 audit(1762634413.683:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.576744][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 461.604179][ T30] audit: type=1326 audit(1762634413.683:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.628262][ T30] audit: type=1326 audit(1762634413.683:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.656958][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.658252][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 461.663041][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 461.668481][ T30] audit: type=1326 audit(1762634413.683:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.724105][ T30] audit: type=1326 audit(1762634413.683:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.749237][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.758190][ T30] audit: type=1326 audit(1762634413.683:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f02a498f6c9 code=0x7ffc0000 [ 461.781685][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.346674][ T5885] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 462.496953][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 462.504499][ T5885] usb 3-1: config 0 has an invalid interface number: 37 but max is 0 [ 462.514100][ T5885] usb 3-1: config 0 has no interface number 0 [ 462.521659][ T5885] usb 3-1: config 0 interface 37 has no altsetting 0 [ 462.533801][ T5885] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 462.554936][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.564852][ T5885] usb 3-1: Product: syz [ 462.687770][ T5885] usb 3-1: Manufacturer: syz [ 462.697874][ T5885] usb 3-1: SerialNumber: syz [ 462.716439][ T5885] usb 3-1: config 0 descriptor?? [ 462.721564][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 462.737957][ T5885] rtl8150 3-1:0.37: couldn't find required endpoints [ 462.748062][ T5885] rtl8150 3-1:0.37: probe with driver rtl8150 failed with error -5 [ 462.969789][ T10] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 463.059374][ T10] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 463.087866][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.116877][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 463.126510][ T10] usb 4-1: config 0 has no interface number 0 [ 463.132879][ T10] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 463.144467][ T10] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 463.155742][ T10] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.199644][ T5885] usb 3-1: USB disconnect, device number 96 [ 463.241608][ T10] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.261933][ T10] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 463.274315][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.313176][ T10] usb 4-1: config 0 descriptor?? [ 463.351063][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 463.404833][T11907] syzkaller0: entered promiscuous mode [ 463.412476][T11907] syzkaller0: entered allmulticast mode [ 463.452896][T11907] Lens A: ================= START STATUS ================= [ 463.461320][T11907] Lens A: Focus, Absolute: 0 [ 463.466044][T11907] Lens A: ================== END STATUS ================== [ 463.645879][T11910] Invalid logical block size (768) [ 463.737270][ T5885] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 463.878723][ T10] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 463.889711][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.898398][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 463.905233][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 463.917584][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.942107][ T5885] usb 2-1: config 0 has no interfaces? [ 463.958649][ T5885] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 463.981893][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 464.009868][ T5885] usb 2-1: Product: syz [ 464.014328][ T5885] usb 2-1: Manufacturer: syz [ 464.031652][ T5885] usb 2-1: SerialNumber: syz [ 464.054384][ T5885] usb 2-1: config 0 descriptor?? [ 464.274940][ T5885] usb 2-1: USB disconnect, device number 101 [ 464.728043][T11926] fuse: Unknown parameter 'rgotmod1' [ 464.980615][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1503'. [ 465.548896][T11947] loop3: detected capacity change from 0 to 7 [ 465.564514][T11947] Dev loop3: unable to read RDB block 7 [ 465.570577][T11947] loop3: unable to read partition table [ 465.580252][T11947] loop3: partition table beyond EOD, truncated [ 465.587826][T11947] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 465.796383][ T5912] usb 4-1: USB disconnect, device number 64 [ 466.077422][ T5885] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 466.248851][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 466.256437][ T5885] usb 5-1: config 0 has an invalid interface number: 37 but max is 0 [ 466.267883][ T5885] usb 5-1: config 0 has no interface number 0 [ 466.275146][ T5885] usb 5-1: config 0 interface 37 has no altsetting 0 [ 466.304088][ T5885] usb 5-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 466.317923][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.326509][ T5885] usb 5-1: Product: syz [ 466.333136][ T5885] usb 5-1: Manufacturer: syz [ 466.338689][ T5885] usb 5-1: SerialNumber: syz [ 466.357349][ T5885] usb 5-1: config 0 descriptor?? [ 466.371142][ T5885] rtl8150 5-1:0.37: couldn't find required endpoints [ 466.382783][ T5885] rtl8150 5-1:0.37: probe with driver rtl8150 failed with error -5 [ 466.417102][ T43] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 466.536518][T11967] syzkaller0: entered promiscuous mode [ 466.548438][T11967] syzkaller0: entered allmulticast mode [ 466.570877][T11967] Lens A: ================= START STATUS ================= [ 466.578748][T11967] Lens A: Focus, Absolute: 0 [ 466.578831][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.578865][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.584497][T11967] Lens A: ================== END STATUS ================== [ 466.597829][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 466.628834][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.639952][ T43] usb 3-1: config 0 descriptor?? [ 466.765867][T11976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.772123][T10897] usb 5-1: USB disconnect, device number 127 [ 466.858169][ T5885] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 467.017252][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 467.025003][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.046034][ T5885] usb 2-1: config 0 has no interfaces? [ 467.052200][ T43] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 467.058500][ T5885] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 467.060865][ T43] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 467.071263][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 467.087748][ T5885] usb 2-1: Product: syz [ 467.092069][ T43] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001E/input/input41 [ 467.096889][ T5885] usb 2-1: Manufacturer: syz [ 467.113846][ T43] cm6533_jd 0003:0D8C:0022.001E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 467.132314][ T5885] usb 2-1: SerialNumber: syz [ 467.151118][ T5885] usb 2-1: config 0 descriptor?? [ 467.263510][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.274759][T11988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.289338][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.306529][T11988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.382596][ T5885] usb 3-1: USB disconnect, device number 97 [ 467.417648][ T5912] usb 2-1: USB disconnect, device number 102 [ 467.586838][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 467.736664][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 467.750055][ T43] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 467.759951][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.768431][ T43] usb 5-1: Product: syz [ 467.772667][ T43] usb 5-1: Manufacturer: syz [ 467.777665][ T43] usb 5-1: SerialNumber: syz [ 468.416883][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.646266][ T43] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 468.680039][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.822915][T11990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 468.832229][T11990] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 469.470025][ T43] usb 5-1: USB disconnect, device number 2 [ 471.057030][ T5912] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 471.087563][T12029] syzkaller0: entered promiscuous mode [ 471.093532][T12029] syzkaller0: entered allmulticast mode [ 471.133106][T12029] Lens A: ================= START STATUS ================= [ 471.141166][T12029] Lens A: Focus, Absolute: 0 [ 471.145794][T12029] Lens A: ================== END STATUS ================== [ 471.338596][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.350033][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.366640][ T5912] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 471.386071][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.411584][ T5912] usb 3-1: config 0 descriptor?? [ 471.416799][T11769] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.417023][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 471.496849][T10897] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 471.586723][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 471.597649][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.608801][ T43] usb 5-1: config 0 has no interfaces? [ 471.625534][ T43] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 471.634977][ T43] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 471.677389][T10897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.693723][T10897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.712606][T10897] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.735324][ T43] usb 5-1: Product: syz [ 471.740909][T10897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.749605][ T43] usb 5-1: Manufacturer: syz [ 471.754362][ T43] usb 5-1: SerialNumber: syz [ 471.759447][T10897] usb 2-1: SerialNumber: syz [ 471.793298][ T43] usb 5-1: config 0 descriptor?? [ 471.851130][ T5912] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 471.881205][ T5912] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 472.044659][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 472.055351][T12033] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 472.064475][ T5912] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 472.084900][T12033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 472.099348][ T43] usb 5-1: USB disconnect, device number 3 [ 472.670965][T12025] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 472.686956][T12025] CUSE: unknown device info "3ܟ,̘" [ 472.692854][T12025] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 472.692854][T12025] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 472.712965][T12025] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 472.724503][T12025] CUSE: DEVNAME unspecified [ 472.733892][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.743496][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.760448][ T5912] cp2112 0003:10C4:EA90.001F: error reading lock byte: -71 [ 472.789308][ T5912] usb 3-1: USB disconnect, device number 98 [ 473.515189][T12044] blktrace: Concurrent blktraces are not allowed on loop4 [ 473.976879][ T5912] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 473.991154][T12061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1540'. [ 474.147535][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 474.160079][ T5912] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 474.213979][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.829787][ T5912] usb 3-1: Product: syz [ 474.839904][ T5912] usb 3-1: Manufacturer: syz [ 474.860094][ T5912] usb 3-1: SerialNumber: syz [ 475.071860][T10897] usb 2-1: 0:2 : does not exist [ 475.211497][T10897] usb 2-1: USB disconnect, device number 103 [ 475.346332][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.415457][T12071] syzkaller0: entered promiscuous mode [ 475.421659][T12071] syzkaller0: entered allmulticast mode [ 475.446869][T12071] Lens A: ================= START STATUS ================= [ 475.454632][T12071] Lens A: Focus, Absolute: 0 [ 475.459897][T12071] Lens A: ================== END STATUS ================== [ 475.691787][ T5912] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.797319][T10897] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 475.908296][ T5912] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 475.946077][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.962741][T10897] usb 2-1: Using ep0 maxpacket: 32 [ 475.974666][T10897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.001961][T10897] usb 2-1: config 0 has no interfaces? [ 476.011637][T10897] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 476.021296][T10897] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 476.030641][T10897] usb 2-1: Product: syz [ 476.034970][T10897] usb 2-1: Manufacturer: syz [ 476.039659][T10897] usb 2-1: SerialNumber: syz [ 476.052437][T10897] usb 2-1: config 0 descriptor?? [ 476.100045][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 476.110767][T12050] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 476.271451][ T5912] usb 2-1: USB disconnect, device number 104 [ 476.735184][ T5912] usb 3-1: USB disconnect, device number 99 [ 477.072517][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 477.083039][T12084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 477.124013][T12084] xt_hashlimit: max too large, truncated to 1048576 [ 477.775245][ T5885] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 478.228343][ T5885] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 478.236942][ T5885] usb 2-1: config 0 has no interface number 0 [ 478.243229][ T5885] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 478.364188][ T5885] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.386299][ T5885] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 478.395734][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.408949][ T5885] usb 2-1: config 0 descriptor?? [ 478.840162][ T5885] uclogic 0003:256C:006E.0020: interface is invalid, ignoring [ 479.039007][T10897] usb 2-1: USB disconnect, device number 105 [ 479.255991][T12121] loop3: detected capacity change from 0 to 7 [ 479.268275][T12121] Dev loop3: unable to read RDB block 7 [ 479.274538][T12121] loop3: unable to read partition table [ 479.280852][T12121] loop3: partition table beyond EOD, truncated [ 479.336925][T12121] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 479.359103][T12123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1555'. [ 479.498459][T12125] syzkaller0: entered promiscuous mode [ 479.504431][T12125] syzkaller0: entered allmulticast