last executing test programs: 6.716895562s ago: executing program 3 (id=2354): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x22, 0x2, 0x3) unshare(0x28000600) getsockopt$netlink(r4, 0x10e, 0x0, 0x0, &(0x7f0000000040)) 6.433305761s ago: executing program 1 (id=2356): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa8, 0x0, 0x1, 0x401, 0x3a000000, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x10000, 0x1, 0x1]}]}, 0xa8}}, 0x0) 6.081736633s ago: executing program 3 (id=2358): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x424000) ioctl$BLKFINISHZONE(r1, 0x40101288, &(0x7f0000000080)={0x1, 0x2}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3) 6.01940829s ago: executing program 3 (id=2359): openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x181882, 0x0) (async) r0 = syz_io_uring_setup(0x713, &(0x7f00000004c0)={0x0, 0x10005322, 0x10000, 0x3, 0x100002d0}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) r3 = userfaultfd(0x80000) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) readv(r4, &(0x7f00000000c0), 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x28a8c1, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x38, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f"}}}}, 0x46) close(r4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r7, &(0x7f0000000100)=""/83, 0x53) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, 0x0, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, r9, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f70cedb60ac9d51b941abd238fc64620d9825b6422bfde76"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3000, 0x2}) 5.973249665s ago: executing program 1 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) poll(0x0, 0x0, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="35030200000000002c00128009000100626f6e64000000001c00028008001c0000000000080005007f0100000800030008001b6efd832d2d43239a8cd6887e2d035a0000"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="57bebdc10e4ff6ddb3a4d05c027db2e2", 0x10) getsockopt$inet6_int(r5, 0x29, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000480)=""/142) 5.789422798s ago: executing program 3 (id=2361): ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000005c0)={0x59e, 0x101, 0x9, 0x0, 0x91, 0x5ba1}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x86940) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r6, 0x2, 0x7, 0x81, 0x2, [], [0x752d, 0xfffffffd, 0xfffffffe], [0x7f, 0x4, 0x109], [0x0, 0x0, 0x8, 0x1c80000]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r6, 0x2, 0x7, 0x81, 0x2, [0x0, 0x0], [0x752d, 0xfffffffd, 0xfffffffe], [0x7f, 0x4, 0x109], [0x0, 0x0, 0x8, 0x1c80000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, r8], [0x2b8, 0x0, 0x0, 0x80000000], [0x0, 0x4, 0x0, 0x4]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, r8], [0x2b8, 0x0, 0x0, 0x80000000], [0x0, 0x4, 0x0, 0x4]}) close_range(r2, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) syz_usb_connect(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109023f00010000000009046900000e010000082402010202"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_destroy(0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x9, 0x1bfd6, 0x23d5b8}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x9, 0x1bfd6, 0x23d5b8}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r10, 0x0, r11}) mmap(&(0x7f00001fa000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0xa1464000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000480)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000000408010200000000000000000a00000a0900010073797a31000000002c000480080005400000000008000640000000010800044000000008080008400000000608000940000000070600024000f700000c00048008000140000000012400048008000240000000040800014000000009080001400000000308000140000000091c0004800800014080000001080001400000000508000140000001010900010073797a3100000000e6000300010000000600024093000000"], 0xbc}, 0x1, 0x0, 0x0, 0x20050080}, 0x4800) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000480)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000000408010200000000000000000a00000a0900010073797a31000000002c000480080005400000000008000640000000010800044000000008080008400000000608000940000000070600024000f700000c00048008000140000000012400048008000240000000040800014000000009080001400000000308000140000000091c0004800800014080000001080001400000000508000140000001010900010073797a3100000000e6000300010000000600024093000000"], 0xbc}, 0x1, 0x0, 0x0, 0x20050080}, 0x4800) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r10}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r10}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8080) write$P9_RGETATTR(r12, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x200, {0x1, 0x1, 0x6}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0xc7, 0x2, 0x4, 0x8000, 0x6, 0xb, 0x80, 0x7, 0x8, 0x5, 0x9, 0x8, 0x5}}, 0xa0) (async) write$P9_RGETATTR(r12, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x200, {0x1, 0x1, 0x6}, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0xc7, 0x2, 0x4, 0x8000, 0x6, 0xb, 0x80, 0x7, 0x8, 0x5, 0x9, 0x8, 0x5}}, 0xa0) 4.463863016s ago: executing program 2 (id=2367): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) (async) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) (async) fdatasync(r0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x28) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) (async) listen(r3, 0x100101) accept4(r3, 0x0, 0x0, 0x80800) 4.168704809s ago: executing program 3 (id=2369): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/101, 0x65}], 0x1) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r1, 0xb) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x16, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000340)={0x0, 0x21, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)={0x84, &(0x7f0000000280)={0x20, 0x13, 0x3, "36bca9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.058027599s ago: executing program 4 (id=2370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0xf5) 3.973370716s ago: executing program 4 (id=2371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.805790158s ago: executing program 4 (id=2372): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140), &(0x7f0000000200)) fcntl$addseals(r0, 0x409, 0x8) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000408010200000000000000040a008007"], 0x14}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=@newqdisc={0x1ac, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfffa}, {0xfff1, 0xc}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0x5, 0x80, 0x0, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x5, 0x2, 0x6]}}, {{0x1c, 0x1, {0x5b, 0x6, 0x401, 0x1, 0x0, 0x98, 0x0, 0x6}}, {0x10, 0x2, [0x2, 0x9, 0x4990, 0xb7d, 0xfffc, 0x1000]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5, 0x9, 0x2, 0x3, 0x7ff, 0x4}}, {0xc, 0x2, [0x0, 0x4, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x0, 0xf, 0x0, 0x0, 0x5, 0x7fffffff, 0xa}}, {0x18, 0x2, [0x2, 0x3ff, 0x9, 0x3, 0x0, 0xc, 0x7, 0xd5ee, 0x3ff, 0x8]}}, {{0x1c, 0x1, {0x0, 0x1, 0xf, 0x3, 0x1, 0x2, 0x8001, 0x5}}, {0xe, 0x2, [0x0, 0x101, 0x1, 0x3, 0x9]}}, {{0x1c, 0x1, {0x5, 0x8, 0x1, 0x6151, 0x1, 0x3, 0x9, 0x2}}, {0x8, 0x2, [0x5, 0x5]}}, {{0x1c, 0x1, {0xd, 0x6, 0x4, 0x71f, 0x2, 0x2, 0x9, 0x4}}, {0xc, 0x2, [0xd, 0x8, 0x5, 0xffff]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x2c, 0x7, 0x9, 0x1, 0x7, 0x4, 0x2}}, {0x8, 0x2, [0x382, 0x0]}}]}]}, 0x1ac}}, 0x4000000) landlock_restrict_self(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000480)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @local}, &(0x7f00000007c0)=0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net/fib_triestat\x00') r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x408000, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x1c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xf1, &(0x7f00000006c0)=""/241, 0x41000, 0x18, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xb, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r7, 0x1, r8, r9, r10, r11], 0x0, 0x10, 0x1ff}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r13 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r14, r15], 0x2}) close_range(r12, 0xffffffffffffffff, 0x0) 3.5648358s ago: executing program 2 (id=2373): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a030000000000000000000700ffff0900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4c001280480001800e000100636f6e6e6c696d697400000034000280080001400000010008000240000000000800024000000000080001400000002b080001400000000008000159000000050800034000000106"], 0xd8}}, 0x20050800) 2.965229837s ago: executing program 2 (id=2374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000060000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.701697501s ago: executing program 4 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 2.69118579s ago: executing program 0 (id=2376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1100}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 2.64495128s ago: executing program 1 (id=2377): mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000100)=0xff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000030000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.584299159s ago: executing program 4 (id=2378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000000200"/20, @ANYRES32=0x0, @ANYBLOB="0000000002000000050021001000000024000e000900000000000000010000000000000008000000000000000008b1020000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4051}, 0x4004) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x40) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x1, 0x3}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000540)=[@increfs_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11921550a176f8b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd}, &(0x7f0000000400)}}], 0xffffffffffffff8d, 0x0, 0x0}) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.505977983s ago: executing program 2 (id=2379): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x4100, 0x0, 0x42804}, 0x0) 2.505790306s ago: executing program 0 (id=2380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000110000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 2.312860359s ago: executing program 0 (id=2381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='P\a\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x750}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 2.240354042s ago: executing program 2 (id=2382): ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af25, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e003018000280040012000800040200000000080005"], 0x48}}, 0x0) 1.957574042s ago: executing program 0 (id=2383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100fffffffffffffff500000514000000020a01010000000000000000010000021400000011000100000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 1.954866127s ago: executing program 2 (id=2384): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe800000000000000000000000a9b6bb14000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d8014000400ff010000000000000000000000000001"], 0xac}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x83) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002580)={&(0x7f0000002600)=ANY=[@ANYBLOB="0c0000000e0601010000000000000000030000040900020073797a31000000000900020073797a3200000000cababc109257e5be99df7c1f3fd7029652"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000005a40)=@delchain={0x5e00, 0x65, 0x0, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff3, 0xa}, {0x5, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @filter_kind_options=@f_matchall={{0xd}, {0x4180, 0x2, [@TCA_MATCHALL_ACT={0x3388, 0x2, [@m_mirred={0x9c, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x5, 0x9, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf1, 0x0, 0x7fffffffffffffeb, 0x3, 0x3}, 0x3}}]}, {0x2d, 0x6, "b901003fcb4a97d1d933e11e593cb9cbfbeddb1db977bbda63cf3eaa1248d3c7e6e329e1c7bad8c777"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x18c, 0x11, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x40}, @TCA_IPT_TARG={0x4c, 0x6, {0x7, 'raw\x00', 0x3, 0x5, "17780bc54c44db926fe8e048ca694627040b097bbfef367c21fcf1df351943ef7c82"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0xda, 0x6, "26303bff9844eaab231ec63165520080e514a49409c462d90f7eef364bbda03d499b9085d94f781fd71c6be67053b0530a31ef7868dd7eb6c5937bed2e151c16b1b287262c540617f609ac368758719a174a5930755fae4437b92b7108490fb7bd839715eb05857d528ec471ff98d27aa05ce39a7968d9d25102f654b999251b0fd54d56536d2d00b8034d14663d92d86bc5051d7ef2c393689626d4bbd33d9a081276ce378a16d6cfef2de10ae1736e963327f588ceb70c3f33260e2d4da917c2ff38d37dca3cc1ccc41c07d366cf497252fcf0a294"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x90, 0x1f, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0x5, 0x3}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_SMAC={0xa}]}, {0x2f, 0x6, "d0b5e5bd7594024967bfeb3f883d82a764ddc7d5fb2da21b36b5ca2926764d98bbc3c4530030d2c0381c39"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xa4, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x74}]}, {0x58, 0x6, "86fbc042e4a3c3f0c153570459d8f0694a099532b16d6840e450bc9ed0972182843a960c7331aa7d5524a458106ec77822d33e560c2bc6890fe9485fbec5fb90780be4c7cb173086abf6f92570a17b8357a204f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x2f30, 0x5, 0x0, 0x0, {{0xb}, {0x2ec0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x800, 0x4, 0x4, 0xf8b8, 0x7, 0x6, 0x8, 0xfb, 0x5, 0x1, 0x3, 0x0, 0x4, 0x80000000, 0x2, 0xfffff292, 0x8a, 0x6, 0x7, 0x5, 0x0, 0x5, 0x1, 0xfff, 0x80000000, 0x10001, 0x8, 0x1cc9, 0x29d, 0x7, 0xb, 0x10000, 0x100, 0x2, 0x488, 0x8, 0x80000000, 0x8, 0x80000000, 0x4fdc, 0x8001, 0x1, 0x1d, 0x81, 0x1, 0x8, 0x9, 0x7, 0xbb7, 0x4, 0x10001, 0x120000, 0x7f, 0x3, 0x8, 0x3, 0xffffff81, 0x8, 0x2c65fa77, 0x67, 0x5, 0x2, 0x9, 0x0, 0x7, 0x1ff, 0x1, 0x9, 0x800, 0xc, 0x1, 0x646f, 0xffffff5f, 0x9, 0x7, 0x7, 0x5, 0x5, 0xb, 0x200, 0x3, 0x93e8, 0x7, 0x1767, 0x4, 0xfffffffa, 0x7, 0x3ea, 0x1, 0x5, 0x0, 0x2, 0x671, 0xa1c, 0x1, 0x1, 0x2, 0x2, 0x6, 0x8, 0x1a0, 0x77, 0x5, 0x9, 0x0, 0x7, 0x7, 0x3, 0x8, 0x80, 0x3, 0x6, 0x7fff, 0x4, 0x3, 0x7fff, 0x9, 0x0, 0xfffffff7, 0xefad, 0x1, 0x5, 0x7, 0x9, 0xec, 0x9, 0x8, 0x2, 0x5, 0x7d, 0x0, 0x92e, 0x280a53a9, 0x5a, 0x9, 0x0, 0x5, 0x7ff, 0x7f, 0x5891, 0x31, 0x7, 0xa8a, 0x5, 0x304, 0x3, 0x291, 0x9e5, 0x9, 0x8001, 0x3, 0x70f9, 0xffff, 0x7, 0xffffffff, 0xd, 0x7, 0xb, 0x9, 0x9, 0x80000001, 0x8, 0x9, 0x5, 0xed52, 0xd, 0xc, 0x455, 0x40, 0x5014a774, 0x40, 0x200, 0x4, 0x1ff, 0x8, 0x0, 0x3, 0x7, 0x6, 0x9, 0x1, 0x5, 0x2, 0x1, 0x7, 0x5, 0x7, 0x3, 0x4, 0xff, 0x7ff, 0x2, 0x2, 0x0, 0x33, 0x7, 0x3, 0x3ff, 0xff, 0x174, 0x400, 0x3, 0x607b, 0xfffffffd, 0x7f, 0xffff, 0x1, 0x7, 0x80, 0xffffff7f, 0x3e7, 0x2, 0x0, 0x7, 0x2, 0x3a, 0x101, 0x8, 0x7, 0x0, 0x0, 0x5, 0x8, 0x0, 0x8, 0x0, 0x7f, 0x8, 0x7, 0x3, 0x27, 0x7a, 0xfff, 0x4, 0x9, 0x3a, 0x1b8, 0x0, 0x4, 0x7, 0x4, 0x5, 0x5b, 0x1, 0x1, 0x1, 0x9, 0x7, 0x18c8, 0x0, 0x5, 0x10, 0xd75, 0x1, 0x81]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x71e8, 0x3, 0x7fff, 0x7, 0x465, 0x8, 0x5, 0x100000, 0x4, 0x5, 0x9, 0x8, 0x4000, 0x3, 0xcc9, 0x5, 0x0, 0x7b6, 0xee2a, 0x40, 0x4, 0x4, 0x5, 0x7, 0xf50, 0x3, 0x4, 0x2, 0x8, 0x1000, 0x1, 0x1, 0xffff9003, 0xfff, 0xd1b2, 0x6, 0x2, 0x6, 0x40, 0x4, 0xfffffffe, 0xfffffffa, 0x8, 0x4, 0xfffffffe, 0xa2, 0x7, 0x3, 0x1, 0xfffffc00, 0x7f, 0xff, 0x5, 0x9, 0x5, 0x1, 0x2, 0x9, 0x0, 0xe, 0xe, 0xb, 0x5, 0x1, 0x1ab523a6, 0x4, 0x9, 0x1d47, 0x1, 0x1142, 0x6, 0x19, 0x5, 0x4, 0x6, 0x7f, 0xffffffff, 0x0, 0x1, 0x7fff, 0x2, 0x7, 0x10001, 0x1ff, 0x3, 0xdb2, 0x7, 0x6, 0xfffffffb, 0xffff, 0x200, 0xa01, 0x3, 0x8, 0x8, 0x7, 0x3, 0x0, 0x1, 0x4, 0x2, 0x2, 0x3, 0xfffffffa, 0x814b, 0xb29, 0x6, 0x7f, 0xd68, 0x0, 0xf3a, 0x16f, 0x3, 0x7f, 0xfffffff6, 0xffff8001, 0x5, 0x7, 0xd9c6, 0x1, 0x9, 0x7, 0x6, 0x4, 0x0, 0x0, 0x658f, 0x4, 0x0, 0x8, 0x596817b, 0x7, 0x7, 0x9, 0x800, 0x401, 0xaae, 0x8, 0x7, 0x7, 0xa568, 0x8, 0x1, 0xab1b, 0x80000004, 0x1000, 0x4, 0x0, 0x9, 0xc, 0x80000000, 0xa, 0xfe7c, 0x7, 0x0, 0xfba, 0x4, 0x1, 0x6, 0x400, 0x400, 0x3ff, 0x4, 0x80000001, 0x0, 0x4, 0x6, 0x3, 0xfffffff8, 0x8, 0x2, 0x0, 0x2, 0x9, 0xa86, 0x3b8a, 0x4, 0x40, 0xbb, 0xd, 0x7, 0xa91, 0x6, 0xb08b, 0x1, 0xffff, 0x37, 0x3, 0x0, 0x1, 0x34ff4816, 0x7d47, 0x440, 0x10000000, 0x59d3ecf3, 0x1, 0x7ff, 0x400, 0x9, 0xfffffffd, 0xb, 0x8000, 0x6, 0x9, 0xc, 0x101, 0x5, 0x2, 0x2, 0x5e7, 0x4, 0x8, 0xfffffff7, 0x48171d97, 0xfffffff7, 0x8, 0x8, 0x9, 0xb, 0x4e80000, 0x4, 0x0, 0x8, 0x7f, 0x3ff, 0x1, 0x10000, 0x2, 0xffff12e0, 0x9, 0xfffffffa, 0x8, 0xdd96, 0x7, 0x6d, 0x4, 0x95, 0x1, 0xfffffff8, 0x6, 0xfffffff9, 0x5, 0x9, 0x5, 0x6, 0x3f77, 0x3, 0x4, 0x1, 0x2e, 0x7, 0x80, 0x80, 0x2b4, 0x0, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8001, 0x9, 0x4, 0x9, 0x7997fedc, 0xae8e, 0x4, 0x3e22, 0x0, 0x8, 0xc1, 0xaf78, 0x8, 0x2, 0x19, 0x0, 0x6, 0x1, 0x1, 0xd, 0x0, 0x8, 0x4, 0x6, 0x3, 0x7, 0x7, 0x9f95931, 0x200, 0x23d, 0xc13e, 0x80, 0x6, 0x2, 0x6, 0x3, 0x80, 0x2, 0x2, 0x8, 0x6, 0x8, 0x80, 0x0, 0x200, 0x9fd, 0x0, 0xec0f, 0xacfa, 0x3400, 0x16e5, 0x8, 0x3ff, 0x3, 0x7fffffff, 0x0, 0x4, 0x3, 0x6, 0x8, 0x8, 0x400000, 0x9, 0x5, 0x401, 0x1000, 0x2, 0xff, 0xbc01, 0x2, 0x2, 0x1cae, 0x7e2b, 0xf03d, 0x9, 0x101, 0xbfa, 0x8, 0xfffffffb, 0x9, 0x4, 0xfffffff6, 0x8, 0xfffffff9, 0x2, 0xfff, 0x7, 0x7fffffff, 0x7ff, 0x3, 0x7275, 0x81, 0xffffff89, 0xc, 0xc, 0xc, 0x8, 0x2, 0xffffffff, 0x6, 0x200, 0x1000, 0x1, 0xffffffff, 0x2a, 0x40, 0x5, 0xfffffff0, 0x2, 0x4, 0x2, 0x6, 0x81, 0x8, 0x3, 0xfffffffd, 0x1, 0xddc, 0xe, 0x7fffffff, 0x10, 0xd7f, 0x2, 0x0, 0xfffffeff, 0x7fffffff, 0x7, 0x8, 0x4, 0x1, 0x5, 0x7, 0x8, 0x2, 0x7ff, 0x5, 0x2, 0x2, 0x7fff, 0xfff, 0xa, 0x0, 0xfffff001, 0x1, 0x713b, 0x5, 0xfffffffe, 0x8, 0x3, 0xffffffff, 0xb, 0x5, 0xeb8, 0x40, 0x7, 0x0, 0xfc09, 0x3, 0x81, 0x3, 0x81, 0x80000000, 0x2, 0xb23b, 0x7f, 0xffffffff, 0x1, 0x8, 0x6, 0x9, 0x6, 0x6, 0x8, 0xa35a, 0xdf000000, 0x2, 0x4, 0x1, 0x80000000, 0x7, 0x200, 0x80, 0x9, 0xa4fe, 0x6, 0x1, 0x3641, 0x40, 0x4, 0x9, 0x9, 0x8, 0x7, 0x3ff, 0x8, 0x100, 0x8, 0x1, 0x0, 0x2, 0x0, 0x3, 0x9, 0x7, 0x3, 0x8, 0x3, 0x0, 0x3, 0x5, 0x4, 0x5, 0x2, 0x9, 0x84, 0x101, 0x7, 0x7, 0x9, 0x1, 0x1, 0x6, 0x6, 0x3, 0x4, 0x7, 0x7e23, 0xf2d5, 0x9, 0x7, 0x4, 0x9, 0x4, 0x9, 0x7fffffff, 0x0, 0x41, 0x3499, 0x9, 0x0, 0xf, 0xeb, 0x6, 0xc, 0x9, 0x3, 0x800, 0x8, 0x5, 0x80000001, 0x2, 0x8, 0xc8, 0xffffffff, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x5, 0x3ff, 0x5, {0x9b, 0x0, 0x2, 0x4, 0xf72, 0x3ff}, {0xa8, 0x2, 0x7, 0x2, 0x1000, 0x3}, 0x1, 0x7, 0x2361dd5c}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x7, 0x2, 0x0, 0x1, {0xf4, 0x0, 0x400, 0x0, 0x9, 0x5}, {0x10, 0x0, 0x3, 0x71, 0x7ff, 0xa}, 0x40800, 0x3, 0x8000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x100, 0x9, 0x9117, {0x5, 0x2, 0x9, 0x8001, 0x3, 0x1}, {0x2, 0x2, 0xfffe, 0x8, 0x8, 0x2dbe}, 0x8, 0x6, 0xe75f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x6, 0x3, 0x3, {0x24, 0x2, 0x8001, 0x4, 0x7, 0x5}, {0x64, 0x2, 0x30e7, 0x2, 0x379, 0x7}, 0x3, 0x10000, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x81, 0xc56, 0x6, 0x7, 0xa41e, 0x0, 0x6a, 0x4, 0x7, 0xd6c, 0x101, 0x1be569ff, 0x1ff, 0x9, 0x0, 0x6, 0x7, 0x1db, 0x6, 0x6, 0x9, 0x10, 0x21f, 0x7, 0x1, 0x5, 0x100, 0x8, 0x200, 0xffffffff, 0x1, 0x4, 0x80, 0x9, 0xa9, 0x3, 0xfffff801, 0x9, 0x3, 0x7, 0x10000, 0x3, 0x4, 0x1, 0x0, 0x5, 0x0, 0x0, 0x7f, 0x78, 0xe11, 0x9, 0x304, 0x100, 0x9, 0x1, 0x6, 0x3, 0x8000, 0x6, 0x6, 0x9, 0x4, 0x400, 0x5, 0xb, 0x1ea6, 0x5, 0x6, 0x4, 0x0, 0x0, 0x9, 0xe6e, 0x2, 0x5, 0x0, 0x7, 0x7fffffff, 0xfff, 0x2, 0x2, 0x3, 0x1, 0x7c8d88a4, 0x7, 0x7fffffff, 0x0, 0x200, 0x81, 0x3, 0x6, 0x3, 0x5, 0x5, 0x40, 0x7, 0x4, 0x7, 0x4, 0x7f, 0x8, 0x9, 0x4d4, 0x1ff, 0x9, 0x35, 0xbb9, 0x3, 0x100, 0xd, 0xb35, 0x2, 0xf616, 0x1, 0xfffffff0, 0x7, 0xfff, 0x5, 0x80000001, 