Extracting prog: 5m49.675912714s Minimizing prog: 43m53.958227083s Simplifying prog options: 0s Extracting C: 1m4.936328138s Simplifying C: 10m49.17180891s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-setsockopt$MRT_INIT-write$uinput_user_dev-ppoll-socket$inet6_icmp_raw-ioctl$EVIOCSFF-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program did not crash single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 10, 30, 10, 6, 26, 23, 20, 27, 5, 5, 3, 7, 8, 2, 9, 24, 18, 4, 28, 14, 7, 2, 2, 8, 6, 6, 14, 18, 22] detailed listing: executing program 1: socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r3, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000340)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf25000000", @ANYRES32=r5], 0x20}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x17c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000011c0)="d4815107a8f4195f765356be14507c9d2e6eb2ba4ffc9cec2b3eec96d0", 0x1d, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) write(r4, &(0x7f0000000180)="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", 0xa50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x0, 0x0, 0x1a, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000f40)=0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000001200), 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000f80)={'IDLETIMER\x00'}, &(0x7f0000000fc0)=0x1e) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) executing program 2: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004380)=@newchain={0x5c34, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0xea1a1b02db04f451}, {0xf, 0xffe0}, {0xb, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x8c}}, @TCA_CHAIN={0x8, 0xb, 0x88e5}, @filter_kind_options=@f_route={{0xa}, {0x5bac, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xad}, @TCA_ROUTE4_ACT={0x4b48, 0x6, [@m_pedit={0x3c08, 0x1c, 0x0, 0x0, {{0xa}, {0x2bdc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x80, 0xb, 0x8, 0x1, 0x6}, 0x4, 0xd, [{0x3, 0x1568, 0x7, 0x2, 0x1, 0x9}, {0x9, 0xffff0001, 0x7, 0x5, 0x6, 0x970}, {0x7f, 0x53e5, 0x30, 0x6, 0x2, 0x6}, {0x3ff, 0x9, 0xdb1, 0x0, 0xfffffff9, 0x9}, {0x6, 0xa, 0x2, 0x2, 0x7, 0x1}, {0xffffff01, 0x5, 0x2, 0x5, 0x81}, {0x10000, 0x7fffffff, 0x9, 0x3, 0x8, 0x253}, {0x6, 0x6, 0x10001, 0x8, 0x4, 0x9}, {0x7fff, 0x3, 0x4, 0x8, 0x6, 0x1}]}, [{0x8, 0x8, 0x7ff, 0x9, 0x9}, {0x6, 0xfff, 0x1, 0x5, 0x0, 0x4}, {0x5, 0x2, 0x4, 0x26, 0x0, 0xffffff9c}, {0xfffffffb, 0x9, 0x48f5, 0x6, 0x2e7, 0x3}, {0x8, 0x3, 0x5, 0x6, 0x9, 0xd3}, {0x3, 0xb, 0x31, 0x7, 0x8, 0x4}, {0x4, 0x7f, 0x913d, 0xff, 0x2, 0x5}, {0x10, 0x81, 0x10, 0x6, 0x36, 0x7f2}, {0x200, 0xca, 0x48000000, 0x0, 0x3dc189eb, 0x80000001}, {0x0, 0x9, 0x40, 0x8001, 0x40, 0x9}, {0x5, 0x73, 0xf, 0x33, 0x3, 0x6}, {0x3, 0x1000, 0x7, 0x0, 0x1, 0x8}, {0x5, 0x5, 0x9f02, 0x6, 0x21, 0x1}, {0x101, 0xfffffff7, 0x7, 0x8, 0x283e, 0x6}, {0xffffffff, 0xe, 0xfa, 0x9, 0x81}, {0x500, 0x2, 0x9, 0x5, 0x1, 0x5}, {0x2, 0x9, 0x8001, 0x6b70, 0xf, 0x445}, {0x5, 0x71c91055, 0xffff, 0x57dae0db, 0x270000}, {0xfffffff2, 0x2, 0x5, 0x9, 0x10001, 0x5}, {0x7ff, 0x3, 0x1, 0x5, 0x3, 0x6d2}, {0x9, 0x5, 0x2a45, 0x0, 0x3, 0x2}, {0xc, 0x2, 0x200, 0x1, 0x782c, 0x1000}, {0x1, 0x0, 0xb, 0x7ff, 0x8, 0x8}, {0x2, 0x6, 0x3, 0x7f, 0x9, 0x29d}, {0x4, 0x3, 0x1, 0x1, 0x4, 0x80000000}, {0x1, 0x7f, 0x2, 0x9, 0x1, 0x8}, {0xfe5d, 0x5, 0x0, 0xa, 0x101, 0x4}, {0x5, 0x2, 0x5, 0x10, 0x3e, 0x2}, {0x5fc, 0x401, 0x2, 0x8, 0x3, 0x100}, {0xd0, 0x6, 0x8000, 0xa3, 0xd0, 0x2}, {0x1, 0x2, 0x3, 0x0, 0xfffffff8, 0x6}, {0x0, 0x3, 0xffffff37, 0xffffffff, 0x6, 0x200}, {0x6, 0xffff8001, 0x9, 0xd3da, 0x40, 0x7}, {0x2, 0x100, 0x100, 0x3, 0x0, 0x9}, {0x6, 0x4000000, 0xba, 0x6, 0x34a, 0x1}, {0x5, 0x9, 0x8000, 0x8, 0x8000, 0xaf2}, {0x3ff, 0x1, 0x581a, 0xffffffff, 0x610a, 0x101}, {0x100, 0x6, 0x6, 0xfff, 0x3, 0x5}, {0x5, 0x5, 0x1, 0x1000000, 0x7, 0x6}, {0x1, 0x401, 0x93b, 0x1, 0xfffffffd}, {0xafea, 0x7, 0x6, 0xfffffffa, 0x5fe, 0x101}, {0x0, 0x7, 0x0, 0x6, 0xff, 0xc5}, {0x4, 0x0, 0x7, 0x63, 0x8, 0x5}, {0x80, 0x541, 0x0, 0x7f, 0x6, 0xfffffffa}, {0x5d1863c8, 0x800, 0x7fff, 0x5, 0x34, 0x2}, {0x5, 0xfffffffe, 0x2, 0x0, 0x8, 0xcf32}, {0x2, 0x8, 0x5, 0x8c5b, 0x5, 0x1e94}, {0x7, 0xfffff801, 0x4a, 0xfff, 0x4, 0x8}, {0xfffffffa, 0x7, 0x8, 0x9, 0x10, 0x5}, {0x1, 0x7fffffff, 0x9, 0x2, 0x200, 0x6}, {0x10001, 0x1, 0x1, 0x8, 0x7, 0xa}, {0x5, 0xa, 0xa5, 0x7, 0x6, 0x3}, {0x5, 0x9, 0x7eac, 0xd1, 0xfffffffe, 0x6}, {0xb, 0xffffffff, 0x1ff, 0x9, 0x8, 0x4}, {0x3, 0x0, 0x6, 0xeb06, 0x80000000, 0xb}, {0x8, 0x0, 0x84f9, 0x776, 0x8001, 0x6}, {0x7, 0x7, 0x4, 0xe36, 0x7, 0x4e}, {0xb, 0xffff, 0x10000, 0x7, 0x6e, 0x9}, {0xfffffff9, 0xe7, 0x182, 0xa0, 0x0, 0x400}, {0x4, 0xd, 0x8, 0xfffffffd, 0x595, 0xffff35a5}, {0x6917, 0x3, 0x200, 0x8, 0xa0f3}, {0x9f, 0xfffeffff, 0x1, 0x5, 0x8, 0x7fffffff}, {0x4, 0x2, 0x2, 0x2, 0xda61, 0xe}, {0x7, 0xc, 0x1, 0xb, 0x9b, 0x4f7}, {0xa65, 0x10001, 0x4, 0x2, 0x6, 0x2}, {0xfffff800, 0xe, 0x81, 0xfffffff7, 0x7, 0xc30c}, {0x7, 0x8, 0x0, 0xfffffffd, 0x1ff, 0x8}, {0x2, 0x5, 0x2, 0x7, 0x8}, {0x2, 0x9, 0x8578, 0x1, 0x3, 0xfffffffa}, {0x8, 0x8, 0x8, 0x4, 0x5, 0x3}, {0x8, 0xf5, 0xb2, 0x6, 0xdd, 0x3}, {0x5, 0xbd6, 0x5, 0x0, 0x8, 0xf}, {0xbb, 0x1000, 0x4, 0x7, 0xff, 0x4}, {0x2, 0xfffffffe, 0x1, 0x1, 0xc, 0xd95}, {0x2, 0x101, 0xaf1c, 0x40, 0x7, 0xa}, {0x6, 0x8001, 0x5, 0x10, 0x10, 0x8}, {0x7, 0x5, 0xe, 0x8, 0xd, 0xfff}, {0x3, 0x34, 0x6, 0xffffffff, 0xb, 0x80000000}, {0x80, 0x2, 0x1000, 0x4, 0x1a, 0x14}, {0x2, 0x2, 0x83, 0x2, 0x2ad, 0x8000}, {0x1, 0x7fffffff, 0x2, 0x7fffffff, 0x100, 0x5}, {0x99, 0x0, 0xb42, 0x7, 0x7fff, 0x2}, {0x17, 0x52d, 0x6, 0x9, 0x0, 0x7fffffff}, {0x5, 0x80000001, 0x8, 0x6, 0x7, 0x7}, {0x0, 0x7f, 0x1, 0x6, 0x1, 0x10}, {0xa71, 0x8000, 0x10000, 0xe, 0x10, 0x8}, {0x5, 0x2, 0x3ff, 0x1, 0x1, 0x7f}, {0x4, 0x4, 0x0, 0x9636, 0x3, 0x75e171ee}, {0x9, 0x0, 0x8, 0x794, 0x0, 0x3}, {0x6, 0x2, 0x7, 0x8, 0x7, 0x5}, {0x7, 0x6, 0x5, 0x2, 0x10001, 0x8}, {0x5, 0x0, 0x7, 0x800000, 0x2, 0x4}, {0x6, 0x9a, 0x7, 0xf, 0x6, 0x101}, {0x3, 0x401, 0x8, 0x8, 0x10, 0x80000000}, {0x5, 0xfffff125, 0x3ff, 0x1, 0x10, 0x1000}, {0x63a, 0x3, 0xff, 0x0, 0x43654d23, 0x80}, {0x8000, 0x3, 0x2, 0xf, 0x7, 0x5}, {0xbdf, 0xd, 0x14000000, 0x3, 0x0, 0x3}, {0x5, 0xa, 0x4, 0x3, 0x7140756a, 0x8001}, {0x4, 0x1, 0x1ff, 0x0, 0x80000000}, {0x3e5, 0xa, 0xffffffff, 0x3ff, 0x0, 0x7}, {0x100, 0xfffffffa, 0x708, 0x101, 0xc, 0x3db7}, {0x5, 0x0, 0x7fff, 0x9, 0x4, 0x8000}, {0x7f, 0xcd, 0x80000001, 0x47, 0xffff, 0x401}, {0x7, 0xfffffffa, 0x401, 0xffffffff, 0x6, 0x2}, {0x9, 0x6, 0x80000000, 0x2, 0x1ff, 0x400}, {0x0, 0x6, 0x7f, 0x3, 0x8, 0x8000}, {0xfbd7, 0x4, 0x800, 0xd56, 0xb84, 0x2}, {0xffff, 0xffffffff, 0x6, 0x6b49, 0x8, 0xc257}, {0x46a, 0x0, 0x6, 0x400, 0x2, 0x2}, {0xf, 0x800, 0x0, 0xffffffff, 0x1, 0x4}, {0xbf3, 0x4, 0x5c, 0x1, 0xb, 0x800}, {0x9, 0x401, 0x5, 0x6, 0x6, 0xc}, {0x5, 0x3, 0x962, 0x6, 0x10001, 0x8a}, {0x1, 0x6, 0x9, 0x80000000, 0x7304, 0xfc7}, {0x1, 0xe333, 0x8cc, 0xbf24, 0xda69, 0x9}, {0x14000000, 