last executing test programs: 21m56.767516968s ago: executing program 4 (id=3656): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)=""/83, &(0x7f00000001c0)=0x53) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x5, 0x800000000, 0x7fc0000000000000, 0x1, 0x100f, 0x100000001, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a00010026bd7000fddbdf25020000000000000000100000080007"], 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 21m55.638216133s ago: executing program 4 (id=3660): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x404c801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x24048840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="4c494e453120274d617361c0bfab"], 0x33) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x810) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101afb4f2102505a0a40000010203010902240001fe00c0000904eb02027f9c1f000905da0500000200020905820200"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0x10, 0x70bd2e, 0x2, {0x0, 0x0, 0x0, r4, {0x10, 0x10}, {0x10, 0x1}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x200080c2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@t={0x4, 0x0, 0x2, 0x1}) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114dd, 0x10000, 0x0, 0x89, 0x0, r7}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$fb0(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) 21m53.496377922s ago: executing program 4 (id=3669): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r1 = syz_io_uring_setup(0xbdc, &(0x7f00000002c0)={0x0, 0xd20a, 0x80, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x220081, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000040)=[{&(0x7f0000002000)=""/4089, 0xff9}], 0x1, 0x6}) io_uring_enter(r1, 0x6e69, 0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x110, &(0x7f0000000100)=0x4, 0x0, 0x4) 21m53.14796327s ago: executing program 4 (id=3671): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2000000000002, 0x7b9e83) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002800048024000180090001006d657461006a7e5ca79c6d8008000140000000090800024000000002140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x7f, 0x4400, 0x0, 0x0}], 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x48a, 0x0, 0x9}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r6 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x484002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x2, 0x8000}, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x1, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x6, [0x3ff, 0x7, 0xd4e, 0xfffffff8, 0x4, 0xffffff8f]}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x1, 0x2, 0x1, {0xa, 0x4e21, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff3}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000780)="23eb7532038cdf6c98bff86fa8dbe70c70ab9e3dc0aac52cbca6271a4740786f2abdc927ef8c3f6fc95f56ee2eb09bcab489c572f64acbae052b636a7470900dd12317721f456d13bb00aed492b1f134b39ae8a23b58ffc5da6f724b9768c9b81f60a5b7b74e1863b63f67d757eaa798f37302a6a26909537b0bb5870df4d13bee66fb87d8c9bcce3d4da98359b00bf9cb7196e4b69341087f83a07c9c9f0f2d01caa5b4", 0xa4}], 0x1, &(0x7f0000000840)=[{0x40, 0x110, 0x4162cb2e, "613df00b6af397c3f92e4cd4698e7c0d375e6f1815f149418bdb673061952ac4d37ef5604656346790"}, {0xd8, 0x10a, 0x40, "94080055b2d2b282581c920f979b8fc387f4e15e2823c244d91038b2cfc3fe8804aa7728a2efb7594b08ed1ad9a235a32f5d423c707f95e35b5c7eea435b629b6ee7d0ecce566de8cbd1e6c978f94b40803f8a18edd4b1d5803f47465ae32eba4e0037a2a1ba9afddea530144528c424cba7c54dfbcc2432f194d45b49305abaad0394cbef05ddd78cb2969ed5046525917821c63e3e55ee96025a0883c479dedbd9457f5b922986213c24e5b6394108e87a52973b158731daa1bd8444690fbf1d1a"}, {0x58, 0x116, 0x2, "33548657861cda1ca79b63f5c06177908df1accd937473dd4a8804f4605f5351db460e6210ccd6f8dde3912e4962ea3764455e013bdd4094431432a94814fe9225"}, {0x1010, 0x120, 0x0, "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"}, {0xe0, 0x10c, 0x8, "53ea54d0899894b0927cc66badc4f79c6f5a4db8cbad36cf96f36192a7140e7562b80136daea15f33ec203f6cb3396d2ab9f19e5b6212ed5c4428f67784c3afae46f11063ebf191286eacb8eca83a884733050c47cb4f71b69d37ea5b8cc239c197870de593c297d123fe00f079b528ffc716954a271c83769e2d443b436f2b848931231b32e7e748ce6f58e9187f393cb220cc744fc9ecf5e772ce9d19912cc0014b1ab28e9937b0070209173f6f42657d6daafaaa6c6a582bbd276f2d723a804676137ca95c7b0a8"}, {0x1010, 0x104, 0x7fff, "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"}], 0x2270}, 0x4000084) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r10, @ANYRESOCT=r9, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) 21m52.684289792s ago: executing program 4 (id=3674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x3c, 0x0, 0x0) 21m51.915539196s ago: executing program 4 (id=3675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xfff1, 0xffff}, {0x4}}}, 0x24}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltfilter={0x8c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0xd, 0xffff}, {0xf, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0xc}]}}]}, 0x8c}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES16=r4, @ANYBLOB="15888844000700000dfb1088d4673b758647eb0200000000"], 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="158804e50300040008001b000000000008000d131730a200"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 21m51.324396736s ago: executing program 32 (id=3675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xfff1, 0xffff}, {0x4}}}, 0x24}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltfilter={0x8c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0xd, 0xffff}, {0xf, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0xc}]}}]}, 0x8c}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES16=r4, @ANYBLOB="15888844000700000dfb1088d4673b758647eb0200000000"], 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="158804e50300040008001b000000000008000d131730a200"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 12.916100762s ago: executing program 2 (id=7754): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 12.804193044s ago: executing program 2 (id=7755): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) write$char_usb(r2, &(0x7f0000001300)="92", 0x2) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000db168920402000d924a901020301090212000100000000"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000007980)=@newtaction={0x5a58, 0x30, 0x216822a75a8bdd29, 0x70bd29, 0x0, {}, [{0x1b4, 0x1, [@m_skbedit={0x68, 0xf, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x42}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}]}, {0x19, 0x6, "d071c811e405f818fc6cb3529b1fd1526aab31b2b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xc4, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x8d, 0x6, "00bc13ec10446140751a631a4604fbb8aa31b5482a9fed925182f9063df31f33b1787054db560387fb1ec3836ec595a602c10bf86e55ea718857f11538f2b5ba027b4059c885cb4cf7a75b40517b2021756c0e4b43fedcdfb0681db1952fc796d2e169b4751ca8db437af7419f2a8f675353728da256a6bbba3eacbbe3b0fc915fa67853506c327b65"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x84, 0xc, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x4e, 0x6, "3ca01d7baee1230c4823730c63d590e8c00463801422b676fa7afaf3aad21ca8239ca84aa0033b54950f8f6f540b3c9d7db5de909d27783334768f8ca5421dc6a98cbfd535b3ad75a70f"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x53e8, 0x1, [@m_ife={0x109c, 0x14, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9288}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @random="40fa8b0082c0"}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_TYPE={0x6, 0x5, 0x8a86}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xc}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}]}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_IFE_METALST={0x4}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x4348, 0x1d, 0x0, 0x0, {{0xb}, {0x42f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x5, 0x0, 0xc, 0x9, 0x8, 0x40, 0x800, 0x8, 0x5c2c, 0x1, 0xfffffff8, 0x7385bb26, 0x2, 0x34, 0x40, 0xc0, 0x4, 0x9, 0x100, 0x401, 0x6d02, 0x1, 0x5, 0xc02f, 0x5, 0x3, 0x90e, 0xd43e0000, 0x6, 0xb6, 0x4, 0x7, 0x8, 0x3ff, 0x8001, 0x4, 0x249, 0x7fffffff, 0xffffffff, 0x9, 0x7, 0xe, 0x5, 0x2, 0x4, 0x76fb, 0xffffffff, 0x2, 0x5a, 0x9, 0x9, 0x800, 0x3, 0x80000001, 0xd, 0x8, 0xe, 0x1, 0x7, 0x1e, 0x1, 0x9, 0x2800000, 0x7fffffff, 0x8, 0x40, 0x2, 0xfc, 0x1000, 0xf17, 0x7, 0x4, 0x4, 0x1360, 0xffffffd1, 0xffffffff, 0x8, 0x8, 0x8, 0x40, 0xffffff4e, 0x4, 0x3, 0x2, 0x3, 0xce, 0x81, 0x3, 0x91, 0x4, 0xeeb, 0x4, 0xbe97, 0x9, 0x1, 0x401, 0x0, 0x5, 0x40, 0x10001, 0x1000, 0x11, 0xa0, 0x200, 0xfffffff6, 0x4d, 0x6, 0x0, 0x6, 0x4, 0x5, 0xfff, 0x10001, 0x5a, 0x2, 0x5, 0x3, 0xd, 0x9, 0x9, 0x9, 0x9, 0xf, 0x2, 0x1, 0xff2, 0xffff85f2, 0xff, 0x401, 0x6cb6, 0x10001, 0x4, 0xc, 0x3, 0x1, 0xe1e, 0x8, 0x1000, 0x6, 0x46f, 0x9, 0x7f9, 0x3, 0x101, 0x8, 0x400, 0x6, 0x0, 0x33, 0x1, 0xa, 0xff, 0x4, 0x2, 0x9, 0x5, 0x7, 0x3, 0x3, 0x2, 0x2, 0x5, 0x7, 0x8, 0x6, 0x7f, 0x5310, 0x0, 0xfffffff9, 0x0, 0x250, 0x5, 0x4, 0x3549, 0x5, 0x20, 0x7f, 0x6, 0x53add259, 0x5, 0x4, 0x7000, 0x10000, 0x93, 0x4, 0x790, 0x2, 0xc7, 0x8, 0x6, 0x0, 0x3, 0x0, 0x4, 0x9, 0x1, 0x47, 0x800, 0xe, 0xa4, 0x3, 0x4, 0x5, 0x3, 0x0, 0x2, 0x200, 0x8, 0xfffffff9, 0x0, 0x2, 0x1, 0x7, 0x0, 0xe3, 0xd, 0x7f, 0x3, 0x3, 0x81, 0x9, 0x7, 0x2, 0x7, 0x2, 0x400, 0x8, 0xd, 0x1000, 0xc, 0x9, 0xffffff3e, 0x10, 0x5, 0x101, 0x8, 0x200, 0xbb14, 0x3, 0xb83, 0xb, 0x6, 0x2, 0x2c, 0x2, 0x10001, 0x0, 0x6, 0x9, 0x3, 0x2ef, 0x49, 0x5, 0x80000000, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0xffff, 0x4, 0x0, 0x5, 0x31, 0x3, 0xb3, 0x1bcf, 0x7fff, 0xfffff2d7, 0x1, 0x101, 0xb0db, 0xfffffff9, 0x9, 0x1, 0x1000, 0x20000, 0x9c, 0x6, 0x1c00, 0xffff, 0x80000000, 0x75d, 0x5, 0xfff, 0x10001, 0x9, 0x4839, 0x5, 0x0, 0x1, 0x101, 0x401, 0x1, 0x8, 0x401, 0x9, 0x2, 0x1, 0x7, 0x7fffffff, 0x4, 0x0, 0x2, 0x6, 0x3, 0xffffffff, 0x8001, 0xc0000, 0x10, 0xaf, 0x7f, 0x67df, 0x80000000, 0x80000001, 0x400, 0xfffff394, 0x2, 0x20000000, 0x3, 0x8, 0x0, 0x7, 0x101, 0x44, 0x649be5b0, 0x7, 0xffff, 0x3, 0x2, 0xf, 0x10000, 0xd, 0x2, 0x3, 0x8, 0xd6e, 0x6, 0x5, 0x8000, 0x8, 0xec7, 0xeee, 0x1ff, 0xfffffffa, 0x8, 0x200, 0x4, 0xffff, 0x7, 0xd5e4, 0x4, 0xffffdf88, 0x7, 0x8, 0x2, 0x1, 0x4, 0x0, 0x81, 0x5, 0x1, 0x2, 0x6, 0x9, 0x100, 0x9, 0x900000, 0x9, 0x0, 0x9, 0x6, 0x81, 0x71ba, 0xfffffff9, 0x0, 0x3, 0x6, 0x7ff, 0xb, 0x400, 0x9, 0xff, 0x1, 0x11, 0x2, 0x80000000, 0x4, 0x9, 0x400, 0xfffffff8, 0x3ff, 0x0, 0x7, 0x8, 0x5, 0x100, 0x6, 0x101, 0x10, 0xe, 0x3ff, 0x1ff, 0x2, 0x0, 0xe, 0x1, 0x7, 0x10, 0x0, 0x40000000, 0x7, 0xfffff5be, 0x2, 0xffffffff, 0x6, 0x0, 0x97, 0x2, 0xffffff3c, 0x3, 0x3, 0x7, 0x70, 0xffff8000, 0x800, 0x0, 0x3, 0x3, 0x8, 0x6, 0x7, 0x6, 0xffffffc4, 0x630dd7d5, 0x100, 0x1, 0x1806, 0x3, 0x29e, 0x2, 0x6, 0xcc, 0x6, 0x1, 0xfffffffa, 0x3, 0x80, 0x5, 0x1, 0xe, 0x7, 0x1f, 0x7fffffff, 0x9, 0x2, 0x7ff, 0x978, 0x1ff, 0x78, 0x5, 0x2, 0x4, 0x5, 0xd2, 0x2, 0x3, 0x80000000, 0x8000, 0xdf, 0x7fffffff, 0xff, 0xbe, 0x5, 0xa9, 0x5dfe, 0x10000, 0xb2c7, 0x6, 0xffff8001, 0xfd9, 0x684, 0x44ca6fe7, 0x10000, 0x0, 0x658e, 0x7, 0x73, 0x7, 0xc, 0xcb, 0x7ff, 0x4, 0x10001, 0x40, 0xfffffff6, 0x7fffffff, 0xffff8001, 0x5, 0x5, 0x2, 0x9, 0x9, 0x6, 0x1, 0xfffffff2, 0x8, 0x7, 0x604, 0x2, 0xd1f9, 0x2, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x331, 0x6, 0x4, 0x6, 0x3, 0x4, 0x5a95, 0x2, 0x2, 0x8, 0x1, 0x4, 0x0, 0x5ae8, 0x6, 0x30000000, 0x0, 0x5, 0x5, 0x1000, 0x9, 0x10, 0x3, 0xffffffff, 0x200000, 0x9, 0x40, 0x3d0b2948, 0x7, 0x4, 0x1, 0xb, 0xe9, 0x5, 0x8, 0x2, 0x1000, 0x9, 0x6, 0x7fff, 0x6, 0x7, 0x2, 0x1000, 0x6b049969, 0x86c, 0x7, 0xffff, 0x8, 0x10000, 0x7, 0x9, 0xffffffcf, 0x3, 0x4, 0x1, 0x5, 0x8, 0x9, 0xc, 0x7fffffff, 0x9, 0x7, 0x8782, 0x2, 0xa3, 0xe, 0x8000, 0x0, 0x9, 0x7b9d, 0x8, 0x7f, 0x3dff0f67, 0xc3, 0x1, 0x100, 0xe5e, 0x4, 0x8, 0x9, 0x2a, 0x7, 0x1, 0x9, 0x5, 0x1, 0xe0b, 0x80000001, 0x3, 0x0, 0x1, 0x9f640000, 0x35a9, 0x94, 0x8, 0x400, 0x4, 0x8, 0xa5, 0x7, 0x0, 0x6, 0xfff, 0x3, 0x3, 0x68d, 0x5, 0x7, 0x4, 0xff, 0x5, 0x401, 0x5, 0x9, 0x8, 0x6, 0xd2e, 0x10001, 0xffffffff, 0x4, 0x8, 0xe1, 0x593, 0xe1, 0x4, 0x6, 0x9, 0x8, 0x5, 0x9, 0x9, 0x0, 0x1, 0x6, 0x1, 0x7, 0x1, 0x2, 0xa4, 0x6, 0x951a, 0x295, 0xa1a, 0x2, 0x6, 0x5, 0x2, 0x19c00000, 0x2, 0x6, 0x101, 0xa, 0xffffffff, 0x9, 0x2, 0x4c997e1f, 0xcb, 0x8, 0x6, 0x5, 0xd8, 0x7, 0x40, 0x5, 0x1, 0x8, 0x8, 0x80000001, 0x3ff, 0x8, 0xb7, 0xfffffe2e, 0xfff, 0xfffffff4, 0x9, 0x101, 0x800, 0xae7e, 0x2, 0x9, 0x8, 0x4, 0x6, 0x1, 0x400000, 0xf04, 0x700000, 0x7fffffff, 0x3, 0x2, 0x694, 0x8, 0x80000000, 0x0, 0x98, 0x3, 0xfb87c668, 0x1, 0x3, 0x3, 0x6, 0x7fffffff, 0x7a, 0x5, 0x3a6d, 0x0, 0x2, 0x8, 0x8001, 0x9, 0x2e, 0x1, 0x4, 0x2, 0x1ff, 0x3, 0x1000, 0x7, 0x7, 0x697, 0x3, 0x10, 0x4, 0x8001, 0x80000001, 0x3, 0xffffffff, 0x2, 0x9022, 0x5, 0x5, 0x4, 0x7, 0xe67, 0x3, 0x200, 0x8, 0x5, 0x3, 0x4, 0xb, 0x0, 0x3, 0x401, 0x8, 0x8, 0x401, 0x101, 0x4bfa, 0x3, 0x400, 0xd5, 0x6, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x2, 0xfffffff7, 0x0, 0x310, 0x7, 0x900000, 0x1ff, 0x95b, 0x9, 0x8, 0x8, 0x3, 0x9, 0x7f, 0x9, 0x653a, 0x5, 0x3, 0x101, 0xda, 0xee, 0x3, 0x400, 0xef, 0x4, 0x1, 0x5879, 0x66, 0x3, 0x1440ba09, 0x7, 0x3, 0xf64, 0x4, 0x6, 0x6, 0x1, 0xfff, 0x2593, 0x8, 0x200000, 0x7, 0x7, 0xf, 0xcc, 0x0, 0xf, 0x100, 0x55, 0xfffffbff, 0x7ff, 0x4e9, 0x4, 0x4c, 0x6, 0x401, 0x10001, 0xfffffc00, 0x8, 0xff, 0x6, 0xe4d94279, 0x2, 0x219, 0x7, 0xdb, 0x2, 0x940, 0x101, 0x101, 0x7f, 0x3ff, 0xfffffffa, 0xfff, 0xfffffff4, 0x0, 0x8, 0x7ff, 0x7, 0x5, 0x10001, 0x7, 0xf, 0x10000, 0x0, 0x3, 0x3, 0x4fec, 0x5, 0x9, 0x2400, 0x6, 0x8c0f, 0x40, 0x8, 0x6, 0x81b, 0x8, 0x1, 0xfffffff7, 0x3, 0x1, 0x8, 0x6, 0xfffffffe, 0x3, 0xff, 0x4, 0x8, 0x41, 0x2, 0x9, 0x5, 0x24000, 0x10000, 0x4ae, 0x1, 0x3, 0x4, 0x7fffffff, 0xb2c5, 0x7, 0x1, 0x9e, 0x8, 0xfff, 0x9, 0x9, 0xfff, 0x9, 0x8, 0x9b, 0x7, 0x7, 0x5329, 0x4, 0x0, 0x10001, 0x9, 0x1, 0x5, 0x40, 0xb0, 0x86, 0xa7b5, 0x0, 0x0, 0x7, 0xd, 0xc09, 0x8, 0x3, 0x7, 0x5, 0xff, 0x0, 0x8, 0x24f, 0x100, 0x9, 0x4, 0x80000001, 0x5, 0x5, 0x8, 0x3, 0x81, 0xfffffff8, 0x7, 0x4, 0xeb, 0x5, 0x5, 0x6, 0x84, 0xd60d, 0xa, 0x6, 0x0, 0x6, 0xfffffff7, 0x0, 0x479f, 0x6, 0x9, 0x2, 0xe, 0xfffffffa, 0x7ff, 0x8001, 0x3, 0x5, 0x7, 0x1, 0x200, 0x7, 0x4, 0x9, 0x100, 0x1, 0x101, 0x4, 0xfffffffa, 0x1, 0x8, 0x6, 0x3, 0x2f8, 0x1, 0x1, 0x3ff, 0x6dfa0373, 0x9, 0x5, 0x0, 0xf1fb, 0x5, 0x8, 0x5, 0x9, 0xe445, 0x0, 0x0, 0xfffffff9, 0xffff0ca3, 0x1, 0xfffff801, 0xe, 0xfffffffe, 0xfffffffa, 0x10000000, 0x5, 0x10, 0x6, 0x8, 0x10, 0x6, 0x2, 0x8, 0x7, 0x40, 0x3, 0x4, 0x51800000, 0x4620, 0x0, 0x0, 0x0, 0x4, 0x80000000, 0x9, 0x8, 0x400, 0xe6a, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xdfd6, 0xd, 0xd, 0x7fffffff, 0x3, 0xfff, 0x2, 0x100, 0x1, 0x10, 0xf, 0x1, 0x0, 0x3, 0x730b, 0x6, 0x8a, 0xffffff81, 0x7, 0x7f, 0x40, 0x3, 0x51e8, 0xd, 0x7f, 0xfffffff7, 0x7, 0x3, 0x9, 0x1, 0x9, 0x7, 0x6, 0x0, 0x4, 0x7fffffff, 0x2, 0x4, 0xc5, 0x9, 0xff, 0x5, 0x6, 0x8, 0x7, 0x6153, 0xe, 0x6, 0x4, 0x6, 0x800000, 0x9, 0x2, 0xa, 0x6, 0x2, 0x6, 0x80000001, 0x4, 0x4, 0x9, 0xb, 0x4, 0x6, 0x5, 0x2, 0xb, 0xf, 0x7, 0x1, 0x7, 0x1ae22328, 0xf, 0xa, 0x74, 0x0, 0xffff7837, 0x7fff, 0xf8b6598, 0x9, 0x5, 0x8, 0x8, 0x2, 0x7, 0x2, 0xf8, 0x3, 0x4, 0x7, 0xfffffffc, 0x3ff, 0x3ff, 0xffffffff, 0x8001, 0x7, 0x8000, 0xfffff26d, 0xc3, 0xf, 0x6, 0x620, 0x70, 0x9, 0x3, 0x4, 0x3, 0x0, 0xc2, 0x9, 0xfffffffa, 0xffff4d89, 0x4, 0xa9, 0x78b, 0x7f, 0x8001, 0x6, 0x6, 0x3, 0xfffffff8, 0x6, 0x8, 0x81, 0x67f, 0xd, 0xf, 0xe0000000, 0x2, 0x2, 0x9, 0xfff, 0x4, 0x10000, 0x5, 0x2, 0x80000001, 0x80, 0x8000, 0x8, 0x2, 0x7, 0x2b05bd05, 0x10, 0x10000, 0x1, 0xe, 0x7, 0x9, 0x8, 0x8, 0x8, 0x80000000, 0x8, 0x9, 0xb, 0x40, 0x9, 0x9, 0x6, 0xe5b9, 0x7, 0x3, 0x1, 0x7, 0x5fc, 0x81, 0x8000, 0xffff, 0xff, 0x28000, 0xffff, 0x1ff, 0x564, 0x10000, 0x0, 0x4, 0x80, 0x40, 0x7, 0xb, 0x8000, 0x2, 0x5, 0x1, 0x6, 0xfffffff9, 0x2, 0x7, 0x9, 0x80000000, 0x8, 0x4, 0xab1, 0x5, 0xffffffff, 0x0, 0x400, 0x7f, 0x7, 0x5, 0x598a167f, 0x6, 0x5, 0x4, 0x8, 0x1, 0x400, 0x0, 0x5, 0x80000000, 0x0, 0x3, 0x4, 0x7, 0xf, 0x7, 0x4, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0x7, 0x0, 0x7, 0x507, 0x3, 0xde28, 0x786506ff, 0x101, 0xf8000000, 0x1, 0xe84, 0xfa1, 0x7, 0x4, 0x9f6, 0x3, 0x8001, 0x3, 0x8, 0x3ff, 0x12, 0x80, 0x1c00, 0x1, 0xfffffffc, 0x1, 0xfffffffc, 0xfffffffb, 0xae20, 0x1, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x4, 0x1, 0x80, 0x0, 0xe24d, 0x8, 0x2, 0x0, 0x9, 0x7de, 0x2, 0x9, 0x4, 0x3, 0x5, 0x1, 0x1, 0xe26e, 0x7, 0x5, 0x4c, 0xee18, 0x1, 0x3ff, 0x5, 0xa4b2, 0x0, 0x5, 0x0, 0x5, 0x4, 0x0, 0xffffffff, 0xfff, 0x3, 0x5a6, 0x5, 0xc0c, 0x1, 0x1, 0x0, 0xa1, 0x4e8, 0x100, 0x6, 0x5, 0xffffffff, 0x8, 0x11da02fa, 0x2, 0x1, 0x0, 0x4, 0x7, 0xffffffff, 0x6, 0x1, 0x80, 0x1, 0x40, 0x6, 0x6, 0x100, 0x2, 0x0, 0x1, 0x9, 0xfffffffb, 0xfff, 0xfffffff7, 0x7, 0x40000000, 0x6, 0x30, 0x5, 0x8000, 0xffff961c, 0xffff, 0x3, 0x4, 0x8, 0x7836f2a5, 0x1, 0x5, 0xb1e0, 0x9, 0xb, 0x2, 0xfffff000, 0x7fff, 0x8, 0x2, 0x5c3, 0xffffffff, 0x1, 0x6, 0xfff, 0x9d400000, 0x5, 0x7f, 0x6, 0x7, 0x401, 0x3ff, 0x8, 0x3, 0x8000, 0x1ff, 0x2, 0x0, 0x7fffffff, 0x3, 0x1, 0x10000, 0x5, 0xc, 0x9, 0x411f, 0x7, 0x3, 0x58c, 0x2, 0x40, 0xff, 0x9, 0xfffffffa, 0x0, 0x9, 0xffffffff, 0xb, 0xa, 0x498ddd02, 0xa35, 0x4, 0x366, 0x3, 0x0, 0xbb, 0x1000, 0x1254, 0x3, 0xc, 0x4, 0xffffff67, 0x7, 0x5, 0x1, 0x1, 0x0, 0x5, 0xd, 0x4, 0x9, 0x8, 0x53, 0x800, 0x6, 0x1, 0x5, 0x10001, 0xc6, 0xa69, 0x2, 0x7, 0x5c4, 0x1, 0x2, 0x4, 0x98, 0x25ce8d3a, 0x2, 0x35d7, 0xd, 0x1, 0x2, 0x9, 0x5, 0x1, 0x4, 0x1000, 0x2, 0x0, 0x80000000, 0x81, 0x5, 0xbae, 0x9, 0x8, 0x6, 0xfffffff9, 0x0, 0x8, 0x9, 0x7ff, 0xffe0000, 0x40, 0xfa82, 0x4, 0x1000, 0x1000, 0x6ee, 0x2, 0x3, 0x9, 0x4afc, 0x0, 0x1, 0x4, 0x72, 0xfffffff9, 0x401, 0x4f, 0xf7, 0xd553, 0x2, 0x7b, 0x0, 0x66, 0x8000, 0x4, 0xc9, 0x4, 0x8a4, 0x4, 0x3, 0x9, 0xfffffffb, 0x8, 0xc9, 0x8, 0x6, 0xfffffff8, 0x97, 0x6, 0xfffffff0, 0x80, 0x5, 0xfd, 0x9, 0x4c, 0x99, 0x7, 0x7, 0x0, 0x2, 0x2, 0x6, 0xfffffffd, 0xffffffff, 0x200, 0xb, 0x4, 0x2f39, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x660, 0x5, 0xb7ab, {0x6, 0x2, 0x3, 0xfbff, 0xfffd, 0x7}, {0x9, 0x0, 0x6, 0x1000, 0xf, 0x44b0}, 0x3, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xaacb, 0x3, 0x1, 0x1000, 0x80000000, {0x6, 0x0, 0x5, 0x0, 0x5}, {0xb, 0x0, 0x6, 0x4, 0x7, 0x3ff}, 0x3f, 0x3, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8cf0, 0x6, 0x3, 0x1, 0x1, 0x2, 0xe, 0x1a, 0x400, 0x0, 0x8000, 0x3443, 0xfff, 0x3, 0xe8, 0x0, 0x9, 0x3, 0x7, 0x9947, 0x101, 0x0, 0x3, 0x9, 0x4, 0x4, 0x6, 0xacb, 0xa, 0x3, 0x800, 0x4, 0x6cd9, 0x3, 0x4, 0x8, 0x8000, 0x577, 0x9, 0x10001, 0x1000, 0x7, 0xffff, 0xf, 0x8917, 0xe99, 0x7ff, 0xffffffe7, 0x36ee, 0x7, 0x0, 0x4, 0x97d1, 0x6, 0x3ff, 0x7, 0x5, 0x9520, 0x4, 0x7, 0x7fff, 0x2, 0x10000, 0x4, 0xf, 0xff, 0x9, 0x10000, 0xc, 0x6, 0x2, 0x8, 0x66e, 0x3, 0x1, 0x3d, 0x8000, 0x4ffe360b, 0x0, 0x6, 0xd0b, 0x1, 0x1, 0x8, 0x3, 0x8, 0x2, 0x8, 0x0, 0xeb1, 0x9, 0x80000001, 0x4, 0x3615, 0x6, 0x7, 0xc9be, 0x2, 0x3, 0x0, 0x7, 0xa, 0x400, 0xab, 0xfff, 0x200, 0x4, 0xa, 0xd01c, 0x80000000, 0x10000, 0x3ff, 0x2, 0x3, 0xffffffff, 0xfffffff8, 0x0, 0x24, 0x200, 0x4, 0xfffffff7, 0x2, 0x4, 0x6, 0x2, 0x8001, 0xf8, 0x71, 0x22d, 0xd, 0xc000000, 0x94b, 0x8ce, 0x5, 0x96, 0x1a, 0x65d, 0x1, 0x7fff, 0x9, 0x5, 0x1, 0x80000, 0x2, 0x2961, 0x2, 0x2, 0xb1cd, 0x9, 0x4, 0x4, 0x1ff, 0x78c, 0x9, 0x2, 0x9, 0xd07, 0x101, 0x10001, 0x5, 0x0, 0x5, 0x1b60, 0x8001, 0x8, 0x4, 0x1, 0x40, 0x10001, 0x3, 0x944, 0x7f000, 0x3, 0x3, 0x31, 0x3, 0xa, 0x997, 0x7, 0x3, 0x8d, 0x9, 0xf9b4, 0x7fff, 0x3, 0x1, 0x1ff, 0x28d2dfe6, 0x9, 0x3, 0x8, 0x9, 0x81, 0x5, 0x5e43c8af, 0x400, 0x7, 0x8da, 0x6, 0x1ff, 0x8, 0x2, 0x7, 0x9, 0x8, 0x7ff, 0x200, 0x3, 0xf, 0x74, 0x882, 0x81, 0x8, 0x2, 0x6, 0x8000, 0x80, 0x40, 0x2, 0x560, 0xc, 0xffff8000, 0x1, 0x800, 0x9, 0x8, 0x7ff, 0xec7, 0x3, 0x6, 0x2, 0x9, 0x2, 0x1, 0x10000, 0x1ff, 0x6, 0x8, 0x258, 0x6, 0x2, 0x5, 0x4, 0x1ff, 0x8000, 0x8000, 0x6, 0x4, 0x3b, 0x1, 0x9, 0xff, 0x80000000, 0x1, 0x7ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x4, 0x6, 0xfffffff8, 0x3, 0x200, 0x4, 0x7, 0xb05d, 0x6, 0x1, 0x7ff, 0x9, 0x5cf8, 0x3, 0x5a8, 0x2, 0x6, 0x80000, 0x2, 0x9, 0x4524, 0x8, 0x9, 0x4, 0x3ff, 0xfffffffb, 0xfffffff9, 0x8, 0x81, 0x8, 0x3, 0x19, 0xb, 0x0, 0x3, 0x1, 0x2, 0x100, 0x1c, 0x8, 0x1, 0x2, 0x6, 0x7609, 0x32f9, 0xfffffe01, 0x7, 0x3, 0x8001, 0x1, 0x6, 0x1bee, 0x6, 0x4, 0x3ff, 0x5, 0x9, 0x8, 0x3, 0x6, 0x3, 0x7c6b5e30, 0x5, 0x3, 0x4, 0x5, 0x7, 0x7, 0xa2a, 0xffffffff, 0x5, 0x2, 0xffffffff, 0x6, 0x0, 0x10000, 0x9, 0x6, 0x5, 0x4, 0x3, 0xb8, 0x1, 0xffff, 0x0, 0x1, 0x7, 0x7, 0x10, 0xffff, 0xfffffffd, 0x4, 0x401, 0x0, 0xb1d7, 0xfff, 0x0, 0x1, 0x4, 0x9, 0x7, 0xa7, 0x10, 0x9, 0xbb53, 0x80000000, 0x4, 0x7fffffff, 0x3, 0x5, 0x3, 0x3, 0x9, 0x4, 0x10, 0xdfe3, 0x6, 0x100, 0x7, 0xed5, 0x4, 0x5, 0x2, 0xc, 0x0, 0x3, 0xfffffdd2, 0x280f, 0xd, 0x9, 0xd922, 0x9, 0x8, 0x0, 0xc, 0x4, 0x95ad, 0x5, 0x7f, 0x1, 0x7, 0x1, 0x1, 0x2, 0x1, 0xf, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x20, 0x1, 0x9, 0x2, 0x0, 0x0, 0x7fffffff, 0x3ff, 0x7f, 0x6, 0x8, 0x8000, 0x3, 0x400, 0x5, 0x7, 0x1, 0x9e, 0x5, 0x1, 0x5f, 0x2, 0x40, 0x6, 0xff, 0x7, 0x5, 0x8, 0x7, 0x2, 0x9, 0xc, 0x93, 0x0, 0x9, 0x5, 0x7, 0x367afe7, 0x5, 0x20, 0x3, 0x8, 0x7, 0x2, 0x0, 0x0, 0x7, 0x2, 0x9, 0x9, 0xa9c, 0x98, 0x80, 0x2, 0x6, 0x6, 0x8, 0x1, 0x7fffffff, 0x2, 0xcdb, 0x5eb3, 0x2, 0x2, 0x0, 0x0, 0x1, 0x7, 0xfffffffd, 0x358, 0x401, 0x69, 0x7, 0x4, 0x1, 0x1, 0x1ff, 0x1, 0x84f8, 0x63a8, 0x7, 0x1, 0x5, 0x8, 0x7f, 0x3, 0x7, 0x7f, 0x3, 0x1, 0x0, 0x81a, 0x80000000, 0xbed9, 0xe4, 0x4, 0x800, 0x8, 0x9, 0x0, 0x7, 0x100, 0xfffffffc, 0x0, 0xe7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x41c2, 0x3, 0x3ff, 0x40, 0xa, 0xe, 0x6, 0x1000, 0x0, 0xffffffff, 0x6, 0x5be, 0x7, 0x145, 0x8, 0x7, 0x9, 0x7ff, 0x4, 0x2, 0x1, 0x3, 0x80000001, 0x3, 0x8000, 0x10000, 0xa1d, 0x5, 0x3, 0xffffffff, 0x4, 0xfffffffe, 0xfffffff9, 0x0, 0xfffff9db, 0x1, 0x4, 0x3, 0x9, 0x9, 0x8, 0xffff, 0x4, 0x0, 0x6, 0x5, 0x10, 0x1ff, 0x100, 0x1, 0x80000001, 0x4bc, 0x6, 0x10001, 0x1d6, 0x20000, 0xff, 0x9, 0x3, 0x401, 0x6, 0x5, 0xda8, 0x800, 0x72b3, 0x5, 0xfff, 0x200, 0x7, 0x5, 0x9, 0x6, 0x6, 0x4, 0x400, 0x4, 0x4, 0x1, 0x7, 0x6, 0x3, 0x1000, 0x3, 0x5, 0x7, 0x43c, 0x6, 0x6ca, 0x81, 0x4, 0xa, 