mode [ 479.528944][T12125] Lens A: ================= START STATUS ================= [ 479.537670][T12125] Lens A: Focus, Absolute: 0 [ 479.542363][T12125] Lens A: ================== END STATUS ================== [ 479.771259][T12133] netlink: 'syz.1.1559': attribute type 10 has an invalid length. [ 479.835843][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1558'. [ 479.846727][ T5912] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 479.905985][T12136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.805793][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 480.871038][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.893637][ T5912] usb 3-1: config 0 has no interfaces? [ 480.925612][ T5912] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 480.935151][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 480.948678][ T5912] usb 3-1: Product: syz [ 480.978540][ T5912] usb 3-1: Manufacturer: syz [ 481.061943][ T5912] usb 3-1: SerialNumber: syz [ 481.145987][ T5912] usb 3-1: config 0 descriptor?? [ 481.461587][T12150] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 481.469768][T12150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1561'. [ 481.647606][T10711] usb 3-1: USB disconnect, device number 100 [ 482.459880][T12165] binder: 12162:12165 ioctl 400c620e 200000000380 returned -22 [ 482.876729][ T5912] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 482.989280][ T5885] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 483.027149][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 483.041003][ T5912] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 483.053006][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 483.069632][ T5912] usb 3-1: Product: syz [ 483.132244][T12174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 483.147680][T12174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.190203][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 483.196954][ T5912] usb 3-1: Manufacturer: syz [ 483.201730][ T5912] usb 3-1: SerialNumber: syz [ 483.228800][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 483.238058][ T5885] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 483.247679][ T5912] usb 3-1: config 0 descriptor?? [ 483.252950][ T5885] usb 4-1: config 8 has no interface number 0 [ 483.261235][ T5912] usbtest 3-1:0.0: FX2 device [ 483.266440][ T5912] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 483.274700][ T5885] usb 4-1: config 8 interface 255 has no altsetting 0 [ 483.289513][ T5885] usb 4-1: string descriptor 0 read error: -22 [ 483.333634][ T5885] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 483.343569][ T5885] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 484.005995][ T5885] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 484.084661][ T5885] usb 4-1: USB disconnect, device number 65 [ 484.265469][T12179] loop3: detected capacity change from 0 to 7 [ 484.283410][T12179] Dev loop3: unable to read RDB block 7 [ 484.289346][T12179] loop3: unable to read partition table [ 484.479209][T12179] loop3: partition table beyond EOD, truncated [ 484.490315][T12179] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 485.026850][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 485.353715][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.365992][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.376389][ T5885] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 485.385615][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.402580][ T5885] usb 5-1: config 0 descriptor?? [ 485.622869][T12186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.669796][ T5912] usb 3-1: USB disconnect, device number 101 [ 485.687557][T12186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.970115][ T5885] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 486.078131][ T5885] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 486.087790][ T5885] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 486.094891][ T5885] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 486.102178][ T5885] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 486.132345][ T5885] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 486.140880][ T5885] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 486.257382][ T5885] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 486.273951][T12195] syzkaller0: entered promiscuous mode [ 486.280158][T12195] syzkaller0: entered allmulticast mode [ 486.330013][T12195] Lens A: ================= START STATUS ================= [ 486.337750][T12195] Lens A: Focus, Absolute: 0 [ 486.343005][T12195] Lens A: ================== END STATUS ================== [ 486.357729][ T5885] cp2112 0003:10C4:EA90.0021: Part Number: 0x00 Device Version: 0x00 [ 486.586711][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 486.756697][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 486.765967][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.782448][ T10] usb 2-1: config 0 has no interfaces? [ 486.794075][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 486.804260][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 486.812906][ T10] usb 2-1: Product: syz [ 486.818240][ T10] usb 2-1: Manufacturer: syz [ 486.823363][ T10] usb 2-1: SerialNumber: syz [ 486.832260][ T10] usb 2-1: config 0 descriptor?? [ 486.899550][ T5885] cp2112 0003:10C4:EA90.0021: error reading lock byte: -71 [ 486.919869][ T5885] usb 5-1: USB disconnect, device number 4 [ 487.068777][ T10] usb 2-1: USB disconnect, device number 106 [ 487.359158][ T5912] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 487.558248][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.577998][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.596645][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 487.616671][ T5912] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 487.646669][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.677281][ T5912] usb 4-1: config 0 descriptor?? [ 487.716235][T10711] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 487.757388][ T43] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 487.878560][T10711] usb 5-1: Using ep0 maxpacket: 16 [ 487.887021][T10711] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 487.901465][T10711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.913811][ T43] usb 3-1: device descriptor read/64, error -71 [ 487.929432][T10711] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 487.939591][T10711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.957047][T10711] usb 5-1: Product: syz [ 487.962808][T10711] usb 5-1: Manufacturer: syz [ 487.968799][T10711] usb 5-1: SerialNumber: syz [ 487.981744][T10711] usb 5-1: config 0 descriptor?? [ 488.000525][T10711] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 488.013852][T10711] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 488.157246][ T43] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 488.286999][ T43] usb 3-1: device descriptor read/64, error -71 [ 488.400900][ T43] usb usb3-port1: attempt power cycle [ 488.621537][T10711] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 488.642521][T10711] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 488.747713][ T43] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 488.783588][ T43] usb 3-1: device descriptor read/8, error -71 [ 489.144193][ T43] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 489.183817][ T43] usb 3-1: device descriptor read/8, error -71 [ 489.299232][ T43] usb usb3-port1: unable to enumerate USB device [ 489.342387][T10711] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 489.364686][T10711] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 489.380077][T10711] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 489.406359][T10711] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 490.076696][T10711] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 490.096928][T10711] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 490.448348][T10711] usb 5-1: USB disconnect, device number 5 [ 491.116744][ T10] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 491.257772][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.266662][ C1] bridge0: topology change detected, propagating [ 491.274075][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.282015][ C1] bridge0: topology change detected, propagating [ 491.320051][ T10] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 491.329637][ T10] usb 3-1: config 0 has no interface number 0 [ 491.336126][ T10] usb 3-1: config 0 interface 120 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 491.406867][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 491.467418][ T10] usb 3-1: config 0 interface 120 has no altsetting 0 [ 491.499586][ T10] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f [ 491.510480][ T10] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 491.520308][ T10] usb 3-1: Product: syz [ 491.526121][ T10] usb 3-1: Manufacturer: syz [ 491.534157][ T10] usb 3-1: SerialNumber: syz [ 491.549402][ T10] usb 3-1: config 0 descriptor?? [ 491.588449][ T5885] usb 5-1: device descriptor read/64, error -71 [ 491.671853][ T10] esd_usb 3-1:0.120: sending version message failed [ 491.682474][ T10] esd_usb 3-1:0.120: probe with driver esd_usb failed with error -22 [ 491.826865][ T5885] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 491.968631][ T5885] usb 5-1: device descriptor read/64, error -71 [ 492.081397][ T5885] usb usb5-port1: attempt power cycle [ 492.286704][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 492.426724][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 492.476937][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 492.484404][ T5885] usb 5-1: device descriptor read/8, error -71 [ 492.523040][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 492.538986][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 492.548550][ T10] usb 2-1: Product: syz [ 492.553959][ T10] usb 2-1: Manufacturer: syz [ 492.560821][ T10] usb 2-1: SerialNumber: syz [ 492.573207][ T10] usb 2-1: config 0 descriptor?? [ 492.718624][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 492.725537][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 492.780288][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 492.792277][T12244] FAULT_INJECTION: forcing a failure. [ 492.792277][T12244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.830207][ T5912] usb 4-1: USB disconnect, device number 66 [ 492.844003][T12244] CPU: 0 UID: 0 PID: 12244 Comm: syz.1.1587 Not tainted syzkaller #0 PREEMPT(full) [ 492.844021][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.844028][T12244] Call Trace: [ 492.844032][T12244] [ 492.844038][T12244] dump_stack_lvl+0x189/0x250 [ 492.844057][T12244] ? __pfx____ratelimit+0x10/0x10 [ 492.844071][T12244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.844084][T12244] ? __pfx__printk+0x10/0x10 [ 492.844101][T12244] should_fail_ex+0x414/0x560 [ 492.844119][T12244] _copy_to_user+0x31/0xb0 [ 492.844132][T12244] simple_read_from_buffer+0xe1/0x170 [ 492.844150][T12244] proc_fail_nth_read+0x1b3/0x220 [ 492.844165][T12244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.844178][T12244] ? rw_verify_area+0x2a6/0x4d0 [ 492.844192][T12244] ? __lock_acquire+0xab9/0xd20 [ 492.844201][T12244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.844213][T12244] vfs_read+0x200/0xa30 [ 492.844225][T12244] ? fdget_pos+0x247/0x320 [ 492.844237][T12244] ? __pfx___mutex_lock+0x10/0x10 [ 492.844252][T12244] ? __pfx_vfs_read+0x10/0x10 [ 492.844265][T12244] ? __fget_files+0x2a/0x420 [ 492.844277][T12244] ? __fget_files+0x3a0/0x420 [ 492.844285][T12244] ? __fget_files+0x2a/0x420 [ 492.844299][T12244] ksys_read+0x145/0x250 [ 492.844311][T12244] ? __fget_files+0x2a/0x420 [ 492.844321][T12244] ? __pfx_ksys_read+0x10/0x10 [ 492.844335][T12244] ? do_syscall_64+0xbe/0xfa0 [ 492.844351][T12244] do_syscall_64+0xfa/0xfa0 [ 492.844365][T12244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.844374][T12244] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.844384][T12244] ? clear_bhb_loop+0x60/0xb0 [ 492.844395][T12244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.844405][T12244] RIP: 0033:0x7fc71ed8e0dc [ 492.844416][T12244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 492.844424][T12244] RSP: 002b:00007fc71fcbe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.844436][T12244] RAX: ffffffffffffffda RBX: 00007fc71efe5fa0 RCX: 00007fc71ed8e0dc [ 492.844443][T12244] RDX: 000000000000000f RSI: 00007fc71fcbe0a0 RDI: 0000000000000005 [ 492.844449][T12244] RBP: 00007fc71fcbe090 R08: 0000000000000000 R09: 0000000000000000 [ 492.844456][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.844462][T12244] R13: 00007fc71efe6038 R14: 00007fc71efe5fa0 R15: 00007fc71f10fa28 [ 492.844478][T12244] [ 493.151939][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.564988][ T5885] usb 5-1: device descriptor read/8, error -71 [ 493.707230][ T5885] usb usb5-port1: unable to enumerate USB device [ 493.728404][T10897] usb 2-1: USB disconnect, device number 107 [ 493.819856][T12249] syzkaller0: entered promiscuous mode [ 493.846082][T12249] syzkaller0: entered allmulticast mode [ 493.923557][T12249] Lens A: ================= START STATUS ================= [ 493.973702][T12249] Lens A: Focus, Absolute: 0 [ 493.981727][T12249] Lens A: ================== END STATUS ================== [ 494.189565][ T5885] usb 3-1: USB disconnect, device number 106 [ 494.406780][T10897] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 494.418266][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1592'. [ 494.438413][T12264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.687119][T10897] usb 2-1: Using ep0 maxpacket: 32 [ 494.890544][T10897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.003800][T10897] usb 2-1: config 0 has no interfaces? [ 495.036219][T10897] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 495.048278][T10897] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 495.073382][T10897] usb 2-1: Product: syz [ 495.174753][T10897] usb 2-1: Manufacturer: syz [ 495.209690][T10897] usb 2-1: SerialNumber: syz [ 495.265402][T10897] usb 2-1: config 0 descriptor?? [ 495.642531][T10897] usb 2-1: USB disconnect, device number 108 [ 496.266743][ T5885] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 496.487746][ T5912] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 496.502151][ T5885] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.514202][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.542399][ T5885] usb 3-1: config 0 descriptor?? [ 496.560435][ T5885] cp210x 3-1:0.0: cp210x converter detected [ 496.692910][ T5912] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 496.703553][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.726696][ T5912] usb 5-1: Product: syz [ 496.731843][ T5912] usb 5-1: Manufacturer: syz [ 496.746664][ T5912] usb 5-1: SerialNumber: syz [ 496.769533][ T5885] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 496.797631][ T5912] usb 5-1: config 0 descriptor?? [ 496.805615][ T5885] cp210x 3-1:0.0: querying part number failed [ 496.833463][ T5885] usb 3-1: cp210x converter now attached to ttyUSB0 [ 496.892190][ T5885] usb 3-1: USB disconnect, device number 107 [ 496.923674][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.953177][ T5885] cp210x 3-1:0.0: device disconnected [ 496.970082][T12296] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 497.037618][ T5912] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 497.154406][T12308] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1603'. [ 498.551110][T12318] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 498.564045][T12318] team0: Port device batadv1 added [ 498.814030][T12327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.888579][T11789] wlan0: Trigger new scan to find an IBSS to join [ 499.652736][T12332] openvswitch: netlink: Message has -2 unknown bytes. [ 499.660890][T12332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.730357][T12334] syzkaller0: entered promiscuous mode [ 499.736033][T12334] syzkaller0: entered allmulticast mode [ 499.818129][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 499.818148][ T30] audit: type=1326 audit(1762634453.143:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.854526][ T30] audit: type=1326 audit(1762634453.143:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.883478][T12334] Lens A: ================= START STATUS ================= [ 499.886830][ T30] audit: type=1326 audit(1762634453.173:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dde38df10 code=0x7ffc0000 [ 499.893518][T12334] Lens A: Focus, Absolute: [ 499.920003][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.921848][ T30] audit: type=1326 audit(1762634453.173:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.932697][T12334] 0 [ 499.959057][ T30] audit: type=1326 audit(1762634453.173:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.959099][ T30] audit: type=1326 audit(1762634453.173:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.959130][ T30] audit: type=1326 audit(1762634453.173:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.959161][ T30] audit: type=1326 audit(1762634453.173:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.959210][ T30] audit: type=1326 audit(1762634453.173:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.959240][ T30] audit: type=1326 audit(1762634453.173:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12336 comm="syz.2.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dde38f6c9 code=0x7ffc0000 [ 499.997376][T12334] [ 499.997395][T12334] Lens A: ================== END STATUS ================== [ 500.052892][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.053266][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.133409][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.257188][ T5885] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 500.427124][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 500.435640][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.449748][ T5885] usb 2-1: config 0 has no interfaces? [ 500.461393][ T5885] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 500.472228][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 500.483284][ T5885] usb 2-1: Product: syz [ 500.488734][ T5885] usb 2-1: Manufacturer: syz [ 500.494509][ T5885] usb 2-1: SerialNumber: syz [ 500.518201][ T5885] usb 2-1: config 0 descriptor?? [ 500.777413][ T5912] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 500.813044][ T5912] usb 2-1: USB disconnect, device number 109 [ 500.953873][T12351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 501.286867][T10897] usb 5-1: USB disconnect, device number 10 [ 501.507368][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.569664][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.697296][T10897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 501.849228][T10897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 501.860835][T10897] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 501.869782][T10897] usb 5-1: config 6 has no interface number 0 [ 501.876159][T10897] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 501.888933][T10897] usb 5-1: config 6 interface 200 has no altsetting 0 [ 501.925860][T10897] usb 5-1: string descriptor 0 read error: -22 [ 501.932869][T10897] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 501.955312][T10897] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 501.993819][T10897] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 502.105816][T12381] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 502.114985][T12381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1622'. [ 502.179886][T10897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 502.193679][T10711] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 502.208060][T10897] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 502.216421][T10897] usb 5-1: media controller created [ 502.243132][T10897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.363686][T10711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.374148][T10711] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 502.389432][T10897] dvb-usb: bulk message failed: -71 (6/0) [ 502.396997][T10711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.405937][T10897] dvb-usb: bulk message failed: -71 (6/0) [ 502.412187][T10897] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 502.423015][T10711] usb 2-1: config 0 descriptor?? [ 502.433709][T10897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 502.454647][T10897] dvb-usb: schedule remote query interval to 150 msecs. [ 502.465054][T10897] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 502.493973][T10897] usb 5-1: USB disconnect, device number 11 [ 502.555538][T10897] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 502.655785][T10711] usbhid 2-1:0.0: can't add hid device: -71 [ 502.664637][T10711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 502.684510][T10711] usb 2-1: USB disconnect, device number 110 [ 503.416808][T11788] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 503.439854][T12437] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 503.653259][T12439] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 503.668718][T12439] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 503.912056][T11788] wlan0: Trigger new scan to find an IBSS to join [ 503.941935][T12441] macvlan2: entered promiscuous mode [ 503.949335][T12441] macvlan2: entered allmulticast mode [ 503.964483][T12441] bond2: entered promiscuous mode [ 503.976801][T12441] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.003508][T12441] bond2: left promiscuous mode [ 504.696474][T12449] loop4: detected capacity change from 0 to 1 [ 504.709584][ T5828] Dev loop4: unable to read RDB block 1 [ 504.715918][ T5828] loop4: unable to read partition table [ 504.724121][ T5828] loop4: partition table beyond EOD, truncated [ 504.735756][T12449] Dev loop4: unable to read RDB block 1 [ 504.756717][T12449] loop4: unable to read partition table [ 504.776154][T12449] loop4: partition table beyond EOD, truncated [ 504.806700][T12449] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 