0x0, 0xffffffff, 0xfb1, 0x5, 0x0, 0xfffffffa, 0x9, 0x3, 0xe4e, 0xe7, 0x80000001, 0x2, 0x67, 0x4, 0x2, 0x2, 0x0, 0x5, 0x23, 0xcb, 0x1000, 0x5, 0x7f, 0x1, 0x5, 0x7, 0x0, 0x80, 0x8, 0x1ff, 0x4, 0x3, 0x4, 0x8001, 0x723, 0x3ff, 0xd1, 0x401, 0xd3e9, 0x1a3e7b12, 0x3, 0x3, 0x2, 0xa3, 0x7, 0x1, 0x0, 0x2, 0xc300, 0xfffffff8, 0x1, 0x800, 0xfffffff8, 0x8, 0x7f, 0x3, 0x6, 0x8544, 0x8000, 0x1, 0x2, 0xbd, 0x80000001, 0x80, 0x2, 0x2, 0x101, 0x1, 0x10, 0x8000, 0x6, 0x7, 0x9, 0xdf, 0xe, 0x3, 0x4, 0x3e, 0x1, 0x7fffffff, 0x7fffffff, 0x6, 0x3, 0x3, 0x2, 0xff, 0x7, 0x80000000, 0x9, 0x6c, 0x100000, 0x56c, 0x7ff, 0x2, 0x7, 0x7ff, 0x10, 0x81, 0xa1a, 0x7, 0x9, 0x9, 0x3, 0x0, 0xc1d, 0xe, 0x5, 0x8001, 0x9, 0x0, 0x7, 0x80000001, 0x7fffffff, 0x8, 0xfffffffc, 0x6, 0x10, 0x80000001, 0x6, 0x100, 0x7, 0x80, 0x1, 0x1, 0xd, 0xce16, 0x2, 0x6, 0x95, 0x1, 0x1, 0xa33, 0xb83, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x50, 0x6e, 0x3, {0x9, 0x1, 0xd970, 0x6, 0x298, 0xa5}, {0x6, 0x1, 0x1, 0x0, 0xfff7, 0x6}, 0x842e, 0xd8a2, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8, 0x4, 0x6, 0x8, 0x2, 0x5, 0x8, 0x6, 0x9, 0x6, 0x0, 0x9ba, 0x3, 0x80000001, 0xc1, 0x0, 0x4, 0x4, 0xe, 0x31b2, 0x3, 0x9, 0x9, 0x7fff, 0x8, 0x1, 0x400, 0xfff, 0x100, 0x7, 0xa8, 0x2, 0x9, 0x2, 0xffffffff, 0x0, 0x8, 0x80000001, 0x80000000, 0x7, 0x2, 0x2, 0x0, 0xc84, 0x7, 0xb331, 0x81, 0x7, 0x1, 0x38000, 0x4, 0x9, 0x5, 0x6524, 0x9, 0xc00, 0x2, 0x962, 0xffffffff, 0x8, 0x9, 0x7, 0x3, 0x3, 0x1, 0x7, 0x6422, 0x9, 0x9, 0x19, 0x7, 0x3, 0x1, 0x5, 0x7, 0x7, 0x4, 0x5, 0x299, 0x3, 0x7, 0x440, 0x9, 0x800, 0x7fff, 0x7, 0x9, 0x200, 0x0, 0x1904, 0xc, 0x7, 0x100, 0xfffffffe, 0xfffffff0, 0x26, 0xfffffffc, 0xc, 0x6, 0x200, 0xd, 0x6, 0x5, 0x7d, 0x80, 0x5, 0x3, 0x0, 0xffff2d15, 0xa2a4, 0x7, 0x9, 0x9, 0xca38, 0x9, 0xffff8000, 0xf5, 0xcc, 0x81, 0x6, 0x0, 0x101, 0x83a, 0x6, 0x2, 0x6, 0x6, 0x3, 0x0, 0x101, 0xb, 0x5, 0x3ff, 0x1000, 0x5, 0x10000, 0x1, 0x2, 0x0, 0x3, 0x4, 0x4, 0xf00, 0x3ff, 0x0, 0xe1, 0x335, 0x6f1d, 0x7, 0x1000, 0x9cc5, 0x1, 0xecb, 0x8, 0x7, 0x9, 0x1, 0x2, 0x8, 0x6, 0x82, 0x3, 0x1, 0x1, 0x2, 0x0, 0x6, 0x200, 0x6, 0x8, 0x3, 0x7, 0x5, 0x7, 0x0, 0x2, 0x69f3, 0x2, 0xa505, 0x7e, 0x8, 0xd1, 0x9, 0x1, 0x0, 0x2, 0x1000, 0x1, 0x6, 0x6, 0x1, 0x23c, 0x3, 0x4, 0x2, 0x0, 0x4, 0xa, 0x7fffffff, 0x40, 0x9, 0x0, 0x506f, 0xd, 0xe, 0x3, 0xc, 0xc, 0x3, 0xb, 0x7, 0x2, 0x1, 0x8001, 0xd, 0xc849, 0x4d, 0x7, 0x8, 0x6, 0x7, 0x1, 0x80, 0x2, 0x2, 0x2e9b924c, 0x84, 0x2, 0xffff, 0x80000000, 0x8, 0x8, 0x4, 0x3, 0x3, 0x5, 0x1, 0x7fff, 0x8000, 0x80, 0x9, 0x7fffffff, 0xc8, 0x2, 0x10, 0xfffffff7, 0x1, 0x2, 0x2, 0x8000, 0x1, 0x68, 0x8, 0x3, 0xa]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1f99}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x40000009, 0x80000001, 0x800, 0x27d0, {0xcb, 0x0, 0x6, 0xfc00, 0x9, 0x4}, {0x1, 0x1, 0x7, 0xf000, 0x7d, 0xf}, 0xffffffff, 0x9, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x0, 0x2, 0x1, {0x9d, 0x2, 0x2, 0x1, 0x5, 0x400}, {0x10, 0x2, 0x7, 0x7, 0x200, 0x7}, 0xdf6d, 0x3, 0x9ea}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x7fffffff, 0x1, 0x7, {0x0, 0x2, 0x0, 0x8, 0x4, 0x7}, {0x10, 0x0, 0x0, 0x0, 0x0, 0xfffeffff}, 0x43a2ca13, 0x7ff, 0x7ff}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x78, 0xa, 0x5e7d0d80, 0x10001, 0x0, 0x8, 0x3, 0x0, 0xb, 0xc, 0x6, 0x80, 0x7, 0x72b0, 0x9, 0x7c, 0x9, 0x9c, 0x76121986, 0x2, 0x70ef, 0x5, 0x2db, 0x4, 0x5, 0x80, 0x0, 0x8, 0x7, 0x4, 0x9, 0x8, 0x8, 0x2, 0xfbb50, 0x151, 0x7ff, 0x7, 0x80, 0x8, 0x5, 0x5, 0x7, 0xffff, 0x5, 0x800000, 0x6, 0x3, 0x3, 0xdeb, 0x37c, 0x3df, 0x1e5, 0x8, 0x9, 0x2, 0xf, 0x5, 0x1, 0x80000001, 0x7f, 0xb, 0x9, 0x10, 0x2, 0x7, 0xe, 0x6, 0x3, 0x6, 0x4, 0x8, 0x0, 0x1000, 0x3, 0x9, 0xa, 0x4, 0x6, 0xffff8000, 0xf, 0x3ff, 0x0, 0x2, 0x2, 0xfffffffa, 0x58e, 0x7, 0x1, 0x5, 0x1000, 0x1, 0x3, 0x3, 0x3, 0x6, 0x200, 0x0, 0x1, 0x1, 0x4, 0x9, 0x800, 0x0, 0xe2, 0x5, 0xff, 0x8, 0x7, 0xa2, 0x7, 0x9, 0x0, 0x6, 0x7, 0x7, 0x4d, 0xaad, 0x7, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0xd, 0x80000001, 0xffff, 0xe, 0x1c000000, 0xdf06, 0x0, 0x5, 0x2, 0x5, 0x101, 0x7fff, 0x7122187b, 0x91, 0x8, 0x8, 0x8, 0x5, 0x7, 0xa, 0xeb, 0xffffffff, 0x3, 0x1, 0x4, 0x7, 0x3, 0xffff97c4, 0x9, 0x1, 0xf1b, 0x1, 0x10, 0x7d1, 0x0, 0x8, 0x53, 0xf, 0x8, 0xff, 0x0, 0x3, 0x3, 0xfffc0000, 0x9, 0x80000000, 0xc, 0x401, 0x0, 0x9, 0x80000000, 0x7, 0x4, 0x401, 0x57c7, 0x4, 0x6, 0x6, 0x0, 0x1ff, 0x1, 0x4, 0x800, 0x4, 0x10001, 0x8000, 0x100, 0x8, 0x17, 0x80000000, 0x100, 0x80000000, 0x3ff, 0xff, 0x2, 0x1, 0x6, 0xac, 0xe3, 0x35d8, 0x1, 0x0, 0x1, 0x3, 0x3000, 0x3, 0x2, 0x9, 0xf, 0x0, 0x9, 0x0, 0x2, 0x6, 0x3, 0x8000, 0x7, 0xf5, 0x6, 0x5, 0x6, 0x3fe9835e, 0x7f, 0x1, 0x4, 0x800, 0x1, 0x6, 0x7, 0x1, 0x2, 0x1, 0x3, 0x3, 0xffff, 0x9, 0x1, 0x3ab, 0xd55, 0x4, 0xfffffff7, 0xd, 0x100, 0x1ff, 0xe, 0x8, 0x80000001, 0x1, 0x7, 0x634f, 0x9d]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x800, 0x200, 0x4, 0x6, 0x3fc00, 0x4, 0x800, 0x4, 0x2, 0x1, 0xfffffff8, 0xa07, 0x0, 0x7, 0x5, 0x4, 0x0, 0x1b727e98, 0x4, 0x8, 0x2, 0x2800, 0x5, 0x9, 0x1e, 0x9, 0x4, 0x6, 0x6, 0x8, 0x7, 0x310207e2, 0x8, 0x5, 0x3, 0xf1, 0x5, 0x9, 0x1, 0x0, 0x1, 0xe, 0xa5, 0x6, 0x4, 0x2b5d, 0xae, 0x7, 0x8, 0x9, 0x68a, 0x28, 0xffffff80, 0x5, 0x26, 0x65, 0x1, 0xffff, 0x1, 0x6, 0x2, 0x2, 0x3, 0x6, 0x8, 0x1, 0x8, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1000, 0x2a, 0xfffffff5, 0x5, 0x3ff, 0xfffffffa, 0x7f, 0x7, 0x7, 0x2, 0x0, 0x3, 0x10000, 0x0, 0x81, 0x0, 0x2, 0xc870, 0x4, 0xffffffff, 0xfffff801, 0x0, 0xfffffffb, 0x0, 0x2, 0x3, 0x9, 0x6, 0x1, 0x6, 0xfffffff7, 0x4, 0x81, 0x6ff, 0xd, 0x3, 0xf6b, 0x40, 0x5, 0x0, 0x3, 0x831, 0x7, 0x1, 0xff, 0x72c, 0x8, 0x3, 0xd4, 0x3, 0x8b07, 0x9, 0x3ff, 0x3, 0x8, 0x1, 0xffffffff, 0x9, 0x2, 0x7, 0x6, 0x8, 0x7, 0x4, 0x9, 0x7fff, 0x0, 0x401, 0x4, 0xfffff000, 0x2, 0xa950, 0x3, 0x80000000, 0xa0000000, 0x2eea, 0x11, 0x4d9d, 0x8, 0x9, 0x5, 0x1, 0x101, 0x7, 0xb, 0x9, 0x2, 0x40, 0x7, 0xcbb, 0x3, 0x3f, 0xfffffd09, 0x0, 0x3, 0x840, 0x0, 0xfffffffe, 0x28e4, 0x8, 0x2, 0x68, 0x6e80, 0x5728, 0xaa3, 0x4, 0x1, 0x1, 0x6, 0x7, 0xa, 0x0, 0x1, 0x8, 0x9cff, 0xa, 0x4, 0x5, 0x750fa44d, 0xc4f, 0x0, 0xbb1, 0x81, 0x2, 0x4, 0x9, 0xe, 0xf, 0x9, 0xfff, 0xa322, 0x3, 0x4d, 0x3ff, 0x80000001, 0x9, 0x48, 0xfffff42d, 0xfb4b, 0x7, 0x5, 0x8000, 0xfffffffc, 0x4, 0xfffff000, 0x9, 0x81, 0x4c9, 0x4, 0x63994f58, 0xffffffff, 0x0, 0x4, 0x80000000, 0x3, 0xfffffffb, 0xbf72, 0x2, 0x3, 0x5, 0x9, 0x1000, 0x0, 0x6, 0x8001, 0x3, 0x100, 0x401, 0x8, 0x9, 0x200, 0x1ff, 0x40, 0x0, 0x2, 0x8, 0x1000, 0x1, 0x7fff, 0x2, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x5, 0x1, 0x5, 0xc, 0x3, 0x4, 0x6, 0x1, 0x5, 0x11, 0x2, 0x8, 0xc, 0x2, 0x7, 0x9, 0x6, 0x2, 0x9ea1, 0x1, 0xfffffffc, 0x6, 0x10, 0x7, 0x9, 0xb4, 0x7, 0x10001, 0x4, 0x4, 0x1, 0x8, 0x7, 0xe592, 0x3, 0x38000000, 0x800, 0x1, 0x4, 0x5, 0x3, 0x8, 0x4, 0x1, 0x10001, 0x30000000, 0x10001, 0x4, 0x9, 0x2, 0xa9d, 0x2, 0x7fff, 0x5, 0x136c, 0x6, 0x4, 0x9, 0x2, 0x6, 0x3, 0xe, 0x800, 0xb, 0xa, 0xb55, 0xfffffffa, 0x6, 0x1, 0x7, 0x3, 0x4, 0x8, 0xd0000000, 0x6, 0x2, 0x10, 0xe, 0xeba, 0x38, 0x5, 0x7e, 0xc5a, 0x4, 0x8, 0xfffff8e0, 0x1e, 0x1, 0x100, 0x6b, 0x8, 0x4, 0x3, 0x5, 0x1, 0x200, 0x9, 0xfffffffd, 0xeb, 0x3, 0x10001, 0x3, 0x7, 0xf, 0x0, 0x7, 0x3, 0x6, 0x100, 0x9, 0xfffffff4, 0x2, 0x3, 0xfffffff8, 0xd3, 0x0, 0x3179, 0xfffff000, 0x100, 0x3, 0x5, 0x0, 0xd, 0x3, 0x3, 0x80000001, 0xc, 0x800, 0x1, 0x1, 0x1, 0x3, 0x2, 0xfffffff2, 0xd, 0x9, 0x2, 0x8, 0x8, 0xfffffffd, 0x2, 0x4, 0x486600, 0x6, 0x6, 0x10000, 0x3a7, 0x6cb2, 0x9, 0x9a08, 0x5, 0x157, 0x6, 0x8, 0x6, 0xd2d, 0x3, 0x1f35, 0x8, 0x800, 0x24000000, 0x101, 0x3, 0xb3d3, 0x0, 0xff, 0x200, 0x800, 0x4, 0x200, 0x5, 0x8, 0x5, 0x4, 0x101, 0xa524, 0x9, 0x400, 0x5, 0x8, 0x4, 0x5, 0x4, 0xb9, 0x2, 0x7, 0x4, 0x0, 0x1, 0x5, 0x208c, 0xfffffff8, 0x78, 0x9, 0xfffffff6, 0xf2, 0xa3a, 0x3ff, 0x7, 0x2, 0x4, 0xb10, 0x3, 0xd, 0x9ed3, 0x7ff, 0x6, 0xa, 0x3ff, 0x400, 0x0, 0x8, 0x5, 0x2, 0x7, 0x80000000, 0x2, 0xfffffffe, 0x4, 0xfffffffb, 0xffffff22, 0x8001, 0x9, 0xff, 0x8d78, 0x5f14, 0x2, 0x9, 0x3ff, 0x9, 0x3, 0x9, 0x800, 0x6d2f9612, 0x7, 0x2, 0x1, 0x80000000, 0x2, 0x8, 0x2, 0x2, 0x9, 0x3, 0x800, 0xb, 0x7f, 0x9, 0xb, 0x62c, 0x9f200000, 0x0, 0x8000, 0xfffffffc, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x211, 0x2, 0x8, 0x0, 0x4, 0xd91, 0x7, 0xa, 0xfffffff7, 0x101, 0xc0000000, 0xb, 0x7, 0x1, 0x1, 0x4, 0x0, 0x9, 0x1f18, 0x9, 0x5, 0x6644, 0x80, 0x5, 0x1, 0xa5, 0xffffffff, 0x5, 0x2, 0x3, 0x3eb, 0x1, 0x7, 0xf05, 0x1, 0x6, 0x7fffffff, 0x7fffffff, 0x9, 0x4, 0x1, 0x6, 0x8, 0xd, 0x1, 0x4, 0x9, 0x9, 0x7, 0x1ff, 0x7, 0x3, 0x7, 0x4, 0x7035, 0x8, 0x8, 0xff, 0x22, 0x1, 0x6, 0x5c08f7ee, 0x7, 0x0, 0x2, 0x10000, 0x9, 0xfffffff3, 0x3, 0x21d, 0x10001, 0x4, 0x10001, 0x0, 0x1ff, 0x9, 0x9, 0x2, 0x8, 0x9, 0x3, 0x6, 0x3, 0x7, 0x5621ea3e, 0x3, 0x4, 0x7fff, 0x1, 0x5, 0x7fff, 0x7, 0x9, 0x401, 0x4, 0xc, 0x92, 0x1, 0x4c82, 0x0, 0x3, 0x1, 0x4, 0x3147, 0x58eeedf4, 0x0, 0x9, 0x1e, 0x1, 0x7059, 0x17, 0x2, 0x6, 0x1, 0x8, 0x81, 0x5, 0x4, 0x7, 0x4, 0x1, 0x800, 0x7fffffff, 0x8, 0x1, 0x81, 0x7f, 0xffffda9f, 0x10, 0x0, 0xe3f8, 0xec63, 0xf, 0x8, 0x9, 0x725, 0x4, 0x6, 0x9, 0x0, 0x7f, 0x2, 0x800, 0x7fffffff, 0x7, 0x401, 0x80000000, 0xf, 0xffffffff, 0x0, 0x4, 0x6, 0x2, 0x7, 0xa, 0x1ff, 0x5, 0x1eb, 0x1, 0x8, 0x0, 0xc, 0x2, 0x1, 0x6, 0x2, 0x6, 0x1, 0x0, 0x4, 0x9, 0xff, 0x800, 0xa5, 0x69e0000, 0x6, 0xfffffffe, 0x6, 0x4, 0x7fff, 0x2, 0x4, 0xfffffff7, 0x9, 0xef8e, 0x2a, 0x2eb29d6e, 0x8, 0x7c3a3967, 0x3, 0x9, 0xffffffff, 0x8, 0x2, 0x5, 0xfffffff9, 0x81, 0x8001, 0xffffffff, 0xfffffffd, 0x8, 0x2, 0x10001, 0x2, 0x21, 0x4, 0x4, 0x80000001, 0x4, 0x6e, 0x10000, 0x8, 0x4, 0x5, 0x5, 0xdd, 0x6b12, 0x7, 0xf, 0xc, 0x1, 0x0, 0x5d9, 0x2, 0x5c925ce2, 0x9, 0x7, 0x3, 0x1, 0x1, 0x6, 0x8, 0x4, 0x3, 0x4, 0xaf4, 0x10001, 0xe, 0x800, 0x80, 0x10, 0x12000, 0x1, 0x7, 0x200, 0xffffffff, 0x1, 0x40, 0x1, 0x626, 0xaf0, 0x698, 0xa, 0x7f, 0x8001, 0xf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xad2e, 0x331, 0x7ff, 0x0, 0xa, 0x3, 0x1, 0x0, 0x6, 0x2, 0x400, 0x9, 0x1, 0x2, 0x9, 0x5, 0xffffffff, 0x1, 0x3, 0x9, 0x2, 0x8, 0x100, 0x5, 0x4, 0x6, 0x6, 0x0, 0x4, 0xffffffff, 0x0, 0x3, 0x6, 0xb242757, 0x4, 0x4, 0x5, 0xb, 0x200, 0x0, 0x807c, 0x8, 0xfffffff7, 0x6233, 0x40, 0x9, 0x401, 0xfffffd03, 0x9, 0x0, 0xd2ec, 0xb6d, 0x99, 0xc48, 0x7, 0x3, 0x3ff, 0x4, 0x5, 0x31ad, 0x1, 0x7fff, 0x1, 0x2, 0x5, 0x1ff, 0x5, 0x7, 0x10, 0x5, 0x6ce, 0x4, 0x1ff, 0x81, 0x1, 0x8, 0xfffffeff, 0x66, 0x4, 0x4, 0x200, 0xb, 0x8, 0x4, 0xcca, 0xcb3, 0x7, 0x4, 0x0, 0x1, 0x810, 0x2, 0x80000000, 0x91b, 0x22000, 0x1, 0x804, 0xd, 0x3, 0x7fffffff, 0x0, 0x3, 0xffffffff, 0x8a4b, 0x7, 0x7, 0x1ff, 0x5, 0x1ff, 0x8000, 0x2, 0x7, 0x3, 0x5, 0x2d, 0x5, 0x9, 0x1, 0xfffffff8, 0x0, 0xbe, 0x6, 0x3fd1, 0x1, 0x10001, 0x0, 0x7f, 0x8, 0x1, 0x5, 0x3, 0x401, 0x7fffffff, 0x158, 0x3, 0x2, 0x2, 0x2, 0x8, 0x8, 0x3, 0x3, 0x1, 0x8, 0x0, 0xfa, 0x2000, 0x5212, 0x3, 0x6, 0x9, 0x80000000, 0xb1b, 0x5, 0x5, 0x7fff, 0xd, 0x7ff, 0x4, 0x8f, 0x4000000, 0x3, 0x4, 0xc13e, 0x0, 0x9, 0x0, 0x9, 0x7, 0x8, 0x2, 0x6, 0x0, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0xfffffffb, 0x5, 0x4, 0x1fee, 0x400, 0x6, 0xf, 0x9, 0x2, 0x9, 0x7, 0x2, 0x800, 0x2, 0x5, 0x7, 0x4, 0x1, 0x40, 0x8, 0x6, 0x88, 0x1, 0x0, 0x10, 0x0, 0x0, 0x1, 0x2, 0x7, 0xffffffff, 0x1, 0x0, 0x5, 0x1ff, 0x9, 0x9, 0x4, 0x10000, 0x1, 0x0, 0x1, 0x3, 0x0, 0x8e, 0xec5, 0x7ff, 0x0, 0xfffffffa, 0x7, 0x0, 0x1, 0x3, 0x7, 0x9, 0xa4, 0x2, 0x6, 0xffffffff, 0x5, 0x7, 0x9, 0x1000, 0x7, 0x8, 0x56, 0x49, 0x200, 0x7, 0x4, 0x1, 0x0, 0x10000, 0x245, 0x7fffffff, 0x401, 0x5, 0xffffff49]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0xf, 0x0, 0x1, 0x8001, 0x75a58d9c, 0x3, 0x8, 0x9, 0x9, 0x2, 0x0, 0x1, 0x0, 0x5, 0x741, 0x9, 0xd99b, 0x401, 0x7, 0x8, 0x4, 0x7f, 0x8, 0x9, 0x4, 0x8, 0x4, 0x9, 0x8, 0xfffffffe, 0x101, 0xfffffffc, 0xfffffffc, 0x4, 0xac, 0x401, 0x3e, 0x0, 0xe0000, 0x3, 0x3, 0xfee, 0xf, 0x6, 0x6, 0x5, 0xa, 0x3, 0xc, 0xfff, 0x5, 0x7ff, 0x9, 0x659a9f5a, 0x6cd, 0x7f, 0x7ff, 0x1ee7a051, 0x6, 0x800, 0x2, 0x6, 0x5, 0x81, 0x5, 0x7, 0xcc4, 0x3, 0x9, 0x100, 0x68df, 0x5, 0x7, 0x4, 0x7, 0xc0000000, 0x2, 0x4d, 0x3, 0xfffffffe, 0x8, 0xa808, 0x2, 0x6, 0xfd, 0x1, 0x8001, 0x5, 0x1, 0x385c, 0x6, 0x8000000, 0x6, 0x7, 0x702, 0x3, 0x4, 0x8000, 0x1, 0xa7, 0x10, 0x3, 0x2b08, 0x7, 0x42f2805c, 0x8, 0x1, 0xffffffff, 0xc1b0, 0x8001, 0x9, 0x10000, 0x8, 0x3, 0x4a7, 0x3, 0x1, 0x7fffffff, 0x268, 0xf94, 0x7488, 0xfffffff9, 0x9, 0x6, 0x2, 0x5, 0x348886fb, 0x800, 0x9, 0xfffffff8, 0x8, 0x3, 0x16ce, 0x4, 0x100, 0x7fff, 0x6, 0x4, 0xd86, 0xff1, 0x1, 0x8, 0x2, 0x9, 0x9, 0x4, 0x9, 0xb, 0x2, 0xfffffffa, 0x5, 0x8, 0x2, 0x9, 0x4, 0x7, 0x7ff, 0xa, 0x12, 0x9, 0x2, 0x240000, 0x8, 0x1, 0x1, 0x0, 0x1, 0xa, 0xd, 0x1, 0x7, 0xfffffb1a, 0x4a4, 0x4, 0x8000, 0x4, 0xb459, 0x7fff, 0x1, 0x6, 0x0, 0x8d1, 0x9, 0x126, 0x5, 0x0, 0x5bc, 0x2, 0x0, 0x2, 0x4, 0xfffff801, 0x800, 0xffffffff, 0x3, 0x4, 0x1, 0x1, 0x200000, 0x7, 0xfffffff8, 0x401, 0x8, 0x8, 0xd4b, 0x1, 0x7, 0x5, 0x80000001, 0xffffffe0, 0x0, 0x7, 0xe, 0x5, 0x81, 0x0, 0x4, 0xffffff80, 0x3ff, 0x2, 0x10001, 0x1, 0x9, 0x67, 0x1000, 0xc, 0x2e000, 0x5e, 0x5, 0xf, 0x0, 0x9, 0x2, 0x10000000, 0x6, 0x7d, 0x80000000, 0x3, 0x5, 0xa9a, 0x2, 0x6, 0x1, 0x9, 0x9, 0xff, 0x0, 0x101, 0x1f6b, 0x8, 0x4, 0xea, 0x100, 0x7fff, 0x4]}]]}, {0x46, 0x6, "5bcad2b857b2419a5a23e35ad2decf40f4689d9185f1ec16e69cd23f7a6bcccf5fdf051596aa19de5634749d9201651b5d0a42500c25d98428b815af16edc6b4ff3a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x5}}}}, @m_ctinfo={0xf8, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffa}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x98, 0x3, 0x8, 0x3}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8001, 0x7, 0x6, 0x2da0, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x81, 0x6, "cf38f83ac6db450d620cbee5ee6ee8371f25419b7f81b11f3450ebdc1d0ee0e801e8391898618f09c6d19eff4cc8b714bb50e7ce3a48dc6019e6485e58b6766937d0d7044ef61eebf589d11716bcbd7e94449550100fb9b7a0eb0730bcea81add99fdc0a1b6dcee5107b703ec572e07d85b6b6afb1d32f43021b2ed8b5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x604, 0x2, [@m_connmark={0x16c, 0x1d, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x5, 0x4, 0x6, 0x2}, 0xacdc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0xfffffffffffffff3, 0x80000000, 0x4}, 0x8}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x494, 0xc, 0x0, 0x0, {{0x7}, {0x370, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x9c, 0x6, {0x4, 'raw\x00', 0x1, 0x2, "b2652eebdc811cde31487c52a400e9bc063399e735d0715e3f44254287acd106aec6d2bc4496cc57ebf8d80cf90140debd82f54c6b22e7a83b5f2e54cea8851dd4d3538407b77f28c2485a85a0faadff16010dbd1624b44ea90aae17ee9bee7081817f462166d31db4f160da2b5af20f529e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x129, 0x6, {0x0, 'mangle\x00', 0x3, 0xfff7, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x87}, @TCA_IPT_TARG={0x9e, 0x6, {0x4, 'mangle\x00', 0x0, 0xfff, "e32e9984930f68b2fb47e04e2ff1e11c10cdadcf4c0fec0c1522c693f7db6a2e53a8ae67d6b125442d1df14464a08fb2d283c8f9cb65667a159199d555e434465c97f89ce96a7de50a06d2ab3dd836f9626f741fbe3f4c3a3578208bc1874bdd904eca1f29299ef141e57cd4da2dcb3201fa40c3"}}, @TCA_IPT_TARG={0xa4, 0x6, {0x4, 'raw\x00', 0x0, 0x8001, "c0ff6a650edb212899a6a2313289dc6107dcfec49eefa1042256f4b54637d3b5740b5f7af3b71a1d8290ec261ac457ae7d9f073238d9ea080c95b88a44e3e3b8b0d0e923f32d1fdb1eb755ff25ad131167ce175285e7ea31bd840e69efdd6f18a10aa7fbe7f03aba6e43ba5fa68872fd366f4816510318da3d5c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x9}}, @TCA_MATCHALL_ACT={0x7d0, 0x2, [@m_ct={0xc4, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x9a, 0x6, "9ca9ea33b62e8cf8f03000ec3fbc76fc0a3b50d13b60cfa48e67b5249889620d40fb9939235642078d985272607b03dc0239e35aa95550dd43d91d0983f96f84124faa07fb9a6683cd8d4845247fffc9cb48da934701fd95eefe3c7c4b726843ec65a649b913e057c0e2e38f80fe09c66449bb20dc7e4f07ed88f5e70e5d119fb7eae4ef5127ab5a123d3919ba82e96f5ff3114dcc9e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0xb8, 0x3, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x57, 0x0, 0xe14, 0xe9}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x5, 0xf321fd5bd93c1e95, 0x5, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9, 0x1, 0x8, 0x3}, {0x2, 0x4, 0x80, 0xffffffff}, {0x800, 0x4, 0xff, 0xfd}, {0xfff9, 0x0, 0x2, 0x3}, {0xe, 0xe8, 0x1, 0x6}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x23, 0x6, "2414e530c888c61cd4d833c8b9bb466a1d4a6624387c2f0e207731e1359768"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe4, 0xe, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xa39, 0x4, 0xfffffffd, 0xffffffff}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x911, 0x2, 0xc, 0x9, 0x2}, 0x1}}]}, {0x82, 0x6, "c234a7a1402a51b617320fb1c53aba9945a74fb62236153a85125129fa5f459387464ac9e161be68ddc1e5efb7047a87508cc324defd425371b64e61d9dd745f012ff26dc8c82ff6b659b39777d58ab2066c6bf1926be8549d315afadf2bd189c97357e0dca63b79a76d935700be2801636ff22088047d9fee744c1a5036"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x14c, 0x13, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_simple={0xc8, 0xc, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0xffffffffffffffff, 0x7, 0x50000000}}, @TCA_DEF_DATA={0xc, 0x3, '[[(*(-@\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'security\x00'}]}, {0x68, 0x6, "b6444b6ae982c6cd6279157adbe229b4e8f3f67866ca81b5833e6d83989bacc94eeac30290a78f81372d3f6c22212c8f4368eb6357ee974f8f3b4a10d9e8a221669d7e2da837207962ce63fe0ce49888ef57ac85eb0e61d019ce09d51e3b475561da8c2d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0xe0, 0x16, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x9, 0x3, 0x3eb, 0x10000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x7, 0x7, 0x1, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xc}]}, {0x61, 0x6, "0d4b84d0b75de8f33e771c771f7021a16a4e6f87bbf2cec7881880630760046e21a04e08daf8018086688dcc666d1530dd2cea8444407f96993845954d9c6c76857cc6f454238ea513d99c075bbc685c300f6685c81b5a7b5adf346124"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x78, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2ca7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xbf}]}, {0x33, 0x6, "bc2f10214c6de5ea9df04058f9c02ce38e75b23d3cea01dd175ffe52c50bee31e4917c5e954ad3d0753faf01f83e26"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x124, 0x1c, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7d4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x20000000, 0x42, 0x4}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xf71, 0x6, 0xcf, 0xe}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x559}]}, {0xae, 0x6, "eb48af7d044d72d346ffe3da8648b24f5d77da787ec30eb58d6276b21b5c986242408d2aa8be97afcca24da382d15ab22271949f5186953f97f4a1e1394d35d253b6b0bc1402dc1513975c938abd1f0ad6af18d79096bb3d0b8ee4b181ed8fb19a840b772b84b9937648e70799d8b564e059094b51e6b022f358b163ddc567b4be80bca59f07e0421a3e989b96a127493ffdb337c7be247d40d8c477c7a01e3f84003856a2781d8103dc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xdc, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf75d, 0x5, 0x6, 0x2, 0x9}}, @TCA_DEF_DATA={0x7, 0x3, 'ct\x00'}]}, {0x8d, 0x6, "cea632fc86360f74e5ad184a0df5e28fefca8a30e032a63a7d458c65f3364e5fe748a8e90158386fdcf9042b9b81f3d08be3f98883e787810dc042f6dc44193fb91a074e20a77795224564603147f2b1093d695c9c581cd10a386fe21077379a66d95682fb3885e0f122439376253c72120b780dae1234e8612277f96d48ca3c7e173c223e555e45f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x13ac, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xe04}, @TCA_FW_ACT={0x368, 0x4, [@m_ctinfo={0xac, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x20009}]}, {0x77, 0x6, "65a7a9596fbcf1ee6e78dc3c2942703e3f5a0aba73e66a3aab047bcaa953d20c98f2aa8ba19d8521c47f671a138701486cdc15ad772ca9efe64d308ddb0b9f62608c0b4ee400ca1b0ce0d3f0b03c5616062d9888e0ab2e46718b10a5affb6dfedaed87753c7e4fffdf06372c9bb1c3320e21d1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xe0, 0x17, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4994, 0x3, 0x20000000, 0x1, 0x9}, 0x2}}]}, {0x5c, 