0x81, 0xee9, 0x8000, 0x9, 0x6, 0x1, 0x7, 0x1000000, 0xf, 0xfff, 0x7, 0x1, 0x2, 0x7, 0x576576d3, 0x80000001, 0x3, 0x234, 0x0, 0x7, 0xe7, 0x5, 0x8b, 0x8, 0x8, 0x0, 0xfffffff8, 0x0, 0x9, 0x3, 0x0, 0x7bf, 0x4, 0x0, 0x1, 0xa5, 0x7, 0x80000, 0x5, 0x7fffffff, 0x0, 0x1, 0x6, 0x183, 0x3, 0xcd, 0x6, 0x3, 0x0, 0x3ff, 0xd705, 0x0, 0xecfc, 0x7fff, 0x3c2, 0x81, 0xab83, 0xbc, 0x80, 0x8, 0x4, 0x7, 0x7, 0x8000, 0xde, 0x4, 0x1, 0x200, 0x6, 0x81, 0x383, 0x0, 0x4, 0x9, 0xf, 0xa2c7, 0x7, 0xc, 0x97, 0x7, 0x3, 0x8, 0x80, 0xbfcf, 0xd, 0x0, 0x1, 0x100, 0xfffffffb, 0x7, 0x400d, 0x6, 0x6, 0x1, 0x0, 0x7fffffff, 0x9794, 0xfffffff7, 0x2, 0x9, 0x6, 0x1, 0x0, 0xfffffcea, 0x1, 0x5, 0x0, 0x0, 0x5, 0x9, 0x0, 0xdc11, 0xa, 0xc32f, 0x4, 0xc249, 0x9, 0x2, 0x2, 0x6, 0xaf8, 0xe282, 0x2, 0x2, 0x0, 0x9, 0x6, 0xfffffff7, 0xb2, 0xfffffffe, 0x0, 0x6, 0x0, 0x8000, 0x0, 0xfffffff9, 0x171, 0x5, 0x1, 0x0, 0x4, 0x7, 0x80000001, 0x9, 0xb43, 0xc, 0x7, 0x8dd, 0x0, 0xfffffd06, 0x6, 0x7, 0x5, 0x1000, 0x8, 0x9, 0x81, 0x6, 0x2, 0x4, 0xb19, 0x5, 0x8, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x4, 0xb9, 0xfffffffe, 0x7, 0x2, 0x1, 0x0, 0x800, 0x6, 0x1ff, 0x9, 0x200, 0x0, 0x8000, 0x2, 0x0, 0x5, 0x6, 0x100, 0x0, 0x4, 0xc3, 0x8, 0x8, 0x1, 0x7ff, 0x0, 0x4, 0x7, 0xe4, 0x1, 0x7, 0x4, 0xd6, 0x9, 0x3b0f, 0x7, 0x2, 0x3b5, 0x6, 0x0, 0x2, 0x5, 0x6, 0x1000, 0x8, 0x5, 0x2, 0x13a5, 0x4, 0xc7de, 0x7, 0x400, 0x55e9, 0x2, 0x700000, 0x682, 0x9, 0x6, 0xfffff722, 0x5af, 0x8, 0x4, 0x6, 0x9, 0xa3b9, 0x5, 0x1, 0x0, 0x1, 0xfffff001, 0x6, 0x7ff, 0x9, 0x401, 0xf, 0x5, 0xe, 0x4, 0xfffffffb, 0x7, 0x5, 0xe, 0x80000000, 0xfffffffa, 0x7, 0x4, 0x8001, 0x8, 0x7, 0x2, 0x0, 0xff, 0xb90a, 0x3, 0x2, 0x5, 0x0, 0x37940000, 0x2, 0x3, 0x7ff, 0xfffffffb, 0xa7, 0x6, 0x2, 0x4, 0x6, 0x9, 0xc, 0xffff, 0x69, 0x3, 0x9, 0xffff, 0xc0000000, 0x6, 0x7, 0x2, 0x2, 0x9, 0x8, 0x78, 0x4, 0x5, 0x1a5, 0x10001, 0xd9c8, 0x6, 0x7, 0xe9, 0x1611, 0x9, 0x2, 0x4, 0x7, 0x9, 0x8, 0xe8, 0x2, 0x3, 0x2750, 0x2, 0x101, 0x6, 0x1, 0xf214, 0xda, 0xa000, 0x3, 0x3, 0x0, 0x5, 0xfffffffb, 0x6, 0x4, 0xffffbd77, 0x5, 0x9, 0x80000000, 0x6, 0x80000001, 0x9, 0x0, 0x95, 0x84cd, 0x7, 0x0, 0xfff, 0x4, 0xaae, 0x40, 0x0, 0x9, 0x4, 0xaf98, 0x500, 0x2, 0x8, 0x1ba8, 0x7, 0x3, 0x8, 0x2, 0x80000001, 0x6075a576, 0x7, 0x7, 0x6, 0x400, 0x0, 0x3ff, 0x2, 0x4, 0x7fffffff, 0x6, 0xfff00000, 0x4, 0x0, 0x851, 0x1, 0x8, 0xbf, 0x1522, 0x101, 0xe359, 0x6, 0x7e, 0xe, 0x9, 0xa41, 0x7, 0x6, 0xb, 0xe, 0x7f, 0x6, 0x7, 0x2, 0x7fffffff, 0x8, 0x2, 0x253, 0x7, 0x80000000, 0x3276, 0x2, 0x401, 0x800, 0x400, 0x7, 0xfffffffb, 0xd210, 0x8a4, 0x8, 0xc, 0xfffffff7, 0x0, 0x10000, 0x0, 0x1, 0x4, 0x4, 0x8, 0x6, 0xd2a, 0xe64, 0x0, 0x8, 0x3, 0x19, 0x5, 0xa, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x1, 0x6, 0x7fffffff, 0x20a5fe5, 0xffffffff, 0x8, 0x4, 0xffffffff, 0x6, 0x6, 0x7, 0x3ff, 0x7, 0x400, 0x7, 0x7, 0x1, 0x0, 0x5, 0x4, 0x0, 0x7, 0x4, 0xa4, 0x40, 0x8, 0x3, 0x1, 0x7, 0x6, 0x3, 0x40, 0x5, 0x800, 0x8000, 0xfff, 0xffffffff, 0x36d3913f, 0x1, 0x4, 0x1, 0xb, 0xee, 0xc, 0xd230, 0xc3f6, 0x26b, 0x0, 0x400, 0x6, 0x6, 0x2, 0x1000, 0x2, 0x51, 0x8f, 0x8, 0x3, 0x80000001, 0x7d39, 0xffffffff, 0x80000000, 0x6, 0x3, 0xffffe03a, 0x8, 0x0, 0x101, 0xb, 0x94, 0x6, 0xfffffffe, 0xdad, 0x0, 0x6, 0x6, 0x9, 0x10000, 0x1722, 0x100, 0x9, 0x1ba, 0x3, 0xd, 0x4, 0xe, 0xa, 0x3ff, 0x8, 0xc1, 0xc7, 0xc2, 0x7, 0x9, 0x2, 0x4, 0x0, 0x7, 0x5, 0x7f, 0x2, 0xcf, 0x0, 0x80, 0x0, 0xac, 0x5, 0x765, 0x9, 0x5, 0x55e0, 0x0, 0xfffffffc, 0x7, 0x3, 0x8000, 0x2, 0x4, 0x1, 0x7, 0x10, 0x4, 0xfffffffc, 0xdd, 0x2, 0xfffffffe, 0x2, 0x3, 0x3, 0xfffffff8, 0x8, 0x0, 0x8, 0x9, 0x8, 0x9, 0x9, 0x4, 0x5, 0x80000001, 0x4, 0x7f, 0xfff, 0x9, 0xfffffff0, 0xf5, 0x7fffffff, 0x5, 0xffff, 0x2, 0x6, 0xfff, 0x8, 0xb, 0x3, 0x2, 0xfffffffd, 0xe3fb, 0x1ff, 0x0, 0xbe, 0x6, 0x9, 0x9, 0x87, 0xb1, 0xff, 0x2, 0x4, 0x6, 0x7ff, 0x7fffffff, 0x401, 0x2, 0x5, 0x5, 0x8, 0x8, 0x9, 0x5, 0x5, 0xfffffff9, 0x8, 0x8001, 0x4, 0x29, 0x0, 0x8, 0xc19, 0xd95, 0x8001, 0xff, 0x5, 0xfffffffb, 0x2, 0xb8e, 0x0, 0x5fabbf6e, 0x80000001, 0x5, 0x6, 0x0, 0x1, 0xff, 0x1, 0x81, 0x7fff, 0x9, 0x7f, 0x4, 0x2, 0x7, 0x2, 0x42d6, 0x6, 0x83, 0x2, 0x9, 0x4, 0x7, 0x7fffffff, 0x6, 0x9, 0x3, 0xfffffff7, 0xfffffffa, 0x101, 0x6a8b, 0x7fff, 0x524d, 0x2cf6, 0x6, 0x8001, 0x2, 0xfffff7d0, 0x5, 0xfffffffe, 0x6, 0x8, 0x5, 0x3, 0x101, 0xffffff34, 0x2, 0x0, 0x4, 0xd69d, 0x2, 0x101, 0x4d0000, 0x4, 0x5, 0x3, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x35b1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x69, 0x3f5, 0x11, {0x0, 0x2, 0x93f8, 0xe, 0x5, 0x9}, {0x5, 0x2, 0x2, 0x9, 0xa}, 0xcf, 0x9, 0x5}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xfffffffffffffff7, 0x5, 0x6, 0x8, {0xea, 0x0, 0x800, 0x1, 0x7, 0x4f}, {0x3, 0x2, 0x7fff, 0x0, 0x6, 0x5}, 0x8b2, 0xffffffff, 0x4}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6451, 0x5, 0x5, 0x0, 0x76, {0x1b, 0x0, 0x8, 0x200, 0x101, 0x2}, {0x4, 0x0, 0x2, 0xc93d, 0x1, 0xffffffff}, 0x800, 0xb, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xff, 0x2, 0x3ff, 0x0, 0xd981, 0xffff, 0x4, 0xffffffff, 0xa1, 0x1603, 0x5, 0x9, 0x3, 0x2, 0x3, 0x8, 0x3ff, 0x1000, 0x101, 0xff, 0x6, 0x4, 0x1, 0x4, 0xab, 0x401, 0x7, 0xa, 0x4, 0x2, 0x9, 0x8, 0x5, 0xd2b, 0xfffffffb, 0x1, 0x9, 0x10000, 0x6, 0x8, 0x8, 0xffffff03, 0x6, 0x5, 0x0, 0x5, 0x1, 0x7fff, 0x8, 0xb, 0x45, 0x8000, 0xffff, 0x54, 0x1, 0x7, 0x823, 0x3, 0x401, 0x10001, 0x8, 0x9, 0x1000, 0x333, 0x40, 0x9, 0x8, 0x0, 0xdbd, 0x200, 0x8001, 0x40, 0x8000, 0x8, 0x3, 0x2, 0x7, 0x3, 0x8, 0x7fffffff, 0x1d, 0x3, 0x7c96cf6, 0x8001, 0x73c4, 0x3, 0xda, 0x4, 0x3, 0x35, 0x5, 0x8, 0x400, 0x840, 0x3ed, 0x3, 0x10001, 0x0, 0xec, 0xfffffff9, 0x5, 0xb4, 0xdfc2, 0x401, 0x1928b077, 0x400, 0x926, 0x7, 0x9, 0x9, 0xc, 0xe65, 0x100, 0x0, 0x7, 0x1, 0x9, 0x82f0, 0x400, 0x4, 0x8, 0x6, 0x8, 0x9, 0x100, 0x7f, 0x0, 0xf3b, 0x6, 0x3, 0x3c2, 0xfffffffd, 0x8, 0x2, 0x2, 0x8, 0x7ff, 0x5, 0x5, 0x6, 0x7ff, 0x3f7d, 0x3, 0x7, 0xc193, 0x0, 0x6, 0x80000000, 0x3d, 0x8, 0x8bb8, 0x10, 0x1ff, 0x3, 0x9, 0x7, 0x10000, 0x6, 0x7, 0x1, 0x3, 0x9, 0x4, 0x7, 0xc, 0x3, 0x9, 0x40, 0x7ff, 0x9, 0x5, 0xffffff63, 0xf9c, 0x2, 0x3, 0x4, 0x6, 0x2, 0xfa71, 0x11a7, 0x4, 0xa, 0x8, 0xffff, 0xb22b, 0xfffff801, 0x9, 0x4, 0xa82, 0x2, 0x5357, 0x8000, 0xce4, 0x5, 0x40, 0x0, 0xffffffff, 0x1, 0x1b, 0x5, 0x5, 0xb877, 0x6, 0x4, 0xc37, 0x7, 0x800, 0x81, 0x7, 0x65e, 0x7, 0x80, 0x5, 0x1, 0x2, 0x3, 0x6, 0x8, 0x8, 0xef, 0x3, 0x8, 0xc, 0xa1, 0x7, 0x59, 0xee, 0x6, 0x80000001, 0x1, 0x3, 0xfffffffa, 0xd81, 0xcb, 0x9, 0x7fff, 0xd, 0x1, 0x2, 0x4, 0x40000, 0x7, 0x8, 0x9, 0x5, 0x5, 0x8, 0x800, 0x40, 0x0, 0x5, 0x401, 0xff, 0x5, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3b28, 0x5, 0x7fffffff, 0x6, 0x3, 0x9, 0x521, 0x6, 0xfffffff2, 0x9, 0x0, 0x7, 0x8, 0x1, 0x5, 0xca9f, 0x800, 0xb53ba148, 0xa, 0x80000001, 0xfffffffe, 0x1, 0x8, 0xfffffffb, 0x3, 0x91, 0xffff, 0x9, 0x0, 0x9, 0x4, 0x10001, 0x6e, 0x8, 0x3, 0x80000001, 0x8001, 0x19ae, 0x200, 0xfffffff9, 0x9b, 0x80000001, 0x77, 0x0, 0x7, 0x4, 0x2, 0x2, 0x5, 0x1, 0x3ff, 0xbce6, 0x277, 0xffffffff, 0x1, 0x3, 0x2, 0x0, 0x4, 0x8, 0x8, 0x6, 0x6b, 0x8, 0xffffffff, 0x4, 0x101, 0x6, 0x7, 0x3ff, 0x8001, 0x6, 0x4, 0x100, 0xbf8, 0xf, 0xb, 0x9, 0x2, 0x2, 0x7395, 0x8, 0xb, 0x1, 0x3, 0xb, 0xee, 0x5, 0x4, 0x1000, 0xfff, 0x7, 0xd2a, 0x9, 0x4, 0x3, 0x7100, 0x8, 0x80000000, 0x800, 0x9b, 0x3, 0x10000, 0x1, 0x2, 0x25a6, 0xa, 0x4, 0x5, 0x63, 0x782, 0xf, 0x2, 0xd, 0x2, 0x9, 0x8, 0x81, 0x1, 0x3, 0x6, 0xc000, 0x663, 0x10000, 0x0, 0x46aecba1, 0x7, 0x10000, 0xa, 0xdea, 0x3fd, 0x81, 0x3, 0x0, 0x9, 0x10000, 0x2, 0x7, 0x0, 0x0, 0x7, 0x2, 0x9, 0x73a, 0x10001, 0x0, 0x1, 0x8, 0xffffff70, 0xdb, 0x40, 0x8, 0x200, 0x4, 0x0, 0xc0000000, 0x3, 0xed41, 0x2, 0x58e, 0x5, 0xca, 0x7fffffff, 0x0, 0x4, 0x5, 0x4, 0x200, 0x1, 0x8000, 0x20000000, 0x4, 0xa8d6, 0x5a4b, 0x40, 0x3, 0x4, 0x6, 0x8, 0x9, 0x7fffffff, 0x9, 0x6080, 0x2, 0x4, 0x5, 0x6, 0xfffffff8, 0x1, 0x6, 0xf, 0x0, 0xb, 0x586, 0xe, 0x3, 0x0, 0x8, 0x3, 0x80000001, 0xfffffff9, 0x7, 0x0, 0x8, 0x1, 0x80, 0x6, 0x2, 0x7, 0x0, 0x9, 0x896, 0x8, 0x4, 0x9, 0xfffffff9, 0x3, 0xfffffffd, 0x5, 0x5, 0x4, 0xa30, 0xffffff80, 0xf, 0x5, 0x6, 0x40, 0x9, 0x7ff, 0x8, 0x80000001, 0x5, 0xdc, 0x32, 0x200, 0x6361, 0x1, 0x5, 0x3, 0x3, 0x6, 0x8, 0x4, 0x3, 0x1ff, 0x1, 0x5, 0x10, 0x800, 0x0, 0x3e62, 0x6, 0x9, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9e00}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4db7, 0x0, 0x8, 0xfffffff9, 0x4, 0x919, 0x8, 0x0, 0xf2e6, 0x6, 0x34e, 0x9, 0x4, 0x5, 0x7, 0xfffffffd, 0xff, 0x7f, 0x0, 0x1, 0x1000, 0x4, 0x9, 0x8, 0x1, 0x1, 0x1, 0x1, 0x4, 0x1000, 0x8, 0x9, 0x6, 0x5, 0x0, 0xfffff6e2, 0x9, 0x4, 0x7fffffff, 0x3, 0x14, 0x184d, 0xfff, 0x25, 0x5, 0x3, 0x3, 0x10, 0x5, 0xffff, 0x1, 0x101, 0xe43, 0x7ff, 0x81, 0x4, 0x7, 0x9, 0x2, 0x6e4b, 0xcd69, 0x8, 0x0, 0x2, 0x4, 0x4, 0x3, 0x3ff, 0x1e13, 0x3, 0x10001, 0x2, 0x73, 0x1, 0xc, 0x1, 0x4, 0x8, 0x101, 0x2, 0x0, 0x8, 0xc6bb, 0x8, 0x6, 0x0, 0x7a, 0x3, 0x7f, 0xe306, 0x3, 0x9, 0x8, 0x77, 0x540bd007, 0x92, 0x6, 0x7, 0x69, 0x800, 0x0, 0x3, 0x4, 0x9, 0xffffffff, 0x3d, 0x6, 0x9, 0x7, 0x4, 0xf32f, 0xc4, 0x7, 0x6, 0x7, 0x1000, 0x10, 0x9, 0xc69f, 0x6, 0x5, 0x0, 0x4, 0x1, 0x1, 0x8, 0x37, 0x5, 0x7fffffff, 0xe, 0x6, 0xc6, 0x8, 0x7fffffff, 0x5, 0x30, 0x3, 0xa, 0xb, 0x9, 0x8, 0x1, 0x2, 0x2b73df79, 0x0, 0xf0, 0x4, 0xbab, 0x5, 0x0, 0x9, 0x0, 0x828, 0xc, 0x0, 0x5, 0x236d9795, 0x9, 0xb62f, 0x62c2, 0x6, 0x0, 0xd26, 0x3, 0x8, 0x7, 0x0, 0xce1, 0xff, 0x7, 0x7, 0x7, 0x6, 0x5, 0x0, 0x88, 0x0, 0x30, 0x5, 0x9, 0x5, 0x6f5c, 0xfffffff9, 0x5, 0x101, 0xffffff8d, 0x1, 0xe, 0x7, 0x8, 0x0, 0x2, 0xa463, 0x8, 0x7ff, 0xfffffbff, 0x8, 0x1, 0x3, 0xff, 0x3, 0x3, 0x1, 0x7, 0x5, 0x5, 0x3, 0x3, 0x5, 0x0, 0x58, 0xaa, 0x8, 0xa3, 0xe3f, 0x4, 0x7ff, 0x101, 0x7, 0x1, 0x3, 0x3, 0x9, 0x7, 0x3, 0x0, 0x8, 0x7f, 0x9, 0x10000, 0x100, 0xe, 0x4, 0xf, 0xeee, 0x2, 0x6a8, 0x6, 0x73, 0x6, 0x7, 0xffffffff, 0xb9, 0x81, 0x9479, 0xfffffffb, 0x401, 0x24a8a62e, 0x3, 0x1, 0xd, 0x9, 0xc, 0x1ff, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x0, 0xffff, 0xc1e4, 0x9, 0x3, 0x1d, 0x8, 0x0, 0xc, 0x589, 0x6, 0x10000000, 0x5, 0x16cdec5b, 0xfffffffe, 0x3, 0x6, 0x7f, 0x77c, 0x1, 0x4f7, 0x8, 0x3, 0x1, 0x80000000, 0x40, 0x5, 0x101, 0x8, 0x7fffffff, 0x50ac9986, 0x0, 0x3f, 0x5, 0x3, 0x4, 0xffffffff, 0x80000001, 0xc6e, 0x8, 0x1f5, 0x5, 0x7cb3, 0x0, 0x3, 0x6, 0x6, 0x2, 0x4, 0x3, 0x9, 0x4, 0x7, 0x2, 0xf, 0x6, 0x4, 0xff, 0x4, 0x3, 0x80000000, 0xfff, 0xce, 0xe, 0x1000, 0x2, 0x80000000, 0x4, 0xfffffff9, 0x5, 0x3, 0x9, 0x5ca, 0x6, 0x4000400, 0xffffffff, 0x52, 0x7, 0x0, 0x5, 0x0, 0x0, 0x6407, 0x2, 0x2, 0x6, 0xde, 0x0, 0x6, 0x9, 0x9, 0x200, 0x7, 0x10001, 0x40, 0xd, 0x7fffffff, 0x52e, 0x7, 0x8, 0x7, 0x5, 0x0, 0x1, 0x0, 0x3, 0xb, 0xffff0000, 0xdf, 0x6, 0xdbf, 0x3, 0x5167, 0xc, 0x101, 0x1a0, 0x9, 0x5, 0x8, 0x6, 0x9, 0x1, 0x4, 0x3, 0xfd08, 0x1ff, 0x5, 0x1000, 0xec, 0x5, 0x9, 0x8, 0x200, 0x6, 0x4, 0xffffffff, 0x7, 0x3, 0x401, 0x9, 0x2, 0x1af8, 0xe, 0x9, 0x5794, 0x9, 0x8, 0x4, 0x0, 0x9, 0x7, 0x1ff, 0x9, 0x1ff, 0x8, 0x2, 0x1, 0x0, 0x5, 0x7, 0xa52, 0xf21, 0x9, 0x9, 0xea54, 0x145, 0xd, 0x0, 0x800, 0x10, 0x7c, 0x4, 0x5, 0x5, 0x7, 0x1, 0x97b, 0x70000, 0xfffffff7, 0x7, 0xffff, 0x3, 0x3, 0x6e6, 0x6, 0xf507, 0x8, 0xfffffffa, 0x927, 0x4, 0xe, 0x2, 0x9, 0x0, 0x80000001, 0x4, 0x2, 0x40, 0x437c, 0xfffffffa, 0x8, 0x40, 0xe, 0x4, 0x4, 0x7, 0x5f0, 0x4, 0x6, 0x8, 0x4, 0x5, 0x4, 0x7, 0xb, 0x4, 0x3, 0x1, 0x5, 0x3ff, 0x8, 0x4, 0x5, 0x2e, 0x4, 0x8, 0x533, 0xe8, 0x74, 0x3, 0xf331, 0x6, 0x9, 0x0, 0xf, 0x8, 0x1, 0x2, 0x8000, 0x1, 0x1ff, 0x1, 0x3, 0x1, 0x4, 0xe0, 0x9, 0x9, 0xb, 0xd49d54c4, 0x3, 0x4, 0x4, 0x3, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdf}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x0, 0x1, 0x80000000, 0x8, 0x0, 0x0, 0xffff8000, 0x3f5d, 0x5, 0x2400000, 0x4, 0xc, 0x8, 0x2, 0x0, 0x0, 0x6, 0x0, 0x6, 0x4, 0x6e, 0x0, 0x5, 0xa, 0x5d, 0x7a47, 0x5, 0xffff8001, 0xd, 0x7, 0x0, 0x6, 0xc42acf17, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x9, 0x3, 0xfffffc01, 0x8001, 0x8, 0x9, 0xffffffff, 0xe, 0xfffffffa, 0x4, 0x0, 0xfffffffc, 0x0, 0x4, 0x7, 0xbd, 0x5, 0x0, 0x0, 0x9, 0x6, 0xb300, 0xff, 0x6, 0x2800, 0xcd, 0x7897, 0xf8, 0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x7eaa, 0x2, 0x2, 0x7, 0x3, 0x9, 0x80000000, 0x1, 0x7ff, 0x9, 0x4, 0x9, 0xdb, 0x2f, 0x9, 0x0, 0x5, 0x6, 0x8, 0xb, 0xf2c4, 0x1, 0x1ff, 0xfffffffc, 0x70, 0x9, 0x8, 0x5, 0x101, 0x8, 0xfff, 0x4, 0x2, 0x800, 0x3, 0x3, 0xc07, 0x1, 0x3, 0x3, 0xfffffff7, 0x800000, 0x7, 0xfffffff2, 0x372, 0x8, 0x8001, 0x1ff, 0x1d, 0x3, 0x8, 0x8, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0x1, 0x29, 0x40, 0x3a1b, 0x80, 0x8, 0x5, 0x6, 0x5a, 0x1, 0x8, 0x40, 0x7fffffff, 0x40, 0x1, 0x27, 0x4, 0xc18, 0x5, 0x5, 0x401, 0x3, 0x10, 0xfffffff9, 0x2, 0x8, 0x0, 0x0, 0x8, 0x9, 0x40, 0x2, 0xbbb2, 0x3, 0x8, 0x3, 0x0, 0x7, 0x3, 0x81, 0x8, 0x100, 0x8000, 0x3, 0x8, 0x9, 0x3, 0x5, 0x7, 0x9700000, 0x5cff, 0x7fff, 0x80000000, 0x4, 0x739, 0x4, 0x4, 0x3, 0x3, 0x1, 0x7ff, 0x2, 0x1, 0x4, 0x8000, 0x7ff, 0x5, 0x3, 0x6, 0xfbf5, 0x9d, 0x6518, 0x4, 0xf, 0x8, 0x4d7e, 0x4, 0x7, 0x1, 0x4, 0x20, 0x10, 0x9c, 0x226, 0x9, 0x1, 0xb0ca, 0xfff, 0x27, 0x1e, 0x0, 0xfffffffe, 0x4, 0x10001, 0x101, 0x3, 0x4, 0x7fffffff, 0xfffffffe, 0x7f, 0x4, 0x4f, 0x7, 0x6, 0x2, 0x8, 0x85, 0x66, 0x4, 0x0, 0x7fff, 0x9, 0x4, 0x5, 0xed9, 0x0, 0x5, 0x615a, 0x1, 0x2, 0x6, 0x3ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x24000000000000}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x0, 0xb803, 0x5f5, 0xfc28, {0x6, 0x3, 0x7, 0x4, 0xff, 0xa}, {0x6, 0x1, 0xd, 0x3, 0x2, 0x7b26}, 0x4, 0xc, 0xffffff7f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0xfff, 0x18, 0x4, {0x7e, 0x1, 0x0, 0x8b3, 0x800, 0x31}, {0x7, 0x1, 0x4, 0x2, 0x0, 0xb7}, 0x1, 0xe343, 0x4}}]]}, {0x26, 0x6, "c21bb1e9fee5f1c450a62e45b9ab887e0cd91c01c307d2f3ac2af2ce66d2369c430a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x198, 0x1, [@m_csum={0xa0, 0x17, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x856c, 0x6aa, 0x20000000, 0x6, 0x9}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x57bb, 0x2, 0x4, 0x10}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d8, 0x142d, 0x4, 0x6, 0x8000}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x54, 0x8, 0x2}, 0x33}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0xf4, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0xc6, 0x6, "ca36e9154471dfa4fafe6965c12b030c6883bb7527b24ab631c59d0db34e09c5a52afb56937ce0beed3ea2fd5b1007ca7514d31e6e12136368160f180f288175ca349087fd5f318aa45595bedb20a29dc9cb5c97e2975881a9d0a25fd2f9083943434cbc2c0918ec81cbf3650cabac8043b87749d8eafee6bf7fcb88660f02706035f0d2a5adaa78a482c7c0a0f9edd57e28d22f4dcd28d33afafbe6a689bd305f06223816dc17dbb62eaa4c7ca6a11c0852cd4a98ce17155bc3e60ec5a9777870ca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x310, 0x1, [@m_xt={0x160, 0x7, 0x0, 0x0, {{0x7}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x4c, 0x6, {0x1000, 'raw\x00', 0xe7, 0xcb7c, "5a1dbbaea09c95d3ab7b0343525dc529f2fd0b99a9592e29113def862052267b87cf"}}, @TCA_IPT_TARG={0xd8, 0x6, {0x1, 'raw\x00', 0x0, 0xff, "220fbd1f59982ec30da1d7acfceffcec03638b31dd875828dd2c4ab3a8df40e6d18e8a0f01f80cea61aacc13d17b636458da07f4a7b49ccf0bfad468b75ae29d4fdd40646fb3ea98dd614a699b6531465c30337f01aea7a6d7c1b9c97689419d3aa35815c74dd6e5df3bd686d2adeb06535f15fb78a2e1aefcbfd941fc053665fc89ac63604871069f45fecd1242003da29f573116ce803bc34cddd8a537754c30725f9067c646d84bd1652a6b17"}}]}, {0xc, 0x6, "09fc84c463c8ae9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x74, 0x11, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x401}]}, {0x38, 0x6, "327599e619848cf7b05a53a3dea87d03893a4c6b827a9b0be36d6649ba41b9e7128e56fc87cca26e454ad8f732e2dcd9f80dbf74"}, {0xc}, {0xc}}}, @m_connmark={0x138, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x3, 0x8, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x1, 0xb, 0x5}, 0x9}}]}, {0xcd, 0x6, "76afbc85944620965468d98025ee7c9e820e38eea3be9923bf4d90efec2344d5fbd74c1d25422f27bec58f8aa3d2cd77ea9ffb8b64071ac1ee8ece97e354067b9e3269484ef151ce3214dc922ecf5d57429fcbace18fba17d4c3ab58c7569716468aa0124771228f4f08712e4d3b581c545a973ab7e0edb57310ec30a243057021f9187ee7d5afc688213320ce37af6a202eb8a553aa387c1db573d4ed420a6907364bc3e6efde08c57da96867bc984c8a8ee235e35e7b9b8575696b836f7982b403743dc5ca33cc81"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x5a58}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r5 = syz_io_uring_setup(0x231, &(0x7f0000002200)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000020c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2}) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r8, &(0x7f0000000280), 0x0, 0x6, 0x0) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000000), 0x4) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0) fcntl$notify(r9, 0x402, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000600)='net/sockstat\x00') read$FUSE(r10, &(0x7f000001a140)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) 12.487876903s ago: executing program 5 (id=7756): syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) r0 = socket(0x5, 0x800, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x10b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x207d, 0x845e, 0x0, 0x0, 0xfffffffffffffebe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) 10.959447993s ago: executing program 5 (id=7760): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x58, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) timer_create(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, 0x0, &(0x7f00000012c0)='./file0\x00', 0x8, 0x2) r4 = syz_open_dev$video(&(0x7f0000000040), 0xffffffff7ffffffd, 0x149e80) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x8, "2ba84d2bb7d4446179426133adf648f352147a2064b5f46093d5282687bcdd54", 0x1, 0x10001, 0x0, 0xb000, 0x3000004, 0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f000058a000/0x1000)=nil, 0x1000, 0x9) 10.540709226s ago: executing program 3 (id=7761): r0 = semget$private(0x0, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) map_shadow_stack(&(0x7f0000bd9000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r5, &(0x7f00000002c0)='./file0\x00', r5, &(0x7f00000003c0)='./bus\x00', 0x0) setns(0xffffffffffffffff, 0x24020000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x24, r7, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x0, 0x1000}], 0x1, &(0x7f0000000240)={0x77359400}) 9.487973197s ago: executing program 0 (id=7767): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fc6000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000003c0)="460fc7bccf708a00002ef2440f23b1670f32c4a24d8c6000450fc772086446f4f2410f0866baf80c66baf80cb8ec9b2b83b9890400000f3266bafc0c66ed66bafc0cb9800000c00f3235000100000f300f07650f01df", 0x56}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@broadcast, 0x4e22, 0x10000, 0x1, 0x80012d58, 0x12d5c}}, 0x44) 9.310649292s ago: executing program 0 (id=7768): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f000000cd40)=[{{&(0x7f0000005ec0)=@caif, 0x80, &(0x7f0000006080)=[{&(0x7f0000005f40)=""/6, 0x6}, {&(0x7f0000005f80)=""/194, 0xc2}], 0x2, &(0x7f00000060c0)=""/105, 0x69}}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/226, 0xe2}, {&(0x7f0000007240)=""/175, 0xaf}], 0x3, &(0x7f0000007340)=""/22, 0x16}, 0x9}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000007640)=""/129, 0x81}, {&(0x7f0000007700)=""/132, 0x84}, {&(0x7f00000077c0)=""/25, 0x19}, {&(0x7f0000007900)=""/224, 0xe0}, {&(0x7f0000007a00)=""/142, 0x8e}, {&(0x7f0000007ac0)=""/180, 0xb4}, {&(0x7f0000007b80)=""/4096, 0x1000}, {&(0x7f0000008b80)=""/197, 0xc5}], 0x8}, 0x5}], 0x3, 0x10000, 0x0) 9.213876977s ago: executing program 2 (id=7769): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r6 = socket(0x29, 0x2, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x40, r7, 0x7fff}, 0xc) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r8 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r8}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) ioctl$FBIOGETCMAP(r9, 0x4604, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 8.629570806s ago: executing program 0 (id=7770): syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) r0 = socket(0x5, 0x800, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x10b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x207d, 0x845e, 0x0, 0x0, 0xfffffffffffffebe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) 8.590077586s ago: executing program 3 (id=7771): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/14, 0xe}, 0x100}], 0x1, 0x60, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r5, 0x0, 0x0, 0x26c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000480)={0x1, 0x1, 0x0, 0xffffffffffffffff, 0x701a, 0x726dc14, 0x6b18024f, 0x3, 0x1ff, 0x1, 0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 7.618555959s ago: executing program 2 (id=7772): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000003c0)=0x6e5, 0x8, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r6, r5}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x8, 0xef, 0x0, 0x0, 0x1, 0x1000a}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000180)={'nr0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) readv(r6, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 7.050086062s ago: executing program 5 (id=7773): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20000206) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000300)="0f225c66b876000f00d8c4c179174cfa3566b870000f00d8c7442400eb000000c7442402ee000000ff2c2448b8f1d00000000000000f23d00f21f835300000000f23f8640f01c9c44159fc4904f2d3253327000066420f388062dc", 0x5b}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000240)={0x14, &(0x7f0000000480)={0x40, 0x30, 0xc0, {0xc0, 0x4, "0a7f125da4315f941f643439736ddf4b3693a753e269cafffc28609b5e196ce8d93ee45bedb622c5f26acfe742f9b03a72647f6db91715da93fb555c20f9066e5075f3257e23386c2c185dadae15d559ffe75c714adbbafb95de6e9815002b981865c45ea0296f1b3d2f12752eac872d7c5bb585e3b4f5c68b96604bd543c77fdc9c44fdd714675fe7e5acef5f228ddd755e98d8f7e7db2427eb7159283b380b5a6d4240f14b3aa98bd7b256b2f90fdaf7cef8e4ad693550d6bb28436834"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000680)={0x40, 0x31, 