0x8, 0x1, 0xfffffffa, 0x0, 0x10}, {0x81, 0x7ff, 0x3ff, 0xa4c, 0x28ae4000, 0x4}, {0x1, 0x80, 0x4, 0x3, 0x3, 0x2}, {0x1, 0x3ff, 0x1, 0x1, 0x4, 0x2}, {0xfffffffb, 0x1, 0x5, 0x2, 0x0, 0x4a49}, {0x7fff, 0xfffffff7, 0x2, 0x2, 0x2, 0x6}, {0xfffffff7, 0xcd2, 0x1, 0x7, 0x9, 0x5}, {0x4, 0xf4, 0x8, 0x1, 0x2, 0xffff}, {0x9e5, 0x8, 0x1, 0x7, 0x7, 0xb001}, {0x8, 0x7000000, 0x7, 0x1, 0x80000000, 0x3}, {0x32, 0x7fffffff, 0x9, 0x8, 0x3}, {0xfffffff9, 0x2, 0x2, 0x3, 0x8, 0x2}], [{0x4}, {0x6, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x68179a468b3bf65}, {0x4}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x5}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xc, 0x200, 0x3, 0x7543, 0x7}, 0x6, 0xc2, [{0x5, 0x1, 0x9, 0x6, 0x8, 0x1c00}]}, [{0x1, 0xe, 0x2, 0x7, 0x80000000, 0x28}, {0x1263eedb, 0x4, 0xca0, 0x80000000, 0xd708, 0xbb}, {0x5, 0x1, 0x6, 0x7fff, 0x8d2, 0x5}, {0xd, 0x0, 0x20, 0x48f7, 0xc258, 0x10000}, {0x4, 0x3, 0x3, 0x6, 0x9, 0x8}, {0x4, 0xfffffff7, 0x6, 0xf1d6, 0x1, 0x79993ee}, {0xfffffff9, 0x7, 0xff, 0x48b, 0x8, 0x40}, {0x0, 0x7fa, 0x5, 0x3, 0xaa, 0x2}, {0xd2, 0x3, 0x8, 0x9, 0x7, 0x7}, {0x8, 0x6, 0x9, 0x101, 0xe, 0xfff}, {0x6, 0x7f3b, 0x5, 0x81, 0x2, 0x8}, {0xfff, 0x5, 0xffffe249, 0xcc1000, 0x4, 0x4}, {0x1000, 0x4e, 0x6, 0x0, 0x9, 0xb6}, {0x4, 0x4, 0x5, 0x6a, 0xf8, 0x1}, {0x6, 0x55780d96, 0xfff, 0x80000000, 0x8000, 0x2}, {0x8, 0xfffffffc, 0x7, 0x1, 0x3, 0xf}, {0x2888, 0x3, 0x4, 0x2, 0x0, 0x5}, {0x1, 0x3, 0x2, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x400, 0x850, 0x1, 0x7b43}, {0x15, 0x7, 0x0, 0x6d, 0x9, 0x1}, {0xf9, 0x0, 0x9, 0x3, 0x3ff, 0xa517}, {0x3, 0xdd, 0x7, 0x8, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x1, 0x6}, {0x3, 0x8, 0xfffffc00, 0x3, 0x4c, 0x200}, {0x8, 0x5, 0x0, 0x6b, 0x10001, 0xd}, {0x3, 0x6, 0x1, 0x9, 0x1, 0x956}, {0xffff, 0x4, 0x7, 0x100, 0x0, 0x21a}, {0x2, 0x7, 0xfffffffc, 0x800, 0xba4, 0xfffffffa}, {0xa, 0x18, 0xb, 0xffffffff, 0x238, 0xd3}, {0x1, 0xa441, 0x4, 0x4, 0x3, 0x61c2}, {0x4, 0x7ff, 0x885a, 0x3, 0x2, 0x4}, {0x8, 0x0, 0x80, 0x3, 0x9fe, 0x3}, {0xffffffff, 0x4, 0x2, 0xaa, 0x2, 0x6}, {0x101, 0x8, 0x71, 0x7, 0x2}, {0x3, 0xfffffffa, 0x3, 0x3, 0xa, 0x2a020000}, {0x2, 0x6, 0x6, 0xedb, 0x82, 0x2}, {0x10000, 0x8, 0x4, 0x401, 0x7, 0x8edd}, {0x101, 0x40, 0x7fff, 0x200, 0x7, 0x40}, {0xac, 0xffffffff, 0x7, 0x3ff, 0xf, 0x100}, {0x101, 0x188d, 0xfe8, 0x3, 0x80000001, 0xd}, {0x8, 0x1, 0x1, 0x9, 0x5e0, 0xa}, {0x4, 0x7217, 0x4, 0x2, 0xfffff001, 0x8fa5}, {0x4, 0x2795, 0x5, 0xeaaa, 0x5a3, 0x7f}, {0x7, 0x24ccc065, 0x2, 0xb58f, 0x8, 0x6}, {0x0, 0xb2, 0xb9, 0x2, 0x10001}, {0x2, 0x2d80, 0x9, 0x2d, 0xce40, 0xffff}, {0x6fdfd49c, 0x4, 0x48f0, 0x9, 0x9, 0x9}, {0x98e7, 0x5, 0x2, 0x401, 0x7, 0x3}, {0x881d, 0x73, 0x7bd2, 0x3ff, 0x52e, 0xfffffffd}, {0xffff, 0x5, 0x6, 0x5, 0x0, 0x5}, {0xffff0000, 0xfffffff5, 0x4f4f, 0x1, 0xfff}, {0x5, 0x2, 0x1, 0x5, 0xffffffc0, 0xfff}, {0xfffffc00, 0x68, 0x7fffffff, 0x4, 0xcca, 0x3ff}, {0x2, 0xffffffff, 0x7, 0x9, 0xd8, 0x9b87}, {0x80, 0x0, 0x1, 0x2, 0x4, 0x4}, {0x4, 0xfffffffb, 0x10, 0x5, 0xa, 0x5a}, {0x9, 0x6, 0x7979, 0x8001, 0x101, 0xfffffff2}, {0x4, 0x7fff, 0x9, 0x4, 0x324, 0x4c67}, {0xc, 0xc, 0x401, 0x7f, 0x1000, 0x101}, {0x0, 0x89, 0x6c5, 0x6, 0x776ddd97, 0xe}, {0x4, 0x46, 0x2, 0x1cc, 0x6584ec95}, {0x9, 0x956, 0x200, 0x58a8, 0x4, 0x5}, {0xd59, 0x2, 0x6, 0x3, 0x22908dcc, 0x5}, {0x5, 0x6, 0x4, 0x1, 0x40, 0x200}, {0xfffffffd, 0x6, 0x8001, 0x9, 0x4, 0x9}, {0x6, 0x3, 0x100, 0x8000, 0x325}, {0x10, 0xd5a, 0x7, 0x100, 0x100}, {0x20, 0x800, 0x8, 0x7, 0x1479, 0x2}, {0x2, 0x8104, 0x800, 0x16f, 0x81, 0x3}, {0x80000001, 0x0, 0x1, 0x7e1ff429, 0x6, 0x2}, {0xb109, 0x4, 0x6c, 0x7, 0x2, 0x3}, {0x6, 0x1, 0xe4d, 0x1, 0xffff, 0xdae}, {0x3, 0xa, 0x1, 0x9, 0x1, 0x800}, {0x3, 0xfb5, 0x4, 0xa72, 0x6, 0x7}, {0x0, 0x294, 0x8d, 0x6, 0xf568, 0x167c}, {0x5, 0x4, 0x0, 0x3, 0x0, 0x7fff}, {0x101, 0xd6f2, 0x6, 0x958, 0x0, 0xfff}, {0x9, 0x5, 0x8, 0x5, 0x2, 0x8}, {0x2, 0x400, 0x3, 0x10001, 0xe0000, 0x7}, {0x2, 0x3, 0x2, 0x3, 0x4, 0x6}, {0x6, 0x7f, 0x5, 0x5, 0x4, 0x4}, {0xfffff6ae, 0x100, 0x80000001, 0x7, 0x6, 0xfffffffd}, {0x6, 0x1, 0x8, 0x1, 0x1, 0x8001}, {0x10, 0x36, 0x9, 0xfffff000, 0x6, 0xdce}, {0x2, 0x5, 0xfffffff9, 0x9, 0x6, 0x80000001}, {0x9, 0x401, 0xffffffff, 0x59ff0925, 0xfffffffb, 0x8}, {0xd80c, 0x9, 0x0, 0x10, 0x0, 0x4}, {0x9, 0x2, 0xd, 0x3, 0x63, 0x481}, {0x9, 0x6, 0x4, 0x6, 0x3, 0x7}, {0xb, 0xa, 0x8, 0x6, 0x8, 0x9}, {0x2, 0x0, 0x2, 0x9, 0x4, 0xfffffffd}, {0x9, 0x3, 0x2, 0x2, 0x0, 0x1}, {0x6, 0x2, 0x6, 0x5, 0x6, 0x800}, {0x8, 0x1, 0xf9a, 0x597, 0x4}, {0xfff, 0x1, 0x5, 0x1, 0x3, 0x3}, {0xb8, 0x800, 0x4, 0x285b6bc3, 0x4, 0x7}, {0x80000000, 0xfffffbff, 0x4, 0xc, 0x10, 0xd2}, {0x80000001, 0x6, 0xfffffff5, 0x0, 0x13, 0x2}, {0x1000, 0x480, 0x9a, 0x0, 0x10000, 0x6}, {0x7, 0x0, 0x81, 0x3, 0x7afc5381, 0x9}, {0xa, 0x2, 0x1fe1, 0x8, 0x8, 0x5}, {0x5, 0x7, 0x80000000, 0x8, 0x1, 0x81}, {0x9, 0x2f0, 0x5, 0x6, 0x2, 0x6}, {0xfffffff1, 0x6, 0x1, 0x8, 0x5, 0x7}, {0x2, 0x5, 0x0, 0x9, 0x2}, {0xffffffff, 0x86, 0x74e8, 0x1cf59124, 0x18b606d}, {0x1, 0x6, 0x3, 0x4, 0x4, 0x7}, {0x4, 0x7, 0x8, 0x2, 0xb, 0x7}, {0x9, 0xfffffff8, 0xab, 0xfff, 0x8, 0x7}, {0xfffffeff, 0x8, 0x2, 0x83e, 0x8, 0x4}, {0xffffffff, 0x1, 0x81, 0xfffffffa, 0xb8, 0xfffffffe}, {0x7, 0x1ff, 0x7, 0x3, 0x992, 0x1ff}, {0xd98, 0x7f, 0x5, 0x7, 0x0, 0x100}, {0x0, 0x3, 0x1, 0x8, 0x80, 0x180000}, {0x6, 0x2, 0x81, 0x101, 0xffff, 0x2}, {0xba04, 0x6, 0x5, 0x6, 0xa7, 0xd9}, {0x1, 0x3, 0xf, 0x0, 0x4, 0x5}, {0xd, 0x4, 0xffff80a4, 0x4, 0x8}, {0x9, 0x5, 0x0, 0xfffffe00, 0x9, 0x3}, {0x800, 0x2, 0x10000, 0x4f7, 0xfffffffa, 0x3}, {0x7984, 0x2, 0xcef8, 0x10001, 0xc9, 0x4}, {0x0, 0x8, 0x83, 0x671, 0x5, 0x6}, {0x5, 0x80, 0xffff943a, 0x1, 0x3, 0x3}, {0x4, 0x2, 0x2, 0x1, 0x5, 0xeb}, {0x10, 0xff, 0x3ff, 0x5, 0x49, 0x2}, {0x10001, 0x7, 0x2, 0xffffff58, 0x3, 0x2cc}, {0x0, 0x0, 0x0, 0x9, 0x4568acb0, 0x80000000}, {0x5, 0x200, 0x5, 0x9, 0x7, 0x8}], [{0x1, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {}, {}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5}, {0x5}, {}, {0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x7, 0x8, 0x8, 0x7d16, 0x7}, 0x3, 0x2, [{0x3ff, 0x7f, 0xfa1, 0x100, 0x5, 0x7}, {0x7, 0x8, 0x3, 0x0, 0x9, 0x10001}]}, [{0x7fffffff, 0x8, 0x80, 0x8, 0xc36f, 0x1}, {0xfffffff0, 0x7, 0xffffffbe, 0x0, 0x8000, 0x1}, {0xffff7fff, 0xfffffff6, 0x451, 0x80000000, 0x43, 0x9}, {0x8, 0x6, 0x4, 0xc, 0x80000001, 0x1}, {0xf, 0x3, 0x10001, 0x685a2974, 0x2, 0xcf89}, {0x458f, 0x2, 0x400, 0x10, 0xc204, 0x5}, {0x56, 0x80, 0xffffff01, 0x7a1, 0x4, 0x9}, {0x1, 0xf4, 0x87a, 0x47, 0xd996, 0x11}, {0x3, 0xfffffffa, 0x1c, 0x1000, 0x8, 0x4}, {0x1, 0x2, 0x7641, 0x200, 0x2, 0x7ff}, {0x6, 0x40, 0x9, 0x4, 0x3788, 0x1c}, {0x7ff, 0xfffffffd, 0x6, 0x3702, 0x4, 0xa857}, {0x195a, 0x0, 0x81, 0x8, 0x5, 0x6}, {0x9baf, 0x7, 0xefcf, 0x7, 0x14ee, 0x2}, {0x5, 0x2e00000, 0x9, 0x401, 0x4, 0x8}, {0x0, 0x4, 0xb, 0xfffffffa, 0x4, 0xfffffff8}, {0x4, 0xe, 0xe10, 0xfffffffe, 0x6, 0x100}, {0x7, 0x9, 0x0, 0xfff, 0x7}, {0x0, 0xe0000, 0xffff, 0x6b2, 0x2, 0x2}, {0x9, 0x5, 