504.996905][T11790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.014716][T12451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1638'. [ 505.207420][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 505.218007][T10711] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 505.218271][T12458] netlink: 'syz.0.1642': attribute type 5 has an invalid length. [ 505.238150][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1642'. [ 505.266107][T12458] geneve2: entered promiscuous mode [ 505.277765][T12458] geneve2: entered allmulticast mode [ 505.286448][T11790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 505.296865][T10897] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 505.311104][T11790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 505.329176][T11790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 505.340475][T11790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 505.388680][T10711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.402111][T10711] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.421134][T10711] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 505.431608][T10711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 505.440783][T10711] usb 3-1: SerialNumber: syz [ 505.446693][T10897] usb 5-1: Using ep0 maxpacket: 32 [ 505.453942][T10897] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 505.592389][T10897] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.620013][T10897] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.656388][T10897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 505.671552][T10897] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 505.691135][T10897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.724148][T10897] usb 5-1: config 0 descriptor?? [ 505.793601][T10711] usb 3-1: 0:2 : does not exist [ 505.820811][T10711] usb 3-1: USB disconnect, device number 108 [ 505.943824][T10897] usb 5-1: string descriptor 0 read error: -71 [ 505.963413][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.996904][T10897] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input43 [ 506.065232][ T5184] bcm5974 5-1:0.0: could not read from device [ 506.105860][T10897] usb 5-1: USB disconnect, device number 12 [ 506.176504][ T6438] udevd[6438]: Unable to EVIOCGABS device "/dev/input/event4" [ 506.189253][ T6438] udevd[6438]: Unable to EVIOCGABS device "/dev/input/event4" [ 506.215717][ T6438] udevd[6438]: Unable to EVIOCGABS device "/dev/input/event4" [ 506.354206][ T6438] udevd[6438]: Unable to EVIOCGABS device "/dev/input/event4" [ 506.406741][ T43] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 506.585843][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 506.620022][ T43] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.672456][ T43] usb 2-1: config 1 has no interface number 1 [ 506.688141][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 506.704806][ T43] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.722965][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.734663][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.745003][ T43] usb 2-1: Product: syz [ 506.750567][ T43] usb 2-1: Manufacturer: syz [ 506.756330][ T43] usb 2-1: SerialNumber: syz [ 507.018070][ T5885] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 507.182043][ T43] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 507.197032][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 507.212864][ T5885] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 507.226457][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.241768][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.254010][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.267617][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.281645][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.293253][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.538900][T12503] loop3: detected capacity change from 0 to 7 [ 507.562682][T12503] Dev loop3: unable to read RDB block 7 [ 507.569237][ T43] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 507.682560][T12503] loop3: unable to read partition table [ 507.695745][T12503] loop3: partition table beyond EOD, truncated [ 507.703091][T12503] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 507.812088][ T43] usb 2-1: USB disconnect, device number 111 [ 507.853571][ T5885] usb 4-1: usb_control_msg returned -32 [ 507.866421][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 508.072756][ T6433] udevd[6433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.119016][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'. [ 508.137470][T12519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.936899][ T5885] usb 4-1: USB disconnect, device number 67 [ 510.146716][T10897] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 510.292598][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 510.305094][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 510.677380][T10897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 510.697266][T10897] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 510.790992][T10897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.927842][T10897] usb 5-1: config 0 descriptor?? [ 511.206176][T12542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.217015][T12542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.320698][T12551] tipc: Enabled bearer , priority 0 [ 511.323084][ T5912] usb 5-1: USB disconnect, device number 13 [ 511.364623][T12532] syzkaller0: entered promiscuous mode [ 511.402269][T12532] syzkaller0: entered allmulticast mode [ 511.418881][T12532] tipc: Resetting bearer [ 511.458127][T12531] tipc: Resetting bearer [ 511.478185][T12531] tipc: Disabling bearer [ 511.496833][T10897] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 511.616732][ T10] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 511.660691][T10897] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 511.707424][T10897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.721535][T10897] usb 2-1: config 0 descriptor?? [ 511.731687][T10897] gspca_main: spca508-2.14.0 probing 8086:0110 [ 511.802801][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 511.829467][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 511.857295][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.886202][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.930352][T12552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.946732][T12552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.961714][T12547] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 512.005382][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.044394][T10897] gspca_spca508: reg_read err -32 [ 512.084570][T10897] gspca_spca508: reg_read err -32 [ 512.089736][T12547] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 512.155529][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.160140][T10897] gspca_spca508: reg_read err -32 [ 512.253408][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.307814][T10897] gspca_spca508: reg_read err -71 [ 512.326671][T10897] gspca_spca508: reg_read err -71 [ 512.359645][T10897] gspca_spca508: reg write: error -71 [ 512.366438][ T5912] usb 3-1: USB disconnect, device number 109 [ 512.367872][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 512.396693][T10897] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 512.430594][T10897] usb 2-1: USB disconnect, device number 112 [ 512.576770][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 