0x9a, "5d72b877dccc13dabc9872124224de6275980ff59e5512c93d845396c498e5140081ce8080b555b4144ffab29b8e7c1de9879bdaa9fe76e3f0a07f6871fc9c06d93d90c5d547dc7af93c76b0eec227af14a6c1a34e8bac0b6ad43f87c1111f77daf2ad171e32c602dbd433f36a1c44d18ab11835a6d12d2538d611a9780c6bf2be7d3bac37a0d904be41dcb1592ae3875c85fb2e77fae8b96f79"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0xc0, 0x5, 0x3, "845ad2"}, &(0x7f0000000580)={0x40, 0x5, 0x6, "24431c7cf528"}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000400)={{0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={@align=0xffffffff, {0x0, 0x7fff, 0xe6e, 0x400}}, 0x6, 0x0, &(0x7f0000000180)=0x8}, 0x0, 0x0}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000001480), &(0x7f00000014c0)=0x4) write$UHID_CREATE(r9, &(0x7f0000000080)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) 6.525597715s ago: executing program 0 (id=7775): socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1d, 0x3, 0x7ffc) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x9, 0xccb, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) tgkill(r5, 0x0, 0x3f) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000ff0100000000000000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0000000000bcfd87def84eec17632c70996ce3e38d4f01b2dd86a155ac0516"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x19, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) 4.851644713s ago: executing program 3 (id=7780): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f000000cd40)=[{{&(0x7f0000005ec0)=@caif, 0x80, &(0x7f0000006080)=[{&(0x7f0000005f40)=""/6, 0x6}, {&(0x7f0000005f80)=""/194, 0xc2}], 0x2, &(0x7f00000060c0)=""/105, 0x69}}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/226, 0xe2}, {&(0x7f0000007240)=""/175, 0xaf}], 0x3, &(0x7f0000007340)=""/22, 0x16}, 0x9}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000007640)=""/129, 0x81}, {&(0x7f0000007700)=""/132, 0x84}, {&(0x7f00000077c0)=""/25, 0x19}, {&(0x7f0000007900)=""/224, 0xe0}, {&(0x7f0000007a00)=""/142, 0x8e}, {&(0x7f0000007ac0)=""/180, 0xb4}, {&(0x7f0000007b80)=""/4096, 0x1000}, {&(0x7f0000008b80)=""/197, 0xc5}, {0x0}], 0x9}, 0x5}], 0x3, 0x10000, 0x0) 4.686392652s ago: executing program 3 (id=7781): r0 = socket(0x1d, 0x2, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xfffffffffffffffe, 0xcb16f622762491ce) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'team0\x00', @broadcast}) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="87", 0x1}], 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="22ce6fb76cb72fe0a253e249b466681cfd9ddabe0e7389194fcaf6185b67f028b2d4582458a04aee65abfce3976702e877b89b8e051b1c459efcc253d90107152cca7522822334ce42cba3c087b46fbcf15a8b80b7a851debb9c1c44db90ed555eb325f83b4d7ecf5cabc56a3b70b4a273410014a61e27008b694ad7be5e2846c2b99e64e30a8c1af7ba5204930008401403e77fd312ba34c836fe9b5f091664a091153c9518e1adc2beefd5", @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) (async) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000480)=""/22, &(0x7f0000000340)=0x16) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000640)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/10, 0xa, 0x2, 0x12}}, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.348665596s ago: executing program 2 (id=7782): r0 = semget$private(0x0, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) map_shadow_stack(&(0x7f0000bd9000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r5, &(0x7f00000002c0)='./file0\x00', r5, &(0x7f00000003c0)='./bus\x00', 0x0) syz_pidfd_open(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x24, r7, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x0, 0x1000}], 0x1, &(0x7f0000000240)={0x77359400}) 4.231774111s ago: executing program 3 (id=7783): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x58, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) timer_create(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, 0x0, &(0x7f00000012c0)='./file0\x00', 0x8, 0x2) r4 = syz_open_dev$video(&(0x7f0000000040), 0xffffffff7ffffffd, 0x149e80) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x8, "2ba84d2bb7d4446179426133adf648f352147a2064b5f46093d5282687bcdd54", 0x1, 0x10001, 0x0, 0xb000, 0x3000004, 0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f000058a000/0x1000)=nil, 0x1000, 0x9) 3.817148561s ago: executing program 1 (id=7785): syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) r0 = socket(0x5, 0x800, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x10b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x207d, 0x845e, 0x0, 0x0, 0xfffffffffffffebe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) 3.716384296s ago: executing program 5 (id=7786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffffa4, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r1, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x9575, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000000)={&(0x7f00002c7000/0x1000)=nil, 0x1000}) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000002000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r7, 0x0, 0x0, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) unshare(0x6e000000) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) io_uring_enter(r3, 0x2e06, 0x3071, 0x0, 0x0, 0xa5) 2.63442369s ago: executing program 2 (id=7787): unshare(0x2c020400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) 2.321435922s ago: executing program 1 (id=7788): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2010, 0xfe}) 2.100058959s ago: executing program 1 (id=7789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) unshare(0x2c020400) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000008, 0x6c033, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x12, 0x80, 0xf1, 0x7fffffff, 0xd, 0x4233, 0xffffffeffffffffd, 0x8000007d, 0x4, 0x8001, 0x80, 0x0, 0x7fffffff, 0x4, 0xfffffffffffffffb], 0x4e001, 0x84f90}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, 0x0, 0x1, 0x48, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f0000000240)=ANY=[], 0xfdef) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r8, &(0x7f0000000140)='net/dev_mcast\x00') (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.969016485s ago: executing program 0 (id=7790): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x87) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002300)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x40, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r8 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="000300"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) 1.74615424s ago: executing program 5 (id=7791): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f000000cd40)=[{{&(0x7f0000005ec0)=@caif, 0x80, &(0x7f0000006080)=[{&(0x7f0000005f40)=""/6, 0x6}, {&(0x7f0000005f80)=""/194, 0xc2}], 0x2, &(0x7f00000060c0)=""/105, 0x69}}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/226, 0xe2}, {&(0x7f0000007240)=""/175, 0xaf}], 0x3, &(0x7f0000007340)=""/22, 0x16}, 0x9}, {{0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000007640)=""/129, 0x81}, {&(0x7f0000007700)=""/132, 0x84}, {&(0x7f00000077c0)=""/25, 0x19}, {&(0x7f0000007900)=""/224, 0xe0}, {&(0x7f0000007a00)=""/142, 0x8e}, {&(0x7f0000007ac0)=""/180, 0xb4}, {&(0x7f0000007b80)=""/4096, 0x1000}, {&(0x7f0000008b80)=""/197, 0xc5}, {0x0}], 0x9}, 0x5}], 0x3, 0x10000, 0x0) 1.560357628s ago: executing program 1 (id=7792): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x800}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe0, 0xb}, {0x10, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.212771703s ago: executing program 5 (id=7793): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000002440)=""/140) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000400)={0x28, 0x10002, 0x0, r5, 0x39302b, 0x1000000004aa, 0x3, 0x2390d8}) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r7, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r8 = syz_io_uring_setup(0x14af, &(0x7f0000000200)={0x0, 0x86fb, 0x200, 0x0, 0x29e}, &(0x7f0000002000)=0x0, &(0x7f0000002280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x4, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48ed, 0x0, 0x2, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) write$FUSE_DIRENT(r3, &(0x7f0000002380)={0x90, 0x0, r6, [{0x2, 0x8000000000000000, 0xa, 0x10, '/dev/fuse\x00'}, {0x2, 0x2365, 0x0, 0x3ff}, {0x2, 0xd8a00000, 0x1, 0x800, '\x00'}, {0x0, 0x732, 0x1, 0xfdea, '\x00'}]}, 0x90) 747.580485ms ago: executing program 3 (id=7794): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x4) writev(r4, &(0x7f0000001500)=[{&(0x7f00000004c0)="b98d947ea74f2621d0b27c4a293db0971f3aa9f1354624195948238f37ce2f28549d8757ca2a8ff33105ac6ceab8fc35861835c139b7dd010a4b066a720859dec8963946b66ff8f71a123c1d3f04aabbb1782a42dbdb", 0x56}, {&(0x7f0000000240)}, {0x0}, {&(0x7f0000000340)}], 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 169.061147ms ago: executing program 1 (id=7795): io_uring_setup(0x3b45, &(0x7f00000002c0)={0x0, 0x86a1, 0x800, 0x0, 0x20000004}) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x30, 0x1a, 0xc01, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0x5, 0xffffffff, 0x0, 0x2000000}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 135.498759ms ago: executing program 0 (id=7796): syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) r0 = socket(0x5, 0x800, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x10b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x207d, 0x845e, 0x0, 0x0, 0xfffffffffffffebe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) 0s ago: executing program 1 (id=7797): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x87) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002300)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x2}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x40, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r8 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="000300"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) kernel console output (not intermixed with test programs): high-speed USB device number 117 using dummy_hcd [ 2647.780260][ T29] audit: type=1326 audit(1772951837.713:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2647.945870][ T6119] usb 2-1: Using ep0 maxpacket: 32 [ 2647.984397][ T6119] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2647.995528][ T6119] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2648.005798][ T6119] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2648.017687][ T6119] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2648.028850][ T29] audit: type=1326 audit(1772951837.713:12966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2648.029904][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.127184][ T6119] usb 2-1: Product: syz [ 2648.141675][ T6119] usb 2-1: Manufacturer: syz [ 2648.147686][ T29] audit: type=1326 audit(1772951837.713:12967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2648.158086][ T6119] usb 2-1: SerialNumber: syz [ 2648.659651][ T29] audit: type=1326 audit(1772951837.713:12968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2648.682337][ T29] audit: type=1326 audit(1772951837.713:12969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2648.704852][ T29] audit: type=1326 audit(1772951837.713:12970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2648.727499][ T29] audit: type=1326 audit(1772951837.713:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2648.727527][T24445] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 2648.750074][ T29] audit: type=1326 audit(1772951837.713:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8370 comm="syz.5.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d299c799 code=0x7ffc0000 [ 2648.797328][ T6119] usb 2-1: config 0 descriptor?? [ 2649.176119][T24445] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2649.196742][T24445] usb 1-1: config 0 has no interface number 0 [ 2649.224800][T24445] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2649.249294][T24445] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2649.265578][T24445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2649.275529][T24445] usb 1-1: Product: syz [ 2649.279977][T24445] usb 1-1: Manufacturer: syz [ 2649.289006][ T5828] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2649.308311][T24445] usb 1-1: SerialNumber: syz [ 2649.315778][T24445] usb 1-1: config 0 descriptor?? [ 2650.045919][ T6119] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 2650.054591][ T6119] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 2650.139449][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 2650.156980][ T5828] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 2650.165188][ T5828] usb 4-1: config 0 has no interface number 0 [ 2650.195623][ T5828] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2650.215250][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.242378][ T5828] usb 4-1: config 0 descriptor?? [ 2650.256524][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2650.267868][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.286238][ T5828] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2650.455313][ T8398] netlink: 'syz.2.7387': attribute type 12 has an invalid length. [ 2650.463461][ T8398] netlink: 'syz.2.7387': attribute type 29 has an invalid length. [ 2650.472621][ T8398] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7387'. [ 2650.625543][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2650.674749][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2650.683625][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.694324][T24445] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2650.778510][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2650.789069][ T9] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2650.799905][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.843518][ T9] usb 6-1: selecting invalid altsetting 3 [ 2650.869979][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 2650.889410][ T9] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2650.941623][ T9] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 2650.985757][ T5828] gspca_vc032x: reg_w err -110 [ 2650.990591][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2650.996803][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.002138][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.007744][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.013067][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.019092][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.030490][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.041914][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.049074][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.054914][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.061989][ T9] usb 6-1: USB disconnect, device number 43 [ 2651.074434][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.081045][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.086581][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.092026][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.097887][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.103382][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.109709][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.115217][ T5828] gspca_vc032x: I2c Bus Busy Wait 00 [ 2651.121621][ T5828] gspca_vc032x: Unknown sensor... [ 2651.126918][ T5828] vc032x 4-1:0.255: probe with driver vc032x failed with error -22 [ 2651.517333][ T5828] usb 2-1: USB disconnect, device number 117 [ 2651.577270][ T8409] syzkaller0: entered promiscuous mode [ 2651.582820][ T8409] syzkaller0: entered allmulticast mode [ 2651.594357][ T8409] tipc: Enabled bearer , priority 0 [ 2651.879248][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.886079][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.986083][T24445] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 2652.035185][T24445] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 2652.052462][T24445] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 2652.092766][T24445] usb 1-1: USB disconnect, device number 108 [ 2652.105938][ T5828] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2652.265731][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 2652.274869][ T5828] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2652.297127][ T5828] usb 2-1: config 0 has no interface number 0 [ 2652.314618][ T5828] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2652.325362][ T8406] tipc: Resetting bearer [ 2652.331731][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.343848][ T5828] usb 2-1: Product: syz [ 2652.357273][ T5828] usb 2-1: Manufacturer: syz [ 2652.368140][ T8406] tipc: Disabling bearer [ 2652.380454][T13307] usb 4-1: USB disconnect, device number 101 [ 2652.392010][ T5828] usb 2-1: SerialNumber: syz [ 2652.399944][ T5828] usb 2-1: config 0 descriptor?? [ 2652.418826][ T5828] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2652.611909][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7395'. [ 2652.632246][ T8422] netlink: 'syz.3.7394': attribute type 10 has an invalid length. [ 2652.679739][ T8422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2653.332409][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7398'. [ 2653.341810][ T8438] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7398'. [ 2653.389792][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7397'. [ 2653.399465][ T8436] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 2653.405999][ T8436] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2653.445800][ T8436] vhci_hcd vhci_hcd.0: Device attached [ 2653.532257][ T5828] gspca_spca1528: reg_w err -71 [ 2653.542950][ T8440] vhci_hcd: connection closed [ 2653.543244][ T5780] vhci_hcd vhci_hcd.1: stop threads [ 2653.553848][ T5780] vhci_hcd vhci_hcd.1: release socket [ 2653.565606][ T5828] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 2653.566375][ T5780] vhci_hcd vhci_hcd.1: disconnect device [ 2653.580672][ T5828] usb 2-1: USB disconnect, device number 118 [ 2653.593704][ T8443] syzkaller0: entered promiscuous mode [ 2653.676647][T24445] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2653.702951][ T8443] syzkaller0: entered allmulticast mode [ 2653.886978][ T8447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2654.685549][ T1211] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2654.693516][ T6119] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2654.866106][ T6119] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2654.876513][ T6119] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2654.884249][ T6119] usb 2-1: can't read configurations, error -71 [ 2655.015523][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 2655.022408][ T1211] usb 1-1: config 0 has no interfaces? [ 2655.127937][ T8465] syzkaller0: entered promiscuous mode [ 2655.133518][ T8465] syzkaller0: entered allmulticast mode [ 2655.169918][ T1211] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 2655.180068][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.182778][ T8460] tipc: Enabled bearer , priority 0 [ 2655.195043][ T1211] usb 1-1: Product: syz [ 2655.199795][ T1211] usb 1-1: Manufacturer: syz [ 2655.204424][ T1211] usb 1-1: SerialNumber: syz [ 2655.259848][ T1211] usb 1-1: config 0 descriptor?? [ 2655.348631][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7405'. [ 2655.358476][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7405'. [ 2655.453548][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7408'. [ 2655.504152][T24445] usb 1-1: USB disconnect, device number 109 [ 2655.870546][ T8454] tipc: Resetting bearer [ 2655.927041][ T8454] tipc: Disabling bearer [ 2656.614046][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7413'. [ 2656.625543][ T6119] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2656.798991][ T6119] usb 1-1: Using ep0 maxpacket: 16 [ 2656.819163][ T6119] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2656.841737][ T6119] usb 1-1: config 0 has no interface number 0 [ 2656.856189][ T6119] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2656.872595][ T6119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.882342][T24445] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2656.890619][ T6119] usb 1-1: Product: syz [ 2656.895557][ T6119] usb 1-1: Manufacturer: syz [ 2656.900190][ T6119] usb 1-1: SerialNumber: syz [ 2656.918126][ T6119] usb 1-1: config 0 descriptor?? [ 2656.937878][ T6119] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2657.005619][ T1211] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2657.047420][T24445] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 2657.055791][T24445] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2657.070030][T24445] usb 4-1: config 0 has no interface number 0 [ 2657.082396][T24445] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2657.100438][T24445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.116035][T24445] usb 4-1: Product: syz [ 2657.125886][T24445] usb 4-1: Manufacturer: syz [ 2657.130645][T24445] usb 4-1: SerialNumber: syz [ 2657.152318][T24445] usb 4-1: config 0 descriptor?? [ 2657.157452][T30863] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2657.168280][ T1211] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2657.182464][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2657.193813][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 2657.207099][ T1211] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2657.216547][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.224605][ T1211] usb 3-1: Product: syz [ 2657.229032][ T1211] usb 3-1: Manufacturer: syz [ 2657.233682][ T1211] usb 3-1: SerialNumber: syz [ 2657.256926][ T1211] usb 3-1: config 0 descriptor?? [ 2657.303715][ T8499] syzkaller0: entered promiscuous mode [ 2657.309543][ T8499] syzkaller0: entered allmulticast mode [ 2657.321846][T30863] usb 6-1: Using ep0 maxpacket: 32 [ 