0x6, "7b55ce42e995828452a7b2f80f8199c60d79fc909c569ffc81454339ab4e79147f5d66488c9bde56042cef290830390162cc0fea434afddd9addb832ed8993679c848dea3ac3b2537d1f33d757a667ce99d7c713eb01733e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xb4, 0x1, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x7a, 0x6, "2380b4b4ffb7357ae42e86fe31ed024fe572c3e35c230a109aaccb97cf233f90503532b159c8295533623e1d88ca1f9a480857122c250f57fd080de0c7d62bd6ca7430169cbde35ccaf38f1b17f1c494f5797a12079c1515747fc53307684990c0295a3546371e6e56235f2c0566270d9f38d9c3bf0c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_simple={0x124, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x17, 0x3, './binderfs/binder0\x00'}, @TCA_DEF_DATA={0x17, 0x3, './binderfs/binder0\x00'}]}, {0xc6, 0x6, "fe1717a9a7aff8ae02946712dcbf9362450ebe560ad2ed1fdfaf8515d6be910132ee8c4e02c787a0a1a566e65947521deba329fd98aef2a3bf3178e70dd806bdf8736f63b14ab5ec5cc18c01acbc66cda428c91958d1193570e677691e40195bbf2e3dbfa147033aa0b05d0f2dc6511c7d769b7135ab0f1855b725b808819c066698b46fe10d3d010279b9edbb3189fc66ff54ca3df8961e732cd2a99652449e5eddb43bbd543b35249d131fe2a837081f42ada8925bdb752412e7e5e8e9f079b937"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_POLICE={0x1038, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x0, 0x6, 0xff, 0x2, 0x10, 0x3, 0x0, 0x1, 0xfffffffa, 0x1, 0x1, 0xfffffff8, 0x7, 0x80000000, 0x6, 0x4, 0x6, 0xb3ba, 0xffff, 0x0, 0x8, 0x9, 0xf2, 0x5, 0xfff, 0x0, 0x5, 0x0, 0x637c, 0x4, 0x3, 0x8, 0x2, 0x9, 0x2, 0x1, 0xffffff7f, 0xf0, 0x2, 0x4, 0x2, 0x5, 0x8, 0x6, 0x7, 0x6, 0x1, 0xfffffffb, 0x8, 0xa, 0x2a, 0x8, 0x5396, 0x5, 0x9, 0x0, 0xff, 0x1, 0x80, 0x7, 0x6, 0x9, 0x3, 0x7, 0x200, 0x8, 0x3, 0x401, 0x7, 0x0, 0x8000, 0xffff0001, 0x8, 0x6, 0x25, 0x401, 0x1, 0xfffffff8, 0x9, 0x4, 0x1, 0x3, 0x7fff, 0x7, 0x5a8, 0x9, 0x6, 0x40, 0x3, 0xc, 0x9, 0x7, 0x400, 0x9, 0x1, 0x7, 0x8, 0xb27a, 0x101, 0x9, 0xfffff388, 0x0, 0x7ff, 0x10, 0x8, 0x4, 0x8, 0x8, 0x81, 0x8000, 0x6, 0x6, 0xc21e, 0x4, 0x2, 0x7ef, 0x0, 0x3, 0x0, 0x3, 0x9, 0x7, 0x4, 0xf4, 0x88a2, 0x6, 0x1, 0x7, 0x800, 0x80000000, 0x2, 0x6, 0x2, 0xfa, 0x800, 0x4, 0x0, 0x4, 0x768b7cb8, 0xfdb, 0x4, 0xbe, 0x1, 0x0, 0x7b, 0x0, 0x40, 0x40, 0x9, 0x4, 0x577, 0x7000, 0x10001, 0x7fffffff, 0x9, 0x10001, 0x80000001, 0x4, 0x6, 0x3, 0x85d0, 0x8, 0x1, 0x2, 0x3, 0x4000000, 0x4, 0x7fff, 0x10000, 0x5, 0x7, 0x6, 0xfff, 0x6, 0xfffffeff, 0x3, 0x4, 0xfffff000, 0x6a, 0x5, 0x6, 0xe0000, 0x4, 0x7fffffff, 0x4c0926e2, 0xfffffff9, 0x49, 0x0, 0xfffffffa, 0x7, 0x7, 0xa, 0x6, 0x4, 0x5, 0x7fff, 0xff, 0x0, 0x4, 0x5, 0x2, 0x8, 0x6, 0x2, 0xb47, 0x7, 0xd, 0x7, 0x0, 0xffffffff, 0xa465, 0xd, 0x1ff, 0x1000, 0x7, 0x0, 0x1, 0x5, 0xfffffffb, 0x7, 0x1, 0x9, 0x6, 0x10001, 0x1, 0x7, 0x9, 0x432, 0x4, 0x4, 0x1, 0xffffff86, 0x1, 0x1d, 0x2, 0x1bc, 0xff, 0xc, 0x8, 0x5789, 0x10, 0x7, 0x1399, 0x8, 0x8, 0xfffffff5, 0x2, 0x2, 0x6, 0x0, 0x9, 0x9, 0x9, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x1, 0x5a, 0xfffffff6, 0xffffffff, 0x3, 0xb, 0x3, 0x6, 0x2, 0x3, 0x6, 0x0, 0x0, 0x81, 0xfff, 0x9, 0xa, 0xc2b, 0x2, 0x1, 0x5, 0x401, 0x80000001, 0xd, 0x8, 0xa6, 0x7, 0x5a8, 0x2, 0x9696, 0x0, 0x6, 0x8, 0xf3c, 0x3, 0x8, 0x40, 0x400, 0x400, 0x7, 0x8, 0x1, 0x9, 0x81, 0x7, 0x7, 0x2, 0xfffffff8, 0x29, 0x0, 0xda9, 0x10001, 0x4, 0x0, 0xff7e, 0x8, 0x6, 0x10, 0x29, 0x7, 0xfffffff8, 0x7, 0x5, 0x2, 0x682, 0x4, 0x165c4a17, 0x9, 0xfffffffd, 0x0, 0xfff, 0x1, 0x32e, 0xdb072224, 0xfff, 0xfc77, 0x1, 0x8, 0xfff, 0x9, 0x7ff, 0x80, 0x9, 0x9, 0x1, 0x8, 0x8, 0x80000001, 0x8001, 0x6, 0xbd, 0x8, 0x8000, 0x72, 0x20000000, 0x0, 0x7, 0x2, 0x1cb, 0x3, 0x9697d58, 0x100, 0x100, 0x0, 0x9, 0x0, 0xf4ac, 0xc, 0x72, 0x5, 0x1, 0x200, 0x6, 0x2, 0x6, 0x0, 0xfffffffe, 0x6, 0x2, 0x6, 0x11d, 0x4, 0x8, 0x0, 0xe58, 0x10001, 0x5, 0x7f, 0x6, 0x28c4, 0x0, 0xffffff00, 0x0, 0x6, 0x101, 0x8, 0x6, 0xfffffff9, 0xd04b, 0x90000000, 0x0, 0xb, 0xa, 0x4, 0x7fffffff, 0x6, 0xc, 0x0, 0x942f, 0x8, 0x5d, 0x7fffffff, 0x7, 0xbd3, 0x2c7, 0x6, 0x8, 0x9, 0x2, 0x5, 0x26, 0x5, 0xaf, 0xe37, 0x5, 0x3, 0x100, 0x4, 0x80000000, 0x6, 0x2, 0x1, 0x2, 0x3, 0x40, 0x2, 0x8, 0x8, 0xb, 0x1, 0x1ff, 0x6f, 0x0, 0x1, 0x9f8, 0x7, 0x0, 0x7, 0x9, 0x6, 0x6f4da284, 0x8, 0x2, 0x9, 0x5, 0x5, 0x2, 0x5, 0x5, 0x9, 0x0, 0x1000, 0x4, 0x2, 0x990, 0xfffffff0, 0x0, 0x4, 0x98000000, 0x94, 0x4, 0x80000000, 0xe54, 0x2, 0x7f, 0x1, 0x34, 0x9, 0x1, 0x4a3, 0x2, 0x6, 0x7, 0x1, 0x401, 0x2, 0x99ce, 0x0, 0x3, 0x3, 0xcc, 0x7, 0xfff, 0x9, 0xfffffff7, 0xc, 0x5, 0x40, 0x3, 0x3, 0x5, 0x8603, 0xd, 0x9, 0x1000, 0x2, 0x9, 0x1ff, 0x101, 0x8, 0xc1f0, 0xfff, 0xf, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xd0, 0x100, 0xd3, 0x3, 0x4, 0x7, 0xd, 0xc97, 0x80000001, 0x7, 0x3, 0xf, 0x1, 0x2, 0x10, 0x100, 0x8, 0x1, 0x5, 0x1, 0x8000, 0x4, 0x3, 0x3b, 0x3, 0x3, 0x9, 0x0, 0x8, 0x0, 0x1, 0x5, 0x9, 0x1, 0x6, 0x1, 0x8000, 0x9, 0x3ff, 0x4, 0x6, 0x0, 0x8, 0x0, 0x831, 0x800, 0x9, 0x7fff, 0x5, 0x80000000, 0x8, 0x5, 0xffff159d, 0xe, 0x80000001, 0x401, 0x7, 0x2, 0x2, 0x5, 0xa7, 0x3, 0x9, 0x80000000, 0x5, 0x7, 0x2abe, 0xffff, 0xffff4201, 0x3296, 0x1ff, 0x8, 0x6, 0x1, 0x101, 0xb, 0x8, 0x7, 0x7, 0x1, 0x8, 0x0, 0x9, 0x2, 0x5, 0xf, 0x7, 0x3, 0x2, 0x2, 0x3, 0x1, 0xffff, 0x2, 0x0, 0x4, 0x4, 0x0, 0x9, 0x7, 0x0, 0x6, 0x9, 0x6, 0xfffffff7, 0x4, 0x4, 0x8000, 0x4, 0x7, 0x3, 0x9, 0x2, 0x20ef, 0x4c, 0xf6, 0x2, 0x6, 0x76, 0x6, 0x921, 0x0, 0x400, 0x3, 0xfffffffc, 0x9, 0x80000000, 0x800, 0x9, 0x0, 0x7, 0x5, 0x2, 0x8b4c, 0x4, 0x2, 0x3c, 0x3, 0x8, 0x3, 0x6, 0x42a, 0x10000, 0x5, 0x24, 0x80000001, 0x1, 0x4, 0x5, 0x8, 0x60, 0xd, 0x9, 0x5, 0xe, 0x5, 0x9, 0x7, 0x4, 0xa71b, 0x8, 0xb48, 0x4, 0x2, 0x2, 0x0, 0xd, 0x695ce80a, 0x4, 0x40, 0xfffffffa, 0x400, 0x8, 0x9, 0xc59, 0x6, 0x7f, 0x344e01a0, 0x1ff, 0x40, 0x4, 0x5, 0xb, 0x8000, 0x7fff, 0x2, 0xfffffffc, 0xffffffff, 0x5, 0x7, 0x5, 0x2, 0x7f, 0x40, 0x4, 0xe5e, 0x4, 0x5, 0x5, 0x3ff, 0x100, 0x0, 0x0, 0x8, 0xffffffff, 0x8, 0x5, 0x1, 0x5, 0x4, 0x5, 0x9, 0x3, 0x800, 0x1000, 0x8, 0x80, 0x9b, 0x8, 0x7, 0x1ff, 0x6, 0x5, 0x837, 0x6ec, 0x7a000000, 0x2, 0xc8, 0x6, 0x6, 0x7, 0x8001, 0x10, 0x8001, 0x7ff, 0x400, 0x2, 0x4, 0x5, 0x4f1, 0xb, 0x7, 0x80000001, 0x1, 0xef9, 0xb, 0x3, 0x8b5d, 0x5, 0xedb0, 0x0, 0x4, 0x4, 0x1, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x7, 0x6, 0x2, 0x3, 0x7f, 0x1, 0xb7, 0x7, 0x5, 0x0, 0x3, 0xbc, 0x6, 0x2, 0x8001, 0x5, 0xc, 0x0, 0xe, 0x8, 0x1e4f641, 0x1, 0x8, 0x1, 0x1, 0x6, 0x2, 0x40ee, 0x5, 0x4, 0x3ff, 0x100, 0x3ff, 0x9, 0x266, 0x7a, 0x9c, 0x8, 0x3, 0xfffffff8, 0x7, 0xfffffffd, 0xfffffffd, 0xc3a, 0x5, 0x7fffffff, 0x7, 0xbc1, 0x5, 0x101, 0x4, 0xd3, 0xfffffffe, 0x7, 0x4, 0xdd, 0x0, 0x1, 0x3, 0x8, 0x7, 0x0, 0x4, 0x0, 0x7, 0x10000, 0x2, 0x96bf, 0x4, 0x7fffffff, 0x4, 0x10006, 0x4, 0x7fa0, 0x0, 0x325, 0x3c, 0x3, 0xb16, 0x9, 0x800, 0xecdb, 0xfffffff8, 0x0, 0x2ff4, 0x80, 0xfffffff7, 0xffffffff, 0x79df, 0x1, 0x3, 0x6, 0x0, 0x5f, 0x6bb, 0x10, 0xf, 0x4, 0x0, 0x7, 0xab83, 0x8, 0x5, 0x8, 0x7, 0x1ff, 0x3, 0x9, 0x8, 0x9, 0x2e7d, 0x36e, 0x3, 0x1, 0x400, 0x0, 0x800, 0x7, 0x2, 0x0, 0x6, 0x3, 0x900000, 0x6, 0x1, 0x4, 0xfffffff5, 0x9, 0x9, 0x4, 0x6, 0x7, 0x0, 0x34, 0x8, 0x4, 0xc5, 0x40, 0x4, 0x3, 0x8001, 0x9, 0xff, 0x56, 0x81, 0x0, 0x7fff, 0x9, 0x9, 0x5, 0x9, 0x2, 0x80000000, 0x9, 0x38d, 0xffffffff, 0x3, 0x1000, 0xfffffffa, 0x10000, 0x80000001, 0x13, 0xd8, 0x4, 0xc9b, 0xfe98, 0xd, 0x6, 0x7fffffff, 0x9, 0x7, 0x6, 0x8500, 0x8, 0x7fff, 0x0, 0x6, 0x7, 0x5, 0x8, 0x3, 0x3, 0xa572, 0x8, 0x8, 0x7, 0x2, 0xfffffff7, 0xb779, 0x6, 0x4, 0x2, 0xffffffa7, 0x1b, 0x6, 0x5, 0x2, 0x7fffffff, 0xe1, 0xa, 0x80000001, 0xffffffff, 0x5, 0x10, 0xff, 0x4, 0x7, 0x6, 0x7, 0x5, 0xffffffff, 0x100, 0x8001, 0x1640, 0x3, 0x1000, 0x0, 0x0, 0x7, 0x5, 0x3, 0x2, 0x9, 0x401, 0x14d4d9fb, 0xffffffff, 0x2, 0x6, 0x0, 0x3, 0x6474, 0x8, 0xff, 0xd36000, 0x7fff, 0x3, 0x3, 0x5b, 0x10, 0x2, 0x2, 0xff, 0x5, 0x5, 0x9, 0x9, 0xffff, 0xfffffff8, 0x2, 0x7fffffff, 0x1, 0x9, 0xa402, 0x193]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8af}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x84c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x10}}, @TCA_MATCHALL_ACT={0x820, 0x2, [@m_ife={0x48, 0xc, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x1ff, 0x10000000, 0x7, 0xfffffff9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x158, 0x19, 0x0, 0x0, {{0xc}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x5, 0x0, 0x2, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xf6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xa}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xffffffff, 0x5, 0x80000001, 0xc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x15, 0x401, 0x1, 0x67eb, 0xffffffff}}]}, {0xaa, 0x6, "123049f9a1afa7900fe314146909037a02ce270c697ad8df3eb6ee3ec5585a258ab2b1e0353e0afae94021403a455aa03e7b70fb1c020c9232ad75000e47b331aa56777a5161726f17c654344ffcfa0b60430f272c7c9ffa9c8c8ba1dbd3974f20f27b076799a3ed960a2fd4b8702f5fffea418a4014a32b1652e061b80f95ef221679aaeb49fce3fc53297daf1df59eef518a580402f6e4a37bcb97e76e7244ec1591e982fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x1b4, 0x7, 0x0, 0x0, {{0x7}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xf6, 0x6, {0x400, 'nat\x00', 0x9, 0x1ff, "f0d0f95bdc2216de4c610f3c891cdfbfe677ee54d751181cb42fbd5d82c45a568991455d22c27d77ab921a96dbd3de8b37dca2deed6b67aeb213dba0179ec0c1a60d3d42c624649d77ee0f485bc8c7fa99f15177af3af12cdc58dd307c48f9a96be7d9ad7d7c192d49cda0177ee07a02ff997f6b1498c4586db0fb59cf802c1c6ff948512395ec68c0539b922af994c6eaf796e8beef1661fbb19b206cd7177f61f76326dfa1c3b62d3ca40057cd78a07b300ae3240f6cfcfb9d84fe68f1605b6e4d74b8deb1757e3e462df4"}}]}, {0x49, 0x6, "e278d848ac96f00c7d6bac67daa8a7478b2b045c93e8286e1f3a41a6bb44c3938b7bb818eeb1ff1627a09a52bf088fa07af240b526e639b5339612e0e637b034b3b18a1b7a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb8, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x8e, 0x6, "97c370d3ef8927291df8a13a7bcbeec1e7851da74b9cc724e75b53e23d506ea9d9f11e7df762ad3a05be3716583969915eda4609ffcf0c8d47fca0581ca50ce9cd37ca92a508129abe3889ee79bdb75a2f9dbdc28e7fb3288349179b18bd958400e2034c1c90ff05cf8a03480558a38d9621a5dd3d316e7e7d1eef594c0707a79b886e37cfac69b769b5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x10c, 0x1, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x96, 0x9, 0x20000000, 0x9, 0x8}, 0x8d8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0xffffffffffffffff, 0x8, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ca, 0x9c5b, 0x20000000, 0x7, 0xd8}, 0x6b5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x7, 0x6, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x8, 0x2, 0xfff}, 0x8}}]}, {0x4d, 0x6, "5850b447755f7f32ecfafc91577c3979fee1f879d05c67124309e6f035c5f6bdfc831fd2ef1941cee816a0aefddb7287f176369e8392813fc4b9699442e39f976fe5c8e0d92f825f05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_csum={0x18c, 0x9, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0xd5a9, 0x4}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x0, 0x9, 0x6}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xa2, 0x0, 0x4cd1, 0x7f3}, 0x100000}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf286, 0x7, 0x2, 0x328, 0xe}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff6, 0x5, 0x7, 0x8, 0x5}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x5, 0xdf, 0x8}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x4, 0x401, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x3ff, 0x8, 0x71, 0xb}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x1000000d, 0x800, 0x400}, 0x5e}}]}, {0x64, 0x6, "59533ec19f82ec5f4fb7828415d56721f729672882eb43c614a0c5cd588225eca241623e34c29a30e0913faa2ba2af56ee3689dfd766f52028f25ab3e6f94446badf43f98d41aafeffac401e3f1ec8a0b7999bcc68f6d117aab4e64e9c13097b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xb8, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x7a, 0x6, "0d0aa6b15b30e0b3abe1237e7866c2602033a4647f8c7ed10870a2d9acb9228e79a3d0cc015017c9f71b47902d335594da72bec7a8cd02376f36c0f0538edb60754ce128ce06f2bdd7641c017d0d4751ddd00351dcc727c628bad02469dc556e62012e57fbf4568e48898b0faf339a7d9ebc84b9ca78"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xc0, 0x10, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9c, 0xe, 0x7, 0xfffffff1, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff8, 0x1, 0x35c2058363178a3e, 0xd, 0xfffffff7}}]}, {0x62, 0x6, "6541786b5b151e5963b14e4a76f1eff5f3a0f2a0ee00360b609ea623c06288e356ec33450b6a083e92932afab7f8a8c6a80a3c0fe0c00f2f323390642703a0ace2bfc9e6f80648d199f679638cd4d1ddf6c94661628397ac14690ded9170"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x1003f}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7f, 0x5}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xfffffb74}]}, 0x5e00}}, 0x40000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) 1.774190385s ago: executing program 0 (id=2385): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7a94, 0x7, 0x6, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x84}, 0x1, 0x0, 0x5400, 0x8848}, 0x20004804) 1.397344643s ago: executing program 0 (id=2386): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000200)={0x2, 0x6, 0x7fffffff, 0x800}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f000088a000/0x3000)=nil, 0x0, &(0x7f00000021c0), 0x0, 0x3, 0x1a, 0x0, 0x10}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000096'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0x0, r3, {0x7}}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) socket(0x10, 0x3, 0x90b) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80802, 0x0) poll(&(0x7f0000001640)=[{r4, 0x6000}, {r4, 0x14431}], 0x2, 0x76) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x3}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="1201010200000040b42181004000010203166be901fe8e44e00006080b0002012030230904000000010130000a24010e0a00090000000904010000010230000904010101010230000905010960002503050a2525010400000500000904020000010230000904020101010230000905820908007409c00a2525ffffff7f01e10b"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 728.441836ms ago: executing program 3 (id=2387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[], 0x23c}}, 0x20000091) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r6, r5}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 609.736665ms ago: executing program 1 (id=2388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 334.040929ms ago: executing program 1 (id=2389): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r0, 0x301, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 90.087823ms ago: executing program 4 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002008300000008000340ff0000000800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x105d, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x1004, 0xf0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x61, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r2, 0x3516, 0x483, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2391): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000600", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): 2 req 02 val 2500 [ 611.944676][ T1207] pwc: recv_control_msg error -32 req 02 val 2400 [ 611.952702][ T1207] pwc: recv_control_msg error -32 req 02 val 2600 [ 611.992409][ T5917] usb 1-1: USB disconnect, device number 56 [ 612.165440][ T1207] pwc: recv_control_msg error -71 req 02 val 2800 [ 612.178442][ T1207] pwc: recv_control_msg error -71 req 04 val 1100 [ 612.185863][ T1207] pwc: recv_control_msg error -71 req 04 val 1200 [ 612.201899][ T1207] pwc: Registered as video103. [ 612.225561][ T1207] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 612.255751][ T1207] usb 5-1: USB disconnect, device number 75 [ 612.830922][T14383] tipc: Enabling of bearer rejected, already enabled [ 612.841561][T14383] tipc: Enabling of bearer rejected, already enabled [ 612.909935][ T1207] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 613.085792][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 613.209535][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.227731][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.250960][ T1207] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 613.278180][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.330694][ T1207] usb 3-1: config 0 descriptor?? [ 613.367021][ T1207] hub 3-1:0.0: USB hub found [ 613.687326][ T1207] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 613.738765][ T5827] usb 4-1: USB disconnect, device number 61 [ 613.878351][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'. [ 614.166434][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 614.184131][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 614.225349][ T1207] usb 3-1: USB disconnect, device number 71 [ 614.670524][ T1207] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 614.729833][ T5827] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 614.752745][T14409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.753171][T14409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.840073][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 614.842527][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.842560][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.842600][ T1207] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 614.842629][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.844832][ T1207] usb 3-1: config 0 descriptor?? [ 614.852970][ T1207] hub 3-1:0.0: USB hub found [ 614.899163][ T5827] usb 1-1: unable to get BOS descriptor or descriptor too short [ 614.910503][ T5827] usb 1-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 614.910564][ T5827] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 614.910631][ T5827] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 614.910696][ T5827] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 614.910725][ T5827] usb 1-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.923244][ T5827] usb 1-1: string descriptor 0 read error: -22 [ 614.923366][ T5827] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 614.923384][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.933185][ T5827] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 614.933683][ T5827] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 615.062103][ T1207] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 615.073280][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 615.073359][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 615.090412][ T1207] usb 3-1: USB disconnect, device number 72 [ 615.136956][T14368] usb 1-1: USB disconnect, device number 57 [ 615.575993][T14421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.088464][T14434] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2067'. [ 616.112118][T14434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.122832][T14434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.284941][T14445] tipc: Enabling of bearer rejected, already enabled [ 616.293787][T14445] wg1: MTU too low for tipc bearer [ 616.299361][T14445] tipc: Enabling of bearer rejected, failed to enable media [ 616.342604][T14447] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2068'. [ 616.699961][ T29] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 617.248752][ T29] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 617.280795][ T29] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 617.288913][ T29] usb 4-1: Product: syz [ 617.355907][ T29] usb 4-1: Manufacturer: syz [ 617.364882][ T29] usb 4-1: SerialNumber: syz [ 617.478187][ T29] usb 4-1: config 0 descriptor?? [ 618.201864][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 619.139841][ T5827] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 619.139841][ T5917] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 619.302482][ T5827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 619.378739][ T5827] usb 3-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 619.407226][ T5827] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 619.426609][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 619.440981][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.466412][ T29] usb 4-1: USB disconnect, device number 62 [ 619.473425][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.517130][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.539657][ T5827] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 619.663386][ T5917] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 619.672861][ T5827] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 619.672896][ T5827] usb 3-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.682986][ T5827] usb 3-1: string descriptor 0 read error: -22 [ 619.708802][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.726846][ T5827] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 619.741656][ T5917] usb 5-1: config 0 descriptor?? [ 619.745141][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 619.757460][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.827860][ T5827] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.848199][T14478] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2080'. [ 619.873616][ T5827] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 619.928520][T14474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.970909][T14477] all: renamed from bond1 (while UP) [ 620.016258][ T5827] usb 3-1: USB disconnect, device number 73 [ 620.175300][ T5917] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 620.210962][ T5917] microsoft 0003:045E:07DA.0019: unsupported Resolution Multiplier 0 [ 620.254836][ T5917] microsoft 0003:045E:07DA.0019: implement() called with n (152) > 32! (kworker/1:6) [ 620.263040][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 620.378862][ T5917] microsoft 0003:045E:07DA.0019: unsupported Resolution Multiplier 0 [ 620.412765][ T5917] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 620.444765][ T5917] microsoft 0003:045E:07DA.0019: no inputs found [ 620.481931][ T5917] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 620.679270][ T5827] usb 5-1: USB disconnect, device number 76 [ 620.742576][T14481] fido_id[14481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 622.688383][T14504] tipc: Enabling of bearer rejected, already enabled [ 622.698065][T14504] tipc: Enabling of bearer rejected, already enabled [ 623.360221][ T29] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 623.539840][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 623.546575][ T29] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 623.559915][ T29] usb 5-1: config 0 has no interface number 0 [ 623.647937][ T29] usb 5-1: config 0 interface 184 has no altsetting 0 [ 623.681908][T14516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2090'. [ 623.744294][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 623.773034][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.824527][ T29] usb 5-1: Product: syz [ 623.828789][ T29] usb 5-1: Manufacturer: syz [ 623.839931][ T29] usb 5-1: SerialNumber: syz [ 623.950524][ T29] usb 5-1: config 0 descriptor?? [ 623.959948][ T1207] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 624.133557][ T1207] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 624.142852][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 624.151115][ T1207] usb 3-1: Product: syz [ 624.157835][ T1207] usb 3-1: Manufacturer: syz [ 624.169334][ T1207] usb 3-1: SerialNumber: syz [ 624.195404][ T1207] usb 3-1: config 0 descriptor?? [ 624.381274][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.389892][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.557789][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 624.689295][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 624.724715][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 624.829199][T14525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.866589][T14525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.951834][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 624.991410][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 625.019801][ T29] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 625.048579][ T29] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 625.425462][T14532] FAULT_INJECTION: forcing a failure. [ 625.425462][T14532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 625.444611][T14532] CPU: 1 UID: 0 PID: 14532 Comm: syz.0.2096 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.444646][T14532] Tainted: [L]=SOFTLOCKUP [ 625.444654][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 625.444669][T14532] Call Trace: [ 625.444678][T14532] [ 625.444688][T14532] dump_stack_lvl+0xe8/0x150 [ 625.444724][T14532] should_fail_ex+0x412/0x560 [ 625.444760][T14532] prepare_alloc_pages+0x22a/0x650 [ 625.444800][T14532] __alloc_frozen_pages_noprof+0x12f/0x380 [ 625.444832][T14532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 625.444863][T14532] ? __pfx_policy_nodemask+0x10/0x10 [ 625.444900][T14532] alloc_pages_mpol+0x232/0x4a0 [ 625.444933][T14532] alloc_pages_noprof+0xa8/0x190 [ 625.444962][T14532] folio_alloc_noprof+0x1e/0x30 [ 625.444988][T14532] filemap_alloc_folio_noprof+0x111/0x470 [ 625.445018][T14532] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 625.445051][T14532] __filemap_get_folio_mpol+0x3fc/0xb00 [ 625.445092][T14532] aio_setup_ring+0x3be/0xe40 [ 625.445114][T14532] ? pcpu_memcg_post_alloc_hook+0xc4/0x580 [ 625.445151][T14532] ? __pfx_aio_setup_ring+0x10/0x10 [ 625.445187][T14532] ioctx_alloc+0x31f/0x840 [ 625.445219][T14532] __se_sys_io_setup+0x7b/0x1d0 [ 625.445242][T14532] do_syscall_64+0x14d/0xf80 [ 625.445265][T14532] ? trace_irq_disable+0x3b/0x150 [ 625.445295][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.445318][T14532] ? clear_bhb_loop+0x40/0x90 [ 625.445344][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.445365][T14532] RIP: 0033:0x7fe91119c799 [ 625.445386][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.445404][T14532] RSP: 002b:00007fe91212c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 625.445427][T14532] RAX: ffffffffffffffda RBX: 00007fe911415fa0 RCX: 00007fe91119c799 [ 625.445443][T14532] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 000000000000a5bf [ 625.445456][T14532] RBP: 00007fe91212c090 R08: 0000000000000000 R09: 0000000000000000 [ 625.445469][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 625.445482][T14532] R13: 00007fe911416038 R14: 00007fe911415fa0 R15: 00007fe91153fa48 [ 625.445516][T14532] [ 626.088289][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.124486][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.242016][ T29] usb 5-1: USB disconnect, device number 77 [ 626.713449][T14548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.767551][T14548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.847318][ T29] usb 3-1: USB disconnect, device number 74 [ 627.077131][T14553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.090749][T14553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.269359][ T5829] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 627.474445][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 627.494569][ T5829] usb 5-1: config 2 has an invalid interface number: 32 but max is 0 [ 627.502937][ T5829] usb 5-1: config 2 has no interface number 0 [ 627.518416][ T5829] usb 5-1: config 2 interface 32 has no altsetting 0 [ 627.763447][ T5829] usb 5-1: string descriptor 0 read error: -22 [ 627.770459][ T5829] usb 5-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=3f.a4 [ 627.793442][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.899046][ T5829] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 628.102589][ T29] usb 5-1: USB disconnect, device number 78 [ 628.369947][ T5829] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 628.602385][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 628.724236][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 628.744630][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.764514][ T5829] usb 4-1: Product: syz [ 628.771338][ T5829] usb 4-1: Manufacturer: syz [ 628.778963][ T5829] usb 4-1: SerialNumber: syz [ 628.853999][ T5829] usb 4-1: config 0 descriptor?? [ 628.881250][ T5829] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 628.891697][ T5829] dw2102: su3000_power_ctrl: 1, initialized 0 [ 628.958550][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 629.065949][T14570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.098565][T14570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.159511][T14581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2106'. [ 629.295727][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.355255][ T5829] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 629.389919][ T5829] usb 4-1: media controller created [ 629.417078][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 629.450879][ T1207] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 629.459156][ T5829] dw2102: i2c transfer failed. [ 629.466400][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 629.490613][ T5829] dw2102: i2c transfer failed. [ 629.498848][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 629.518507][ T5829] dw2102: i2c transfer failed. [ 629.535488][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 629.553679][ T5829] dw2102: i2c transfer failed. [ 629.569962][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 629.585984][ T5829] dw2102: i2c transfer failed. [ 629.600325][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 629.619117][ T5829] dw2102: i2c transfer failed. [ 629.635962][ T5829] dvb-usb: MAC address: 02:02:02:02:02:02 [ 629.644570][ T1207] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 629.693126][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 629.739383][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.775584][ T1207] usb 5-1: Product: syz [ 629.801216][ T1207] usb 5-1: Manufacturer: syz [ 629.843406][ T1207] usb 5-1: SerialNumber: syz [ 629.854975][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 629.894898][ T5829] dw2102: command 0x0e transfer failed. [ 629.910958][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 629.942084][ T1207] usb 5-1: config 0 descriptor?? [ 629.981758][ T5829] dw2102: command 0x0e transfer failed. [ 630.300612][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 630.308805][ T5829] dw2102: command 0x0e transfer failed. [ 630.352708][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 630.358661][ T5829] dw2102: command 0x0e transfer failed. [ 630.366074][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 630.374628][ T5829] dw2102: command 0x51 transfer failed. [ 630.576204][ T5829] DVB: Unable to find symbol ds3000_attach() [ 630.832846][T14600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2111'. [ 630.851331][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.862854][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.894135][ T5829] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 630.982352][T14607] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 631.248954][T14607] bond3: entered promiscuous mode [ 631.254491][T14607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 631.302667][T14610] ipvlan2: entered promiscuous mode [ 631.320597][ T5829] rc_core: IR keymap rc-su3000 not found [ 631.329903][ T5829] Registered IR keymap rc-empty [ 631.336197][ T5829] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 631.341490][T14610] ipvlan2: entered allmulticast mode [ 631.354849][ T5829] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input49 [ 631.386275][ T5829] dvb-usb: schedule remote query interval to 150 msecs. [ 631.417236][ T5829] dw2102: su3000_power_ctrl: 0, initialized 1 [ 631.429843][ T5829] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 631.477531][T14610] gretap0: entered allmulticast mode [ 631.522596][ T5829] usb 4-1: USB disconnect, device number 63 [ 631.575995][ T5829] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 631.604960][T14610] team0: Device ipvlan2 failed to register rx_handler [ 631.931832][ T5829] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 632.092833][ T5829] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 632.102060][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.146148][ T5829] usb 3-1: config 0 descriptor?? [ 632.166106][ T5829] cp210x 3-1:0.0: cp210x converter detected [ 632.475357][T14619] FAULT_INJECTION: forcing a failure. [ 632.475357][T14619] name failslab, interval 1, probability 0, space 0, times 0 [ 632.510863][T14619] CPU: 0 UID: 0 PID: 14619 Comm: syz.2.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.510898][T14619] Tainted: [L]=SOFTLOCKUP [ 632.510907][T14619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 632.510921][T14619] Call Trace: [ 632.510930][T14619] [ 632.510939][T14619] dump_stack_lvl+0xe8/0x150 [ 632.510972][T14619] should_fail_ex+0x412/0x560 [ 632.511007][T14619] should_failslab+0xa8/0x100 [ 632.511027][T14619] ? skb_clone+0x212/0x3a0 [ 632.511064][T14619] kmem_cache_alloc_noprof+0x87/0x650 [ 632.511087][T14619] ? __netlink_lookup+0xc6/0x8b0 [ 632.511115][T14619] skb_clone+0x212/0x3a0 [ 632.511143][T14619] __netlink_deliver_tap+0x404/0x850 [ 632.511179][T14619] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.511217][T14619] netlink_deliver_tap+0x19c/0x1b0 [ 632.511251][T14619] netlink_unicast+0x7e3/0x9b0 [ 632.511287][T14619] ? __pfx_netlink_unicast+0x10/0x10 [ 632.511317][T14619] ? netlink_sendmsg+0x650/0xb40 [ 632.511338][T14619] ? skb_put+0x11b/0x210 [ 632.511381][T14619] netlink_sendmsg+0x813/0xb40 [ 632.511421][T14619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.511454][T14619] ? aa_sock_msg_perm+0xf1/0x1b0 [ 632.511489][T14619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.511508][T14619] ____sys_sendmsg+0x972/0x9f0 [ 632.511547][T14619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.511581][T14619] ? import_iovec+0x73/0xa0 [ 632.511605][T14619] ___sys_sendmsg+0x2a5/0x360 [ 632.511633][T14619] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.511676][T14619] ? __fget_files+0x2a/0x420 [ 632.511737][T14619] ? __fget_files+0x3a0/0x420 [ 632.511777][T14619] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.511806][T14619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.511831][T14619] ? __pfx_ksys_write+0x10/0x10 [ 632.511878][T14619] do_syscall_64+0x14d/0xf80 [ 632.511904][T14619] ? trace_irq_disable+0x3b/0x150 [ 632.511932][T14619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.511952][T14619] ? clear_bhb_loop+0x40/0x90 [ 632.511970][T14619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.511985][T14619] RIP: 0033:0x7faafb39c799 [ 632.512020][T14619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.512039][T14619] RSP: 002b:00007faafc310028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.512060][T14619] RAX: ffffffffffffffda RBX: 00007faafb615fa0 RCX: 00007faafb39c799 [ 632.512074][T14619] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000005 [ 632.512087][T14619] RBP: 00007faafc310090 R08: 0000000000000000 R09: 0000000000000000 [ 632.512101][T14619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.512110][T14619] R13: 00007faafb616038 R14: 00007faafb615fa0 R15: 00007faafb73fa48 [ 632.512133][T14619] [ 632.738231][ T5829] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 632.738556][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 632.738813][ T5829] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 632.738838][ T5829] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 632.808807][ T5829] usb 3-1: cp210x converter now attached to ttyUSB0 [ 632.826059][ T5829] usb 3-1: USB disconnect, device number 75 [ 632.844576][ T5829] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 632.844968][ T5829] cp210x 3-1:0.0: device disconnected [ 633.217995][ T5829] usb 5-1: USB disconnect, device number 79 [ 633.775142][T14643] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2124'. [ 634.153160][ T5829] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 634.329834][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 634.771315][ T5829] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 634.804360][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.823157][ T5829] usb 1-1: Product: syz [ 634.827394][ T5829] usb 1-1: Manufacturer: syz [ 634.856746][ T5829] usb 1-1: SerialNumber: syz [ 634.975186][T14664] netlink: 'syz.2.2132': attribute type 4 has an invalid length. [ 634.976236][ T5829] usb 1-1: config 0 descriptor?? [ 635.238997][T14664] netlink: 'syz.2.2132': attribute type 2 has an invalid length. [ 635.281112][ T5829] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 635.290748][ T5829] dw2102: su3000_power_ctrl: 1, initialized 0 [ 635.296929][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 635.333131][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 635.371394][ T5829] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 635.372654][ T5827] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 635.388699][ T5829] usb 1-1: media controller created [ 635.397938][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 635.409852][ T5829] dw2102: i2c transfer failed. [ 635.417576][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 635.438321][ T5829] dw2102: i2c transfer failed. [ 635.453256][T14669] vlan3: entered promiscuous mode [ 635.462010][T14668] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 635.470158][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 635.483904][T14646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.494323][T14646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.514519][T14669] hsr0: entered promiscuous mode [ 635.519659][ T5829] dw2102: i2c transfer failed. [ 635.528871][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 635.541629][ T5829] dw2102: i2c transfer failed. [ 635.558444][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 635.572992][ T5829] dw2102: i2c transfer failed. [ 635.581096][T14668] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 635.581549][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 635.600676][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 635.607821][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 635.610345][T14672] netlink: 'syz.4.2135': attribute type 4 has an invalid length. [ 635.625089][ T5829] dw2102: i2c transfer failed. [ 635.630260][ T5829] dvb-usb: MAC address: 02:02:02:02:02:02 [ 635.635286][ T5827] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 635.645740][ T5827] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 635.665891][ T5827] usb 4-1: Product: syz [ 635.676976][ T5827] usb 4-1: Manufacturer: syz [ 635.693300][ T5827] usb 4-1: SerialNumber: syz [ 635.735506][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 635.817145][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 635.828097][ T5829] dw2102: command 0x0e transfer failed. [ 635.847371][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 635.863429][ T5829] dw2102: command 0x0e transfer failed. [ 635.924742][ T5827] usb 4-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 635.938460][ T5827] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 635.952653][ T5827] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 636.133420][ T5827] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 636.174969][ T5827] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 636.180194][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 636.210104][ T5829] dw2102: command 0x0e transfer failed. [ 636.222931][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 636.230671][ T5827] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 636.244133][ T5829] dw2102: command 0x0e transfer failed. [ 636.259298][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 636.273779][ T5827] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 636.274247][ T5829] dw2102: command 0x51 transfer failed. [ 