512.586553][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.601130][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.615649][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 512.630722][ T43] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 512.642890][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.659488][ T43] usb 5-1: config 0 descriptor?? [ 512.769452][T12564] pim6reg: entered allmulticast mode [ 512.778654][T12564] pim6reg: left allmulticast mode [ 513.156738][ T5885] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 513.288636][T12558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.303636][T12558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.316517][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 513.326666][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 513.333184][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 513.351751][ T5885] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 513.367253][ T43] usb 5-1: USB disconnect, device number 14 [ 513.374490][ T5885] usb 4-1: config 0 has no interface number 0 [ 513.396113][ T5885] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 47304, setting to 1024 [ 513.417908][ T5885] usb 4-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 513.437318][ T5885] usb 4-1: config 0 interface 89 has no altsetting 0 [ 513.447957][ T5885] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice= 0.0d [ 513.458829][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.468344][ T5885] usb 4-1: Product: syz [ 513.472919][ T5885] usb 4-1: Manufacturer: syz [ 513.478196][ T5885] usb 4-1: SerialNumber: syz [ 513.487892][ T5885] usb 4-1: config 0 descriptor?? [ 513.495147][T12567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 513.508559][ T5885] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 513.518161][ T5885] em28xx 4-1:0.89: Video interface 89 found: bulk [ 514.577836][ T5885] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 514.640704][ T5885] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 514.656733][ T5885] em28xx 4-1:0.89: board has no eeprom [ 514.754974][ T5885] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 514.768897][ T5885] em28xx 4-1:0.89: analog set to bulk mode. [ 514.784850][ T5912] em28xx 4-1:0.89: Registering V4L2 extension [ 514.826916][ T5885] usb 4-1: USB disconnect, device number 68 [ 514.854825][ T5885] em28xx 4-1:0.89: Disconnecting em28xx [ 514.886750][ T5912] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 514.908661][ T5912] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 514.930336][ T5912] em28xx 4-1:0.89: No AC97 audio processor [ 514.938931][T11783] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 514.976113][ T5912] usb 4-1: Decoder not found [ 515.013693][ T5912] em28xx 4-1:0.89: failed to create media graph [ 515.085143][ T5912] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 515.150045][T12601] ================================================================== [ 515.151902][ T5912] em28xx 4-1:0.89: Registering snapshot button... [ 515.159629][T12601] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 515.159659][T12601] Read of size 8 at addr ffff888029080740 by task v4l_id/12601 [ 515.159674][T12601] [ 515.159686][T12601] CPU: 1 UID: 0 PID: 12601 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 515.159705][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.159716][T12601] Call Trace: [ 515.159844][T12601] [ 515.159859][T12601] dump_stack_lvl+0x189/0x250 [ 515.159886][T12601] ? __virt_addr_valid+0x1c8/0x5c0 [ 515.159909][T12601] ? rcu_is_watching+0x15/0xb0 [ 515.159929][T12601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.159949][T12601] ? rcu_is_watching+0x15/0xb0 [ 515.159968][T12601] ? lock_release+0x4b/0x3e0 [ 515.159996][T12601] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 515.160017][T12601] ? __virt_addr_valid+0x1c8/0x5c0 [ 515.160038][T12601] ? __virt_addr_valid+0x4a5/0x5c0 [ 515.160060][T12601] print_report+0xca/0x240 [ 515.160080][T12601] ? v4l2_fh_open+0xac/0x420 [ 515.160096][T12601] kasan_report+0x118/0x150 [ 515.160114][T12601] ? v4l2_fh_open+0xac/0x420 [ 515.160142][T12601] v4l2_fh_open+0xac/0x420 [ 515.160160][T12601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.160185][T12601] em28xx_v4l2_open+0x157/0x9a0 [ 515.160213][T12601] v4l2_open+0x1bf/0x3a0 [ 515.160232][T12601] chrdev_open+0x4cc/0x5e0 [ 515.160249][T12601] ? __pfx_chrdev_open+0x10/0x10 [ 515.160266][T12601] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 515.160286][T12601] ? __pfx_chrdev_open+0x10/0x10 [ 515.160301][T12601] do_dentry_open+0x953/0x13f0 [ 515.160324][T12601] vfs_open+0x3b/0x340 [ 515.160340][T12601] ? path_openat+0x2ecd/0x3830 [ 515.160361][T12601] path_openat+0x2ee5/0x3830 [ 515.160393][T12601] ? __pfx_path_openat+0x10/0x10 [ 515.160421][T12601] do_filp_open+0x1fa/0x410 [ 515.160440][T12601] ? __lock_acquire+0xab9/0xd20 [ 515.160456][T12601] ? __pfx_do_filp_open+0x10/0x10 [ 515.160484][T12601] ? _raw_spin_unlock+0x28/0x50 [ 515.160502][T12601] ? alloc_fd+0x64c/0x6c0 [ 515.160528][T12601] do_sys_openat2+0x121/0x1c0 [ 515.160548][T12601] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.160567][T12601] ? exc_page_fault+0x82/0x100 [ 515.160589][T12601] ? do_user_addr_fault+0xc85/0x1380 [ 515.160607][T12601] __x64_sys_openat+0x138/0x170 [ 515.160627][T12601] do_syscall_64+0xfa/0xfa0 [ 515.160649][T12601] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.160670][T12601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.160687][T12601] ? clear_bhb_loop+0x60/0xb0 [ 515.160705][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.160723][T12601] RIP: 0033:0x7fc49bca7407 [ 515.160741][T12601] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 515.160763][T12601] RSP: 002b:00007ffffda68120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 515.160782][T12601] RAX: ffffffffffffffda RBX: 00007fc49c406880 RCX: 00007fc49bca7407 [ 515.160795][T12601] RDX: 0000000000000000 RSI: 00007ffffda68f1c RDI: ffffffffffffff9c [ 515.160808][T12601] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 515.160819][T12601] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 515.160829][T12601] R13: 00007ffffda68370 R14: 00007fc49c56d000 R15: 000055a812a1a4d8 [ 515.160848][T12601] [ 515.160855][T12601] [ 515.519843][T12601] Allocated by task 5912: [ 515.524455][T12601] kasan_save_track+0x3e/0x80 [ 515.529575][T12601] __kasan_kmalloc+0x93/0xb0 [ 515.535170][T12601] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 515.540987][T12601] em28xx_v4l2_init+0x10b/0x2e70 [ 515.546517][T12601] em28xx_init_extension+0x120/0x1c0 [ 515.553401][T12601] process_scheduled_works+0xae1/0x17b0 [ 515.563284][T12601] worker_thread+0x8a0/0xda0 [ 515.571174][T12601] kthread+0x711/0x8a0 [ 515.577783][T12601] ret_from_fork+0x4bc/0x870 [ 515.582890][T12601] ret_from_fork_asm+0x1a/0x30 [ 515.587894][T12601] [ 515.590920][T12601] Freed by task 5912: [ 515.599498][T12601] kasan_save_track+0x3e/0x80 [ 515.604810][T12601] __kasan_save_free_info+0x46/0x50 [ 515.610281][T12601] __kasan_slab_free+0x5c/0x80 [ 515.617942][T12601] kfree+0x19a/0x6d0 [ 515.622507][T12601] em28xx_v4l2_init+0x1683/0x2e70 [ 515.628150][T12601] em28xx_init_extension+0x120/0x1c0 [ 515.634602][T12601] process_scheduled_works+0xae1/0x17b0 [ 515.640430][T12601] worker_thread+0x8a0/0xda0 [ 515.645944][T12601] kthread+0x711/0x8a0 [ 515.651893][T12601] ret_from_fork+0x4bc/0x870 [ 