0xfffffffc, 0x0, 0x8, 0x80000000}, {0x66, 0xe74a, 0xdb, 0x7, 0x4158678f, 0x3}, {0xffff9b98, 0x101, 0x3, 0x3bbf, 0xfffffff7, 0x8000}, {0x4599, 0xe7, 0x6, 0xffff, 0x7, 0x6}, {0x1, 0xfffffffd, 0x7, 0x8, 0x8}, {0x80, 0x40, 0x6, 0x79600000, 0x7, 0xbff}, {0xff, 0x8, 0x2, 0xe4e9, 0x4, 0x2}, {0x2, 0x3, 0x4, 0x0, 0x24, 0x101}, {0x3, 0x4, 0x2, 0x6, 0x9, 0x6}, {0x8000, 0x3, 0x5, 0x4, 0x1}, {0x3, 0x0, 0x40, 0x92cf, 0x7, 0x3ff}, {0x9, 0x4, 0x7, 0x6, 0x4, 0xa0d}, {0x26c, 0xfff, 0x800, 0xb57e8000, 0x3, 0x342}, {0xfff, 0x5, 0x6bdfb422, 0x1, 0x8000, 0x2}, {0x5, 0xfff, 0xff, 0x4, 0x7, 0x4}, {0x4, 0x4, 0xff, 0x3, 0xaf7, 0x510e}, {0x8, 0x1, 0x61f595da, 0xffffffff, 0x5, 0xff}, {0xfffffff3, 0x6, 0x9, 0x3, 0xffffffff, 0x7}, {0x7ff, 0x6, 0x5, 0xfff, 0x5, 0xa0}, {0x6, 0x3, 0x7, 0xfffffffb, 0x0, 0xffff}, {0x3, 0x6, 0xe, 0x2, 0x2, 0x401}, {0x1, 0x1, 0x8c, 0x3, 0x2, 0x7}, {0x7, 0x4, 0xfffff001, 0x9, 0x8001, 0x7}, {0x1e2, 0x0, 0xb, 0x6ff, 0x4, 0x8}, {0x10001, 0x7fff, 0x1, 0xfffffff7, 0xe, 0x81}, {0xffffffff, 0xfffffffc, 0x3ff, 0x0, 0x3, 0x8}, {0x0, 0x3, 0x4, 0x7, 0x6, 0x3}, {0x64, 0x3, 0x1, 0xac, 0x5f, 0x3}, {0x5, 0xd7, 0xb, 0x7, 0x4, 0x275}, {0x1f, 0x10000, 0x40, 0x5, 0x200, 0xff}, {0x80000000, 0x7, 0x0, 0x5, 0x7ff, 0x6000}, {0x5, 0x3, 0x1, 0x1, 0xffffdd8e, 0x9}, {0x6, 0x8, 0x2afc, 0x2, 0x9, 0x40f4}, {0x4, 0x401, 0x57, 0xffff, 0x3, 0x7}, {0x3, 0xffffffff, 0x2, 0xffff, 0x1, 0xf}, {0x6, 0x9, 0x1000, 0x81, 0x1, 0x2}, {0x4, 0x0, 0x997, 0x5f6b2945, 0x5, 0x8000}, {0x1, 0x100, 0x8, 0x5ef609d0, 0x100, 0x3a30f4b3}, {0xc2fa, 0x0, 0x16, 0x7, 0x8, 0x4}, {0x3, 0x1, 0x7, 0x100, 0x200, 0x9}, {0xa8, 0x40, 0x7, 0x400, 0xff}, {0x1, 0x9, 0x5, 0x0, 0x7}, {0x7fffffff, 0x3, 0x6, 0x8, 0x5, 0x2}, {0x9, 0x5, 0x10000, 0x4, 0x8001, 0x7}, {0x8, 0x5, 0x0, 0x5, 0xa4d8, 0xe}, {0xb, 0x9, 0x8, 0x4ae, 0xe759, 0x1}, {0x5, 0x2, 0x1, 0x8d1, 0x5}, {0x7, 0x4, 0x0, 0x4b, 0x6, 0x10000}, {0xae6, 0xe, 0xf, 0xff, 0x7, 0x3}, {0x2, 0xffff, 0x885, 0x5, 0xffffffff, 0x2}, {0x7, 0x5, 0xe5, 0x6, 0x1, 0xbf}, {0xffffffff, 0x1ff, 0x2, 0x3, 0x5, 0x9}, {0xfffff801, 0x46838d01, 0x7, 0x5, 0x4, 0xc}, {0x1, 0x1, 0x6, 0x4, 0x7, 0x1}, {0x0, 0x5, 0xa0000000, 0x1, 0x2, 0xdf}, {0xfffff2be, 0x8, 0x6, 0x6, 0x8, 0x7}, {0x9, 0x5897, 0x46c, 0x4, 0x3, 0x9}, {0x800, 0x7, 0x0, 0x6, 0x2, 0x8}, {0x10, 0x2900, 0xfa, 0xffffff7f, 0xffffff0b, 0x1}, {0x9, 0xf9, 0x8, 0x1, 0x7, 0x10}, {0x1000000, 0x464, 0x2, 0x4d, 0x4, 0x7ce}, {0x8001, 0x0, 0xd, 0x6, 0x6, 0x80}, {0x7fff, 0x6, 0x3, 0x1, 0x5}, {0x0, 0x4, 0x4, 0x5, 0x9, 0x156}, {0x8, 0x7, 0x400, 0x0, 0xffff, 0xe}, {0x3, 0x3, 0xffffffc9, 0x7, 0x0, 0x3}, {0x9, 0x2, 0x1ff000, 0x4, 0x7, 0x7fff}, {0x7fff, 0x5, 0x3, 0x800, 0x5, 0x6}, {0x7, 0x5, 0x5, 0x6, 0x10000, 0x60a}, {0x0, 0xffffffe8, 0x3, 0x7ff, 0xc8, 0x80000001}, {0x6, 0xfffffc01, 0x2, 0x5, 0x3, 0x353400}, {0x4, 0xffffff51, 0x2, 0xff, 0xf, 0x7}, {0xfe28, 0xfffffff8, 0x80, 0x0, 0x7, 0x87}, {0x7, 0x1000, 0xbbd, 0x401, 0x4, 0x9}, {0x6, 0x4, 0x3, 0xdc0, 0x3, 0x537b}, {0x0, 0x0, 0xffffffe0, 0x0, 0x0, 0xfffffffa}, {0x9, 0x3, 0x9, 0xffffff80, 0x4fbd9e58, 0x7}, {0x7ff, 0xc, 0x0, 0x0, 0x91b3, 0x4}, {0xdd25, 0x4, 0x8, 0xfffffff8, 0x0, 0x8}, {0x80000000, 0x6, 0x10000, 0xfffffff7, 0x0, 0x3}, {0x800, 0x8, 0x94d6, 0x8e28, 0x8000, 0x2a}, {0x6, 0x7, 0x8, 0x2, 0x1, 0x2}, {0x5, 0xc, 0x7ff, 0xff, 0x6, 0x9}, {0x8000, 0x7, 0x8, 0xc, 0x3, 0x5}, {0x17, 0xffff, 0x4, 0x5, 0x10000, 0x6}, {0x4, 0x5, 0x3, 0xfffffc01, 0xc60d, 0x5b35}, {0x7, 0x2, 0x5, 0x4, 0x3, 0x9}, {0x4, 0xa, 0x1c18, 0x7, 0xd18, 0x6}, {0x8, 0x3, 0x4, 0xfffffff9, 0x6, 0x7}, {0x81, 0x5, 0x2cd, 0x2, 0xbb, 0xa}, {0x4f, 0x4, 0x9, 0x7, 0xa5, 0xfffffff8}, {0xd8e2, 0xa, 0x1, 0x8, 0xfa3f, 0x9}, {0xcb, 0x2, 0x23, 0x8, 0x7, 0x6}, {0x4, 0x4, 0x8, 0x2d89729e, 0x7fffffff, 0x6}, {0x1, 0x0, 0x7, 0x80, 0x6, 0x2}, {0xfffc, 0xf91, 0x6, 0x7ff, 0x7936fda6}, {0x7, 0x0, 0x7ff, 0x1, 0x10, 0x5}, {0x7, 0x4, 0x4, 0x40004, 0x0, 0x9}, {0x2, 0x8, 0x2, 0x1000, 0x1, 0x3}, {0x4, 0x100, 0x8000, 0x2, 0x1, 0x9}, {0x10000, 0x800, 0x5, 0x9, 0x0, 0x6}, {0xff, 0x7, 0x101, 0x8, 0x1, 0xfffffff8}, {0x7fffffff, 0x7ff, 0x4, 0x6, 0x7fff, 0x9}, {0x5, 0x2, 0x4, 0xffffff80, 0x4, 0xfffffc00}, {0x3, 0x0, 0x800, 0x2, 0x3, 0x9}, {0x7, 0xfffffff7, 0x23f, 0x7ff, 0xb, 0x5}, {0x0, 0xd, 0x100, 0x8, 0x6b89, 0xa9}, {0xdf06, 0x8, 0x6, 0x8, 0x5, 0x55}, {0x6, 0x6, 0x3, 0x1, 0x5, 0x4}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x530abdafa5e08e5d}, {0x2}, {0x5}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6}, {0xce4633eb2886dc9b}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x1}, {0x1}, {0x1}, {0x7, 0x79bbe4ba85bba9fc}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x4}, {0x2}, {0x5}], 0x1}}]}, {0x1004, 0x6, "1d6bf0ec7be7b69f00f9a79a30056a7a500413c055e01e532eecb991088cc08c95e30986e9320bae6ee52556713d21887049b00fa54acb72f2062742c612dfc2c61e6a1c3af38edd46c7cbe2093f910607827110827ab33575aa556fff7905edc63e70b41394c1498a212fb33ab2e5980975a209b1b5e8d12c6ae991ffb6e662857040ecbc9428f2bb7d7e7cb9162931cb661ad756085463bfc85a4d00d280e0ecda2492b166c8c11cc1a338d5ada8c09de92f2ce08b8ce937389e8fa2f15dce0ad9c9f0093b040c6dbe3ef964fcf58247b75de6760f14b0c7d4a999844b62c470fcd910e908fd8d58a73aa6e0b32e1fe559efed14b6bfd9efa66a9f437f3d580dd14423ec3dc349734762b227cf8609db4d8a1f892b840823c8a1290a036456bbf62590de2fc903f009035d132d5d3795aa2520664267ad89465cc710a0c0fc1aff591af022bd942086892c0816cca58960a2a7532c4a9db05f002410e085bde50d8aa660d739f7bf6ca98aa01e2a08ec0cf2c731f697593a705ff517bb5f5c1b556dd107b62a1d03e693cb93731b3b51821825faa852b50972478e3feb5c7502c491f72a860a95f55e3a935c382489bfd0c4739423e41b7b77b9295a2117ce8428f9cc7069af71c5a37f0db0a7589c8f9f374d97081298b41d7ea75419ecbca00b59e2c666b0d255fbcbaf41dcb5349b33db91f20b2f5a6ab1862bc7d4bd05816d888da66c9e3eb87e81eaf57167df00db5694a7dc14c68b1c114c6d06a69b698add26fc0eb452240f42809c4b5e755b4ad242261cf432ae97f975ad5ed40efc8d7435e3fb666373f4219cfe08275d856fea8e1fe3e44029159893106244ea10794d1e8e0acc4a9758f9312a7b5bd6c1f9cde0877e2b67e378fdb11661aac0ebf593dcfa3ca4053f60c7d0333943cfa5cb64121cd3291d242a2959dd7235e25abc9f53188986987cd55550ced0f264f774d41371debc803f4acd390d6125ebc73085d808556d6e3caa2af4db40b921442631aa82593adbdcaf357ec4970add0dd08cf3e1c0facd15329a38bd7d4ab723bae3b0eb1bc9709bb049cb82c2bda10ec0c58df7bbcd4c1c0dea5cd970955aefb09968183356d677570d23dc524072b8cacc5fd0ace98185c91575496289ee53c771533611be7b26cea9c6cbfe10cf72355bbb4a24a94ddae83dda29dc7dba68eb7b88eba3d5560ade94651c3c60342fc993d7cbe22d57878cc8c063976c1f389b99d6491312ef13388104358ed116cce689ac0f50821b70e7d510df74993f6a1116f91e61ea2e4c9c27d771f3355ecfffe65435d96749a3ad57316faa17be42fd63f37f632637f87df96631548dd772821a34ebaad57bece9d46d57376a12f8baf7b7cea0afa8df9ca041af3b9cd476b1f73961ac763ec16f7ac8f2e0d25b5f26f6879c337504405dc1d9231af34d7bb4b10d37f5b0beced643a503a74b7c72d33359b1dbd648c3d637447df03f1982e87d0ad2c7a51b7af665becb34efd011ef176367e3459d9f0371698f351e29f9ada937bae6e41477f17eeba38132ac034dc64ec67a7f14ff601405afe6e2ff27f07821f58ae18dd48bc889d6831b6110855e3bb4dfa9b87499d935c70933d6aa15c196e4fe6537ff56b91d5094032d619