636.306374][ T5827] usb 4-1: USB disconnect, device number 64 [ 636.327607][ T5827] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 636.337220][ T5930] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 636.372627][ T5827] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 636.398927][ T5829] DVB: Unable to find symbol ds3000_attach() [ 636.436225][ T5827] visor 4-1:1.0: device disconnected [ 636.448580][ T5829] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 636.500024][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 636.507646][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 636.529390][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.540615][T14692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2141'. [ 636.574908][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 636.594696][T14692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.607421][T14692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.641356][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 37920, setting to 1024 [ 636.677422][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 636.835454][T14695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2143'. [ 636.861174][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.875709][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 636.885028][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.890059][ T5829] rc_core: IR keymap rc-su3000 not found [ 636.898927][ T5829] Registered IR keymap rc-empty [ 636.941113][ T5829] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 636.976661][ T5829] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input50 [ 637.016862][ T5829] dvb-usb: schedule remote query interval to 150 msecs. [ 637.049795][ T5829] dw2102: su3000_power_ctrl: 0, initialized 1 [ 637.065315][ T5829] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 637.138651][ T5829] usb 1-1: USB disconnect, device number 58 [ 637.154764][ T5930] usb 5-1: usb_control_msg returned -71 [ 637.170666][T14689] FAULT_INJECTION: forcing a failure. [ 637.170666][T14689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.191342][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 637.210223][T14689] CPU: 0 UID: 0 PID: 14689 Comm: syz.2.2142 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.210255][T14689] Tainted: [L]=SOFTLOCKUP [ 637.210263][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 637.210276][T14689] Call Trace: [ 637.210285][T14689] [ 637.210295][T14689] dump_stack_lvl+0xe8/0x150 [ 637.210331][T14689] should_fail_ex+0x412/0x560 [ 637.210375][T14689] _copy_from_user+0x2d/0xb0 [ 637.210400][T14689] snd_pcm_oss_write2+0x227/0x440 [ 637.210436][T14689] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 637.210477][T14689] snd_pcm_oss_write+0x6cb/0xbd0 [ 637.210519][T14689] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 637.210549][T14689] vfs_write+0x29a/0xb90 [ 637.210585][T14689] ? __pfx_vfs_write+0x10/0x10 [ 637.210615][T14689] ? __fget_files+0x2a/0x420 [ 637.210647][T14689] ? __fget_files+0x2a/0x420 [ 637.210676][T14689] ? __fget_files+0x3a0/0x420 [ 637.210704][T14689] ? __fget_files+0x2a/0x420 [ 637.210743][T14689] ksys_write+0x150/0x270 [ 637.210768][T14689] ? __pfx_ksys_write+0x10/0x10 [ 637.210812][T14689] do_syscall_64+0x14d/0xf80 [ 637.210835][T14689] ? trace_irq_disable+0x3b/0x150 [ 637.210865][T14689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.210887][T14689] ? clear_bhb_loop+0x40/0x90 [ 637.210912][T14689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.210933][T14689] RIP: 0033:0x7faafb39c799 [ 637.210952][T14689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.210970][T14689] RSP: 002b:00007faafc2ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.210991][T14689] RAX: ffffffffffffffda RBX: 00007faafb616090 RCX: 00007faafb39c799 [ 637.211006][T14689] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 637.211020][T14689] RBP: 00007faafc2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 637.211034][T14689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 637.211046][T14689] R13: 00007faafb616128 R14: 00007faafb616090 R15: 00007faafb73fa48 [ 637.211079][T14689] [ 637.701717][ T5930] usb 5-1: USB disconnect, device number 80 [ 637.722329][ T5829] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 638.342750][T14714] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2150'. [ 638.521092][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 638.706731][T14710] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 638.715827][T14710] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 638.873966][T14719] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 639.099800][ T5930] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 639.271215][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 639.293487][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 639.302853][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.327178][ T5930] usb 4-1: Product: syz [ 639.331796][ T5930] usb 4-1: Manufacturer: syz [ 639.336440][ T5930] usb 4-1: SerialNumber: syz [ 639.358147][ T5930] usb 4-1: config 0 descriptor?? [ 639.371728][ T5930] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 639.385378][ T5930] dw2102: su3000_power_ctrl: 1, initialized 0 [ 639.391900][ T5930] dvb-usb: bulk message failed: -22 (2/0) [ 639.403252][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 639.415924][ T5930] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 639.426631][ T5930] usb 4-1: media controller created [ 639.456242][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 639.463377][ T5930] dw2102: i2c transfer failed. [ 639.469138][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 639.475344][ T5930] dw2102: i2c transfer failed. [ 639.485543][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 639.492384][ T5930] dw2102: i2c transfer failed. [ 639.497410][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 639.543361][ T5930] dw2102: i2c transfer failed. [ 639.571563][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.581971][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.594695][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.606215][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.622813][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 639.635414][ T5930] dw2102: i2c transfer failed. [ 639.661410][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 639.915218][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2156'. [ 639.954961][ T5930] dw2102: i2c transfer failed. [ 639.966114][ T5930] dvb-usb: MAC address: 02:02:02:02:02:02 [ 640.016660][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.096870][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 640.111142][ T5930] dw2102: command 0x0e transfer failed. [ 640.127233][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 640.139637][ T5930] dw2102: command 0x0e transfer failed. [ 640.459921][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 640.480583][ T5930] dw2102: command 0x0e transfer failed. [ 640.528803][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 640.535045][ T5930] dw2102: command 0x0e transfer failed. [ 640.612948][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 640.638946][ T5930] dw2102: command 0x51 transfer failed. [ 640.692924][T14749] loop2: detected capacity change from 0 to 7 [ 640.742414][T14749] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 640.774889][T14749] loop2: p1 start 4294770688 is beyond EOD, truncated [ 640.798888][ T5930] DVB: Unable to find symbol ds3000_attach() [ 640.821520][T14749] loop2: p2 start 17408 is beyond EOD, truncated [ 640.833233][ T5930] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 640.861585][T14749] loop2: p3 size 1680801792 extends beyond EOD, truncated [ 640.984509][T14749] loop2: p4 size 536870912 extends beyond EOD, truncated [ 641.049879][ T5930] rc_core: IR keymap rc-su3000 not found [ 641.057751][ T5930] Registered IR keymap rc-empty [ 641.064963][T14749] loop2: p5 size 8650752 extends beyond EOD, truncated [ 641.075565][ T5930] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 641.096323][T14749] loop2: p6 start 8388608 is beyond EOD, truncated [ 641.113523][ T5930] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input51 [ 641.147100][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 641.183597][ T5930] dvb-usb: schedule remote query interval to 150 msecs. [ 641.228861][ T5930] dw2102: su3000_power_ctrl: 0, initialized 1 [ 641.303128][ T6047] udevd[6047]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 641.305598][ T5930] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 641.326476][ T6126] udevd[6126]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 641.338978][ T6912] udevd[6912]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 641.380989][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 641.386782][ T5827] dw2102: i2c transfer failed. [ 641.507795][T14759] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2165'. [ 641.528000][T14759] 0ªX¹¦À: renamed from caif0 [ 641.573419][T14759] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 641.620989][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 641.642195][ T5827] dw2102: i2c transfer failed. [ 641.693480][T14763] FAULT_INJECTION: forcing a failure. [ 641.693480][T14763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.748324][T14763] CPU: 1 UID: 0 PID: 14763 Comm: syz.2.2167 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.748351][T14763] Tainted: [L]=SOFTLOCKUP [ 641.748357][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 641.748366][T14763] Call Trace: [ 641.748373][T14763] [ 641.748380][T14763] dump_stack_lvl+0xe8/0x150 [ 641.748405][T14763] should_fail_ex+0x412/0x560 [ 641.748431][T14763] _copy_to_user+0x31/0xb0 [ 641.748449][T14763] simple_read_from_buffer+0xe1/0x170 [ 641.748475][T14763] proc_fail_nth_read+0x1bb/0x230 [ 641.748499][T14763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.748522][T14763] ? rw_verify_area+0x2a6/0x4d0 [ 641.748538][T14763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.748560][T14763] vfs_read+0x20c/0xa70 [ 641.748575][T14763] ? fdget_pos+0x246/0x320 [ 641.748600][T14763] ? __pfx___mutex_lock+0x10/0x10 [ 641.748619][T14763] ? __pfx_vfs_read+0x10/0x10 [ 641.748637][T14763] ? __fget_files+0x2a/0x420 [ 641.748662][T14763] ? __fget_files+0x3a0/0x420 [ 641.748683][T14763] ? __fget_files+0x2a/0x420 [ 641.748711][T14763] ksys_read+0x150/0x270 [ 641.748728][T14763] ? __pfx_ksys_read+0x10/0x10 [ 641.748752][T14763] do_syscall_64+0x14d/0xf80 [ 641.748768][T14763] ? trace_irq_disable+0x3b/0x150 [ 641.748791][T14763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.748806][T14763] ? clear_bhb_loop+0x40/0x90 [ 641.748825][T14763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.748841][T14763] RIP: 0033:0x7faafb35cfce [ 641.748855][T14763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 641.748875][T14763] RSP: 002b:00007faafc30ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 641.748891][T14763] RAX: ffffffffffffffda RBX: 00007faafc3106c0 RCX: 00007faafb35cfce [ 641.748902][T14763] RDX: 000000000000000f RSI: 00007faafc3100a0 RDI: 0000000000000004 [ 641.748912][T14763] RBP: 00007faafc310090 R08: 0000000000000000 R09: 0000000000000000 [ 641.748921][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.748930][T14763] R13: 00007faafb616038 R14: 00007faafb615fa0 R15: 00007faafb73fa48 [ 641.748968][T14763] [ 641.891723][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 642.202464][T14768] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 642.216110][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 642.216127][ T30] audit: type=1800 audit(1773479598.818:435): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2169" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 642.242944][ T5827] dw2102: i2c transfer failed. [ 642.262123][T14772] xt_hashlimit: size too large, truncated to 1048576 [ 642.283031][ T5917] usb 4-1: USB disconnect, device number 65 [ 642.385583][T14768] 8021q: adding VLAN 0 to HW filter on device bond5 [ 642.545700][ T5917] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 642.564569][T14774] bond5: (slave gretap1): making interface the new active one [ 642.692360][T14774] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 642.708214][T14782] netlink: 'syz.2.2174': attribute type 12 has an invalid length. [ 642.744067][T14782] netlink: 'syz.2.2174': attribute type 29 has an invalid length. [ 642.760098][T14782] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2174'. [ 642.788569][T14782] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2174'. [ 643.440346][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 643.510733][T14794] syzkaller0: entered promiscuous mode [ 643.516392][T14794] syzkaller0: entered allmulticast mode [ 643.525374][T14794] tc action pedit offset must be on 32 bit boundaries [ 644.326817][T14805] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2179'. [ 645.157684][T14818] Scaler: ================= START STATUS ================= [ 645.270378][T14818] Scaler: ================== END STATUS ================== [ 645.293539][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.398991][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.429813][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.440419][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.452100][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.463294][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.572755][T14821] netlink: 'syz.0.2186': attribute type 12 has an invalid length. [ 645.588260][T14821] netlink: 'syz.0.2186': attribute type 29 has an invalid length. [ 645.609832][ T5917] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 645.628461][T14821] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2186'. [ 645.790086][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.809581][ T5917] usb 4-1: config 0 has no interfaces? [ 645.834300][ T5917] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 645.858894][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.927889][T14821] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2186'. [ 646.023610][ T5917] usb 4-1: config 0 descriptor?? [ 646.074889][T14825] tipc: Enabling of bearer rejected, already enabled [ 646.178548][T14826] tipc: Enabling of bearer rejected, already enabled [ 646.267972][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 646.524840][ T5930] usb 4-1: USB disconnect, device number 66 [ 646.953259][T14842] fuse: blksize only supported for fuseblk [ 646.965453][T14842] fuse: Bad value for 'user_id' [ 646.974765][T14842] fuse: Bad value for 'user_id' [ 646.990387][T14842] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2193'. [ 647.012512][T14842] gretap0: entered promiscuous mode [ 647.185962][T14842] fuse: Unknown parameter '9' [ 647.521509][T14857] netlink: 'syz.3.2198': attribute type 12 has an invalid length. [ 647.539799][T14857] netlink: 'syz.3.2198': attribute type 29 has an invalid length. [ 647.547664][T14857] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2198'. [ 647.643706][T14857] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2198'. [ 647.859983][ T29] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 648.069865][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 648.295259][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 648.304637][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.314405][ T29] usb 3-1: Product: syz [ 648.318701][ T29] usb 3-1: Manufacturer: syz [ 648.323457][ T29] usb 3-1: SerialNumber: syz [ 648.351370][ T29] usb 3-1: config 0 descriptor?? [ 648.363181][ T29] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 648.380198][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 648.396327][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 648.457732][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 648.488597][ T29] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 648.514732][ T29] usb 3-1: media controller created [ 648.531731][T14868] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2202'. [ 648.541411][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 648.547285][ T29] dw2102: i2c transfer failed. [ 648.587757][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 648.604828][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.616372][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.637699][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.648181][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.661436][ T29] dw2102: i2c transfer failed. [ 648.666589][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 648.673057][ T29] dw2102: i2c transfer failed. [ 648.681919][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 648.719822][ T5917] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 648.739828][ T29] dw2102: i2c transfer failed. [ 648.755936][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 648.801465][ T29] dw2102: i2c transfer failed. [ 648.830621][T14870] syzkaller0: entered promiscuous mode [ 648.846583][T14870] syzkaller0: entered allmulticast mode [ 648.885838][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.902558][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.917138][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 648.946000][ T29] dw2102: i2c transfer failed. [ 648.951034][ T5917] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 648.960419][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 648.968543][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.013497][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.023183][ T5917] usb 4-1: config 0 descriptor?? [ 649.080639][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 649.087657][ T29] dw2102: command 0x0e transfer failed. [ 649.098475][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 649.106747][ T29] dw2102: command 0x0e transfer failed. [ 649.419859][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 649.425830][ T29] dw2102: command 0x0e transfer failed. [ 649.432065][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 649.439179][ T29] dw2102: command 0x0e transfer failed. [ 649.451387][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 649.472161][ T5917] hid-steam 0003:28DE:1142.001A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 649.497684][ T29] dw2102: command 0x51 transfer failed. [ 649.549861][ T5917] hid-steam 0003:28DE:1142.001A: Steam wireless receiver connected [ 649.607321][ T5917] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 649.623865][ T29] DVB: Unable to find symbol ds3000_attach() [ 649.638134][ T29] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 649.775024][ T5917] usb 4-1: USB disconnect, device number 67 [ 649.828032][ T5917] hid-steam 0003:28DE:1142.001A: Steam wireless receiver disconnected [ 649.942948][T14887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.955199][T14887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.966882][ T29] rc_core: IR keymap rc-su3000 not found [ 649.977977][ T29] Registered IR keymap rc-empty [ 649.987660][ T29] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 650.004051][T14887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.040488][T14887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.048760][ T29] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input52 [ 650.083396][T14887] dw2102: i2c wr: len=78 is too big! [ 650.083396][T14887] [ 650.123527][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 650.157653][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 650.175579][ T29] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 650.310045][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 650.315921][ T29] dw2102: i2c transfer failed. [ 650.480327][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 650.513932][ T29] dw2102: i2c transfer failed. [ 650.518891][ T30] audit: type=1326 audit(1773479607.078:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14884 comm="syz.0.2206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe911196517 code=0x0 [ 650.590626][T14882] fido_id[14882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 650.699901][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 650.705731][ T5917] dw2102: i2c transfer failed. [ 650.783266][ T30] audit: type=1326 audit(1773479607.408:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91119c799 code=0x7ffc0000 [ 650.811156][T14896] FAULT_INJECTION: forcing a failure. [ 650.811156][T14896] name failslab, interval 1, probability 0, space 0, times 0 [ 650.842286][T14896] CPU: 1 UID: 0 PID: 14896 Comm: syz.0.