2657.329415][T30863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2657.339735][T30863] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2657.349787][T30863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2657.351749][ T8499] tipc: Enabled bearer , priority 0 [ 2657.372600][T30863] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2657.382145][T30863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.404410][T30863] usb 6-1: Product: syz [ 2657.455333][T30863] usb 6-1: Manufacturer: syz [ 2657.460705][T30863] usb 6-1: SerialNumber: syz [ 2657.474488][T30863] usb 6-1: config 0 descriptor?? [ 2657.493864][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2657.504321][T24445] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 2657.511856][T24445] uvcvideo 4-1:0.64: No valid video chain found. [ 2657.524255][T24445] usb 4-1: USB disconnect, device number 102 [ 2657.546866][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2657.748252][ T6119] gspca_spca1528: reg_w err -71 [ 2657.765757][ T6119] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 2657.803838][ T6119] usb 1-1: USB disconnect, device number 110 [ 2657.890304][T30863] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 2657.898498][T30863] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 2657.999891][ T8496] tipc: Resetting bearer [ 2658.025334][ T8496] tipc: Disabling bearer [ 2658.147895][ T8495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.157139][ T8495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.240419][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7419'. [ 2658.828757][ T8513] binder: BINDER_SET_CONTEXT_MGR already set [ 2658.838036][ T8513] binder: 8512:8513 ioctl 4018620d 200000000040 returned -16 [ 2659.571829][T13307] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2659.899275][T30863] usb 6-1: USB disconnect, device number 44 [ 2660.045579][T13307] usb 2-1: Using ep0 maxpacket: 8 [ 2660.054752][T13307] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2660.067008][T13307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.104911][T13307] usb 2-1: Product: syz [ 2660.139030][T13307] usb 2-1: Manufacturer: syz [ 2660.160505][T13307] usb 2-1: SerialNumber: syz [ 2660.186040][T13307] usb 2-1: config 0 descriptor?? [ 2660.212527][T13307] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2660.237973][T13307] pctv452e: pctv452e_power_ctrl: 1 [ 2660.237973][T13307] [ 2660.265653][T13307] usb 2-1: selecting invalid altsetting 3 [ 2660.278024][T13307] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2660.278024][T13307] [ 2660.309076][T13307] dvb-usb: bulk message failed: -22 (5/0) [ 2660.333132][T13307] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2660.374237][T13307] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2660.400813][T13307] usb 2-1: media controller created [ 2660.424969][ T8524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7422'. [ 2660.434931][T13307] dvb-usb: bulk message failed: -22 (8/0) [ 2660.457763][T13307] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2660.488434][T13307] dvb-usb: MAC address reading failed. [ 2660.561049][T13307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2660.829341][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7426'. [ 2660.840332][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7426'. [ 2660.874216][T13307] DVB: Unable to find symbol stb0899_attach() [ 2660.881532][T13307] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2660.979167][T13307] rc_core: IR keymap rc-tt-1500 not found [ 2660.984963][T13307] Registered IR keymap rc-empty [ 2660.991614][T13307] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2661.010601][T13307] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input157 [ 2661.026911][T13307] dvb-usb: schedule remote query interval to 100 msecs. [ 2661.034504][T13307] pctv452e: pctv452e_power_ctrl: 0 [ 2661.034504][T13307] [ 2661.041964][T13307] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2661.078325][T13307] usb 2-1: USB disconnect, device number 121 [ 2661.155498][ T5828] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2661.177862][T13307] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2661.243789][ T8546] netlink: 'syz.1.7429': attribute type 3 has an invalid length. [ 2661.300292][ T4636] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 2661.317501][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 2661.328923][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2661.341483][ T5828] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 2661.351116][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2661.360290][ T5828] usb 6-1: Product: syz [ 2661.364571][ T5828] usb 6-1: Manufacturer: syz [ 2661.369596][ T5828] usb 6-1: SerialNumber: syz [ 2661.380515][ T5828] usb 6-1: config 0 descriptor?? [ 2661.397630][ T5828] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2661.407907][ T5828] usb 6-1: Detected SIO [ 2661.412206][ T5828] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 2661.420777][ T5828] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 2661.431468][ T5828] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2661.647178][ T6119] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2661.684201][ T6633] usb 6-1: USB disconnect, device number 45 [ 2661.717857][ T6633] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2661.757133][ T6633] ftdi_sio 6-1:0.0: device disconnected [ 2661.785549][T30863] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2661.835751][ T6119] usb 2-1: Using ep0 maxpacket: 32 [ 2661.843359][ T6119] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 2661.854255][ T6119] usb 2-1: config 0 has no interface number 0 [ 2661.860957][ T6119] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2661.872054][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2661.887914][ T6119] usb 2-1: config 0 descriptor?? [ 2661.899468][ T6119] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2661.945601][T30863] usb 4-1: Using ep0 maxpacket: 32 [ 2661.953585][T30863] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2661.964737][T30863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2661.978762][T30863] usb 4-1: config 0 descriptor?? [ 2662.007171][ T8560] binder: BINDER_SET_CONTEXT_MGR already set [ 2662.013327][ T8560] binder: 8555:8560 ioctl 4018620d 200000000040 returned -16 [ 2662.086652][ T5828] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2662.191151][T30863] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2662.201903][T30863] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2662.211413][T30863] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2662.245547][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 2662.252865][ T5828] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2662.263066][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2662.331138][ T5828] usb 1-1: selecting invalid altsetting 3 [ 2662.347532][ T5828] comedi comedi5: could not set alternate setting 3 in high speed [ 2662.361005][ T5828] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2662.447568][ T5828] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 2662.492715][ T5828] usb 1-1: USB disconnect, device number 111 [ 2662.615614][ T6119] gspca_vc032x: reg_w err -110 [ 2662.620816][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.626832][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.632305][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.836455][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.845769][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.851323][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.859910][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.865276][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.875072][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.881870][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.895514][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.905772][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.915747][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.921907][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.927859][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.960284][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.970136][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.979447][ T6119] gspca_vc032x: I2c Bus Busy Wait 00 [ 2662.986965][ T6119] gspca_vc032x: Unknown sensor... [ 2662.992298][ T6119] vc032x 2-1:0.255: probe with driver vc032x failed with error -22 [ 2663.128102][ T8564] syzkaller0: entered promiscuous mode [ 2663.146989][ T8564] syzkaller0: entered allmulticast mode [ 2663.629178][ T9] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 2663.798357][ T9] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2663.808638][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2663.835532][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2665.016493][ T9] usb 2-1: USB disconnect, device number 122 [ 2665.211197][ T4636] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 2666.803002][ T6119] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2667.061593][ T4636] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 2667.145914][ T6119] usb 2-1: Using ep0 maxpacket: 32 [ 2667.193519][ T6119] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2667.230255][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2667.255734][ T5828] usb 1-1: USB disconnect, device number 112 [ 2667.368384][ T6119] usb 2-1: config 0 descriptor?? [ 2667.625182][ T6119] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2667.880785][ T1211] iguanair 3-1:0.0: failed to get version [ 2667.887554][ T1211] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 2667.909961][ T1211] usb 3-1: USB disconnect, device number 94 [ 2669.015627][ T5828] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2669.187636][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 2669.225256][ T5828] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2669.237496][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.423124][ T5828] usb 1-1: selecting invalid altsetting 3 [ 2669.451211][ T5828] comedi comedi5: could not set alternate setting 3 in high speed [ 2669.510708][ T5828] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2669.552839][ T5828] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 2669.689447][ T5828] usb 1-1: USB disconnect, device number 113 [ 2669.789754][ T8646] syzkaller0: entered promiscuous mode [ 2669.799567][ T8646] syzkaller0: entered allmulticast mode [ 2669.930604][ T8650] tipc: Enabled bearer , priority 0 [ 2670.450879][ T8639] tipc: Resetting bearer [ 2670.637381][ T8639] tipc: Disabling bearer [ 2670.863451][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7457'. [ 2671.050634][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7457'. [ 2671.381722][ T8667] vlan2: entered promiscuous mode [ 2671.412184][ T8667] bridge0: entered promiscuous mode [ 2671.663193][ T8665] tipc: Enabled bearer , priority 0 [ 2672.008437][ T8658] tipc: Disabling bearer [ 2672.075509][ T5828] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2672.225639][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 2672.238164][ T5828] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2672.270952][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.366730][ T5828] usb 3-1: Product: syz [ 2672.435512][ T5828] usb 3-1: Manufacturer: syz [ 2672.500460][ T5828] usb 3-1: SerialNumber: syz [ 2672.650580][ T5828] usb 3-1: config 0 descriptor?? [ 2672.688295][ T5828] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2672.696388][ T5828] pctv452e: pctv452e_power_ctrl: 1 [ 2672.696388][ T5828] [ 2672.703772][ T5828] usb 3-1: selecting invalid altsetting 3 [ 2673.138645][ T5828] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2673.138645][ T5828] [ 2673.138948][ T1211] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2673.149078][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 2673.208320][ T8674] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7460'. [ 2673.227415][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2673.280800][ T5828] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2673.290717][ T5828] usb 3-1: media controller created [ 2673.297177][ T5828] dvb-usb: bulk message failed: -22 (8/0) [ 2673.306713][ T5828] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2673.330321][ T5828] dvb-usb: MAC address reading failed. [ 2673.362401][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2673.427949][ T1211] usb 6-1: Using ep0 maxpacket: 8 [ 2673.448165][ T5828] DVB: Unable to find symbol stb0899_attach() [ 2673.454963][ T5828] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2673.495985][ T1211] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2673.551604][ T1211] usb 6-1: config 0 has no interface number 0 [ 2673.571418][ T1211] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2673.617402][ T1211] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2673.652133][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2673.714969][ T1211] usb 6-1: config 0 descriptor?? [ 2673.747301][ T5828] rc_core: IR keymap rc-tt-1500 not found [ 2673.761196][ T1211] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2673.783313][ T5828] Registered IR keymap rc-empty [ 2673.836779][ T5828] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2673.924336][ T5828] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input158 [ 2673.983873][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2673.996043][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2674.086334][ T5828] dvb-usb: schedule remote query interval to 100 msecs. [ 2674.104384][ T8702] binder: BINDER_SET_CONTEXT_MGR already set [ 2674.110655][ T8702] binder: 8696:8702 ioctl 4018620d 200000000040 returned -16 [ 2674.343302][ T5828] pctv452e: pctv452e_power_ctrl: 0 [ 2674.343302][ T5828] [ 2674.364383][ T5828] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2674.445514][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 2674.451538][ T9] dvb-usb: error -22 while querying for an remote control event. [ 2674.565538][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2674.571464][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2674.803466][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2674.812921][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2674.945692][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2674.951539][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2675.033195][ T1211] usb 3-1: USB disconnect, device number 95 [ 2675.151651][ T1211] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2675.596242][ T8708] pim6reg: entered allmulticast mode [ 2675.847923][ T1211] usb 6-1: USB disconnect, device number 46 [ 2675.993981][ T8723] netlink: 'syz.5.7471': attribute type 3 has an invalid length. [ 2676.056255][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 2676.056267][ T29] audit: type=1326 audit(1772951866.163:13050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2676.087448][ T29] audit: type=1326 audit(1772951866.163:13051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2676.333280][ T29] audit: type=1326 audit(1772951866.163:13052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2676.652331][ T29] audit: type=1326 audit(1772951866.163:13053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2676.985524][ T29] audit: type=1326 audit(1772951866.163:13054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2677.075453][ T29] audit: type=1326 audit(1772951866.163:13055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2677.122651][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7472'. [ 2677.201695][ T8732] bridge14: port 1(veth13) entered blocking state [ 2677.253286][ T29] audit: type=1326 audit(1772951866.163:13056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2677.298929][ T8732] bridge14: port 1(veth13) entered disabled state [ 2677.340813][ T8732] veth13: entered allmulticast mode [ 2677.379495][ T29] audit: type=1326 audit(1772951866.163:13057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2677.398614][ T8732] veth13: entered promiscuous mode [ 2677.480378][ T8733] bridge14: port 2(veth15) entered blocking state [ 2677.492593][ T8733] bridge14: port 2(veth15) entered disabled state [ 2677.499615][ T8733] veth15: entered allmulticast mode [ 2677.506493][ T8733] veth15: entered promiscuous mode [ 2677.596419][ T29] audit: type=1326 audit(1772951866.163:13058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2677.703820][ T8741] tipc: Enabling of bearer rejected, already enabled [ 2677.750998][ T29] audit: type=1326 audit(1772951866.163:13059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8720 comm="syz.3.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f991939c799 code=0x7ffc0000 [ 2678.177129][ T5828] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2678.427171][ T5828] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 2678.436140][ T5828] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2678.461335][ T5828] usb 6-1: config 8 has no interface number 0 [ 2678.471944][ T8750] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7476'. [ 2678.578289][ T5828] usb 6-1: config 8 interface 177 has no altsetting 0 [ 2678.693385][ T5828] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2678.794191][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.113127][ T8758] gtp0: entered promiscuous mode [ 2679.119015][ T8758] team0: Device gtp0 is of different type [ 2680.546809][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7480'. [ 2680.656039][ T8767] bridge29: port 1(veth27) entered blocking state [ 2680.662794][ T8767] bridge29: port 1(veth27) entered disabled state [ 2680.672197][ T8767] veth27: entered allmulticast mode [ 2680.684916][ T8767] veth27: entered promiscuous mode [ 2680.750060][ T8770] bridge29: port 2(veth29) entered blocking state [ 2680.757172][ T8770] bridge29: port 2(veth29) entered disabled state [ 2680.769064][ T8770] veth29: entered allmulticast mode [ 2680.779321][ T8770] veth29: entered promiscuous mode [ 2680.838768][ T5828] usb 6-1: USB disconnect, device number 47 [ 2683.167826][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7488'. [ 2683.370604][ T8808] tipc: Enabled bearer , priority 0 [ 2683.386345][ T8808] syzkaller0: entered promiscuous mode [ 2683.399456][ T8808] syzkaller0: entered allmulticast mode [ 2683.536818][ T8812] syzkaller0: entered promiscuous mode [ 2683.542352][ T8812] syzkaller0: entered allmulticast mode [ 2684.330658][ T8822] netlink: 'syz.3.7494': attribute type 1 has an invalid length. [ 2684.396190][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7494'. [ 2684.445496][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2684.595750][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 2684.602630][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2684.625990][ T9] usb 1-1: config 0 has no interface number 0 [ 2684.634511][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2684.655475][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.663499][ T9] usb 1-1: Product: syz [ 2684.675673][ T9] usb 1-1: Manufacturer: syz [ 2684.680305][ T9] usb 1-1: SerialNumber: syz [ 2684.706116][ T9] usb 1-1: config 0 descriptor?? [ 2684.715284][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2684.785561][ T1211] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2684.935468][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 2684.943426][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 2684.954966][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 2684.971339][ T1211] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2684.980791][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.989043][ T1211] usb 3-1: Product: syz [ 2684.993588][ T1211] usb 3-1: Manufacturer: syz [ 2684.998352][ T1211] usb 3-1: SerialNumber: syz [ 2685.006307][ T1211] usb 3-1: config 0 descriptor?? [ 2685.025299][ T1211] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2685.128725][ T8817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2685.135293][ T8817] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2685.145929][ T8817] vhci_hcd vhci_hcd.0: Device attached [ 2685.240310][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2685.271096][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2685.282729][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7496'. [ 2685.335533][ T8833] bridge30: port 1(veth31) entered blocking state [ 2685.335827][ T5828] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2685.342197][ T8833] bridge30: port 1(veth31) entered disabled state [ 2685.355897][ T8833] veth31: entered allmulticast mode [ 2685.357653][ T9] gspca_spca1528: reg_w err -71 [ 2685.366930][ T8830] vhci_hcd: connection closed [ 2685.371274][ T5780] vhci_hcd vhci_hcd.0: stop threads [ 2685.372823][ T8833] veth31: entered promiscuous mode [ 2685.385801][ T5780] vhci_hcd vhci_hcd.0: release socket [ 2685.394568][ T5780] vhci_hcd vhci_hcd.0: disconnect device [ 2685.401165][ T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 2685.412642][ T9] usb 1-1: USB disconnect, device number 114 [ 2685.445784][ T5828] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 2685.453839][ T5828] usb 33-1: enqueue for inactive port 0 [ 2685.461546][ T8835] bridge30: port 2(veth33) entered blocking state [ 2685.470656][ T8835] bridge30: port 2(veth33) entered disabled state [ 2685.482800][ T8835] veth33: entered allmulticast mode [ 2685.491807][ T8835] veth33: entered promiscuous mode [ 2685.535524][ T5828] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2685.636751][ T1702] usb 3-1: Failed to submit usb control message: -71 [ 2685.644002][ T1702] usb 3-1: unable to send the bmi data to the device: -71 [ 2685.686934][ T1211] usb 3-1: USB disconnect, device number 96 [ 2685.715765][ T1702] usb 3-1: unable to get target info from device [ 2685.745464][ T1702] usb 3-1: could not get target info (-71) [ 2685.757760][ T1702] usb 3-1: could not probe fw (-71) [ 2686.357298][ T8807] tipc: Resetting bearer [ 2686.598848][ T8807] tipc: Disabling bearer [ 2687.912917][ T8861] tipc: Enabled bearer , priority 0 [ 2688.709987][ T8856] tipc: Disabling bearer [ 2689.255471][ T1211] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2689.302585][ T8883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7508'. [ 2689.320566][ T8884] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7504'. [ 2689.425481][ T1211] usb 6-1: Using ep0 maxpacket: 32 [ 2689.432226][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 2689.445005][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 2689.465249][ T1211] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2689.476504][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.487241][ T1211] usb 6-1: Product: syz [ 2689.491578][ T1211] usb 6-1: Manufacturer: syz [ 2689.497285][ T1211] usb 6-1: SerialNumber: syz [ 2689.528002][ T1211] usb 6-1: config 0 descriptor?? [ 2689.574327][ T1211] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2689.705739][ T6633] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2689.835975][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7506'. [ 2689.885639][ T6633] usb 3-1: Using ep0 maxpacket: 32 [ 2689.923143][ T6633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 2689.935451][ T6633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 2689.958513][ T8902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.973461][ T6633] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2689.984140][ T6633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.992646][ T6633] usb 3-1: Product: syz [ 2690.025895][ T8902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.060353][ T8905] binder: BINDER_SET_CONTEXT_MGR already set [ 2690.066590][ T8905] binder: 8894:8905 ioctl 4018620d 200000000040 returned -16 [ 2690.153643][ T6633] usb 3-1: Manufacturer: syz [ 2690.168197][ T6633] usb 3-1: SerialNumber: syz [ 2690.192259][ T6633] usb 3-1: config 0 descriptor?? [ 2690.443721][ T6633] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2690.519732][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2690.541662][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.598308][ T5780] usb 6-1: Failed to submit usb control message: -110 [ 2690.621897][ T5780] usb 6-1: unable to send the bmi data to the device: -110 [ 2690.637355][ T5780] usb 6-1: unable to get target info from device [ 2690.653119][ T5780] usb 6-1: could not get target info (-110) [ 2690.881155][ T5780] usb 6-1: could not probe fw (-110) [ 2691.132212][ T6633] usb 6-1: USB disconnect, device number 48 [ 2691.440683][ T5828] usb 3-1: USB disconnect, device number 97 [ 2691.447871][T12825] usb 3-1: Failed to submit usb control message: -71 [ 2691.458383][T12825] usb 3-1: unable to send the bmi data to the device: -71 [ 2691.536452][T12825] usb 3-1: unable to get target info from device [ 2691.542997][T12825] usb 3-1: could not get target info (-71) [ 2691.549502][T12825] usb 3-1: could not probe fw (-71) [ 2691.687941][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7517'. [ 2692.029223][ T8934] syzkaller0: entered promiscuous mode [ 2692.034775][ T8934] syzkaller0: entered allmulticast mode [ 2692.355532][ T5828] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2692.540662][ T5828] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2692.557189][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2692.571825][ T5828] usb 1-1: Product: syz [ 2692.578925][ T5828] usb 1-1: Manufacturer: syz [ 2692.586823][ T5828] usb 1-1: SerialNumber: syz [ 2692.601925][ T5828] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2692.620509][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2692.874811][ T8948] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.881044][ T8948] binder: 8943:8948 ioctl 4018620d 200000000040 returned -16 [ 2693.706112][ T8959] binder: BINDER_SET_CONTEXT_MGR already set [ 2693.712188][ T8959] binder: 8952:8959 ioctl 4018620d 200000000040 returned -16 [ 2693.731445][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2693.853638][ T9] ath9k_htc: Failed to initialize the device [ 2693.893617][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 2694.903708][ T6633] usb 1-1: USB disconnect, device number 115 [ 2695.206589][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7528'. [ 2695.254038][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7528'. [ 2695.332385][ T8979] bridge24: entered promiscuous mode [ 2695.407012][ T8982] binder: BINDER_SET_CONTEXT_MGR already set [ 2695.413260][ T8982] binder: 8974:8982 ioctl 4018620d 200000000040 returned -16 [ 2695.935618][ T6633] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2696.115592][ T6633] usb 3-1: Using ep0 maxpacket: 32 [ 2696.127274][ T6633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 2696.176196][ T6633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 2696.210017][ T6633] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 2696.228976][ T6633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.465552][ T6633] usb 3-1: Product: syz [ 2696.478420][ T6633] usb 3-1: Manufacturer: syz [ 2696.483061][ T6633] usb 3-1: SerialNumber: syz [ 2696.496291][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 2696.496307][ T29] audit: type=1326 audit(1772951886.603:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.7532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4d299c799 code=0x0 [ 2696.528823][ T6633] usb 3-1: config 0 descriptor?? [ 2696.592017][ T6633] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2696.749217][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2696.758189][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2696.998162][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7534'. [ 2697.188031][T26703] usb 3-1: Failed to submit usb control message: -71 [ 2697.188308][ T9] usb 3-1: USB disconnect, device number 98 [ 2697.195879][T26703] usb 3-1: unable to send the bmi data to the device: -71 [ 2697.209093][T26703] usb 3-1: unable to get target info from device [ 2697.218162][T26703] usb 3-1: could not get target info (-71) [ 2697.224399][T26703] usb 3-1: could not probe fw (-71) [ 2697.855689][ T6633] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 2697.865523][ T1211] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 2698.029276][ T1211] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 2698.047997][ T1211] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2698.066061][ T1211] usb 1-1: config 8 has no interface number 0 [ 2698.081572][ T1211] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2698.156720][ T6633] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 2698.184361][ T1211] usb 1-1: config 8 interface 177 has no altsetting 0 [ 2698.199107][ T6633] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2698.216897][ T1211] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2698.233552][ T6633] usb 6-1: config 8 has no interface number 0 [ 2698.268501][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.284217][ T6633] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2698.378173][ T6633] usb 6-1: config 8 interface 177 has no altsetting 0 [ 2698.413529][ T6633] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2698.442770][ T6633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.528815][ T6633] ir_toy 6-1:8.177: required endpoints not found [ 2700.961037][ T9041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7546'. [ 2701.018247][ T9041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7546'. [ 2701.152436][ T5828] usb 6-1: USB disconnect, device number 49 [ 2701.174544][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2701.294400][ T6633] usb 1-1: USB disconnect, device number 116 [ 2703.247710][ T9071] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2703.254248][ T9071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2703.280772][ T9071] vhci_hcd vhci_hcd.0: Device attached [ 2703.309505][ T9072] vhci_hcd: connection closed [ 2703.309701][ T5780] vhci_hcd vhci_hcd.5: stop threads [ 2703.339142][ T5780] vhci_hcd vhci_hcd.5: release socket [ 2703.374016][ T5780] vhci_hcd vhci_hcd.5: disconnect device [ 2703.595843][ T9080] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2703.955431][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2704.076640][ T9089] netlink: 'syz.5.7557': attribute type 7 has an invalid length. [ 2704.089082][ T9089] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7557'. [ 2704.383441][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2704.472848][ T9] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2704.485457][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2704.605504][ T9] usb 3-1: selecting invalid altsetting 3 [ 2704.612615][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 2704.630820][ T9] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2704.655057][ T9] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -22 [ 2704.822846][ T9092] syzkaller0: entered promiscuous mode [ 2704.828386][ T9092] syzkaller0: entered allmulticast mode [ 2704.839510][ T9092] tipc: Enabled bearer , priority 0 [ 2705.037280][ T6633] usb 3-1: USB disconnect, device number 99 [ 2705.452628][ T9099] tipc: Enabling of bearer rejected, failed to enable media [ 2705.491045][ T9090] tipc: Resetting bearer [ 2705.567423][ T9090] tipc: Disabling bearer [ 2705.680438][ T9101] FAULT_INJECTION: forcing a failure. [ 2705.680438][ T9101] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.698962][ T9101] CPU: 0 UID: 0 PID: 9101 Comm: syz.5.7560 Tainted: G L syzkaller #0 PREEMPT(full) [ 2705.699002][ T9101] Tainted: [L]=SOFTLOCKUP [ 2705.699008][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2705.699019][ T9101] Call Trace: [ 2705.699026][ T9101] [ 2705.699034][ T9101] dump_stack_lvl+0xe8/0x150 [ 2705.699069][ T9101] should_fail_ex+0x412/0x560 [ 2705.699096][ T9101] should_failslab+0xa8/0x100 [ 2705.699113][ T9101] ? ep_insert+0x283/0x1a40 [ 2705.699129][ T9101] kmem_cache_alloc_noprof+0x87/0x650 [ 2705.699141][ T9101] ? percpu_counter_add_batch+0xea/0x1d0 [ 2705.699155][ T9101] ep_insert+0x283/0x1a40 [ 2705.699177][ T9101] ? __pfx_ep_insert+0x10/0x10 [ 2705.699198][ T9101] ? __fget_files+0x2a/0x420 [ 2705.699217][ T9101] do_epoll_ctl+0x7f4/0xe80 [ 2705.699235][ T9101] io_epoll_ctl+0x91/0x220 [ 2705.699250][ T9101] __io_issue_sqe+0x180/0x4b0 [ 2705.699267][ T9101] io_issue_sqe+0x164/0xf90 [ 2705.699281][ T9101] ? _copy_from_user+0x94/0xb0 [ 2705.699299][ T9101] io_submit_sqes+0xc75/0x2370 [ 2705.699329][ T9101] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 2705.699345][ T9101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2705.699360][ T9101] ? __fget_files+0x3a0/0x420 [ 2705.699376][ T9101] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2705.699390][ T9101] ? fput+0xa0/0xd0 [ 2705.699405][ T9101] ? ksys_write+0x242/0x270 [ 2705.699418][ T9101] ? __pfx_ksys_write+0x10/0x10 [ 2705.699430][ T9101] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 2705.699446][ T9101] do_syscall_64+0x14d/0xf80 [ 2705.699456][ T9101] ? trace_irq_disable+0x3b/0x150 [ 2705.699471][ T9101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2705.699482][ T9101] ? clear_bhb_loop+0x40/0x90 [ 2705.699499][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2705.699513][ T9101] RIP: 0033:0x7fd4d299c799 [ 2705.699528][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2705.699541][ T9101] RSP: 002b:00007fd4d384c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2705.699554][ T9101] RAX: ffffffffffffffda RBX: 00007fd4d2c15fa0 RCX: 00007fd4d299c799 [ 2705.699561][ T9101] RDX: 000000000000cac3 RSI: 0000000000002d3e RDI: 0000000000000005 [ 2705.699568][ T9101] RBP: 00007fd4d384c090 R08: 0000000000000000 R09: 0000000000000000 [ 2705.699575][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2705.699581][ T9101] R13: 00007fd4d2c16038 R14: 00007fd4d2c15fa0 R15: 00007fd4d2d3fa48 [ 2705.699597][ T9101] [ 2706.272957][ T9106] netlink: 'syz.0.7562': attribute type 3 has an invalid length. [ 2706.757892][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7563'. [ 2706.767038][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7563'. [ 2706.776114][ T9119] netlink: 'syz.5.7563': attribute type 19 has an invalid length. [ 2706.783995][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7563'. [ 2707.860591][ T9147] binder: BINDER_SET_CONTEXT_MGR already set [ 2708.099573][ T9147] binder: 9130:9147 ioctl 4018620d 200000000040 returned -16 [ 2708.268157][ T9156] binder: BINDER_SET_CONTEXT_MGR already set [ 2708.274335][ T9156] binder: 9142:9156 ioctl 4018620d 200000000040 returned -16 [ 2709.030999][ T9162] netlink: 'syz.2.7575': attribute type 61 has an invalid length. [ 2709.045498][ T6633] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2709.171188][ T9170] netlink: 'syz.2.7577': attribute type 3 has an invalid length. [ 2709.196984][ T6633] usb 1-1: Using ep0 maxpacket: 8 [ 2709.207283][ T6633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2709.218360][ T6633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2709.250289][ T9168] syzkaller0: entered promiscuous mode [ 2709.255959][ T6633] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2709.266219][ T9168] syzkaller0: entered allmulticast mode [ 2709.276193][ T6633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2709.289795][ T9168] tipc: Enabled bearer , priority 0 [ 2709.297242][ T6633] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2709.307950][ T6633] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2709.317781][ T6633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.338824][ T6633] usb 1-1: config 0 descriptor?? [ 2709.347538][ T9158] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2709.635323][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7580'. [ 2709.879197][ T9159] tipc: Resetting bearer [ 2709.889240][ T9181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7580'. [ 2709.932740][ T4636] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2709.956057][ T9] usb 1-1: USB disconnect, device number 117 [ 2709.973270][ T9159] tipc: Disabling bearer [ 2709.997904][ T9183] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7581'. [ 2710.042261][ T9184] bridge25: port 1(veth13) entered blocking state [ 2710.048984][ T9184] bridge25: port 1(veth13) entered disabled state [ 2710.056239][ T9184] veth13: entered allmulticast mode [ 2710.186820][ T9184] veth13: entered promiscuous mode [ 2710.342634][ T9185] bridge25: port 2(veth15) entered blocking state [ 2710.350871][ T9185] bridge25: port 2(veth15) entered disabled state [ 2710.376976][ T9185] veth15: entered allmulticast mode [ 2710.393471][ T9185] veth15: entered promiscuous mode [ 2710.660604][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7585'. [ 2710.720054][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7586'. [ 2710.744188][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7586'. [ 2710.791814][ T9196] bridge23: the hash_elasticity option has been deprecated and is always 16 [ 2710.826260][ T9200] netlink: 'syz.5.7588': attribute type 3 has an invalid length. [ 2711.215482][ T6633] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2711.435581][T24445] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2711.457142][ T6633] usb 3-1: Using ep0 maxpacket: 32 [ 2711.475124][ T6633] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2711.646809][ T6633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2711.726127][T24445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 2711.857029][T24445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2711.869965][T24445] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 2711.879726][T24445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.889662][T24445] usb 1-1: Product: syz [ 2711.920275][T24445] usb 1-1: Manufacturer: syz [ 2711.936802][ T6633] usb 3-1: selecting invalid altsetting 3 [ 2711.948021][T24445] usb 1-1: SerialNumber: syz [ 2711.954701][ T6633] comedi comedi5: could not set alternate setting 3 in high speed [ 2712.025210][T24445] usb 1-1: config 0 descriptor?? [ 2712.052950][T24445] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2712.062471][ T6633] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 2712.101374][T24445] usb 1-1: Detected SIO [ 2712.113954][T24445] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 2712.123986][ T6633] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -22 [ 2712.134223][T24445] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 2712.250816][ T6633] usb 3-1: USB disconnect, device number 100 [ 2712.260652][T24445] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2712.310217][T24445] usb 1-1: USB disconnect, device number 118 [ 2712.332766][T24445] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2712.358565][T24445] ftdi_sio 1-1:0.0: device disconnected [ 2713.321761][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.328263][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.151489][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7601'. [ 2714.161778][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7601'. [ 2714.366344][ T9249] bridge33: the hash_elasticity option has been deprecated and is always 16 [ 2714.406369][ T9253] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 2714.548704][ T9246] team0: Device gtp0 is of different type [ 2715.135521][ T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2715.285859][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 2715.363353][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2715.373916][ T9] usb 1-1: config 0 has no interface number 0 [ 2715.397131][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2715.407594][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.416875][ T9] usb 1-1: Product: syz [ 2715.423900][ T9] usb 1-1: Manufacturer: syz [ 2715.432533][ T9] usb 1-1: SerialNumber: syz [ 2715.458676][ T9] usb 1-1: config 0 descriptor?? [ 2715.574297][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2715.782706][ T9] usb 1-1: qt2_attach - failed to power on unit: -71 [ 2715.818583][ T9] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 2715.868038][ T9] usb 1-1: USB disconnect, device number 119 [ 2716.245993][ T9277] cgroup: fork rejected by pids controller in /syz5 [ 2716.577082][ T4636] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 2718.371841][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7617'. [ 2718.466476][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7617'. [ 2718.528052][ T9175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2718.544297][ T9408] bridge26: the hash_elasticity option has been deprecated and is always 16 [ 2718.563654][ T9175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2718.585840][ T9175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2718.620960][ T9175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2718.639213][ T9175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2719.151588][ T5780] bridge_slave_1: left allmulticast mode [ 2719.165563][ T5780] bridge_slave_1: left promiscuous mode [ 2719.171710][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 2719.217448][ T5780] bridge_slave_0: left allmulticast mode [ 2719.235500][ T5780] bridge_slave_0: left promiscuous mode [ 2719.243781][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 2719.301192][ T5780] veth5: left allmulticast mode [ 2719.310173][ T5780] veth5: left promiscuous mode [ 2719.326457][ T5780] bridge1: port 3(veth5) entered disabled state [ 2719.339152][ T5780] veth3: left allmulticast mode [ 2719.446113][ T5780] veth3: left promiscuous mode [ 2719.477034][ T5780] bridge1: port 1(veth3) entered disabled state [ 2719.507440][ T5780] veth7: left allmulticast mode [ 2719.512965][ T5780] veth7: left promiscuous mode [ 2719.524355][ T5780] bridge2: port 2(veth7) entered disabled state [ 2719.636383][ T5780] veth15: left allmulticast mode [ 2719.647363][ T5780] veth15: left promiscuous mode [ 2719.660950][ T5780] bridge14: port 2(veth15) entered disabled state [ 2719.696091][ T5780] veth13: left allmulticast mode [ 2719.708323][ T5780] veth13: left promiscuous mode [ 2719.765801][ T5780] bridge14: port 1(veth13) entered disabled state [ 2720.223453][ T4636] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 2720.676815][ T4636] Bluetooth: hci3: command tx timeout [ 2720.847731][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7625'. [ 2720.868687][ T9460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7625'. [ 2721.621713][ T5780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2721.636962][ T5780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2721.660272][ T5780] bond0 (unregistering): Released all slaves [ 2721.681382][ T5780] bond1 (unregistering): Released all slaves [ 2721.708504][ T5780] bond2 (unregistering): Released all slaves [ 2721.739637][ T5780] bond3 (unregistering): Released all slaves [ 2721.947220][ T9446] team0: Device gtp1 is of different type [ 2721.990838][ T5780] : left promiscuous mode [ 2722.278208][ T5780] tipc: Disabling bearer [ 2722.293517][ T5780] tipc: Left network mode [ 2722.460295][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 2722.694491][ T9467] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7626'. [ 2722.758086][ T4636] Bluetooth: hci3: command tx timeout [ 2722.913238][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 2722.920846][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 2722.942951][ T9416] bridge_slave_0: entered allmulticast mode [ 2722.994225][ T9416] bridge_slave_0: entered promiscuous mode [ 2723.062074][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 2723.113011][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 2723.148932][ T9416] bridge_slave_1: entered allmulticast mode [ 2723.167708][ T9416] bridge_slave_1: entered promiscuous mode [ 