e29b0c9048230b26a5c836fb38395ccde46f9f585c45d236d3825df9851bbceba8d0538191a915e3b416894b49428388f1bf2fd4badbd8ff2af23e18c2a4fd04062a1b21612b9f4e99bebcf02f756078b96f1f473a5ee08a66cd37af30b419fdbc4130c8ac99b69ebc8573b28c22d17ff790f1022ccf2d996ad8faa167febc250c723ebf375f0099b0f5007299212acf8ab3caf1e4a13f2eeca13843612833fb49300630ca381cbaf752956d511fca09de3f92361b05bcf393b2ee7daed41e4dc5d9553835680c4c0bd00ad6023416cc9dbbe0994c79b21e9bded764440d1b0c05991544b6158e5e2afa4dc17f6d42bdce42ee79d612e82890e229750f8869d1b69f8a7a37a8c05a91d851c60637562bc5a74d473515d18f0448560ec6deb814867329dcadbcf3cb7d2546240cc8084619158e86571a21d26fca40000d4cdc3d2666506103bc1f610f6e4b2b3a3f7365aec72f2353183a1cafa7a60684162671e85b453dfa2f28a2f7edec7b052da408530f9ed73d46d48c01c380253e7042a7bf2f9723659c570d3fcdee338eef16ddd84b3cec16f61d9de096787713b8bcca4b07adc5ec729af932f7a4e200b883537edf4adda4b65f14578680a2931712296247f2c9965f1b891125f49da2769f696ea958a034124560765c0a7f8dc9515a0238c9adfdd8b71592e3bdeb55dc3b92dcb2b59f967db4f4aa07bd9cbe807c4433f4c112d3a0132f3f39e58b67af133475323de8cb7f17d8394c0064e0d67c3290a21ef548750bd2df6f36c42eb95dcfa695dbd7f57af5b0541a9d87ea1dd06e39c4638911ee53bf75cc3ae33d67ee285684b636b473a17af2e4778b6e004965f0ab6767565e4edfd4e692ee3fe0e41ae187a3a183dc55fc3555e77186b2095ce8b6912080433a88a29b0ec967b1f94456df04520f4e8b71ff7de6b0e87bf31d07f37c9e17b644b75c9d86a7ec743166396a4ee824ccfd01c66aa6e5962aa64f94bf97f7775b450b99db390cc5649719ca534a2f98c3f886520bd75c8c5eab9bebad68800f34bc066576cea3a0b898ec0dcd2abe4f3cf793c6cb271f0399d774d2e2e38fc7b338bc574f750ebc889a4a73c63adc2880a3a6d22da7845f85fce91dca6a6350c7bb13a834220299079309ee813b5b6efa93a7b1a6c38ac139b56368bbea81ed83d920baa1ec1ce53cdb9ea1284e39ac0a06f4a19f414a6ba74994c7d10eeddf84ce335354aa7dc2c43c0f0d4df29c8d27ed53183ae569ccf7f56a8e1b54415e7797d3218b79e4499f081272673ce84aa225aa42e29b1c1633ff2faaa730180e1ebf9ae04aa910e05bd191e43716cfa641c2e45f02941abe12f629c18e9839074d7fe4efb2d5bc034a33095f2386d54e4be756df29f0677d180c46395176bfbbefd13854404f563b933c73e718898f862cd29cacedfde26c6d82d3e3bb930720ea363a9b7bad37d796ed46542db0983616c78032d7e20825deb20c92768fd13b4409b4dcc6bb5a0aeeef5b92767a9e85a628317fb2b3afdbfa51a532b82f39241610268b6f8229670cdc92161e4b710fa2787338683e9a9d61710f93724b21e9bf29462e871aa8e98eebbec6f5c9ca6cf75cf78f53b98b443ef6dcb11c333b0198fabcb25eff14131ac79c0069e349cc5427ebedcf03640219fd31e6d5e05ec69e619b668dc5d883f46c55a450edf48bbf99a27f57c6071129b1d23d4bae6d2df511a7daf1e0d3fb922dd7a165201c055d49a53ac7246c6e0c972bbfe054071878c489e1edf36829765c63154db3860e4751c0a63af127c23eb0446753a6a135cad43f3a3385da66adc3cc4e3293c7d41dec0c95325133627de671f5ec1527f38b22616b7be4a76cbce87c6fec96289523da6bc0a42337b8a67adaf8fb0679c331bc8da84e66646864d66f625d667e762bb9d6e1b28e95b33e71af7509ae1334386edfc2ad76eb2327bbf4c5de4e73a28d65fb63d61b7a3ed668097921692a82280b053ba1564292e748e55dfc679235a530ac6385d9c05dd87e2047eaebd0cd9574d28dc9dbf890dda8ae5a351f9c58dd93033ab7c8318fcd892436b34ecd7959e2ed0719d588db5d38bf103fe82b851b4839d2b05bbdcbe10cbbe305b67e83ad207b20b4bb6e0b662f0982ecd89eb93e13177c8cfa09ac1896071a5555b194bde2320b5f5bd173a3c0947b7e235ce308bf3331de4e33fd5cc7954ad67b9b0543f2dbbf7afe548da57735a58cc15363dad1f18b5bd351bf78f311dde6ac5208666c2eac000a6ecaf51a51e3828a8c96a5de596b9620d2c1fb48ca2b05648758ac5645529eea562c9084d5cd2591d439fbc891b7a4a59cb9d5244e6b55af89b7bc4232c22f3016592e320a7fe3cffec0ba598ac7ff51224cf48c8b9d8d259bb845cbbc1bf5af30cd2a6a844e936bfb734618ad3abc64796a11dd3c109556f94b8223b19a5550b1b07b7c5029f07dbbb4d6516230b0a519c7d229e9cb436af9b48fd80a98d1d46ed8837d0d15c64f82c2bb891e3a3418bd77f8a815ef734baf3d1ad989a532557e0e087e4a680849e1613e605189d1567d0b25860de019db5141f4a08a2522a249d61b2468fa6af280f85ee93da2e3e75c6114c137260993d9dc3864c3df7ec3fcd81bec086f816caaa95a370269ad37cc9d8b4971b58a23b0477ad5088ce170877095b786fcbecd38a544b8fb87a3d25cc403128ac1e24d855f5c5d240d9c5c12499251842af17e44bd821812e6f556f8ccd3f92b05766d83307d3801c93e63c9971363fee9040babb7622cbd6e9a8b627f4ed9ef9deca69033d225db4ab1a797a11606a30a6f090986a18d9797a5cf9f882874e581832b0fd3cfeb9d139703380110b787d632e5909ef53c4b9062a2224746b3c4e801a71d28479e16e8163cb98b20a6f24aff0f948cc02e04316d73e53b873ca4fda6d5b33b541b677b5f6a21ca33e4963dc845507c8a3e834a70d06e2ad2c7077eb0e9862e18ca09e25e51e2c2902e5423fe984d17ff5fd140d98860157e12f65db542f1688b9c4251c58eab706e1fb4ffe8e706c906be06d6db257de4382b026d6859d27ca810686676085ff24b48c8078345a160315de88fe0fe1b8b4cb43f6ac75376ab19b0c412e15421ede735dcbd8ff2f4390ec6a3a7ea0125b4efed8f044d9b64481db77f4c58e0b802f424a7052fc0e08bfc73dd8fe04e616cc5546208b9e8c0b5c8e44fb6c7cc18bdba22e4d94171ebca3d4ab38c64c9403c9d9c55050bceade66aa148313fa37f5ca1daf26843fd2a6330e4d8d35c9f96cb686cc797a1e85b16a081c859921f2450a7e756a57b628a999cc65c18107931f3f42dafe9a8b209e04494c7651eefa8f1a7dfdcddce33bc41b737043e0b1bc9eb6aa60dc76f9dd567e178f513a647867893b87b0ea7a6b42fc8ed1613b83289d0f66c0fdecb4a290b6980d3297914fb8908a1256d6fe9422155d5b35c4dd26974c3826ec19b5d21e9c4f53d6743edc627675513c0c771fcd0e22c1a715abdf1ad2768fb66d1404a7f0e175395287171cb7c76da4dc17630a901093f231ea5b4bb257ee69952b5203ce9108179dbf297f3ce598f6386fe9652ddebcb451db098fcb6e5286b36c4a269023f13e1e02e6063908c755900a7860003181fd2cca212ce268168ef1ee430fc991c3f8a7ae430acd21b772690ab7efc9448196e1921a75cc59d68e9c08b465a7529d9f32b588a42bb7c03e2df4950ff1c80253a073126ffa57cc7ee74eb5bf3dfce1f2a6ab4a6fa825cf0fcd7042a9595f5aa62878b831da538b621d46ad2184b2058758dea0ccdc59ca9d8242bb6b339fccb5409e74fce40101fd646e6176afb6fc811ae3095099317a66d69e8751139963606efa3f3443a6db2d903c8da786d248deff0062e5fccec58d44de809412d14ee3eba9665b9f67ee44297a3f2d8b9797fa52b6ea80003ed8669ef0425519ac1a06267e78dd4b80dc446c70da9b003a20ebca94fae70229392b85e3b0db13fa5d70df315e340411f90b2f474ff93b7826468c374a516e2dd9698afff702d70669c1fd8ec5105f14414211f616147e0e40ee13a31ef618fba66aa5bbc4573a538a64ebc7b9517df10810fa17d2fbb9054c164dd868dd8caa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0xb8, 0x13, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x6, 0x40, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0x20000000, 0x582c, 0x7}, 0x3, r4}}]}, {0x4a, 0x6, "df1d0781260e01f5f70b79b2fb5b44f23ac391ca1c32ea646a8159d7f0e1547a2b92a966d1cdf25a4547991b7377d32c3b0378e06f044b46a3386f3f01c9be7a908231c5fea9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x214, 0x19, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7ff, 0x10000009, 0x4}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x2, 0xfffffff7, 0x3}, @multicast2, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7f, 0xffffffffffffffff, 0x401, 0xfffffffe}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0x10, 0x4, 0xfffffff7, 0x200}, @remote, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x86, 0x3, 0x37be, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x2, 0x10000000, 0xfffffffa, 0xd}, @remote, @multicast2, 0xffffffff, 0x1}}]}, {0xfa, 