515.657274][T12601] ret_from_fork_asm+0x1a/0x30 [ 515.663060][T12601] [ 515.665464][T12601] The buggy address belongs to the object at ffff888029080000 [ 515.665464][T12601] which belongs to the cache kmalloc-8k of size 8192 [ 515.681078][T12601] The buggy address is located 1856 bytes inside of [ 515.681078][T12601] freed 8192-byte region [ffff888029080000, ffff888029082000) [ 515.697763][T12601] [ 515.700305][T12601] The buggy address belongs to the physical page: [ 515.707790][T12601] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29080 [ 515.717155][T12601] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 515.726930][T12601] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 515.736217][T12601] page_type: f5(slab) [ 515.740420][T12601] raw: 00fff00000000040 ffff88801a027280 ffffea0000a5c600 dead000000000003 [ 515.750063][T12601] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 515.760646][T12601] head: 00fff00000000040 ffff88801a027280 ffffea0000a5c600 dead000000000003 [ 515.769846][T12601] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 515.778889][T12601] head: 00fff00000000003 ffffea0000a42001 00000000ffffffff 00000000ffffffff [ 515.788601][T12601] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 515.797795][T12601] page dumped because: kasan: bad access detected [ 515.804648][T12601] page_owner tracks the page as allocated [ 515.810364][T12601] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5912, tgid 5912 (kworker/0:6), ts 290508324874, free_ts 278189292396 [ 515.834119][T12601] post_alloc_hook+0x240/0x2a0 [ 515.839121][T12601] get_page_from_freelist+0x2365/0x2440 [ 515.844669][T12601] __alloc_frozen_pages_noprof+0x181/0x370 [ 515.850791][T12601] alloc_pages_mpol+0x232/0x4a0 [ 515.855954][T12601] allocate_slab+0x96/0x350 [ 515.861660][T12601] ___slab_alloc+0xf56/0x1990 [ 515.866900][T12601] __slab_alloc+0x65/0x100 [ 515.871585][T12601] __kmalloc_noprof+0x471/0x7f0 [ 515.876468][T12601] hdpvr_alloc_buffers+0x1cf/0x5c0 [ 515.882290][T12601] hdpvr_probe+0x6fc/0xa80 [ 515.888021][T12601] usb_probe_interface+0x668/0xc30 [ 515.893127][T12601] really_probe+0x26d/0x9e0 [ 515.897790][T12601] __driver_probe_device+0x18c/0x2f0 [ 515.903220][T12601] driver_probe_device+0x4f/0x430 [ 515.908516][T12601] __device_attach_driver+0x2ce/0x530 [ 515.914451][T12601] bus_for_each_drv+0x251/0x2e0 [ 515.919391][T12601] page last free pid 5199 tgid 5199 stack trace: [ 515.925828][T12601] __free_frozen_pages+0xbc4/0xd30 [ 515.930939][T12601] __put_partials+0x146/0x170 [ 515.935622][T12601] put_cpu_partial+0x1f2/0x2e0 [ 515.940574][T12601] __slab_free+0x2b9/0x390 [ 515.945122][T12601] qlist_free_all+0x97/0x140 [ 515.949818][T12601] kasan_quarantine_reduce+0x148/0x160 [ 515.955814][T12601] __kasan_slab_alloc+0x22/0x80 [ 515.961209][T12601] kmem_cache_alloc_noprof+0x367/0x6e0 [ 515.967910][T12601] getname_flags+0xb8/0x540 [ 515.973238][T12601] do_sys_openat2+0xbc/0x1c0 [ 515.977830][T12601] __x64_sys_openat+0x138/0x170 [ 515.983753][T12601] do_syscall_64+0xfa/0xfa0 [ 515.988539][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.994733][T12601] [ 515.997170][T12601] Memory state around the buggy address: [ 516.002871][T12601] ffff888029080600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.011012][T12601] ffff888029080680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.019728][T12601] >ffff888029080700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.028065][T12601] ^ [ 516.034651][T12601] ffff888029080780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.043148][T12601] ffff888029080800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 516.051603][T12601] ================================================================== [ 516.064796][ T5912] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input44 [ 516.096696][ T5912] em28xx 4-1:0.89: Remote control support is not available for this card. [ 516.116810][ T5885] em28xx 4-1:0.89: Closing input extension [ 516.125261][ T5885] em28xx 4-1:0.89: Deregistering snapshot button [ 516.171762][T12601] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 516.180705][T12601] CPU: 1 UID: 0 PID: 12601 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 516.190700][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.204845][T12601] Call Trace: [ 516.208831][T12601] [ 516.211962][T12601] dump_stack_lvl+0x99/0x250 [ 516.217777][T12601] ? __asan_memcpy+0x40/0x70 [ 516.223055][T12601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.228806][T12601] ? __pfx__printk+0x10/0x10 [ 516.233629][T12601] vpanic+0x237/0x6d0 [ 516.237912][T12601] ? __pfx_vpanic+0x10/0x10 [ 516.242865][T12601] ? preempt_schedule+0xae/0xc0 [ 516.248419][T12601] ? __pfx_preempt_schedule+0x10/0x10 [ 516.254619][T12601] panic+0xb9/0xc0 [ 516.258373][T12601] ? __pfx_panic+0x10/0x10 [ 516.263449][T12601] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 516.269439][T12601] ? is_module_address+0x17/0xf0 [ 516.274512][T12601] ? v4l2_fh_open+0xac/0x420 [ 516.279116][T12601] check_panic_on_warn+0x89/0xb0 [ 516.284236][T12601] ? v4l2_fh_open+0xac/0x420 [ 516.289010][T12601] end_report+0x78/0x160 [ 516.293266][T12601] kasan_report+0x129/0x150 [ 516.298207][T12601] ? v4l2_fh_open+0xac/0x420 [ 516.302925][T12601] v4l2_fh_open+0xac/0x420 [ 516.307379][T12601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 516.315310][T12601] em28xx_v4l2_open+0x157/0x9a0 [ 516.321410][T12601] v4l2_open+0x1bf/0x3a0 [ 516.328425][T12601] chrdev_open+0x4cc/0x5e0 [ 516.333214][T12601] ? __pfx_chrdev_open+0x10/0x10 [ 516.341989][T12601] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 516.348858][T12601] ? __pfx_chrdev_open+0x10/0x10 [ 516.354343][T12601] do_dentry_open+0x953/0x13f0 [ 516.359490][T12601] vfs_open+0x3b/0x340 [ 516.363564][T12601] ? path_openat+0x2ecd/0x3830 [ 516.369342][T12601] path_openat+0x2ee5/0x3830 [ 516.374217][T12601] ? __pfx_path_openat+0x10/0x10 [ 516.379394][T12601] do_filp_open+0x1fa/0x410 [ 516.384579][T12601] ? __lock_acquire+0xab9/0xd20 [ 516.389963][T12601] ? __pfx_do_filp_open+0x10/0x10 [ 516.395033][T12601] ? _raw_spin_unlock+0x28/0x50 [ 516.400174][T12601] ? alloc_fd+0x64c/0x6c0 [ 516.404529][T12601] do_sys_openat2+0x121/0x1c0 [ 516.410279][T12601] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.415918][T12601] ? exc_page_fault+0x82/0x100 [ 516.421074][T12601] ? do_user_addr_fault+0xc85/0x1380 [ 516.426542][T12601] __x64_sys_openat+0x138/0x170 [ 516.431516][T12601] do_syscall_64+0xfa/0xfa0 [ 516.436076][T12601] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.442127][T12601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.448543][T12601] ? clear_bhb_loop+0x60/0xb0 [ 516.453782][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.460040][T12601] RIP: 0033:0x7fc49bca7407 [ 516.465155][T12601] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 516.486148][T12601] RSP: 002b:00007ffffda68120 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 516.494925][T12601] RAX: ffffffffffffffda RBX: 00007fc49c406880 RCX: 00007fc49bca7407 [ 516.504043][T12601] RDX: 0000000000000000 RSI: 00007ffffda68f1c RDI: ffffffffffffff9c [ 516.512711][T12601] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 516.522604][T12601] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 516.532415][T12601] R13: 00007ffffda68370 R14: 00007fc49c56d000 R15: 000055a812a1a4d8 [ 516.542540][T12601] [ 516.547844][T12601] Kernel Offset: disabled [ 516.555574][T12601] Rebooting in 86400 seconds..