2723.358441][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2723.511443][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2723.582417][ T6119] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2723.656707][T30863] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2723.683255][ T6119] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 2723.717293][T30863] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2723.750483][ T6119] usb 2-1: USB disconnect, device number 123 [ 2723.957767][ T9416] team0: Port device team_slave_0 added [ 2723.998122][ T9416] team0: Port device team_slave_1 added [ 2724.017487][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7630'. [ 2724.162411][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7630'. [ 2724.450798][T30863] usb 4-1: USB disconnect, device number 103 [ 2724.504951][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2724.556906][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2724.621867][ T9416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2724.667683][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7631'. [ 2724.684690][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2724.701600][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2724.730923][ T9416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2724.801958][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7631'. [ 2724.835507][ T4636] Bluetooth: hci3: command tx timeout [ 2724.955151][ T9511] bridge28: the hash_elasticity option has been deprecated and is always 16 [ 2725.149729][ T9416] hsr_slave_0: entered promiscuous mode [ 2725.176234][ T9416] hsr_slave_1: entered promiscuous mode [ 2725.218306][ T9416] debugfs: 'hsr0' already exists in 'hsr' [ 2725.239726][ T9416] Cannot create hsr debugfs directory [ 2725.667239][ T9537] netlink: 'syz.3.7636': attribute type 2 has an invalid length. [ 2725.705285][ T5828] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2726.005598][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 2726.020206][ T5828] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2726.032261][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2726.050225][ T5828] usb 3-1: Product: syz [ 2726.063924][ T5828] usb 3-1: Manufacturer: syz [ 2726.074008][ T5828] usb 3-1: SerialNumber: syz [ 2726.091606][ T5828] usb 3-1: config 0 descriptor?? [ 2726.108823][ T5828] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2726.232749][ T5828] pctv452e: pctv452e_power_ctrl: 1 [ 2726.232749][ T5828] [ 2726.242601][ T5828] usb 3-1: selecting invalid altsetting 3 [ 2726.249078][ T5828] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2726.249078][ T5828] [ 2726.269431][ T5828] dvb-usb: bulk message failed: -22 (5/0) [ 2726.300492][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2726.333694][ T9527] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7633'. [ 2726.346367][ T5828] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2726.356216][ T5828] usb 3-1: media controller created [ 2726.363223][ T5828] dvb-usb: bulk message failed: -22 (8/0) [ 2726.370894][ T5828] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2726.380384][ T5828] dvb-usb: MAC address reading failed. [ 2726.601392][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2726.612377][ T5780] hsr_slave_0: left promiscuous mode [ 2726.623050][ T5780] hsr_slave_1: left promiscuous mode [ 2726.630327][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2726.647152][ T5780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2726.750257][ T5780] pim6reg (unregistering): left allmulticast mode [ 2726.897336][ T5828] DVB: Unable to find symbol stb0899_attach() [ 2726.907630][ T5828] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2726.916576][ T4636] Bluetooth: hci3: command tx timeout [ 2727.268756][ T5780] team0 (unregistering): Port device team_slave_1 removed [ 2727.293753][ T5780] team0 (unregistering): Port device team_slave_0 removed [ 2727.302129][ T5828] rc_core: IR keymap rc-tt-1500 not found [ 2727.308000][ T5828] Registered IR keymap rc-empty [ 2727.326716][ T5828] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2727.356726][ T5828] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input159 [ 2727.425281][ T5828] dvb-usb: schedule remote query interval to 100 msecs. [ 2727.465570][ T5828] pctv452e: pctv452e_power_ctrl: 0 [ 2727.465570][ T5828] [ 2727.492157][ T5828] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2727.577983][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2727.592885][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2727.746696][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2727.756827][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2727.895989][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2727.902105][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2728.015497][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2728.021287][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2728.195508][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2728.201400][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2728.315529][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2728.321581][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2728.458714][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2728.464703][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2728.593774][ T5780] IPVS: stop unused estimator thread 0... [ 2728.625709][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2728.639371][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2728.786242][ T5828] dvb-usb: bulk message failed: -22 (4/0) [ 2728.801287][ T5828] dvb-usb: error -22 while querying for an remote control event. [ 2728.865728][ T5828] usb 3-1: USB disconnect, device number 101 [ 2729.735698][ T5828] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2730.562847][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2730.686326][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7646'. [ 2730.695789][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7646'. [ 2730.752111][ T9615] bridge34: the hash_elasticity option has been deprecated and is always 16 [ 2730.847942][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 2730.861265][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2730.890661][ T9] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 2730.905000][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.958228][ T9] usb 2-1: Product: syz [ 2731.000233][ T9] usb 2-1: Manufacturer: syz [ 2731.030581][ T9] usb 2-1: SerialNumber: syz [ 2731.053342][ T9] usb 2-1: config 0 descriptor?? [ 2731.083801][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2731.127001][ T9] usb 2-1: Detected SIO [ 2731.148877][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 2731.168594][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 2731.232980][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2731.313353][ T9] usb 2-1: USB disconnect, device number 124 [ 2731.382421][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2731.402949][ T9416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2731.412257][ T9] ftdi_sio 2-1:0.0: device disconnected [ 2731.472776][ T9416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2731.499527][ T9416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2731.549204][ T9416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2731.822408][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2731.853902][ T9416] 8021q: adding VLAN 0 to HW filter on device team0 [ 2731.879972][ T1702] bridge0: port 1(bridge_slave_0) entered blocking state [ 2731.887119][ T1702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2731.929770][ T1702] bridge0: port 2(bridge_slave_1) entered blocking state [ 2731.936932][ T1702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2732.236420][ T9416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2732.384881][ T9416] veth0_vlan: entered promiscuous mode [ 2732.448210][ T9416] veth1_vlan: entered promiscuous mode [ 2732.557181][ T9416] veth0_macvtap: entered promiscuous mode [ 2732.581968][ T9416] veth1_macvtap: entered promiscuous mode [ 2732.660257][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2732.693511][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2732.726340][ T5780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2732.735201][ T5780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2732.770213][ T5780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2732.857343][ T9655] netlink: 'syz.0.7649': attribute type 2 has an invalid length. [ 2732.916533][ T5780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2733.446438][T12825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2733.466177][T12825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2733.592389][ T5779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2733.603423][ T9673] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 2733.610067][ T9673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2733.626527][ T5779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2733.634311][ T9673] vhci_hcd vhci_hcd.0: Device attached [ 2733.682933][ T9670] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 2733.689941][ T9670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2733.716047][ T9670] vhci_hcd vhci_hcd.0: Device attached [ 2733.744078][ T9673] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 2733.750720][ T9673] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2733.865961][ T5828] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 2733.889195][ T9673] vhci_hcd vhci_hcd.0: Device attached [ 2733.908619][ T9670] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(7) [ 2733.915184][ T9670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2733.991675][ T9673] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 2733.998316][ T9673] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2734.039822][ T9695] x_tables: duplicate underflow at hook 1 [ 2734.056488][ T9670] vhci_hcd vhci_hcd.0: Device attached [ 2734.095790][T30863] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2734.135762][ T9673] vhci_hcd vhci_hcd.0: Device attached [ 2734.198021][ T9670] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2734.204586][ T9670] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2734.265820][ T9673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2734.285413][ T9670] vhci_hcd vhci_hcd.0: Device attached [ 2734.299731][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2734.338457][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.350007][ T9674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2734.387239][ T9670] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(11) [ 2734.393980][ T9670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2734.403172][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2734.426945][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.479244][T30863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2734.482715][ T9670] vhci_hcd vhci_hcd.0: Device attached [ 2734.499808][T30863] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2734.527891][T30863] usb 3-1: can't read configurations, error -71 [ 2734.544939][ T9673] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2734.621716][ T9676] vhci_hcd: connection reset by peer [ 2734.629725][ T9681] vhci_hcd: connection closed [ 2734.629877][ T9690] vhci_hcd: connection closed [ 2734.638717][ T5780] vhci_hcd vhci_hcd.1: stop threads [ 2734.669811][ T5780] vhci_hcd vhci_hcd.1: release socket [ 2734.678125][ T5780] vhci_hcd vhci_hcd.1: disconnect device [ 2734.687733][ T5780] vhci_hcd vhci_hcd.1: stop threads [ 2734.693111][ T5780] vhci_hcd vhci_hcd.1: release socket [ 2734.700048][ T5780] vhci_hcd vhci_hcd.1: disconnect device [ 2734.706589][ T5780] vhci_hcd vhci_hcd.1: stop threads [ 2734.712070][ T5780] vhci_hcd vhci_hcd.1: release socket [ 2734.718373][ T5780] vhci_hcd vhci_hcd.1: disconnect device [ 2734.765525][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2734.945526][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2734.960323][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2734.996174][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 2735.014309][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.054957][ T9] usb 4-1: Product: syz [ 2735.071606][ T9] usb 4-1: Manufacturer: syz [ 2735.095573][ T9] usb 4-1: SerialNumber: syz [ 2735.245887][ T9696] vhci_hcd: connection closed [ 2735.246152][ T9679] vhci_hcd: connection closed [ 2735.249089][ T9687] vhci_hcd: connection closed [ 2735.255838][ T1702] vhci_hcd vhci_hcd.1: stop threads [ 2735.266045][ T9702] vhci_hcd: connection closed [ 2735.288959][ T1702] vhci_hcd vhci_hcd.1: release socket [ 2735.309812][ T1702] vhci_hcd vhci_hcd.1: disconnect device [ 2735.327629][ T1702] vhci_hcd vhci_hcd.1: stop threads [ 2735.342123][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7658'. [ 2735.351411][ T1702] vhci_hcd vhci_hcd.1: release socket [ 2735.351504][ T1702] vhci_hcd vhci_hcd.1: disconnect device [ 2735.352751][ T1702] vhci_hcd vhci_hcd.1: stop threads [ 2735.387261][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2735.412780][ T1702] vhci_hcd vhci_hcd.1: release socket [ 2735.413482][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7658'. [ 2735.427610][ T1702] vhci_hcd vhci_hcd.1: disconnect device [ 2735.427844][ T1702] vhci_hcd vhci_hcd.1: stop threads [ 2735.434262][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2735.440911][ T1702] vhci_hcd vhci_hcd.1: release socket [ 2735.505777][ T1702] vhci_hcd vhci_hcd.1: disconnect device [ 2735.583046][ T9] usb 4-1: USB disconnect, device number 104 [ 2735.613451][ T9728] bridge28: the hash_elasticity option has been deprecated and is always 16 [ 2735.778955][T27387] udevd[27387]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2735.812308][ T9745] binder: BINDER_SET_CONTEXT_MGR already set [ 2735.930473][ T9745] binder: 9744:9745 ioctl 4018620d 200000000040 returned -16 [ 2736.139815][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7660'. [ 2736.291374][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7660'. [ 2736.685482][ T6119] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2736.703519][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7666'. [ 2736.775505][T30863] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2736.870825][ T6119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 2736.889045][ T6119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2736.909498][ T6119] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 2736.922089][ T6119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2736.934899][ T6119] usb 6-1: Product: syz [ 2736.939397][T30863] usb 4-1: Using ep0 maxpacket: 8 [ 2736.946356][T30863] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2736.958427][T30863] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2736.984630][T30863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2736.986907][ T9768] bridge29: port 1(veth19) entered blocking state [ 2737.001502][ T6119] usb 6-1: Manufacturer: syz [ 2737.007467][ T6119] usb 6-1: SerialNumber: syz [ 2737.012275][T30863] usb 4-1: Product: syz [ 2737.020858][ T6119] usb 6-1: config 0 descriptor?? [ 2737.026247][T30863] usb 4-1: Manufacturer: syz [ 2737.034258][T30863] usb 4-1: SerialNumber: syz [ 2737.042271][ T6119] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2737.054002][ T6119] usb 6-1: Detected SIO [ 2737.062476][T30863] usb 4-1: config 0 descriptor?? [ 2737.068403][ T6119] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 2737.094212][ T6119] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 2737.109678][ T9768] bridge29: port 1(veth19) entered disabled state [ 2737.129759][ T6119] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2737.168663][ T9768] veth19: entered allmulticast mode [ 2737.210120][ T9768] veth19: entered promiscuous mode [ 2737.237343][ T9771] veth0_to_bond: left allmulticast mode [ 2737.248277][ T6119] usb 6-1: USB disconnect, device number 50 [ 2737.259848][ T6119] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2737.272265][ T9771] veth0_to_bond: left promiscuous mode [ 2737.279124][ T6119] ftdi_sio 6-1:0.0: device disconnected [ 2737.327701][ T9771] bridge20: port 1(veth0_to_bond) entered disabled state [ 2737.361434][ T9771] bridge29: port 2(veth0_to_bond) entered blocking state [ 2737.369013][ T9771] bridge29: port 2(veth0_to_bond) entered disabled state [ 2737.380110][ T9771] veth0_to_bond: entered allmulticast mode [ 2737.411454][ T9771] veth0_to_bond: entered promiscuous mode [ 2738.345510][T13307] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2738.695605][T13307] usb 1-1: Using ep0 maxpacket: 8 [ 2738.729202][T13307] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2738.763258][T13307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2738.791672][T13307] usb 1-1: Product: syz [ 2738.808154][T13307] usb 1-1: Manufacturer: syz [ 2738.844905][T13307] usb 1-1: SerialNumber: syz [ 2738.888077][T13307] usb 1-1: config 0 descriptor?? [ 2738.961462][T13307] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2738.981117][T13307] pctv452e: pctv452e_power_ctrl: 1 [ 2738.981117][T13307] [ 2739.004618][T13307] usb 1-1: selecting invalid altsetting 3 [ 2739.010835][ T5828] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2739.025093][T13307] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2739.025093][T13307] [ 2739.060250][T13307] dvb-usb: bulk message failed: -22 (5/0) [ 2739.073859][T13307] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2739.084484][T13307] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2739.094899][T13307] usb 1-1: media controller created [ 2739.103018][T13307] dvb-usb: bulk message failed: -22 (8/0) [ 2739.109177][T13307] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2739.117838][T13307] dvb-usb: MAC address reading failed. [ 2739.137027][T13307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2739.157927][ T6119] usb 4-1: USB disconnect, device number 105 [ 2739.251034][ T9785] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7669'. [ 2739.374806][T13307] DVB: Unable to find symbol stb0899_attach() [ 2739.383435][T13307] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2739.485556][T13307] rc_core: IR keymap rc-tt-1500 not found [ 2739.491671][T13307] Registered IR keymap rc-empty [ 2739.503074][T13307] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2739.564837][T13307] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input160 [ 2739.596998][T13307] dvb-usb: schedule remote query interval to 100 msecs. [ 2739.604795][T13307] pctv452e: pctv452e_power_ctrl: 0 [ 2739.604795][T13307] [ 2739.612894][T13307] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2739.705494][T13307] dvb-usb: bulk message failed: -22 (4/0) [ 2739.711370][T13307] dvb-usb: error -22 while querying for an remote control event. [ 2739.887945][T13307] dvb-usb: bulk message failed: -22 (4/0) [ 2739.894071][T13307] dvb-usb: error -22 while querying for an remote control event. [ 2739.996726][ T9813] pim6reg: entered allmulticast mode [ 2740.758595][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 2740.764491][ T9] dvb-usb: error -22 while querying for an remote control event. [ 2740.819954][T13307] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2740.885704][T13202] dvb-usb: bulk message failed: -22 (4/0) [ 2740.898359][T13202] dvb-usb: error -22 while querying for an remote control event. [ 2741.087196][T13307] usb 6-1: Using ep0 maxpacket: 8 [ 2741.104976][T13202] dvb-usb: bulk message failed: -22 (4/0) [ 2741.132123][T13307] usb 6-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 2741.143230][T13202] dvb-usb: error -22 while querying for an remote control event. [ 2741.156816][T13307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.157869][T24445] usb usb36-port1: attempt power cycle [ 2741.169460][T13307] usb 6-1: config 0 descriptor?? [ 2741.197329][T13202] usb 1-1: USB disconnect, device number 120 [ 2741.310377][T13307] usblcd 6-1:0.0: USBLCD model not supported. [ 2741.343769][T13202] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2741.392621][T13307] usb 6-1: USB disconnect, device number 51 [ 2741.629699][ T9831] syzkaller0: entered promiscuous mode [ 2741.662331][ T9831] syzkaller0: entered allmulticast mode [ 2741.736082][ T9831] tipc: Enabled bearer , priority 0 [ 2741.836370][T24445] usb usb36-port1: unable to enumerate USB device [ 2741.867182][ T9830] tipc: Resetting bearer [ 2741.875592][T13202] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2741.997293][ T9830] tipc: Disabling bearer [ 2742.055540][T13202] usb 1-1: Using ep0 maxpacket: 16 [ 2742.068279][T13202] usb 1-1: config 0 has no interfaces? [ 2742.075562][T13202] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2742.128029][T13202] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2742.148352][ T9838] netlink: 'syz.5.7683': attribute type 2 has an invalid length. [ 2742.162227][T13202] usb 1-1: Manufacturer: syz [ 2742.198307][T13202] usb 1-1: config 0 descriptor?? [ 2742.276049][ T9843] binder: BINDER_SET_CONTEXT_MGR already set [ 2742.282216][ T9843] binder: 9836:9843 ioctl 4018620d 200000000040 returned -16 [ 2742.890938][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2742.907104][ T9852] 8021q: adding VLAN 0 to HW filter on device team0 [ 2742.932619][ T9852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2744.499713][ T9] usb 1-1: USB disconnect, device number 121 [ 2744.817413][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7693'. [ 2745.454488][ T9901] binder: BINDER_SET_CONTEXT_MGR already set [ 2745.460644][ T9901] binder: 9894:9901 ioctl 4018620d 200000000040 returned -16 [ 2746.110561][ T9911] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7700'. [ 2747.044926][ T9923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2747.084375][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7707'. [ 