0x6, "4cbd76f1e059ba54389f3cadf99eedb84cc442fea2375c531faa6672dfa56cb5d888f43c2c4767e957f73ebbf8022675531f6047bc36d49162c7f345d491c728887d8288936829da0144ba297408314a7782b6aab276332769cf108da2a071fc9881e2ecd4a6ce8c040004dca2f45aaeecfbbec2ec3c9c903d13061cc774f8049e117dcd55473be9c4526238fa6313fee6a6da4dad909345dbda0bd3d8203bdefbbd7d34a7cbe9879fea878d671e706f3f44cf103ff2be5d5b4e6a36ca136493359678580087068b7ad225a8d441a1a845bef6a3aa3229db5ef98a7ef12822d599ea7ea5ed1705eb868eeb52858e14d30ded0c77bc0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0xe0, 0x4, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x81, 0x6, "b4c57f2d85e717cb94b1659a93e9a1e1f1ba1758ebfa9b7ad8c90ec0194c74b9cedeb662ea9145ec79d38e6f46682772ceaa270ed63d7cc62f8bb62dfe214be8b141d2a3dca90d594f40ed5276adeea91a4d0eee17a3d81965d0c74a382769fdd85105befbe7ce420f24dca3e010fcf432d9f38002da808cd218316a71"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x164, 0x6, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x80000001}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x17}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x90c, 0xe, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfffffffa, 0x3, 0x9, 0x9, 0xd, 0xbf, 0x9, 0xff44, 0x2, 0x1000, 0x0, 0x7f4, 0x1, 0x6, 0x4, 0x0, 0x9, 0x8000, 0x900000, 0xf, 0x2, 0x0, 0xdde3, 0x9, 0x1000, 0x3, 0x0, 0x7, 0x4, 0x4, 0x9, 0x7, 0x8, 0x12, 0x7, 0xb6, 0x0, 0x4, 0x8c, 0xfffffff9, 0xffff, 0x7, 0x1eed, 0x401, 0x2, 0xb0, 0x0, 0x5b38, 0x3, 0xffff, 0x4, 0x97, 0x0, 0x6, 0x8, 0x401, 0xd, 0xffffffff, 0x0, 0x9, 0x4, 0x3ff, 0x0, 0x8, 0x3, 0xfffffffc, 0x94, 0x9, 0x7f, 0xcaa1, 0x8, 0xde, 0x3, 0x2, 0x3, 0x8000, 0x9, 0x5, 0x400, 0x0, 0x8, 0x80000000, 0xeb, 0x59, 0x0, 0x2, 0x6, 0x2, 0x12c, 0x8, 0x2, 0xa, 0x8000, 0x8e, 0x2, 0xd, 0x8, 0x1, 0xa4, 0x6, 0x1, 0x1f, 0x773c944c, 0x2, 0xc, 0x3, 0x1, 0x27f, 0x8, 0x2, 0x40, 0x1, 0x3, 0x401, 0x90000, 0x3, 0xf, 0x8, 0x6, 0x8, 0x8, 0x3, 0xf689, 0x9, 0x1, 0x2, 0x2, 0x8000000, 0x6, 0x5, 0xc36d, 0x9, 0xffffff80, 0x400, 0x7fffffff, 0xffff, 0x40e1a820, 0x9, 0x100, 0x1, 0xffffffff, 0x7, 0xd, 0x2, 0x1, 0x5, 0x70b4, 0x4, 0x8001, 0x8001, 0x0, 0x8, 0x9e9, 0x0, 0x1, 0x0, 0x75b, 0x3, 0x7, 0x6, 0x3, 0xa77c, 0x0, 0x800, 0xe, 0x7fffffff, 0x6, 0x3, 0x5e99, 0xffffffff, 0x9, 0x1, 0x6, 0x88e9, 0x90, 0x8000, 0x2, 0x9, 0x9, 0x3, 0x80000001, 0x3ff, 0xd79, 0x81, 0x4, 0x8000, 0x7, 0x4, 0x80, 0x5, 0x7, 0x7f24, 0x5, 0x2, 0x0, 0x9, 0xf2, 0x3ff, 0x6190, 0x9, 0x7df, 0x1, 0x40, 0x0, 0x6, 0x9b, 0x2f, 0x3, 0x25ae1958, 0x4, 0x800, 0x0, 0x2, 0x8, 0x8, 0x2, 0x3, 0xc, 0x2, 0x2, 0x75ee, 0x7, 0xfff, 0x26d, 0x7, 0x1, 0x81, 0x2a4d, 0x1, 0x3, 0x1, 0x9, 0xfffffffd, 0xfffffff7, 0xfffffff3, 0xfffffff8, 0x9, 0x2, 0x5, 0x2, 0x2, 0x10000, 0x8, 0xd, 0x7ff, 0x9, 0x0, 0x10001, 0x83, 0x4, 0x4c28, 0x9, 0x8, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff5a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa0}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x7, 0x9, 0x7, 0x5b32, 0x4, 0x101, 0x91, 0x7, 0x9e, 0x3, 0x2, 0x1, 0x81, 0x2, 0x0, 0xfffffffd, 0xffffff96, 0x8, 0x1, 0x6, 0xffffffff, 0x1, 0x19, 0x1, 0x3, 0x7, 0x3, 0x5, 0x0, 0xe8, 0x5, 0x9, 0x4, 0xfffffff6, 0x7, 0xd6f0, 0x8000, 0x4, 0xfff, 0x9, 0x1, 0x0, 0x1ff, 0xf7, 0x8b1d, 0x7, 0x40, 0x4, 0x3, 0x48ad9610, 0x10000, 0x50dd, 0x1, 0xfffffeff, 0x80000000, 0x4, 0xde9, 0x4, 0xf, 0x33, 0x6, 0x7f3, 0x6, 0x9, 0x8, 0x3, 0x5, 0x0, 0x7, 0x8, 0x1, 0x9, 0x4e, 0x400, 0xd94, 0x3ff, 0x101, 0x8, 0x0, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x1ff, 0x27badb3a, 0x0, 0xff6, 0x98, 0x1, 0x932, 0x7ff, 0x7, 0x7fffffff, 0x7, 0x6, 0x4, 0x7, 0x7f4, 0xd, 0x3, 0xfffffff0, 0x1, 0x2, 0xa, 0x4, 0x1, 0x9, 0x5, 0x0, 0x9, 0xfffffc00, 0x4, 0x0, 0x1, 0x8, 0x4, 0x1, 0x7, 0x6, 0xffff8001, 0x1, 0x80, 0x0, 0x100, 0x2, 0x2, 0x8000, 0x3, 0x426, 0x80000000, 0x4, 0x101, 0x6, 0x7, 0x80000001, 0xfff, 0x0, 0xff, 0x1, 0x2, 0x3, 0x8, 0x4, 0x6, 0x1, 0x3, 0x6, 0xffff, 0x2, 0xb1, 0x5, 0x1, 0x3, 0x7, 0xc9, 0x4, 0x2, 0x8, 0x2, 0x80, 0x101, 0x1, 0x9, 0xfffffff9, 0x4, 0x8000000, 0x2, 0x42, 0x6, 0x0, 0x0, 0x8, 0x1000, 0xfffffe00, 0x7, 0x7, 0xfffff001, 0x8, 0x40, 0xee, 0xfffffffe, 0x1, 0xffffeb15, 0x6, 0x3, 0x7, 0x5, 0xff, 0x6d9, 0x9, 0xf59, 0x0, 0xfffffff8, 0xa8c, 0x7ff, 0x81, 0x9, 0xffffffff, 0xfffffd11, 0x6, 0xe98, 0xa, 0x100, 0x81, 0x0, 0x2, 0x5, 0x9, 0x80000001, 0x1, 0x1, 0x6, 0x401, 0x0, 0x7, 0xffff, 0x3, 0xe, 0x9, 0x2, 0x2, 0xb91, 0x6, 0x200, 0x8, 0x7fffffff, 0x5, 0x1ff, 0x2, 0x8, 0x1, 0x3, 0x59, 0x40, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x2, 0x5, 0x4, 0x1, 0x2, 0x2, 0xd, 0x2, 0x8, 0xfffffff8, 0x9, 0x9, 0x11, 0xffffffff, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xee10}]]}, {0xb4, 0x6, "3f67cd8cf1b9332a731eec0947ef67f1caafb81242e6e37a0b6eb7f31062d0555b8b4d896ce5f967d3ca8bee67f0a7cfe66aa44b9a4b23b2def6520bd3a3278ecf0de5192a92a4f1359453169f20dbb713e90e14ab8d330337897f138d80bb35d4b8e2a251f5b410f6163cfe176f3924e4bb18dd758f2fb0010fe0c09eb6ee21670af0a3cbb6620c94d8c956b66cedd59450e7a9aa0dda92556566a70b3c370d2fd3db477c2c04dd1445eebec7e01bb3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x646d73ff4ac4bac1, 0x2}}}}, @m_csum={0x120, 0x8, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x2, 0xf, 0x5}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0x7, 0x11}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x1, 0x7, 0xffffffff}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x17d9, 0x3f6c814ccbbe6534, 0xfffffffe, 0x3}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x37, 0xffffffffffffffff, 0x2}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xc7, 0x8, 0x8001}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7fffffff, 0x20000000, 0xe, 0x2}, 0xe}}]}, {0x2e, 0x6, "802004d22f26c1feef1eada7bf310dc88fcfa38c403fb39381c1b1d0e2b5d4b2818249cb615e147c6b1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x58}, @TCA_ROUTE4_POLICE={0x103c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32b04eea, 0x1, 0xe, 0x5, 0x5, 0x5, 0x0, 0x6292, 0x5, 0xf, 0x9, 0xf7, 0x8, 0x0, 0x8, 0x5, 0x42f, 0x57f, 0x9, 0x8, 0x5, 0x10, 0xfff, 0x4, 0x7, 0x7, 0x800, 0x5, 0x9a1, 0x1, 0xd, 0x3, 0x89, 0x10001, 0x7950, 0xe1be, 0x2, 0x5, 0xc, 0x7, 0xef7a, 0xfffffffa, 0xa8, 0x9, 0x4, 0x4, 0xfffffffb, 0x200, 0x5, 0x3, 0x584b, 0x13, 0xfffffffd, 0x1, 0xffffffc0, 0x9, 0x7, 0xd, 0xa6ee, 0x3, 0x3, 0xd2, 0x0, 0x5d84, 0x200, 0x35c9, 0x7, 0xff, 0x34, 0x1, 0x400, 0x2, 0x7f, 0x79d, 0x1, 0x6, 0x5, 0xe, 0x7fff, 0x8, 0x8, 0x5, 0x2, 0x24a, 0x7, 0x9, 0x7, 0xfd, 0x1, 0x7, 0x2, 0x151, 0x6, 0x37, 0x1, 0x4, 0xe, 0xffff, 0x10000, 0x4, 0xfffffffb, 0x7966, 0x776, 0x2, 0x1, 0x8, 0x3, 0x5, 0x7fffffff, 0xffff, 0x4, 0xfac, 0x8, 0x4, 0x6, 0xfffffffb, 0x8, 0x9, 0x0, 0x6e4b618d, 0x3, 0x7f, 0xfffffff8, 0x0, 0x5c1edb23, 0x2, 0x32d, 0x3, 0x1e, 0xffffffff, 0x9, 0x1ff, 0x401, 0x9, 0x0, 0x1, 0x7, 0x7, 0x64c, 0x7, 0x4, 0x1ff, 0x7ff, 0x9, 0x7ff, 0x1, 0x6, 0x8, 0x787, 0x30f, 0x0, 0x7, 0x3, 0x7f, 0xff, 0x1000, 0xfffffffd, 0x1, 0x2, 0x4, 0x0, 0x2, 0x10001, 0x8, 0x7cf, 0x8, 0x401, 0x1, 0x5, 0x7, 0x5dd5, 0x1, 0x0, 0xb, 0xff, 0x80000001, 0x4, 0xc, 0x6, 0xf, 0x2, 0x3, 0x7f, 0x80, 0x3, 0x2, 0x4, 0xffffff43, 0x10, 