2747.106028][ T9929] batadv_slave_1: entered promiscuous mode [ 2747.383883][ T9930] kvm: kvm [9927]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x592ec0000000 [ 2747.393593][ T9930] kvm: kvm [9927]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8428c0000000 [ 2747.409893][ T9930] kvm: kvm [9927]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa340c0000000 [ 2747.430786][ T9930] kvm: kvm [9927]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5835c0000000 [ 2747.441967][ T9930] kvm: kvm [9927]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3c4fc0000000 [ 2747.534280][ T9921] batadv_slave_1: left promiscuous mode [ 2748.218124][ T9943] team0: Device gtp1 is of different type [ 2748.742991][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7714'. [ 2748.825689][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7714'. [ 2748.884329][ T9960] bridge29: the hash_elasticity option has been deprecated and is always 16 [ 2748.894804][ T4636] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 2749.746528][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7717'. [ 2750.029486][ T9973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7717'. [ 2750.265787][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7719'. [ 2750.296291][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7719'. [ 2751.368619][ T6119] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2751.537356][ T6119] usb 2-1: Using ep0 maxpacket: 8 [ 2751.549268][ T6119] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2751.559041][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.575500][ T6119] usb 2-1: Product: syz [ 2751.597365][ T6119] usb 2-1: Manufacturer: syz [ 2751.622792][ T6119] usb 2-1: SerialNumber: syz [ 2751.648978][ T6119] usb 2-1: config 0 descriptor?? [ 2751.708356][ T6119] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2751.720473][ T6119] pctv452e: pctv452e_power_ctrl: 1 [ 2751.720473][ T6119] [ 2751.744705][ T6119] usb 2-1: selecting invalid altsetting 3 [ 2751.758018][ T6119] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2751.758018][ T6119] [ 2751.789469][ T6119] dvb-usb: bulk message failed: -22 (5/0) [ 2752.179284][ T9990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7722'. [ 2752.212900][ T6119] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2752.229502][ T6119] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2752.239924][ T6119] usb 2-1: media controller created [ 2752.245819][ T6119] dvb-usb: bulk message failed: -22 (8/0) [ 2752.251828][ T6119] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2752.274277][ T6119] dvb-usb: MAC address reading failed. [ 2752.364066][ T6119] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2752.545708][T30863] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2752.615527][ T5828] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 2752.755611][ T5828] usb 3-1: device descriptor read/64, error -71 [ 2752.812677][T30863] usb 6-1: Using ep0 maxpacket: 8 [ 2752.865511][T30863] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2752.898788][T30863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.919226][ T6119] DVB: Unable to find symbol stb0899_attach() [ 2752.933489][T30863] usb 6-1: Product: syz [ 2752.942712][ T6119] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2752.964168][T30863] usb 6-1: Manufacturer: syz [ 2752.995681][ T5828] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 2753.005881][T30863] usb 6-1: SerialNumber: syz [ 2753.054321][T30863] usb 6-1: config 0 descriptor?? [ 2753.103246][T30863] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2753.135022][T30863] pctv452e: pctv452e_power_ctrl: 1 [ 2753.135022][T30863] [ 2753.137797][ T5828] usb 3-1: device descriptor read/64, error -71 [ 2753.148966][ T6119] rc_core: IR keymap rc-tt-1500 not found [ 2753.157225][ T6119] Registered IR keymap rc-empty [ 2753.172812][ T6119] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2753.189624][T30863] usb 6-1: selecting invalid altsetting 3 [ 2753.206071][T30863] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2753.206071][T30863] [ 2753.223540][ T6119] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input161 [ 2753.241945][T30863] dvb-usb: bulk message failed: -22 (5/0) [ 2753.255651][ T5828] usb usb3-port1: attempt power cycle [ 2753.263144][ T6119] dvb-usb: schedule remote query interval to 100 msecs. [ 2753.279834][T30863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2753.296276][ T6119] pctv452e: pctv452e_power_ctrl: 0 [ 2753.296276][ T6119] [ 2753.369727][T10004] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7724'. [ 2753.409592][T24445] dvb-usb: bulk message failed: -22 (4/0) [ 2753.425509][T24445] dvb-usb: error -22 while querying for an remote control event. [ 2753.436002][T30863] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2753.445027][ T6119] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2753.465413][T30863] usb 6-1: media controller created [ 2753.501572][T30863] dvb-usb: bulk message failed: -22 (8/0) [ 2753.570929][ T6119] dvb-usb: bulk message failed: -22 (4/0) [ 2753.580822][ T6119] dvb-usb: error -22 while querying for an remote control event. [ 2753.655573][ T5828] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 2753.693365][ T5828] usb 3-1: device descriptor read/8, error -71 [ 2753.725859][ T6119] dvb-usb: bulk message failed: -22 (4/0) [ 2753.745831][T30863] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2753.781644][ T9] usb 2-1: USB disconnect, device number 125 [ 2753.832129][ T6119] dvb-usb: error -22 while querying for an remote control event. [ 2753.874539][T30863] dvb-usb: MAC address reading failed. [ 2754.067481][ T5828] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 2754.146518][ T5828] usb 3-1: device descriptor read/8, error -71 [ 2754.254464][T30863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2754.634255][ T5828] usb usb3-port1: unable to enumerate USB device [ 2754.722882][T30863] DVB: Unable to find symbol stb0899_attach() [ 2754.733995][T30863] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2754.977312][T30863] rc_core: IR keymap rc-tt-1500 not found [ 2754.991271][T30863] Registered IR keymap rc-empty [ 2755.067277][T30863] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2755.143693][T30863] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input162 [ 2755.146089][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2755.220761][T30863] dvb-usb: schedule remote query interval to 100 msecs. [ 2755.245577][T30863] pctv452e: pctv452e_power_ctrl: 0 [ 2755.245577][T30863] [ 2755.277983][T30863] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2755.326398][T30863] usb 6-1: USB disconnect, device number 52 [ 2755.371584][ T6119] dvb-usb: bulk message failed: -22 (4/0) [ 2755.377471][ T6119] dvb-usb: error -22 while querying for an remote control event. [ 2755.617094][T30863] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2756.089727][T10053] FAULT_INJECTION: forcing a failure. [ 2756.089727][T10053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2756.156906][T10053] CPU: 0 UID: 0 PID: 10053 Comm: syz.2.7735 Tainted: G L syzkaller #0 PREEMPT(full) [ 2756.156939][T10053] Tainted: [L]=SOFTLOCKUP [ 2756.156947][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2756.156958][T10053] Call Trace: [ 2756.156966][T10053] [ 2756.156974][T10053] dump_stack_lvl+0xe8/0x150 [ 2756.157006][T10053] should_fail_ex+0x412/0x560 [ 2756.157033][T10053] _copy_from_iter+0x1d3/0x1670 [ 2756.157062][T10053] ? rcu_is_watching+0x15/0xb0 [ 2756.157093][T10053] ? __pfx__copy_from_iter+0x10/0x10 [ 2756.157124][T10053] ? netlink_sendmsg+0x650/0xb40 [ 2756.157149][T10053] ? skb_put+0x11b/0x210 [ 2756.157178][T10053] netlink_sendmsg+0x6c0/0xb40 [ 2756.157219][T10053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2756.157245][T10053] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2756.157267][T10053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2756.157288][T10053] ____sys_sendmsg+0x972/0x9f0 [ 2756.157313][T10053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2756.157338][T10053] ? import_iovec+0x73/0xa0 [ 2756.157365][T10053] ___sys_sendmsg+0x2a5/0x360 [ 2756.157386][T10053] ? __pfx____sys_sendmsg+0x10/0x10 [ 2756.157433][T10053] ? __fget_files+0x2a/0x420 [ 2756.157457][T10053] ? __fget_files+0x3a0/0x420 [ 2756.157486][T10053] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2756.157505][T10053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2756.157530][T10053] ? __pfx_ksys_write+0x10/0x10 [ 2756.157559][T10053] do_syscall_64+0x14d/0xf80 [ 2756.157576][T10053] ? trace_irq_disable+0x3b/0x150 [ 2756.157598][T10053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2756.157614][T10053] ? clear_bhb_loop+0x40/0x90 [ 2756.157635][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2756.157652][T10053] RIP: 0033:0x7f25baf9c799 [ 2756.157670][T10053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2756.157685][T10053] RSP: 002b:00007f25b91f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2756.157703][T10053] RAX: ffffffffffffffda RBX: 00007f25bb216180 RCX: 00007f25baf9c799 [ 2756.157716][T10053] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 2756.157727][T10053] RBP: 00007f25b91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2756.157739][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2756.157750][T10053] R13: 00007f25bb216218 R14: 00007f25bb216180 R15: 00007f25bb33fa48 [ 2756.157776][T10053] [ 2756.745914][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7738'. [ 2756.765097][T10062] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7738'. [ 2757.105479][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2757.275632][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2757.326030][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2757.477328][ T9] usb 4-1: config 0 has no interface number 0 [ 2757.485006][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2757.555647][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2757.610637][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.657078][ T9] usb 4-1: config 0 descriptor?? [ 2757.805968][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2758.121696][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2758.133070][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2758.391097][T10070] team0: Device gtp1 is of different type [ 2758.535930][T24445] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2758.765712][T24445] usb 1-1: Using ep0 maxpacket: 32 [ 2758.775709][T24445] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 2758.784065][T24445] usb 1-1: config 0 has no interface number 0 [ 2758.790328][T24445] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2758.799593][T24445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2758.826217][T24445] usb 1-1: config 0 descriptor?? [ 2758.836213][T24445] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2759.548451][T24445] gspca_vc032x: reg_w err -110 [ 2759.564487][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2759.570092][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2759.596901][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2759.779952][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2759.961956][ T9] usb 4-1: USB disconnect, device number 106 [ 2759.999324][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.004627][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.066550][T10097] binder: BINDER_SET_CONTEXT_MGR already set [ 2760.072567][T10097] binder: 10096:10097 ioctl 4018620d 200000000040 returned -16 [ 2760.103664][T10097] binder: 10096:10097 ioctl c0306201 2000000003c0 returned -14 [ 2760.115402][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.120738][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.145613][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.151181][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.161891][T10097] binder: 10096:10097 ioctl c0306201 2000000003c0 returned -14 [ 2760.175536][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.181286][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.195427][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.201213][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.206664][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.212296][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.217699][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.223239][ T29] audit: type=1400 audit(1772951950.333:13094): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10096 comm="syz.3.7745" [ 2760.247977][T24445] gspca_vc032x: I2c Bus Busy Wait 00 [ 2760.260137][T24445] gspca_vc032x: Unknown sensor... [ 2760.271155][T24445] vc032x 1-1:0.255: probe with driver vc032x failed with error -22 [ 2760.625466][T24445] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2760.725464][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2760.786254][T24445] usb 3-1: Using ep0 maxpacket: 16 [ 2760.796899][T24445] usb 3-1: config 1 has an invalid descriptor of length 28, skipping remainder of the config [ 2760.808300][T24445] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2760.819782][T24445] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 2760.839154][T24445] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 2760.858463][T24445] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 42438, setting to 1024 [ 2760.890462][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2760.892875][T24445] usb 3-1: string descriptor 0 read error: -22 [ 2760.899756][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2760.904639][T24445] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 2760.952459][ T9] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2761.013396][T24445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2761.033909][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 2761.044769][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2761.054325][ T9] usb 6-1: Product: syz [ 2761.066518][ T9] usb 6-1: Manufacturer: syz [ 2761.079717][ T9] usb 6-1: SerialNumber: syz [ 2761.249014][T10101] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7746'. [ 2761.262986][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2761.280306][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2761.397863][T13202] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2761.563763][T10104] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2761.629663][T13202] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2761.649820][T13202] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2761.664327][T13202] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2761.665648][ T6119] usb 1-1: USB disconnect, device number 122 [ 2761.723509][T13202] usb 4-1: config 63 has no interface number 0 [ 2761.765844][T13202] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2761.807506][T13202] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2761.832746][T13202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2761.899431][T13202] usb 4-1: Product: syz [ 2761.918548][T13202] usb 4-1: Manufacturer: syz [ 2761.951469][T13202] usb 4-1: SerialNumber: syz [ 2762.210852][T13202] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2762.229045][T13202] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 2762.245830][T13202] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 2762.279256][T13202] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 2762.362396][T13202] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 2762.468306][T13202] uvcvideo 4-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 2762.483609][T13202] uvcvideo 4-1:63.66: No streaming interface found for terminal 29. [ 2762.492386][T13202] uvcvideo 4-1:63.66: Entity type for entity Output 32773 was not initialized! [ 2762.511877][T13202] usb 4-1: USB disconnect, device number 107 [ 2763.534107][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2763.560111][ T9] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2763.606894][ T9] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 2763.743048][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2763.794983][ T9] usb 6-1: USB disconnect, device number 53 [ 2764.010173][T27387] udevd[27387]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2764.150339][T24445] usb 3-1: USB disconnect, device number 108 [ 2764.347680][ T4990] udevd[4990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2764.382433][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2764.651493][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2764.665672][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2764.675375][ T9] usb 4-1: config 0 has no interface number 0 [ 2764.681517][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2764.733935][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2764.763535][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2764.817599][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2764.830715][T24445] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2764.910457][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2764.957798][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.985473][T24445] usb 3-1: Using ep0 maxpacket: 8 [ 2764.999155][T24445] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2765.012662][ T9] usb 4-1: config 0 descriptor?? [ 2765.035495][T24445] usb 3-1: config 0 has no interface number 0 [ 2765.062094][T24445] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2765.108591][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2765.160363][T24445] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2765.193869][T24445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.231929][T24445] usb 3-1: config 0 descriptor?? [ 2765.264603][T24445] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2765.385800][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2765.453400][T13202] usb 4-1: USB disconnect, device number 108 [ 2765.463603][T13202] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2765.511747][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2765.521959][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2765.635520][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2765.654490][ T9] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 2765.670717][ T9] usb 6-1: config 0 has no interface number 0 [ 2765.688795][ T9] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2765.712057][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.722195][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7762'. [ 2765.968381][ T9] usb 6-1: config 0 descriptor?? [ 2765.996686][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2766.366306][T13202] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2766.537993][T13202] usb 2-1: Using ep0 maxpacket: 32 [ 2766.551056][T13202] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2766.566900][T13202] usb 2-1: config 0 has no interface number 0 [ 2766.621776][T13202] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2766.650038][T13202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.701832][T13202] usb 2-1: Product: syz [ 2766.744615][T13202] usb 2-1: Manufacturer: syz [ 2766.765709][ T9] gspca_vc032x: reg_w err -110 [ 2766.805111][T13307] usb 3-1: USB disconnect, device number 109 [ 2766.827408][T13202] usb 2-1: SerialNumber: syz [ 2766.834350][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.859042][T13202] usb 2-1: config 0 descriptor?? [ 2766.876546][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.881911][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.891136][T13202] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2766.909049][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2766.925030][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.266032][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.271462][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.281055][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.350853][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.360779][T13202] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2767.374092][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.382962][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.398819][T13202] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2767.413953][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.422261][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.438628][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.461872][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.478707][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.505985][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.532855][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2767.570742][ T9] gspca_vc032x: Unknown sensor... [ 2767.593703][ T9] vc032x 6-1:0.255: probe with driver vc032x failed with error -22 [ 2768.725503][ T1211] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2768.835573][T24445] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 2768.885516][ T1211] usb 4-1: Using ep0 maxpacket: 8 [ 2768.897597][ T1211] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2768.906874][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2768.915129][ T1211] usb 4-1: Product: syz [ 2768.922456][ T1211] usb 4-1: Manufacturer: syz [ 2768.930780][ T1211] usb 4-1: SerialNumber: syz [ 2768.944943][ T1211] usb 4-1: config 0 descriptor?? [ 2768.959881][ T6119] usb 6-1: USB disconnect, device number 54 [ 2768.971856][ T1211] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2768.994240][ T1211] pctv452e: pctv452e_power_ctrl: 1 [ 2768.994240][ T1211] [ 2769.013062][ T1211] usb 4-1: selecting invalid altsetting 3 [ 2769.023864][ T1211] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2769.023864][ T1211] [ 2769.036815][ T1211] dvb-usb: bulk message failed: -22 (5/0) [ 2769.050061][ T1211] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2769.068135][T24445] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 