0x8, 0x800, 0x4, 0x4, 0x8, 0x8, 0x800, 0x8cf4, 0x1, 0x3, 0x8, 0x44, 0x5, 0x85, 0xb84c, 0xfffffff4, 0x7, 0x5c0, 0xfff, 0x3ff, 0x7, 0x9, 0x0, 0x3, 0x8, 0x2, 0x8000, 0xf0, 0x10001, 0x92, 0x8, 0x5, 0x4, 0x5, 0x8, 0x4a1, 0x1, 0x59fb, 0x0, 0x2d, 0x2d2, 0x7, 0x0, 0xfe, 0x380, 0x0, 0x4, 0x4, 0xfffffffe, 0x7359, 0x0, 0xfffffff2, 0x7, 0x3, 0x3, 0xb, 0xe, 0x4, 0x7, 0x6, 0x4, 0x92d, 0x1, 0x10000, 0x9, 0xa92]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xf, 0x5, 0x5, 0xf, 0x1ff, 0x967, 0x4, 0x774, 0x1, 0x80, 0x7, 0x5, 0x6, 0x7, 0xa237, 0x2, 0x9, 0x4, 0x9, 0x9, 0xa, 0x9, 0x3, 0x2, 0x0, 0x1f, 0x3, 0x6, 0x1, 0x4, 0xa, 0x2, 0x0, 0x2, 0x70000, 0x8, 0x9, 0x0, 0xffffffff, 0x1, 0x5, 0x1, 0x7fff, 0xf, 0x9, 0x80, 0x9aa, 0x0, 0x9, 0x6, 0x4, 0x6d, 0x38cf, 0x8, 0x4, 0x6, 0x9, 0x4, 0x4, 0x4, 0x5, 0x200, 0x7, 0x9, 0x2, 0x1, 0x24a, 0x1, 0x2, 0x8, 0x2, 0x800, 0x7, 0x9, 0xfffffffd, 0x0, 0x4, 0x40, 0x6, 0x10c5, 0x3b37, 0x6, 0x5, 0x4, 0x9, 0x9, 0x5, 0xde, 0x7f, 0x9, 0xff, 0x5, 0x5, 0x7, 0x800, 0x9, 0x3c56, 0x4, 0xfffffff7, 0x9, 0x9, 0x1a102cf, 0x98, 0x5, 0x5, 0x8, 0x8, 0x4, 0x4, 0x2, 0x9, 0x4, 0x5, 0xe9, 0x1, 0x9, 0x158, 0xbdf, 0x3, 0xffffff00, 0x4, 0x0, 0x8, 0x3, 0x4, 0x7, 0x9, 0x8, 0x586, 0xffffffff, 0x0, 0x7, 0x5, 0x6, 0x5, 0x3, 0x9, 0x9eaa, 0xc5aa, 0xda000000, 0x1, 0xfffffffe, 0x3, 0x6e, 0x8, 0xa329, 0x2, 0x4, 0x8, 0xfffffffe, 0x7, 0x2, 0x5, 0x0, 0xd, 0xcd, 0xde, 0x1, 0x9, 0x8, 0x458, 0x8000, 0x4, 0xfff, 0x9, 0x2, 0x1, 0xad9, 0x3, 0xb428, 0x6, 0x9, 0xd, 0x9, 0x100, 0x3, 0x2, 0x200, 0x7, 0x1, 0x9, 0x2, 0x12000, 0x7, 0xb0, 0x8, 0x9, 0xa14, 0x1, 0x2, 0x3, 0x8000, 0x5, 0x2, 0x10001, 0x200, 0x200, 0x4298, 0x7, 0x1cde, 0x7ff, 0x9, 0xfffffff9, 0x2, 0x2, 0x3, 0xea, 0x7f, 0xc, 0x7, 0x80000000, 0x8, 0x1, 0xb, 0xf, 0xfffffff3, 0x7, 0xfffffffd, 0x0, 0xc, 0x8, 0x9, 0x8, 0x5, 0x1000, 0x5, 0x3ff, 0x3, 0x8, 0x3, 0x0, 0x7, 0xffff8001, 0xff, 0x3, 0x1, 0x0, 0x7ff, 0x40, 0x81, 0x7ff, 0xb7, 0x100, 0x8, 0x527c, 0x0, 0xe, 0x3, 0x9, 0x3fe, 0x0, 0x401, 0x3, 0xf, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0xcaf, 0xc9, 0x3, 0x7, 0xffffffbe, 0x6, 0x1400, 0xfc6b, 0x2, 0x3a8b4ac0, 0x8e5, 0x386, 0x800, 0x6c24, 0x10, 0x6, 0x1bd, 0x5, 0x3, 0xa077, 0x1, 0x0, 0x9, 0x1ff, 0x1, 0xff, 0x5, 0x40cd, 0x6, 0x5, 0x7f, 0x0, 0x5, 0x267, 0x0, 0x6, 0x10000, 0x6e5, 0x6, 0x3, 0xfffffff8, 0x7, 0x6, 0x9, 0x7, 0x3ff, 0x8, 0x1, 0x9, 0xffffff01, 0x5, 0xff, 0x8, 0x7f, 0x7ff, 0x7, 0x6feb, 0x1, 0x400, 0xfffffffc, 0xa, 0x1, 0x0, 0xa24, 0x1000, 0x5, 0x7fff, 0x4, 0x2000000, 0x9, 0x9, 0x15b3643, 0xe26, 0x2, 0x2, 0x86c4, 0x401, 0x5, 0x10, 0xe16, 0x6, 0x97b, 0x7, 0x6, 0x7, 0x7, 0x792d, 0x1, 0xae, 0x6, 0x4, 0x4, 0x0, 0x80, 0x3, 0x0, 0x1, 0x3, 0x0, 0x7, 0x0, 0x4, 0x3, 0x3, 0x3, 0x100, 0x7, 0x8, 0x6, 0xd, 0x4, 0x3, 0x7, 0x8158, 0xffff5c62, 0x7, 0x6, 0x25b, 0x7, 0x10001, 0x1, 0x3, 0x101, 0x6, 0x0, 0x6, 0x9, 0xfffffff9, 0x9a5, 0xfffffff7, 0x2, 0xcab8, 0x7, 0x4, 0xfffffe87, 0x8, 0x7, 0x8000, 0x200, 0x5, 0x7, 0xfffffffa, 0x1200000, 0x89400000, 0x8, 0x80000001, 0x6, 0x8, 0x401, 0xef76, 0xfffffffb, 0x3, 0x8, 0x4, 0x10001, 0x7f, 0xc671, 0x1, 0x9, 0x0, 0x2, 0x1, 0x1, 0x7, 0x81, 0x4, 0x0, 0x4, 0x5, 0x8, 0x0, 0x0, 0x3, 0x6, 0x81, 0x7ff, 0xc72, 0xd171, 0x401, 0x5, 0x4, 0x3ff, 0x80, 0x0, 0x5, 0x1, 0xfffffff9, 0xbf0, 0x1, 0x6, 0x3, 0x3, 0x5, 0xf, 0x1, 0x9, 0xf1, 0x5, 0x5, 0x0, 0x80000001, 0x5, 0x200, 0x632, 0xdf, 0x7, 0x0, 0x0, 0x9c, 0x8001, 0x2, 0x8, 0xf, 0x7, 0x1, 0x4, 0x8, 0xb7, 0x4, 0x3, 0x4, 0x7f, 0x8, 0x0, 0xfffffffe, 0xef2c, 0x7d3, 0x81, 0xfff, 0xffffffff, 0x0, 0x8, 0xf, 0x2, 0x6, 0x0, 0x6, 0x9, 0x1, 0x8, 0x0, 0x0, 0x0, 0x2, 0x5, 0x8001, 0x8000, 0xa, 0xf849, 0x3, 0x0, 0x0, 0x0, 0x7, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3ff, 0x8001, 0x29e, 0x6802, 0x7, 0xfff, 0x400, 0x7a, 0x65f, 0x7fffffff, 0x7, 0x1ff, 0x2, 0xffff0001, 0xff, 0x8, 0x9, 0x400, 0x6, 0x152, 0x9, 0x80000001, 0xd9e6, 0x10001, 0x0, 0xbc8b, 0x0, 0xfffffffc, 0x6, 0x1, 0x8, 0xe65, 0x4, 0x3, 0xd, 0x3, 0x4635, 0x4, 0x5, 0x2, 0x9, 0x800, 0xa3, 0x2, 0x0, 0xe9e, 0x3, 0x7, 0x0, 0x4, 0x4, 0xca4d, 0x65, 0xa9, 0x9, 0x4, 0x1, 0x8, 0x4, 0x10000, 0x10, 0x29f, 0x2, 0x6, 0x3, 0x7, 0x4, 0x4, 0x5, 0x0, 0x200000, 0x2, 0x15e, 0x4, 0x6af5ef31, 0x100, 0x10, 0x0, 0x2, 0x10001, 0x8, 0x4, 0x4, 0x6, 0x800, 0x583, 0x1, 0x8, 0x7, 0x9, 0x0, 0x5, 0x4, 0x0, 0x7fffffff, 0x26, 0x1, 0x1, 0x70, 0xfff, 0x8, 0x9, 0x1, 0x7, 0x2, 0x0, 0x7, 0x2, 0x2, 0x401, 0x4, 0x100, 0xffffb95f, 0x7f, 0x13, 0x0, 0xfff, 0x1eec7121, 0x4, 0x80, 0xffffffff, 0x3, 0x0, 0x2, 0xffffffff, 0x0, 0x1, 0x3, 0x8, 0x8, 0x2, 0x4, 0x7f, 0x8a033e00, 0x4c4, 0xa, 0x1, 0x5, 0x2, 0x3, 0xffffff03, 0x81, 0x0, 0x3, 0x8001, 0x9, 0x6, 0x7fff, 0x3, 0x8000, 0x5, 0x7, 0x6, 0x0, 0x5, 0x3, 0x1, 0xd, 0x2, 0xca, 0x5, 0x7, 0x8, 0x3, 0x5, 0x9, 0x9, 0xd, 0x4, 0x7ae2, 0x9, 0x7, 0xea, 0x7, 0xffffff6a, 0x400, 0x8, 0x8, 0x4, 0x80000001, 0x1, 0x1, 0x2, 0x7, 0xfffffff8, 0x6, 0x4, 0x0, 0x9, 0x6, 0x80000001, 0x5, 0xea83, 0x3, 0x9, 0x4, 0x0, 0x101, 0x5, 0xfffffff9, 0x3, 0xfffffff5, 0x29c6, 0xfffffe00, 0xe14, 0x4, 0x0, 0x9, 0x9, 0x1, 0x5, 0x5, 0x4, 0x6, 0x50c, 0xd6d1, 0x1, 0xc, 0x7fffffff, 0xc3a, 0x696f, 0x5fca, 0xfffffffe, 0x6, 0x5, 0x80000000, 0x10001, 0x80000000, 0x80, 0x4, 0x3, 0x28a, 0x9, 0x9, 0x10000, 0x81, 0x1, 0x0, 0x4, 0xfffffffb, 0x71b, 0x4, 0x4, 0x2c4, 0x6, 0x2, 0x6, 0x4, 0xba96, 0xffffffff, 0x5, 0x80, 0x10000, 0x6, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0x2, 0x1, 0xfffffc00}]}}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x49, 0x6}}]}, 0x5c34}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01837700000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000078000000060a010400000000000000000100000008000b40000000000900010073797a30000000005000048020000180070001007274000014000280080001400000001508000240000000012c0001800900010068617368000000001c00028008000440fffff3e0080002400000001708000740000000"], 0x100}}, 0x0) executing program 1: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0xfffff4f0, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0xffffffff, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7ffc, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0xf, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x103e, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x6, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r3, @ANYBLOB="05"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x0, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) executing program 3: unshare(0x22030f80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getpeername$unix(r3, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @local}], 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x48, 0xe6, &(0x7f0000000400)="43230a531cb0a8c7d0d8577702523d46cad6f9866f79fa6a65289b1278edfff557553d4b97dbfa0a7e2d771be32d7d779fe01efb22ba3f6ed8bb144aea1792727a0cfff014989ac8", &(0x7f0000000480)=""/230, 0x0, 0x0, 0x5d, 