2769.076854][T24445] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2769.099141][T24445] usb 3-1: config 8 has no interface number 0 [ 2769.111786][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2769.112148][T30863] usb 2-1: USB disconnect, device number 126 [ 2769.127892][T24445] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2769.151528][T24445] usb 3-1: config 8 interface 177 has no altsetting 0 [ 2769.170861][T30863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2769.183094][ T1211] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2769.192701][ T1211] usb 4-1: media controller created [ 2769.210913][T24445] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2769.227581][T30863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2769.243212][ T1211] dvb-usb: bulk message failed: -22 (8/0) [ 2769.249936][ T1211] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2769.259281][T24445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.277115][T30863] quatech2 2-1:0.51: device disconnected [ 2769.284772][ T1211] dvb-usb: MAC address reading failed. [ 2769.324047][T24445] ir_toy 3-1:8.177: required endpoints not found [ 2769.433438][T10203] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7771'. [ 2769.481019][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7774'. [ 2769.571706][ T6633] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2769.678950][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2769.791739][ T6633] usb 6-1: Using ep0 maxpacket: 32 [ 2769.805116][ T6633] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2769.823199][ T6633] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2769.843551][ T6633] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2769.864672][ T1211] DVB: Unable to find symbol stb0899_attach() [ 2769.873008][ T1211] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2769.885096][ T6633] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2769.899457][ T6633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.026977][ T6633] usb 6-1: Product: syz [ 2770.035853][T30863] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2770.058326][ T6633] usb 6-1: Manufacturer: syz [ 2770.119382][ T6633] usb 6-1: SerialNumber: syz [ 2770.249793][ T1211] rc_core: IR keymap rc-tt-1500 not found [ 2770.264511][ T1211] Registered IR keymap rc-empty [ 2770.269613][T30863] usb 1-1: Using ep0 maxpacket: 8 [ 2770.276660][ T6633] usb 6-1: config 0 descriptor?? [ 2770.290406][ T1211] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 2770.302099][T30863] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2770.318670][T30863] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2770.330094][ T1211] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input163 [ 2770.385522][T30863] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2770.412481][ T1211] dvb-usb: schedule remote query interval to 100 msecs. [ 2770.438577][T30863] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2770.454059][ T1211] pctv452e: pctv452e_power_ctrl: 0 [ 2770.454059][ T1211] [ 2770.468810][ T1211] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2770.480260][T30863] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2770.522088][T30863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2770.565534][ T1211] dvb-usb: bulk message failed: -22 (4/0) [ 2770.571441][ T1211] dvb-usb: error -22 while querying for an remote control event. [ 2770.706430][ T1211] dvb-usb: bulk message failed: -22 (4/0) [ 2770.713698][ T1211] dvb-usb: error -22 while querying for an remote control event. [ 2770.722091][ T6633] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 2770.729658][ T6633] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 2770.796425][T30863] usb 1-1: GET_CAPABILITIES returned 0 [ 2770.812335][T30863] usbtmc 1-1:16.0: can't read capabilities [ 2770.855492][T30863] dvb-usb: bulk message failed: -22 (4/0) [ 2770.869962][T30863] dvb-usb: error -22 while querying for an remote control event. [ 2770.932158][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2770.941857][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2770.996175][T30863] dvb-usb: bulk message failed: -22 (4/0) [ 2771.028723][ T9] usb 4-1: USB disconnect, device number 109 [ 2771.185484][T30863] dvb-usb: error -22 while querying for an remote control event. [ 2771.230929][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2771.381699][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2771.441018][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7781'. [ 2771.463592][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2771.659384][T13202] usb 3-1: USB disconnect, device number 110 [ 2771.688309][T10220] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2772.045661][T13307] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2772.110150][T10252] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7784'. [ 2772.119814][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7784'. [ 2772.131930][T10252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7784'. [ 2772.205837][T13307] usb 4-1: Using ep0 maxpacket: 32 [ 2772.222185][T13307] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 2772.247845][T13307] usb 4-1: config 0 has no interface number 0 [ 2772.272758][T13307] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2772.284234][ T9] usb 6-1: USB disconnect, device number 55 [ 2772.301556][T13307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2772.324820][T13307] usb 4-1: config 0 descriptor?? [ 2772.334607][T13307] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2773.046824][T13307] gspca_vc032x: reg_w err -110 [ 2773.052038][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.061580][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.067357][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.142913][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.156245][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.171850][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.205475][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.215687][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.225939][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.242772][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.274058][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.295949][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.309097][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.326669][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.364465][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.382559][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.390916][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.407435][T13307] gspca_vc032x: I2c Bus Busy Wait 00 [ 2773.424480][T13307] gspca_vc032x: Unknown sensor... [ 2773.434383][T13307] vc032x 4-1:0.255: probe with driver vc032x failed with error -22 [ 2773.750551][ T29] audit: type=1326 audit(1772951963.863:13095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.789539][ T29] audit: type=1326 audit(1772951963.873:13096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.814602][T30863] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2773.825182][ T29] audit: type=1326 audit(1772951963.893:13097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.848213][ T29] audit: type=1326 audit(1772951963.893:13098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.870855][ T29] audit: type=1326 audit(1772951963.893:13099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.894169][ T29] audit: type=1326 audit(1772951963.893:13100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.918313][ T29] audit: type=1326 audit(1772951963.893:13101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.958511][ T29] audit: type=1326 audit(1772951963.893:13102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2773.984388][T13307] usb 1-1: USB disconnect, device number 123 [ 2773.995545][T30863] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2774.004922][T30863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2774.013347][T30863] usb 3-1: Product: syz [ 2774.020755][T30863] usb 3-1: Manufacturer: syz [ 2774.032023][T30863] usb 3-1: SerialNumber: syz [ 2774.048190][ T29] audit: type=1326 audit(1772951963.893:13103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2774.103838][ T29] audit: type=1326 audit(1772951963.893:13104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.7788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f10e0d9c799 code=0x7ffc0000 [ 2774.128147][T30863] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2774.165249][ T6633] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2774.608612][T10287] tipc: Enabling of bearer rejected, failed to enable media [ 2774.760501][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.767184][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.244442][ T6633] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2775.260391][T13307] usb 4-1: USB disconnect, device number 110 [ 2775.387020][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7793'. [ 2775.418116][ T6633] ath9k_htc: Failed to initialize the device [ 2775.468441][ T6633] usb 3-1: ath9k_htc: USB layer deinitialized [ 2775.685432][T13202] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2775.853434][T13202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2775.867645][T13202] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2775.918560][T13202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1032, setting to 64 [ 2775.948639][T13202] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 2775.964081][T10299] netlink: 'syz.1.7795': attribute type 3 has an invalid length. [ 2775.972085][T13202] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 2775.982335][T13202] usb 6-1: Manufacturer: syz [ 2775.998874][T13202] usb 6-1: config 0 descriptor?? [ 2776.016396][T13202] smsusb:smsusb_probe: board id=9, interface number 0 [ 2776.081742][T13202] smsusb:siano_media_device_register: media controller created [ 2776.138974][T13202] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 2776.147120][T13202] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 2776.270058][T13202] ------------[ cut here ]------------ [ 2776.275704][T13202] !PageLargeKmalloc(page) [ 2776.275737][T13202] WARNING: mm/slub.c:6396 at free_large_kmalloc+0xa3/0x140, CPU#0: kworker/0:4/13202 [ 2776.290605][T13202] Modules linked in: [ 2776.295381][T13202] CPU: 0 UID: 0 PID: 13202 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 2776.306833][T13202] Tainted: [L]=SOFTLOCKUP [ 2776.311197][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2776.321326][T13202] Workqueue: usb_hub_wq hub_event [ 2776.326557][T13202] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 2776.332322][T13202] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ee c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 e9 f6 f0 8d 5b 41 5e 5d e9 e7 d3 03 ff [ 2776.352071][T13202] RSP: 0018:ffffc9001d166b40 EFLAGS: 00010206 [ 2776.358244][T13202] RAX: 00000000ff000000 RBX: ffffea00011bd880 RCX: 0000000000100001 [ 2776.366296][T13202] RDX: ffffc900192a8000 RSI: ffff888046f62000 RDI: ffffea00011bd880 [ 2776.374288][T13202] RBP: 0000000000000000 R08: ffff888035e16f03 R09: 1ffff11006bc2de0 [ 2776.382339][T13202] R10: dffffc0000000000 R11: ffffed1006bc2de1 R12: 1ffff1100b08ba82 [ 2776.390680][T13202] R13: 0000000000000000 R14: ffff888035e16f60 R15: dffffc0000000000 [ 2776.398838][T13202] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 2776.408007][T13202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2776.414682][T13202] CR2: 000020000010d000 CR3: 0000000097d12000 CR4: 00000000003526f0 [ 2776.422734][T13202] Call Trace: [ 2776.426102][T13202] [ 2776.429050][T13202] usb_free_urb+0xd0/0x120 [ 2776.433574][T13202] smsusb_term_device+0x1d7/0x3e0 [ 2776.438795][T13202] smsusb_probe+0x1aba/0x2280 [ 2776.443544][T13202] ? __pfx_smsusb_probe+0x10/0x10 [ 2776.448739][T13202] ? do_raw_spin_lock+0x12b/0x2f0 [ 2776.453793][T13202] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 2776.459694][T13202] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2776.465588][T13202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2776.471446][T13202] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 2776.477282][T13202] usb_probe_interface+0x668/0xc90 [ 2776.482431][T13202] ? __pfx_usb_probe_interface+0x10/0x10 [ 2776.488238][T13202] really_probe+0x267/0xaf0 [ 2776.493108][T13202] __driver_probe_device+0x18c/0x320 [ 2776.498478][T13202] driver_probe_device+0x4f/0x240 [ 2776.503550][T13202] __device_attach_driver+0x279/0x430 [ 2776.509023][T13202] bus_for_each_drv+0x258/0x2f0 [ 2776.514033][T13202] ? __pfx___device_attach_driver+0x10/0x10 [ 2776.520037][T13202] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2776.525503][T13202] ? lockdep_hardirqs_on+0x7a/0x110 [ 2776.530776][T13202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2776.536663][T13202] __device_attach+0x2c5/0x450 [ 2776.541461][T13202] ? __pfx___device_attach+0x10/0x10 [ 2776.546833][T13202] ? _raw_spin_unlock+0x28/0x50 [ 2776.551723][T13202] device_initial_probe+0xa1/0xd0 [ 2776.556873][T13202] bus_probe_device+0x12a/0x220 [ 2776.561775][T13202] ? device_add+0x726/0xb70 [ 2776.566362][T13202] device_add+0x7b6/0xb70 [ 2776.570724][T13202] usb_set_configuration+0x1a87/0x2110 [ 2776.576289][T13202] usb_generic_driver_probe+0x8d/0x150 [ 2776.581856][T13202] usb_probe_device+0x1c4/0x3b0 [ 2776.586795][T13202] ? __pfx_usb_probe_device+0x10/0x10 [ 2776.592205][T13202] really_probe+0x267/0xaf0 [ 2776.596981][T13202] __driver_probe_device+0x18c/0x320 [ 2776.602287][T13202] driver_probe_device+0x4f/0x240 [ 2776.607383][T13202] __device_attach_driver+0x279/0x430 [ 2776.612808][T13202] bus_for_each_drv+0x258/0x2f0 [ 2776.617748][T13202] ? __pfx___device_attach_driver+0x10/0x10 [ 2776.623654][T13202] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2776.629127][T13202] ? lockdep_hardirqs_on+0x7a/0x110 [ 2776.634341][T13202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2776.640249][T13202] __device_attach+0x2c5/0x450 [ 2776.645090][T13202] ? __pfx___device_attach+0x10/0x10 [ 2776.650452][T13202] ? _raw_spin_unlock+0x28/0x50 [ 2776.655406][T13202] device_initial_probe+0xa1/0xd0 [ 2776.660517][T13202] bus_probe_device+0x12a/0x220 [ 2776.665465][T13202] ? device_add+0x726/0xb70 [ 2776.669980][T13202] device_add+0x7b6/0xb70 [ 2776.674399][T13202] usb_new_device+0xa08/0x16f0 [ 2776.679781][T13202] ? __pfx_usb_new_device+0x10/0x10 [ 2776.685045][T13202] ? _raw_spin_unlock_irq+0x23/0x50 [ 2776.690477][T13202] hub_event+0x2a1c/0x4f30 [ 2776.695026][T13202] ? __pfx_hub_event+0x10/0x10 [ 2776.700070][T13202] ? process_scheduled_works+0xa25/0x1830 [ 2776.706022][T13202] ? process_scheduled_works+0xa25/0x1830 [ 2776.711880][T13202] process_scheduled_works+0xb02/0x1830 [ 2776.717566][T13202] ? __pfx_process_scheduled_works+0x10/0x10 [ 2776.723586][T13202] ? assign_work+0x3d5/0x5e0 [ 2776.728319][T13202] worker_thread+0xa50/0xfc0 [ 2776.728815][T30863] usb 3-1: USB disconnect, device number 111 [ 2776.732967][T13202] kthread+0x388/0x470 [ 2776.733000][T13202] ? __pfx_worker_thread+0x10/0x10 [ 2776.748259][T13202] ? __pfx_kthread+0x10/0x10 [ 2776.752876][T13202] ret_from_fork+0x51e/0xb90 [ 2776.757767][T13202] ? __pfx_ret_from_fork+0x10/0x10 [ 2776.762908][T13202] ? __switch_to+0xc7d/0x1450 [ 2776.767689][T13202] ? __pfx_kthread+0x10/0x10 [ 2776.772275][T13202] ret_from_fork_asm+0x1a/0x30 [ 2776.777104][T13202] [ 2776.780131][T13202] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2776.787400][T13202] CPU: 0 UID: 0 PID: 13202 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 2776.798416][T13202] Tainted: [L]=SOFTLOCKUP [ 2776.802731][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2776.812806][T13202] Workqueue: usb_hub_wq hub_event [ 2776.817839][T13202] Call Trace: [ 2776.821107][T13202] [ 2776.824043][T13202] vpanic+0x56c/0xa60 [ 2776.828061][T13202] ? __pfx__printk+0x10/0x10 [ 2776.832637][T13202] ? __pfx_vpanic+0x10/0x10 [ 2776.837137][T13202] ? is_bpf_text_address+0x292/0x2b0 [ 2776.842413][T13202] ? is_bpf_text_address+0x26/0x2b0 [ 2776.847623][T13202] panic+0xc5/0xd0 [ 2776.851348][T13202] ? __pfx_panic+0x10/0x10 [ 2776.855755][T13202] ? ret_from_fork_asm+0x1a/0x30 [ 2776.860689][T13202] __warn+0x315/0x4f0 [ 2776.864746][T13202] ? free_large_kmalloc+0xa3/0x140 [ 2776.869857][T13202] ? free_large_kmalloc+0xa3/0x140 [ 2776.874966][T13202] __report_bug+0x29a/0x540 [ 2776.879656][T13202] ? device_initial_probe+0xa1/0xd0 [ 2776.884844][T13202] ? bus_probe_device+0x12a/0x220 [ 2776.889872][T13202] ? device_add+0x7b6/0xb70 [ 2776.894369][T13202] ? free_large_kmalloc+0xa3/0x140 [ 2776.899469][T13202] ? __pfx___report_bug+0x10/0x10 [ 2776.904480][T13202] ? usb_new_device+0xa08/0x16f0 [ 2776.909406][T13202] ? hub_event+0x2a1c/0x4f30 [ 2776.913977][T13202] ? process_scheduled_works+0xb02/0x1830 [ 2776.919709][T13202] ? smscore_unregister_device+0x651/0x780 [ 2776.925508][T13202] ? free_large_kmalloc+0xa3/0x140 [ 2776.930606][T13202] report_bug+0x16a/0x220 [ 2776.934933][T13202] ? free_large_kmalloc+0xa3/0x140 [ 2776.940030][T13202] ? free_large_kmalloc+0xa5/0x140 [ 2776.945131][T13202] handle_bug+0x9c/0x200 [ 2776.949367][T13202] exc_invalid_op+0x1a/0x50 [ 2776.953861][T13202] asm_exc_invalid_op+0x1a/0x20 [ 2776.958712][T13202] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 2776.964445][T13202] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ee c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 e9 f6 f0 8d 5b 41 5e 5d e9 e7 d3 03 ff [ 2776.984166][T13202] RSP: 0018:ffffc9001d166b40 EFLAGS: 00010206 [ 2776.990266][T13202] RAX: 00000000ff000000 RBX: ffffea00011bd880 RCX: 0000000000100001 [ 2776.998247][T13202] RDX: ffffc900192a8000 RSI: ffff888046f62000 RDI: ffffea00011bd880 [ 2777.006220][T13202] RBP: 0000000000000000 R08: ffff888035e16f03 R09: 1ffff11006bc2de0 [ 2777.014183][T13202] R10: dffffc0000000000 R11: ffffed1006bc2de1 R12: 1ffff1100b08ba82 [ 2777.022140][T13202] R13: 0000000000000000 R14: ffff888035e16f60 R15: dffffc0000000000 [ 2777.030123][T13202] usb_free_urb+0xd0/0x120 [ 2777.034538][T13202] smsusb_term_device+0x1d7/0x3e0 [ 2777.039569][T13202] smsusb_probe+0x1aba/0x2280 [ 2777.044300][T13202] ? __pfx_smsusb_probe+0x10/0x10 [ 2777.049316][T13202] ? do_raw_spin_lock+0x12b/0x2f0 [ 2777.054344][T13202] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 2777.059898][T13202] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2777.065712][T13202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2777.071521][T13202] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 2777.077157][T13202] usb_probe_interface+0x668/0xc90 [ 2777.082285][T13202] ? __pfx_usb_probe_interface+0x10/0x10 [ 2777.087913][T13202] really_probe+0x267/0xaf0 [ 2777.092422][T13202] __driver_probe_device+0x18c/0x320 [ 2777.097707][T13202] driver_probe_device+0x4f/0x240 [ 2777.102731][T13202] __device_attach_driver+0x279/0x430 [ 2777.108105][T13202] bus_for_each_drv+0x258/0x2f0 [ 2777.112957][T13202] ? __pfx___device_attach_driver+0x10/0x10 [ 2777.118847][T13202] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2777.124227][T13202] ? lockdep_hardirqs_on+0x7a/0x110 [ 2777.129434][T13202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2777.135248][T13202] __device_attach+0x2c5/0x450 [ 2777.140012][T13202] ? __pfx___device_attach+0x10/0x10 [ 2777.145298][T13202] ? _raw_spin_unlock+0x28/0x50 [ 2777.150154][T13202] device_initial_probe+0xa1/0xd0 [ 2777.155180][T13202] bus_probe_device+0x12a/0x220 [ 2777.160034][T13202] ? device_add+0x726/0xb70 [ 2777.164541][T13202] device_add+0x7b6/0xb70 [ 2777.168877][T13202] usb_set_configuration+0x1a87/0x2110 [ 2777.174364][T13202] usb_generic_driver_probe+0x8d/0x150 [ 2777.179829][T13202] usb_probe_device+0x1c4/0x3b0 [ 2777.184684][T13202] ? __pfx_usb_probe_device+0x10/0x10 [ 2777.190141][T13202] really_probe+0x267/0xaf0 [ 2777.194652][T13202] __driver_probe_device+0x18c/0x320 [ 2777.199940][T13202] driver_probe_device+0x4f/0x240 [ 2777.204968][T13202] __device_attach_driver+0x279/0x430 [ 2777.210351][T13202] bus_for_each_drv+0x258/0x2f0 [ 2777.215207][T13202] ? __pfx___device_attach_driver+0x10/0x10 [ 2777.221101][T13202] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2777.226480][T13202] ? lockdep_hardirqs_on+0x7a/0x110 [ 2777.231684][T13202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2777.237498][T13202] __device_attach+0x2c5/0x450 [ 2777.242269][T13202] ? __pfx___device_attach+0x10/0x10 [ 2777.247582][T13202] ? _raw_spin_unlock+0x28/0x50 [ 2777.252438][T13202] device_initial_probe+0xa1/0xd0 [ 2777.257464][T13202] bus_probe_device+0x12a/0x220 [ 2777.262316][T13202] ? device_add+0x726/0xb70 [ 2777.266818][T13202] device_add+0x7b6/0xb70 [ 2777.271150][T13202] usb_new_device+0xa08/0x16f0 [ 2777.275930][T13202] ? __pfx_usb_new_device+0x10/0x10 [ 2777.281137][T13202] ? _raw_spin_unlock_irq+0x23/0x50 [ 2777.286341][T13202] hub_event+0x2a1c/0x4f30 [ 2777.290794][T13202] ? __pfx_hub_event+0x10/0x10 [ 2777.295562][T13202] ? process_scheduled_works+0xa25/0x1830 [ 2777.301284][T13202] ? process_scheduled_works+0xa25/0x1830 [ 2777.307005][T13202] process_scheduled_works+0xb02/0x1830 [ 2777.312571][T13202] ? __pfx_process_scheduled_works+0x10/0x10 [ 2777.318557][T13202] ? assign_work+0x3d5/0x5e0 [ 2777.323153][T13202] worker_thread+0xa50/0xfc0 [ 2777.327765][T13202] kthread+0x388/0x470 [ 2777.331827][T13202] ? __pfx_worker_thread+0x10/0x10 [ 2777.336937][T13202] ? __pfx_kthread+0x10/0x10 [ 2777.341524][T13202] ret_from_fork+0x51e/0xb90 [ 2777.346115][T13202] ? __pfx_ret_from_fork+0x10/0x10 [ 2777.351226][T13202] ? __switch_to+0xc7d/0x1450 [ 2777.355904][T13202] ? __pfx_kthread+0x10/0x10 [ 2777.360497][T13202] ret_from_fork_asm+0x1a/0x30 [ 2777.365285][T13202] [ 2777.368559][T13202] Kernel Offset: disabled [ 2777.372872][T13202] Rebooting in 86400 seconds..