0x68, &(0x7f0000000580)="b4337679403b30d48528a85fddc92460d189c874c197448bb232a6404b2ebb440dcd4e1a311e395add3a49b728d770b9d6c4d9c3911f679770a3b45a28fd24e7eea71489459dcf10f14ce9a02803bd76cbefcce8dbaef378bec169d0d0", &(0x7f0000000600)="ed9aeb033c9d06a657e0c6411613c2a0e3cb672eacf5464a6f01aaa308c8d746b6cf71c5dbafb3e474f1c678163719bd461a38f34195a42bc9a518b296a9d030f30c590c79ae49f49142484a54b9946b319b7f03ac29e7a6585f96951216e668e8c719395668c5af", 0x6, 0x0, 0x230}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x805) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r10, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) recvfrom(r9, 0x0, 0x0, 0x42, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r11, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) executing program 3: r0 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, 0x0, 0x40000) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x63682, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x8}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0xffffffd3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x6}, 0x22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200), 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000100), 0x0) executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2b, 0x801, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd000000080002", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) executing program 3: unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000001e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x80000, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r6 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0), &(0x7f00000003c0)) write$dsp(r5, &(0x7f0000000200)="97", 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) io_uring_enter(r6, 0x567, 0x0, 0x8, 0x0, 0x0) shmdt(0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0x0, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="18", 0x1}], 0x1}, 0x4000004) executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000000fff00", 0x58}], 0x1) executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x75, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)='D', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)="12426dd354e32eaf08baeba6717b73ecae8377e57ff9d84406a676aeeda6c7127ce268111698d0fe7be6a3045bdfa52a4879d6c1acb14c0cb3115f7821634140817d0376470b367bf95d02438e", 0x4d}, {&(0x7f0000000980)="eeaaef6bed2520705d8af521ec559d1b310a95064f6044403a20619b197acb29f367ad21b3410a7d2108a7c79d1e6e627a61c023e6dc6f034524c753d5715afd05fc", 0x42}, {&(0x7f0000000a40)="7cbebc850466e7e8c2a17df27a5f71603cde54fe03f670b5d2324751f1864cba292c0f4e2e6132b10903f378ae83b8f939bd5a824ad14e570b68d6ff412d5d30abfe000d5ee3b8b738670bdea466edbc1d9106fac8110267d680b953982e437d5ddb12ea014f09fc6380c086361717fc72e60bcbf026", 0x76}, {&(0x7f0000000b00)="0216728c38ebe854c5ee1251b0fc657ea3aea213f2a83f8e3066b164947846441e60ef2d9bc4696655ed08088f59128e5e96b1552c8357a201566edca895c36984f146112e2819d77292fa58801a54850258c735ad3b0fae14c22583327424a6d829ced2b28e54fee8c352b17d877d62ab572a817bffeeef1cf3d7ec7930820adda7a6b97625cb4aa351ec5e45dbf5b76996a247413640ecbf03708e573267f780a5d9", 0xa3}, {&(0x7f0000000bc0)="6a847ab583ff4a8dee27c368d9e14177c46865ec9097b357f6a7c667f315230b495a1d878e3fceece006225ea95596ebc91144a0d88dd289a60c56d35c87d56e910effaaaef56a8834ebac8fc7ec5646d6fae69a2ebe0eced32bfd9a6771fb6b66bcef8a", 0x64}], 0x5, &(0x7f0000001000)}}], 0x4, 0x4004) executing program 2: socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r3, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000340)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20000091) preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0x9, 0x0, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x20400000000006, 0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, 0x0, 0x8000002) gettid() socket$kcm(0x10, 0x3, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) poll(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-setsockopt$MRT_INIT-write$uinput_user_dev-ppoll-socket$inet6_icmp_raw-ioctl$EVIOCSFF-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in k_meta single: successfully extracted reproducer found reproducer with 18 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-setsockopt$MRT_INIT-write$uinput_user_dev-ppoll-socket$inet6_icmp_raw-ioctl$EVIOCSFF detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-setsockopt$MRT_INIT-write$uinput_user_dev-ppoll-socket$inet6_icmp_raw-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-setsockopt$MRT_INIT-write$uinput_user_dev-ppoll-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-setsockopt$MRT_INIT-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-setsockopt$MRT_INIT-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-prctl$PR_GET_NAME-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-openat$ptp0-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8100, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-syz_clone-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-bind$inet6-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-recvmmsg-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-connect$inet-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-bind$inet6-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-keyctl$set_reqkey_keyring-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-fcntl$setlease-syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(0x0, 0x20040, 0x194) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-open-syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x20040, 0x194) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040), 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb program crashed: general protection fault in to_utf8 testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-write$uinput_user_dev-write$char_usb detailed listing: executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8a, 0xfffa}, 0x1d, [0xafe, 0xc952, 0xfffffff3, 0x4000009, 0x80, 0x9, 0x3, 0x7f, 0x4, 0x50, 0x39cc191a, 0x5f, 0x149, 0x0, 0x2, 0xffffff01, 0x5, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x1, 0xb, 0x3, 0x9, 0x1, 0x1f461e28, 0x0, 0xe660, 0x4, 0x7, 0xff, 0x7fff, 0x4c74, 0x6, 0x242, 0x4399, 0x22, 0xe23e02c, 0x7, 0xfffffff8, 0x5, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0xffffffff, 0x8, 0x4, 0x8, 0x200, 0x80, 0x0, 0x2, 0x6, 0xb, 0x4, 0xbd, 0x40], [0x10000007, 0xffff, 0x4000124, 0x7ffe, 0xfffffffd, 0xfffffff3, 0x80, 0xcb, 0xf6, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x1a, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x2, 0x8, 0x8004, 0x9, 0x1, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x7fc, 0x6, 0x7, 0x8000, 0xffffffff, 0x64, 0xff7f, 0xa, 0x7f, 0x9, 0x3, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48cd3690, 0x42, 0x400002], [0x3fc, 0x4, 0x4, 0x0, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x91e3, 0x5, 0xb, 0x2, 0x5, 0x800005, 0x1, 0x1ef, 0x5, 0x9, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0x2, 0xc, 0x3, 0x6d01, 0x1, 0x0, 0x800003, 0x56a00000, 0xa0, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0xb, 0x200, 0x3, 0xac8, 0xbc, 0x42, 0x3, 0x802, 0xfffffff9, 0x1, 0x1, 0x1, 0xffffffff, 0x6, 0x5, 0x120000, 0x5, 0x6, 0x800aaed, 0x20, 0x65], [0x9, 0x0, 0x3, 0xc, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x5e, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x7, 0x2, 0x14c, 0xc, 0x20000e, 0x6, 0x6, 0x7fffffff, 0x5, 0x8, 0xc8, 0x1a, 0x1b7, 0x9, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x1, 0x8001, 0x40, 0x1, 0x100a0, 0x5, 0x6, 0x8, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0x10001, 0x1, 0xfb, 0xffbf2441, 0xfff]}, 0x45c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) program crashed: general protection fault in to_utf8 validation run: crashed=true reproducing took 1h7m15.768116835s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] CPU: 0 UID: 0 PID: 6019 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:__queue_work+0xa2/0xf90 kernel/workqueue.c:2269 Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee RSP: 0018:ffffc90003abf318 EFLAGS: 00010002 RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88802ee30000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff88813ff72017 R09: 1ffff11027fee402 R10: dffffc0000000000 R11: ffffed1027fee403 R12: dffffc0000000000 R13: ffff88813ff72010 R14: 00000000000001c0 R15: 0000000000000000 FS: 0000555578ba7500(0000) GS:ffff8881252af000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30563fff CR3: 000000003300a000 CR4: 00000000003526f0 Call Trace: queue_work_on+0x106/0x1d0 kernel/workqueue.c:2405 put_queue drivers/tty/vt/keyboard.c:328 [inline] to_utf8+0x872/0x1ad0 drivers/tty/vt/keyboard.c:-1 put_queue_utf8 drivers/tty/vt/keyboard.c:382 [inline] k_unicode drivers/tty/vt/keyboard.c:683 [inline] k_self+0x326/0x7e0 drivers/tty/vt/keyboard.c:701 kbd_keycode drivers/tty/vt/keyboard.c:1497 [inline] kbd_event+0x2ec1/0x40d0 drivers/tty/vt/keyboard.c:1515 input_handle_events_default+0xd4/0x1a0 drivers/input/input.c:2541 input_pass_values+0x288/0x890 drivers/input/input.c:128 input_event_dispose+0x330/0x6b0 drivers/input/input.c:342 input_inject_event+0x1dd/0x340 drivers/input/input.c:424 evdev_write+0x325/0x4c0 drivers/input/evdev.c:528 vfs_write+0x29a/0xb90 fs/read_write.c:686 ksys_write+0x150/0x270 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f202fb9aeb9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc6ece38a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f202fe15fa0 RCX: 00007f202fb9aeb9 RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 RBP: 00007f202fc08c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f202fe15fac R14: 00007f202fe15fa0 R15: 00007f202fe15fa0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__queue_work+0xa2/0xf90 kernel/workqueue.c:2269 Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee RSP: 0018:ffffc90003abf318 EFLAGS: 00010002 RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88802ee30000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff88813ff72017 R09: 1ffff11027fee402 R10: dffffc0000000000 R11: ffffed1027fee403 R12: dffffc0000000000 R13: ffff88813ff72010 R14: 00000000000001c0 R15: 0000000000000000 FS: 0000555578ba7500(0000) GS:ffff8881252af000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30563fff CR3: 000000003300a000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 31 ff xor %edi,%edi 2: 89 ee mov %ebp,%esi 4: e8 2e f3 37 00 call 0x37f337 9: 85 ed test %ebp,%ebp b: 0f 85 ef 0c 00 00 jne 0xd00 11: e8 e1 ee 37 00 call 0x37eef7 16: 4d 8d b7 c0 01 00 00 lea 0x1c0(%r15),%r14 1d: 4c 89 f0 mov %r14,%rax 20: 48 c1 e8 03 shr $0x3,%rax 24: 48 89 44 24 28 mov %rax,0x28(%rsp) * 29: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 0f 85 22 0d 00 00 jne 0xd58 36: 4c 89 34 24 mov %r14,(%rsp) 3a: 41 8b 2e mov (%r14),%ebp 3d: 89 ee mov %ebp,%esi final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] CPU: 0 UID: 0 PID: 6019 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:__queue_work+0xa2/0xf90 kernel/workqueue.c:2269 Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee RSP: 0018:ffffc90003abf318 EFLAGS: 00010002 RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88802ee30000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff88813ff72017 R09: 1ffff11027fee402 R10: dffffc0000000000 R11: ffffed1027fee403 R12: dffffc0000000000 R13: ffff88813ff72010 R14: 00000000000001c0 R15: 0000000000000000 FS: 0000555578ba7500(0000) GS:ffff8881252af000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30563fff CR3: 000000003300a000 CR4: 00000000003526f0 Call Trace: queue_work_on+0x106/0x1d0 kernel/workqueue.c:2405 put_queue drivers/tty/vt/keyboard.c:328 [inline] to_utf8+0x872/0x1ad0 drivers/tty/vt/keyboard.c:-1 put_queue_utf8 drivers/tty/vt/keyboard.c:382 [inline] k_unicode drivers/tty/vt/keyboard.c:683 [inline] k_self+0x326/0x7e0 drivers/tty/vt/keyboard.c:701 kbd_keycode drivers/tty/vt/keyboard.c:1497 [inline] kbd_event+0x2ec1/0x40d0 drivers/tty/vt/keyboard.c:1515 input_handle_events_default+0xd4/0x1a0 drivers/input/input.c:2541 input_pass_values+0x288/0x890 drivers/input/input.c:128 input_event_dispose+0x330/0x6b0 drivers/input/input.c:342 input_inject_event+0x1dd/0x340 drivers/input/input.c:424 evdev_write+0x325/0x4c0 drivers/input/evdev.c:528 vfs_write+0x29a/0xb90 fs/read_write.c:686 ksys_write+0x150/0x270 fs/read_write.c:740 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f202fb9aeb9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc6ece38a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f202fe15fa0 RCX: 00007f202fb9aeb9 RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 RBP: 00007f202fc08c1f R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f202fe15fac R14: 00007f202fe15fa0 R15: 00007f202fe15fa0 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__queue_work+0xa2/0xf90 kernel/workqueue.c:2269 Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee RSP: 0018:ffffc90003abf318 EFLAGS: 00010002 RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88802ee30000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff88813ff72017 R09: 1ffff11027fee402 R10: dffffc0000000000 R11: ffffed1027fee403 R12: dffffc0000000000 R13: ffff88813ff72010 R14: 00000000000001c0 R15: 0000000000000000 FS: 0000555578ba7500(0000) GS:ffff8881252af000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30563fff CR3: 000000003300a000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 31 ff xor %edi,%edi 2: 89 ee mov %ebp,%esi 4: e8 2e f3 37 00 call 0x37f337 9: 85 ed test %ebp,%ebp b: 0f 85 ef 0c 00 00 jne 0xd00 11: e8 e1 ee 37 00 call 0x37eef7 16: 4d 8d b7 c0 01 00 00 lea 0x1c0(%r15),%r14 1d: 4c 89 f0 mov %r14,%rax 20: 48 c1 e8 03 shr $0x3,%rax 24: 48 89 44 24 28 mov %rax,0x28(%rsp) * 29: 42 0f b6 04 20 movzbl (%rax,%r12,1),%eax <-- trapping instruction 2e: 84 c0 test %al,%al 30: 0f 85 22 0d 00 00 jne 0xd58 36: 4c 89 34 24 mov %r14,(%rsp) 3a: 41 8b 2e mov (%r14),%ebp 3d: 89 ee mov %ebp,%esi