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.842335][T14896] Tainted: [L]=SOFTLOCKUP [ 650.842343][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 650.842356][T14896] Call Trace: [ 650.842366][T14896] [ 650.842376][T14896] dump_stack_lvl+0xe8/0x150 [ 650.842414][T14896] should_fail_ex+0x412/0x560 [ 650.842440][T14896] should_failslab+0xa8/0x100 [ 650.842461][T14896] __kmalloc_noprof+0xe8/0x760 [ 650.842478][T14896] ? aa_label_asxprint+0x70/0x130 [ 650.842500][T14896] aa_label_asxprint+0x70/0x130 [ 650.842521][T14896] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 650.842546][T14896] audit_log_subj_ctx+0x116/0x530 [ 650.842568][T14896] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 650.842594][T14896] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 650.842617][T14896] audit_log_task_context+0x94/0xe0 [ 650.842637][T14896] ? __pfx_audit_log_task_context+0x10/0x10 [ 650.842658][T14896] ? audit_log_start+0x7e9/0xa20 [ 650.842681][T14896] audit_log_task+0x19b/0x3d0 [ 650.842700][T14896] ? __pfx_audit_log_task+0x10/0x10 [ 650.842717][T14896] ? __se_sys_io_uring_enter+0x410/0x18c0 [ 650.842739][T14896] audit_seccomp+0x85/0x190 [ 650.842759][T14896] __seccomp_filter+0xd48/0x1ef0 [ 650.842782][T14896] ? fput+0xa0/0xd0 [ 650.842803][T14896] ? __pfx___seccomp_filter+0x10/0x10 [ 650.842819][T14896] ? __se_sys_io_uring_enter+0x1437/0x18c0 [ 650.842836][T14896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 650.842858][T14896] ? __fget_files+0x3a0/0x420 [ 650.842883][T14896] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 650.842899][T14896] ? fput+0xa0/0xd0 [ 650.842923][T14896] ? __pfx_ksys_write+0x10/0x10 [ 650.842943][T14896] ? __secure_computing+0xe1/0x2a0 [ 650.842962][T14896] do_syscall_64+0xf4/0xf80 [ 650.842978][T14896] ? trace_irq_disable+0x3b/0x150 [ 650.843000][T14896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.843015][T14896] ? clear_bhb_loop+0x40/0x90 [ 650.843033][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.843049][T14896] RIP: 0033:0x7fe91115cfce [ 650.843063][T14896] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 650.843076][T14896] RSP: 002b:00007fe91212bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.843093][T14896] RAX: ffffffffffffffda RBX: 00007fe91212c6c0 RCX: 00007fe91115cfce [ 650.843110][T14896] RDX: 000000000000000f RSI: 00007fe91212c0a0 RDI: 0000000000000004 [ 650.843120][T14896] RBP: 00007fe91212c090 R08: 0000000000000000 R09: 0000000000000000 [ 650.843129][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.843139][T14896] R13: 00007fe911416038 R14: 00007fe911415fa0 R15: 00007fe91153fa48 [ 650.843161][T14896] [ 650.843170][T14896] audit: error in audit_log_subj_ctx [ 650.844930][ T30] audit: type=1326 audit(1773479607.438:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91119c799 code=0x7ffc0000 [ 650.870616][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 650.913104][ T30] audit: type=1326 audit(1773479607.438:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe91119c799 code=0x7ffc0000 [ 651.201354][ T5917] dw2102: i2c transfer failed. [ 651.339820][ T1207] usb 3-1: USB disconnect, device number 76 [ 651.368986][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 651.374937][ T5917] dw2102: i2c transfer failed. [ 651.390548][T14900] FAULT_INJECTION: forcing a failure. [ 651.390548][T14900] name failslab, interval 1, probability 0, space 0, times 0 [ 651.427794][T14900] CPU: 0 UID: 0 PID: 14900 Comm: syz.1.2210 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.427828][T14900] Tainted: [L]=SOFTLOCKUP [ 651.427836][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 651.427849][T14900] Call Trace: [ 651.427858][T14900] [ 651.427867][T14900] dump_stack_lvl+0xe8/0x150 [ 651.427899][T14900] should_fail_ex+0x412/0x560 [ 651.427934][T14900] should_failslab+0xa8/0x100 [ 651.427962][T14900] __kmalloc_cache_noprof+0x88/0x660 [ 651.427986][T14900] ? sctp_v6_cmp_addr+0x15/0xd0 [ 651.428017][T14900] ? sctp_add_bind_addr+0x8c/0x370 [ 651.428050][T14900] sctp_add_bind_addr+0x8c/0x370 [ 651.428084][T14900] sctp_copy_local_addr_list+0x314/0x4f0 [ 651.428118][T14900] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 651.428147][T14900] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 651.428180][T14900] ? sctp_v6_is_any+0x64/0x80 [ 651.428211][T14900] ? sctp_copy_one_addr+0x93/0x360 [ 651.428243][T14900] sctp_bind_addr_copy+0xb3/0x3c0 [ 651.428274][T14900] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 651.428301][T14900] sctp_connect_new_asoc+0x2ff/0x6b0 [ 651.428328][T14900] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 651.428357][T14900] ? __local_bh_enable_ip+0xd0/0x130 [ 651.428381][T14900] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 651.428405][T14900] ? security_sctp_bind_connect+0x7e/0x2c0 [ 651.428433][T14900] sctp_sendmsg+0x1528/0x2c10 [ 651.428472][T14900] ? __pfx_sctp_sendmsg+0x10/0x10 [ 651.428497][T14900] ? aa_sk_perm+0x6d5/0x900 [ 651.428535][T14900] ? __pfx_aa_sk_perm+0x10/0x10 [ 651.428567][T14900] ? sock_rps_record_flow+0x19/0x400 [ 651.428592][T14900] ? __pfx_inet_sendmsg+0x10/0x10 [ 651.428617][T14900] ? inet_sendmsg+0x2f4/0x370 [ 651.428643][T14900] ? __pfx_inet_sendmsg+0x10/0x10 [ 651.428669][T14900] __sys_sendto+0x5de/0x710 [ 651.428694][T14900] ? __pfx___sys_sendto+0x10/0x10 [ 651.428713][T14900] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 651.428763][T14900] ? __fget_files+0x3a0/0x420 [ 651.428806][T14900] ? ksys_write+0x242/0x270 [ 651.428831][T14900] ? __pfx_ksys_write+0x10/0x10 [ 651.428859][T14900] __x64_sys_sendto+0xde/0x100 [ 651.428886][T14900] do_syscall_64+0x14d/0xf80 [ 651.428910][T14900] ? trace_irq_disable+0x3b/0x150 [ 651.428940][T14900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.428961][T14900] ? clear_bhb_loop+0x40/0x90 [ 651.428988][T14900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.429009][T14900] RIP: 0033:0x7feb76b9c799 [ 651.429030][T14900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.429048][T14900] RSP: 002b:00007feb77a51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 651.429070][T14900] RAX: ffffffffffffffda RBX: 00007feb76e16090 RCX: 00007feb76b9c799 [ 651.429085][T14900] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 651.429099][T14900] RBP: 00007feb77a51090 R08: 000020000005ffe4 R09: 000000000000001c [ 651.429113][T14900] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 651.429126][T14900] R13: 00007feb76e16128 R14: 00007feb76e16090 R15: 00007feb76f3fa48 [ 651.429158][T14900] [ 651.742499][ T30] audit: type=1326 audit(1773479607.438:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe91119c502 code=0x7ffc0000 [ 651.764824][ T30] audit: type=1326 audit(1773479607.438:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe91119c502 code=0x7ffc0000 [ 651.787060][ T30] audit: type=1326 audit(1773479607.438:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91119c799 code=0x7ffc0000 [ 651.809488][ T30] audit: type=1326 audit(1773479607.438:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91119c799 code=0x7ffc0000 [ 651.831913][ T30] audit: type=1326 audit(1773479607.438:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.0.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe91115cfce code=0x7ffc0000 [ 652.239881][ T5917] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 652.243080][ T1207] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 652.393521][T14908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.404548][T14908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.419788][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 652.543626][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 652.559100][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.590663][ T5917] usb 1-1: Product: syz [ 652.598393][ T5917] usb 1-1: Manufacturer: syz [ 652.608531][ T5917] usb 1-1: SerialNumber: syz [ 652.629084][ T5917] usb 1-1: config 0 descriptor?? [ 652.641252][ T5917] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 652.652545][ T5917] dw2102: su3000_power_ctrl: 1, initialized 0 [ 652.658725][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 652.671295][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.687995][ T5917] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 652.698808][ T5917] usb 1-1: media controller created [ 652.704360][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 652.710829][ T5917] dw2102: i2c transfer failed. [ 652.715756][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 652.723377][ T5917] dw2102: i2c transfer failed. [ 652.728308][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 652.734816][ T5917] dw2102: i2c transfer failed. [ 652.739785][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 652.779845][ T29] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 652.792908][ T5917] dw2102: i2c transfer failed. [ 652.797968][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 652.916209][ T5917] dw2102: i2c transfer failed. [ 652.924067][T14905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.949811][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 653.099227][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 653.107575][T14905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.118403][ T5917] dw2102: i2c transfer failed. [ 653.124804][ T5917] dvb-usb: MAC address: 02:02:02:02:02:02 [ 653.133463][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 653.149841][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.158983][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.170144][ T29] usb 5-1: Product: syz [ 653.178016][ T29] usb 5-1: Manufacturer: syz [ 653.190773][ T29] usb 5-1: SerialNumber: syz [ 653.198570][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 653.215947][ T29] usb 5-1: config 0 descriptor?? [ 653.221147][ T5917] dw2102: command 0x0e transfer failed. [ 653.226959][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 653.252302][ T29] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 653.265103][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 653.271380][ T5917] dw2102: command 0x0e transfer failed. [ 653.277111][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 653.293223][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 653.307549][ T29] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 653.320556][ T29] usb 5-1: media controller created [ 653.328831][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 653.334986][ T29] dw2102: i2c transfer failed. [ 653.342723][T14905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.354200][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 653.364236][ T29] dw2102: i2c transfer failed. [ 653.371500][T14905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.382424][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 653.388423][ T29] dw2102: i2c transfer failed. [ 653.394689][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 653.401413][ T29] dw2102: i2c transfer failed. [ 653.406456][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 653.413215][ T29] dw2102: i2c transfer failed. [ 653.420122][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 653.426412][ T29] dw2102: i2c transfer failed. [ 653.432930][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 653.476012][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.590337][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 653.596220][ T5917] dw2102: command 0x0e transfer failed. [ 653.608590][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 653.615994][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 653.621945][ T5917] dw2102: command 0x0e transfer failed. [ 653.627660][ T29] dw2102: command 0x0e transfer failed. [ 653.633832][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 653.640222][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 653.645995][ T29] dw2102: command 0x0e transfer failed. [ 653.656012][ T5917] dw2102: command 0x51 transfer failed. [ 653.896290][T14925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.945891][ T5917] DVB: Unable to find symbol ds3000_attach() [ 653.987294][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 654.010999][ T5917] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 654.020923][ T29] dw2102: command 0x0e transfer failed. [ 654.033649][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 654.068141][ T29] dw2102: command 0x0e transfer failed. [ 654.126160][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 654.139814][ T29] dw2102: command 0x51 transfer failed. [ 654.271307][ T5917] rc_core: IR keymap rc-su3000 not found [ 654.278296][ T5917] Registered IR keymap rc-empty [ 654.420428][T14934] tipc: Enabling of bearer rejected, already enabled [ 654.429966][T14934] tipc: Enabling of bearer rejected, already enabled [ 654.465640][ T5917] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 654.563943][ T5917] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input53 [ 654.631652][ T29] DVB: Unable to find symbol ds3000_attach() [ 654.650893][ T29] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 654.661566][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 654.668573][ T5917] dw2102: su3000_power_ctrl: 0, initialized 1 [ 654.820156][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 654.828578][ T24] dw2102: i2c transfer failed. [ 654.962663][ T5917] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 655.107982][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 655.136019][ T24] dw2102: i2c transfer failed. [ 655.329843][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 655.335923][ T5829] dw2102: i2c transfer failed. [ 655.472648][T14944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.481695][T14944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.500154][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 655.510398][ T24] dw2102: i2c transfer failed. [ 655.549775][ T29] rc_core: IR keymap rc-su3000 not found [ 655.602658][ T29] Registered IR keymap rc-empty [ 655.668166][ T29] rc rc1: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1 [ 655.792011][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 655.797810][ T24] dw2102: i2c transfer failed. [ 655.817462][ T29] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input54 [ 655.907960][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 655.915753][ T24] usb 1-1: USB disconnect, device number 59 [ 655.954129][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 655.984351][ T29] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 656.053538][ T29] usb 5-1: USB disconnect, device number 81 [ 656.075466][ T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 656.265648][ T29] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 657.040610][ T29] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 657.169938][ T5917] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 657.203351][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.213244][ T29] usb 1-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 657.228199][ T29] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 657.252410][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 657.272673][ T29] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 657.293759][ T29] usb 1-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.322408][ T5917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 657.339493][ T29] usb 1-1: string descriptor 0 read error: -22 [ 657.351288][ T29] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 657.360601][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 657.370835][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.387107][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.402011][ T5917] usb 5-1: config 0 descriptor?? [ 657.443463][ T5917] cp210x 5-1:0.0: cp210x converter detected [ 657.475000][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.484021][ T29] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 657.541140][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 657.568149][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 657.586868][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.656719][ T24] usb 4-1: Product: syz [ 657.678353][ T24] usb 4-1: Manufacturer: syz [ 657.687398][ T24] usb 4-1: SerialNumber: syz [ 657.699522][ T5829] usb 1-1: USB disconnect, device number 60 [ 657.714609][ T24] usb 4-1: config 0 descriptor?? [ 657.746593][ T24] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 657.757717][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 657.770375][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 657.779635][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 657.791345][ T24] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 657.802289][ T24] usb 4-1: media controller created [ 657.807640][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.815676][ T24] dw2102: i2c transfer failed. [ 657.825805][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.832596][ T24] dw2102: i2c transfer failed. [ 657.838731][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.846170][ T24] dw2102: i2c transfer failed. [ 657.852990][ T5917] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 657.860921][ T5917] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 657.868588][ T5917] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 657.876891][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.888999][ T24] dw2102: i2c transfer failed. [ 657.897617][ T5917] usb 5-1: cp210x converter now attached to ttyUSB0 [ 657.906087][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.916755][ T5917] usb 5-1: USB disconnect, device number 82 [ 657.924292][ T24] dw2102: i2c transfer failed. [ 657.936708][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.943696][ T24] dw2102: i2c transfer failed. [ 657.948609][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 657.965204][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 657.975369][ T5917] cp210x 5-1:0.0: device disconnected [ 658.003725][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 658.037064][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 658.045247][ T24] dw2102: command 0x0e transfer failed. [ 658.052494][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 658.059617][ T24] dw2102: command 0x0e transfer failed. [ 658.370790][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 658.383063][ T24] dw2102: command 0x0e transfer failed. [ 658.392533][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 658.398403][ T24] dw2102: command 0x0e transfer failed. [ 658.404881][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 658.414034][ T24] dw2102: command 0x51 transfer failed. [ 658.477495][ T24] DVB: Unable to find symbol ds3000_attach() [ 658.490761][ T24] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 658.541855][ T5917] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 658.623656][T14976] team_slave_0: entered promiscuous mode [ 658.629375][T14976] team_slave_1: entered promiscuous mode [ 658.635245][T14976] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 658.663118][T14976] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 658.689927][ T24] rc_core: IR keymap rc-su3000 not found [ 658.695747][ T24] Registered IR keymap rc-empty [ 658.720837][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 658.727803][ T24] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 658.751175][ T24] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input55 [ 658.763109][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.776944][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 658.786047][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.878991][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 658.889129][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 658.895998][ T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 658.984496][ T5917] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 659.020736][ T24] usb 4-1: USB disconnect, device number 68 [ 659.071357][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.123840][ T5917] usb 1-1: config 0 descriptor?? [ 659.130237][ T5930] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 659.219582][ T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 659.306274][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 659.343859][ T5930] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 659.399753][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.437745][ T5930] usb 5-1: Product: syz [ 659.449980][ T5930] usb 5-1: Manufacturer: syz [ 659.475031][ T5930] usb 5-1: SerialNumber: syz [ 659.499389][ T5930] usb 5-1: config 0 descriptor?? [ 659.579268][T14986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2236'. [ 659.655196][ T5917] hid (null): global environment stack underflow [ 659.677859][ T5917] hid (null): unknown global tag 0xd [ 659.703182][ T5917] hid (null): unknown global tag 0xe [ 659.716934][ T5930] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 659.760956][ T5917] hid (null): bogus close delimiter [ 659.766234][ T5917] hid (null): report_id 11497 is invalid [ 659.775582][ T5930] dw2102: su3000_power_ctrl: 1, initialized 0 [ 659.907327][T14981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.919767][ T5917] hid (null): invalid report_size 614 [ 659.919802][ T5930] dvb-usb: bulk message failed: -22 (2/0) [ 659.925313][ T5917] hid (null): nested delimiters [ 659.957282][T14981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.971971][T14990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 659.974912][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.978534][T14990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 660.000649][ T5917] hid (null): global environment stack overflow [ 660.000691][ T5930] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 660.025606][T14981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.043482][T14981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.058790][ T5930] usb 5-1: media controller created [ 660.068341][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 660.086017][T14990] vhci_hcd vhci_hcd.0: Device attached [ 660.094564][T14993] vhci_hcd: connection closed [ 660.095012][ T5930] dw2102: i2c transfer failed. [ 660.107778][ T6523] vhci_hcd vhci_hcd.1: stop threads [ 660.109872][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 660.124015][ T5930] dw2102: i2c transfer failed. [ 660.124015][ T6523] vhci_hcd vhci_hcd.1: release socket [ 660.124046][ T6523] vhci_hcd vhci_hcd.1: disconnect device [ 660.131746][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 660.146291][ T5930] dw2102: i2c transfer failed. [ 660.151444][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 660.157485][ T5930] dw2102: i2c transfer failed. [ 660.205792][ T5917] usb 1-1: USB disconnect, device number 61 [ 660.444176][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 660.499014][ T5930] dw2102: i2c transfer failed. [ 660.509590][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 660.524560][ T5930] dw2102: i2c transfer failed. [ 660.537467][ T5930] dvb-usb: MAC address: 02:02:02:02:02:02 [ 660.578204][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.650623][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 660.666372][ T5930] dw2102: command 0x0e transfer failed. [ 660.686938][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 660.708426][ T5930] dw2102: command 0x0e transfer failed. [ 661.029933][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 661.036924][ T5930] dw2102: command 0x0e transfer failed. [ 661.069742][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 661.094862][ T5930] dw2102: command 0x0e transfer failed. [ 661.164979][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 661.198440][ T5930] dw2102: command 0x51 transfer failed. [ 661.343830][ T5930] DVB: Unable to find symbol ds3000_attach() [ 661.356811][ T5930] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 661.499867][T14368] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 661.508030][ T5930] rc_core: IR keymap rc-su3000 not found [ 661.519895][ T5930] Registered IR keymap rc-empty [ 661.526626][ T5930] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 661.541528][ T5930] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input56 [ 661.559527][ T5930] dvb-usb: schedule remote query interval to 150 msecs. [ 661.608617][ T5930] dw2102: su3000_power_ctrl: 0, initialized 1 [ 661.760325][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 661.879830][ T5827] dw2102: i2c transfer failed. [ 661.939768][T14368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 661.973029][T14368] usb 1-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 661.981806][ T5930] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 661.993824][T14368] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 662.009913][T14368] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 662.039108][T14368] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 662.060116][T14368] usb 1-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.090830][T14368] usb 1-1: string descriptor 0 read error: -22 [ 662.099112][T14368] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 662.140739][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 662.146573][ T5827] dw2102: i2c transfer failed. [ 662.156895][T14368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.231517][T14368] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.333151][T14368] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 662.350082][ T5930] dvb-usb: bulk message failed: -22 (1/0) [ 662.355877][ T5930] dw2102: i2c transfer failed. [ 662.426340][ T5917] usb 1-1: USB disconnect, device number 62 [ 662.532372][T14368] dvb-usb: bulk message failed: -22 (1/0) [ 662.544518][T14368] dw2102: i2c transfer failed. [ 662.643881][T15017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2243'. [ 662.750357][T14368] dvb-usb: bulk message failed: -22 (1/0) [ 662.829352][T14368] dw2102: i2c transfer failed. [ 662.942438][ T5917] usb 5-1: USB disconnect, device number 83 [ 663.384572][T15025] tipc: Enabling of bearer rejected, already enabled [ 663.386540][ T5917] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 663.478310][T15026] tipc: Enabling of bearer rejected, already enabled [ 663.754368][T15030] macvlan6: entered promiscuous mode [ 663.791140][T15032] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2247'. [ 664.373287][T15045] bond5: down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 664.418450][T15045] bond5: entered promiscuous mode [ 664.472173][T15045] bond5: entered allmulticast mode [ 664.546447][T15045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 664.610729][ T5917] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 664.916812][ T5917] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 664.939310][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 664.969933][ T5917] usb 1-1: Product: syz [ 664.980651][ T5917] usb 1-1: Manufacturer: syz [ 665.020176][ T5917] usb 1-1: SerialNumber: syz [ 665.037338][ T5917] usb 1-1: config 0 descriptor?? [ 665.320975][T14368] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 665.352172][T15060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.361674][T15060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.516858][T14368] usb 4-1: Using ep0 maxpacket: 32 [ 665.696976][T14368] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 665.706206][T14368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.783062][T14368] usb 4-1: Product: syz [ 665.789962][T14368] usb 4-1: Manufacturer: syz [ 665.794606][T14368] usb 4-1: SerialNumber: syz [ 665.839913][T15065] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2256'. [ 665.886166][T14368] usb 4-1: config 0 descriptor?? [ 665.904812][T14368] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 665.915790][T14368] dw2102: su3000_power_ctrl: 1, initialized 0 [ 665.922077][T14368] dvb-usb: bulk message failed: -22 (2/0) [ 666.082485][T14368] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 666.118142][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.130049][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.143212][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.158933][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.250957][T14368] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 666.264516][T14368] usb 4-1: media controller created [ 666.403346][T14368] dvb-usb: bulk message failed: -22 (6/0) [ 666.429095][T14368] dw2102: i2c transfer failed. [ 666.445590][T14368] dvb-usb: bulk message failed: -22 (6/0) [ 666.458016][T14368] dw2102: i2c transfer failed. [ 666.468475][T14368] dvb-usb: bulk message failed: -22 (6/0) [ 666.485670][T14368] dw2102: i2c transfer failed. [ 666.538390][T14368] dvb-usb: bulk message failed: -22 (6/0) [ 666.554481][T14368] dw2102: i2c transfer failed. [ 666.569545][T14368] dvb-usb: bulk message failed: -22 (6/0) [ 666.609195][T14368] dw2102: i2c transfer failed. [ 666.626712][T14368] dvb-usb: bulk message failed: -22 (6/0) [ 666.666239][T14368] dw2102: i2c transfer failed. [ 666.676391][T14368] dvb-usb: MAC address: 02:02:02:02:02:02 [ 666.736816][T14368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.875707][T14368] dvb-usb: bulk message failed: -22 (3/0) [ 666.895829][T14368] dw2102: command 0x0e transfer failed. [ 666.915736][T15070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.923607][T14368] dvb-usb: bulk message failed: -22 (3/0) [ 666.943188][T14368] dw2102: command 0x0e transfer failed. [ 667.313760][T14368] dvb-usb: bulk message failed: -22 (3/0) [ 667.313780][T14368] dw2102: command 0x0e transfer failed. [ 667.313789][T14368] dvb-usb: bulk message failed: -22 (3/0) [ 667.313800][T14368] dw2102: command 0x0e transfer failed. [ 667.313808][T14368] dvb-usb: bulk message failed: -22 (1/0) [ 667.313818][T14368] dw2102: command 0x51 transfer failed. [ 667.548811][T14368] DVB: Unable to find symbol ds3000_attach() [ 667.548826][T14368] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 667.684180][T14368] rc_core: IR keymap rc-su3000 not found [ 667.684198][T14368] Registered IR keymap rc-empty [ 667.685975][T14368] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 667.687504][T14368] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input57 [ 667.689037][T14368] dvb-usb: schedule remote query interval to 150 msecs. [ 667.689061][T14368] dw2102: su3000_power_ctrl: 0, initialized 1 [ 667.689078][T14368] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 667.851024][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 667.851045][ T5827] dw2102: i2c transfer failed. [ 668.056336][T14368] dvb-usb: bulk message failed: -22 (1/0) [ 668.056363][T14368] dw2102: i2c transfer failed. [ 668.057855][T14368] usb 4-1: USB disconnect, device number 69 [ 668.102126][T15082] syzkaller0: entered promiscuous mode [ 668.102146][T15082] syzkaller0: entered allmulticast mode [ 668.104869][T15082] tc action pedit offset must be on 32 bit boundaries [ 668.211389][ T5930] usb 1-1: USB disconnect, device number 63 [ 668.246882][T14368] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 668.886814][T15104] tipc: Enabling of bearer rejected, already enabled [ 668.895460][T15104] tipc: Enabling of bearer rejected, already enabled [ 669.189790][ T5827] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 669.356092][ T5827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 669.370983][ T5827] usb 3-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 669.387671][ T5827] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 669.417688][ T5827] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 669.518422][ T5827] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 669.538805][ T5827] usb 3-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.697496][ T5827] usb 3-1: string descriptor 0 read error: -22 [ 669.704915][ T5827] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 669.714658][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.755767][ T5827] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 669.763071][T14368] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 669.775030][ T5827] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 669.922691][T14368] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 669.939052][T14368] usb 5-1: config 0 has no interface number 0 [ 669.953095][ T5827] usb 3-1: USB disconnect, device number 77 [ 670.006686][T14368] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 670.018923][T14368] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 670.034608][T14368] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 670.048413][T14368] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 670.093411][T14368] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 670.104526][T14368] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 670.124851][T14368] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 670.160352][T14368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.179088][T14368] usb 5-1: config 0 descriptor?? [ 670.190085][T15107] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 670.197525][T15107] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 670.225758][T14368] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 670.451983][T15107] ldusb 5-1:0.55: Write buffer overflow, 162 bytes dropped [ 670.468702][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.498431][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.518651][T14368] usb 5-1: USB disconnect, device number 84 [ 670.528802][T14368] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 671.071364][ T5917] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 671.253786][T15124] tipc: Resetting bearer [ 671.266097][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 671.340415][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 671.431010][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.464105][ T5917] usb 1-1: Product: syz [ 671.488797][ T5917] usb 1-1: Manufacturer: syz [ 671.506605][ T5917] usb 1-1: SerialNumber: syz [ 671.546188][ T5917] usb 1-1: config 0 descriptor?? [ 671.567013][ T5917] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 671.649054][ T5917] dw2102: su3000_power_ctrl: 1, initialized 0 [ 671.662205][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 671.739137][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 671.763831][ T5917] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 671.822169][ T5917] usb 1-1: media controller created [ 671.849863][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.870835][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.919550][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 671.929784][ T5917] dw2102: i2c transfer failed. [ 671.943557][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.947061][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 671.971183][ T5917] dw2102: i2c transfer failed. [ 672.099165][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.196952][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 672.228854][ T5917] dw2102: i2c transfer failed. [ 672.243284][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 672.253574][ T5917] dw2102: i2c transfer failed. [ 672.291765][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 672.297575][ T5917] dw2102: i2c transfer failed. [ 672.328526][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 672.349021][ T5917] dw2102: i2c transfer failed. [ 672.367115][ T5917] dvb-usb: MAC address: 02:02:02:02:02:02 [ 672.409139][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 672.445861][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2277'. [ 672.481013][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 672.530235][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 672.544387][ T5917] dw2102: command 0x0e transfer failed. [ 672.563542][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 672.583017][ T5917] dw2102: command 0x0e transfer failed. [ 672.919404][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 672.937274][ T5917] dw2102: command 0x0e transfer failed. [ 672.947664][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 672.969257][ T5917] dw2102: command 0x0e transfer failed. [ 673.142872][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 673.285221][ T5917] dw2102: command 0x51 transfer failed. [ 673.390475][T15146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2280'. [ 673.465141][ T5917] DVB: Unable to find symbol ds3000_attach() [ 673.573267][ T5917] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 673.989868][ T5917] rc_core: IR keymap rc-su3000 not found [ 673.999842][ T5917] Registered IR keymap rc-empty [ 674.028380][ T5917] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 674.083403][ T5917] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input58 [ 674.170025][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 674.189790][ T5917] dw2102: su3000_power_ctrl: 0, initialized 1 [ 674.190435][ T5827] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 674.195915][ T5917] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 674.350025][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 674.366279][ T29] dw2102: i2c transfer failed. [ 674.489544][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 674.521874][ T5827] usb 4-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 674.530692][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 674.536467][ T5829] dw2102: i2c transfer failed. [ 674.564765][ T5917] usb 1-1: USB disconnect, device number 64 [ 674.574544][ T5827] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 674.625372][ T5827] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 674.676414][ T5827] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 674.729843][ T5827] usb 4-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.812555][ T5827] usb 4-1: string descriptor 0 read error: -22 [ 674.818853][ T5827] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 674.880175][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.020100][ T5917] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 675.124076][ T5827] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 675.176150][ T5827] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 675.253281][ T5827] usb 4-1: USB disconnect, device number 70 [ 675.719829][ T5917] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 675.863909][T15176] CUSE: unknown device info "€" [ 675.868887][T15176] CUSE: unknown device info "Ö" [ 675.888818][ T5917] usb 3-1: config 0 has no interfaces? [ 675.895953][T15176] CUSE: unknown device info "" [ 675.910304][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.920131][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.930958][T15176] CUSE: unknown device info "€" [ 675.937400][T15176] CUSE: unknown device info "ðÿÿÿ" [ 675.943405][ T5917] usb 3-1: Product: syz [ 675.947180][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.953923][ T5917] usb 3-1: Manufacturer: syz [ 675.963116][T15176] CUSE: unknown device info "" [ 675.968502][T15176] CUSE: unknown device info "" [ 675.973949][ T5917] usb 3-1: SerialNumber: syz [ 675.978761][T15176] CUSE: unknown device info "" [ 675.987092][ T5917] usb 3-1: config 0 descriptor?? [ 676.000684][T15176] CUSE: zero length info key specified [ 676.017206][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.059302][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.073236][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.250292][ T5829] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 676.274323][T15197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2294'. [ 676.503965][ T5829] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 676.513240][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.521689][ T5829] usb 5-1: Product: syz [ 676.526063][ T5829] usb 5-1: Manufacturer: syz [ 676.530995][ T5829] usb 5-1: SerialNumber: syz [ 676.629796][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 676.790086][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 676.866375][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 676.970089][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.980755][ T5829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 677.092853][T15205] lo: Caught tx_queue_len zero misconfig [ 677.119833][ T24] usb 1-1: Product: syz [ 677.124205][ T5829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 677.145293][ T24] usb 1-1: Manufacturer: syz [ 677.170831][ T24] usb 1-1: SerialNumber: syz [ 677.197099][ T24] usb 1-1: config 0 descriptor?? [ 677.306351][ T24] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 677.316016][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 677.323582][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 677.348005][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 677.388050][T15209] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2290'. [ 677.419648][ T24] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 677.463809][ T24] usb 1-1: media controller created [ 677.502336][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 677.517868][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.528834][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.544243][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.555099][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.633034][ T24] dw2102: i2c transfer failed. [ 677.648531][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 677.697947][ T24] dw2102: i2c transfer failed. [ 677.778216][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 677.812214][ T24] dw2102: i2c transfer failed. [ 677.851280][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 678.006744][ T24] dw2102: i2c transfer failed. [ 678.037587][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 678.063504][ T24] dw2102: i2c transfer failed. [ 678.079401][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 678.109046][ T24] dw2102: i2c transfer failed. [ 678.121338][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 678.194753][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.390239][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 678.409891][ T24] dw2102: command 0x0e transfer failed. [ 678.423531][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 678.520690][ T24] dw2102: command 0x0e transfer failed. [ 678.829877][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 678.836855][ T24] dw2102: command 0x0e transfer failed. [ 678.842842][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 678.863121][ T24] dw2102: command 0x0e transfer failed. [ 678.885296][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 678.902588][ T24] dw2102: command 0x51 transfer failed. [ 679.126184][ T24] DVB: Unable to find symbol ds3000_attach() [ 679.137885][ T24] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 679.249936][ T5829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 679.288935][ T5829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 679.330941][ T5829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 679.449635][ T5829] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 679.525183][ T24] rc_core: IR keymap rc-su3000 not found [ 679.531866][ T5829] usb 5-1: USB disconnect, device number 85 [ 679.556047][ T24] Registered IR keymap rc-empty [ 679.607549][ T24] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 679.663089][ T24] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input59 [ 679.722523][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 679.770185][T15223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 679.777791][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 679.784061][ T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 679.802771][T15223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 679.824551][T15223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 679.899831][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 679.905623][ T24] dw2102: i2c transfer failed. [ 679.954353][T14368] usb 1-1: USB disconnect, device number 65 [ 679.980017][T15223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 679.990639][T15223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 680.216582][T14368] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 680.333568][T15234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.380900][T15234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.834545][ T24] usb 3-1: USB disconnect, device number 78 [ 681.379850][T14368] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 681.539815][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 681.580740][T14368] usb 4-1: Using ep0 maxpacket: 16 [ 681.724377][ T10] usb 3-1: device descriptor read/64, error -71 [ 681.800317][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 681.879868][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 681.887021][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 681.980247][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 682.042667][T15259] Bluetooth: hci4: command 0x0406 tx timeout [ 682.048857][T15259] Bluetooth: hci1: command 0x0406 tx timeout [ 682.130207][ T10] usb 3-1: device descriptor read/64, error -71 [ 682.250746][ T10] usb usb3-port1: attempt power cycle [ 682.600172][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 682.644383][ T10] usb 3-1: device descriptor read/8, error -71 [ 682.706531][T15270] syzkaller0: entered promiscuous mode [ 682.765665][T15270] syzkaller0: entered allmulticast mode [ 682.901402][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 682.950631][ T10] usb 3-1: device descriptor read/8, error -71 [ 683.142968][ T10] usb usb3-port1: unable to enumerate USB device [ 683.840235][ T5827] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 683.929324][T14368] usb 4-1: unable to get BOS descriptor or descriptor too short [ 683.940136][T14368] usb 4-1: no configurations [ 683.952293][T14368] usb 4-1: can't read configurations, error -22 [ 684.043898][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 684.061405][ T5827] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 684.081301][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.089369][ T5827] usb 5-1: Product: syz [ 684.141324][ T5827] usb 5-1: Manufacturer: syz [ 684.156258][ T5827] usb 5-1: SerialNumber: syz [ 684.198665][ T5827] usb 5-1: config 0 descriptor?? [ 684.284411][T15283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'. [ 684.465882][ T5827] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 684.694977][T15288] FAULT_INJECTION: forcing a failure. [ 684.694977][T15288] name failslab, interval 1, probability 0, space 0, times 0 [ 684.794084][T15288] CPU: 0 UID: 0 PID: 15288 Comm: syz.2.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.794123][T15288] Tainted: [L]=SOFTLOCKUP [ 684.794132][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 684.794146][T15288] Call Trace: [ 684.794155][T15288] [ 684.794165][T15288] dump_stack_lvl+0xe8/0x150 [ 684.794200][T15288] should_fail_ex+0x412/0x560 [ 684.794235][T15288] should_failslab+0xa8/0x100 [ 684.794263][T15288] __kmalloc_noprof+0xe8/0x760 [ 684.794287][T15288] ? io_cache_alloc_new+0x40/0x100 [ 684.794323][T15288] io_cache_alloc_new+0x40/0x100 [ 684.794354][T15288] __io_prep_rw+0x2bd/0xed0 [ 684.794385][T15288] ? __pfx___io_prep_rw+0x10/0x10 [ 684.794405][T15288] ? percpu_ref_get_many+0x21/0x1e0 [ 684.794442][T15288] ? io_read+0xc7/0x1c0 [ 684.794466][T15288] io_prep_rwv+0x8e/0x440 [ 684.794486][T15288] ? __io_issue_sqe+0x1f7/0x4b0 [ 684.794507][T15288] ? __pfx_io_prep_rwv+0x10/0x10 [ 684.794536][T15288] ? io_req_defer_failed+0x29f/0x3d0 [ 684.794572][T15288] io_submit_sqes+0xb6d/0x2400 [ 684.794627][T15288] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 684.794653][T15288] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 684.794683][T15288] ? __fget_files+0x3a0/0x420 [ 684.794726][T15288] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 684.794749][T15288] ? fput+0xa0/0xd0 [ 684.794780][T15288] ? ksys_write+0x242/0x270 [ 684.794806][T15288] ? __pfx_ksys_write+0x10/0x10 [ 684.794834][T15288] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 684.794859][T15288] do_syscall_64+0x14d/0xf80 [ 684.794882][T15288] ? trace_irq_disable+0x3b/0x150 [ 684.794912][T15288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.794949][T15288] ? clear_bhb_loop+0x40/0x90 [ 684.794976][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.794997][T15288] RIP: 0033:0x7faafb39c799 [ 684.795017][T15288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.795035][T15288] RSP: 002b:00007faafc310028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 684.795054][T15288] RAX: ffffffffffffffda RBX: 00007faafb615fa0 RCX: 00007faafb39c799 [ 684.795066][T15288] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000005 [ 684.795077][T15288] RBP: 00007faafc310090 R08: 0000000000000000 R09: 0000000000000000 [ 684.795088][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.795098][T15288] R13: 00007faafb616038 R14: 00007faafb615fa0 R15: 00007faafb73fa48 [ 684.795124][T15288] [ 685.569871][ T5917] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 685.595998][T15297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.605803][T15296] bond6: down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 685.735108][T15296] bond6: entered promiscuous mode [ 685.763296][T15296] bond6: entered allmulticast mode [ 685.769474][T15296] 8021q: adding VLAN 0 to HW filter on device bond6 [ 685.804264][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.816935][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.826648][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.837874][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.847728][ T24] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 685.879284][T15297] geneve3: entered promiscuous mode [ 685.884824][T15297] geneve3: entered allmulticast mode [ 686.006807][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.121936][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 686.143558][ T24] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 686.159822][ T5917] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 686.174100][ T24] usb 1-1: Product: syz [ 686.203137][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.211289][ T24] usb 1-1: Manufacturer: syz [ 686.233708][ T24] usb 1-1: SerialNumber: syz [ 686.302011][ T5917] usb 3-1: config 0 descriptor?? [ 686.324760][ T24] usb 1-1: config 0 descriptor?? [ 686.334662][ T5827] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 686.349168][ T5827] usb 5-1: USB disconnect, device number 86 [ 686.715917][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 686.725509][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 686.751434][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 686.805621][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 686.830782][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 686.915150][T15299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.924444][T15299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.948110][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 686.991296][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 686.991315][ T30] audit: type=1326 audit(1773479643.618:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.2.2324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faafb39c799 code=0x0 [ 687.008055][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 687.045991][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.055240][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.137326][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 687.168298][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 687.212642][ T5917] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 687.274534][ T5917] nti 0003:0757:0A00.001D: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0 [ 687.302475][T15310] xt_CT: No such helper "netbios-ns" [ 687.320210][T15315] FAULT_INJECTION: forcing a failure. [ 687.320210][T15315] name failslab, interval 1, probability 0, space 0, times 0 [ 687.385771][T15315] CPU: 0 UID: 0 PID: 15315 Comm: syz.4.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.385805][T15315] Tainted: [L]=SOFTLOCKUP [ 687.385815][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 687.385828][T15315] Call Trace: [ 687.385837][T15315] [ 687.385846][T15315] dump_stack_lvl+0xe8/0x150 [ 687.385881][T15315] should_fail_ex+0x412/0x560 [ 687.385916][T15315] should_failslab+0xa8/0x100 [ 687.385950][T15315] __kmalloc_node_noprof+0xf0/0x7c0 [ 687.385976][T15315] ? crypto_create_tfm_node+0x83/0x3f0 [ 687.386010][T15315] crypto_create_tfm_node+0x83/0x3f0 [ 687.386043][T15315] crypto_alloc_tfm_node+0x172/0x3f0 [ 687.386074][T15315] ? ipcomp_init_state+0x125/0x2a0 [ 687.386112][T15315] ipcomp_init_state+0x14d/0x2a0 [ 687.386147][T15315] ipcomp4_init_state+0xca/0xb20 [ 687.386172][T15315] ? __xfrm_init_state+0x842/0x1460 [ 687.386206][T15315] __xfrm_init_state+0xac9/0x1460 [ 687.386233][T15315] ? __xfrm_init_state+0x842/0x1460 [ 687.386267][T15315] xfrm_add_sa+0x3073/0x4230 [ 687.386305][T15315] ? __pfx_xfrm_add_sa+0x10/0x10 [ 687.386331][T15315] ? apparmor_capable+0x126/0x170 [ 687.386360][T15315] ? __nla_parse+0x40/0x60 [ 687.386386][T15315] xfrm_user_rcv_msg+0x746/0xb20 [ 687.386420][T15315] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 687.386484][T15315] ? __pfx___mutex_trylock_common+0x10/0x10 [ 687.386528][T15315] ? rcu_is_watching+0x15/0xb0 [ 687.386560][T15315] ? trace_contention_end+0x3d/0x150 [ 687.386594][T15315] ? __mutex_lock+0x319/0x1300 [ 687.386626][T15315] netlink_rcv_skb+0x232/0x4b0 [ 687.386660][T15315] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 687.386690][T15315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 687.386736][T15315] ? netlink_deliver_tap+0x2e/0x1b0 [ 687.386769][T15315] ? netlink_deliver_tap+0x2e/0x1b0 [ 687.386803][T15315] xfrm_netlink_rcv+0x79/0x90 [ 687.386832][T15315] netlink_unicast+0x80f/0x9b0 [ 687.386870][T15315] ? __pfx_netlink_unicast+0x10/0x10 [ 687.386902][T15315] ? netlink_sendmsg+0x650/0xb40 [ 687.386931][T15315] ? skb_put+0x11b/0x210 [ 687.386958][T15315] netlink_sendmsg+0x813/0xb40 [ 687.386999][T15315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.387035][T15315] ? aa_sock_msg_perm+0xf1/0x1b0 [ 687.387066][T15315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 687.387095][T15315] ____sys_sendmsg+0x972/0x9f0 [ 687.387130][T15315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.387164][T15315] ? import_iovec+0x73/0xa0 [ 687.387191][T15315] ___sys_sendmsg+0x2a5/0x360 [ 687.387221][T15315] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.387281][T15315] ? __fget_files+0x2a/0x420 [ 687.387312][T15315] ? __fget_files+0x3a0/0x420 [ 687.387353][T15315] __x64_sys_sendmsg+0x1bd/0x2a0 [ 687.387381][T15315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.387417][T15315] ? __pfx_ksys_write+0x10/0x10 [ 687.387453][T15315] do_syscall_64+0x14d/0xf80 [ 687.387476][T15315] ? trace_irq_disable+0x3b/0x150 [ 687.387513][T15315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.387535][T15315] ? clear_bhb_loop+0x40/0x90 [ 687.387561][T15315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.387582][T15315] RIP: 0033:0x7fa3a819c799 [ 687.387602][T15315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.387619][T15315] RSP: 002b:00007fa3a9040028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.387641][T15315] RAX: ffffffffffffffda RBX: 00007fa3a8415fa0 RCX: 00007fa3a819c799 [ 687.387657][T15315] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000004 [ 687.387670][T15315] RBP: 00007fa3a9040090 R08: 0000000000000000 R09: 0000000000000000 [ 687.387683][T15315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.387696][T15315] R13: 00007fa3a8416038 R14: 00007fa3a8415fa0 R15: 00007fa3a853fa48 [ 687.387729][T15315] [ 688.796403][ T5829] usb 3-1: USB disconnect, device number 83 [ 688.817053][ T24] usb 1-1: USB disconnect, device number 66 [ 689.498123][T15346] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2336'. [ 690.093055][T15379] netlink: zone id is out of range [ 690.108310][T15379] FAULT_INJECTION: forcing a failure. [ 690.108310][T15379] name failslab, interval 1, probability 0, space 0, times 0 [ 690.134107][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'. [ 690.149794][T15379] CPU: 0 UID: 0 PID: 15379 Comm: syz.2.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.149827][T15379] Tainted: [L]=SOFTLOCKUP [ 690.149835][T15379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 690.149847][T15379] Call Trace: [ 690.149857][T15379] [ 690.149865][T15379] dump_stack_lvl+0xe8/0x150 [ 690.149899][T15379] should_fail_ex+0x412/0x560 [ 690.149935][T15379] should_failslab+0xa8/0x100 [ 690.149961][T15379] __kmalloc_cache_noprof+0x88/0x660 [ 690.149981][T15379] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 690.150004][T15379] ? __kmalloc_cache_noprof+0x15b/0x660 [ 690.150025][T15379] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 690.150059][T15379] genl_family_rcv_msg_doit+0x22a/0x330 [ 690.150086][T15379] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 690.150116][T15379] ? bpf_lsm_capable+0x9/0x20 [ 690.150140][T15379] ? security_capable+0x7e/0x2c0 [ 690.150168][T15379] genl_rcv_msg+0x61c/0x7a0 [ 690.150192][T15379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 690.150212][T15379] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 690.150236][T15379] ? __lock_acquire+0x6b5/0x2cf0 [ 690.150267][T15379] netlink_rcv_skb+0x232/0x4b0 [ 690.150293][T15379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 690.150314][T15379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.150352][T15379] ? down_read+0x272/0x2e0 [ 690.150371][T15379] ? genl_rcv+0xd/0x40 [ 690.150391][T15379] genl_rcv+0x28/0x40 [ 690.150409][T15379] netlink_unicast+0x80f/0x9b0 [ 690.150438][T15379] ? __pfx_netlink_unicast+0x10/0x10 [ 690.150463][T15379] ? netlink_sendmsg+0x650/0xb40 [ 690.150494][T15379] ? skb_put+0x11b/0x210 [ 690.150514][T15379] netlink_sendmsg+0x813/0xb40 [ 690.150547][T15379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.150576][T15379] ? aa_sock_msg_perm+0xf1/0x1b0 [ 690.150601][T15379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.150624][T15379] ____sys_sendmsg+0x972/0x9f0 [ 690.150650][T15379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.150677][T15379] ? import_iovec+0x73/0xa0 [ 690.150697][T15379] ___sys_sendmsg+0x2a5/0x360 [ 690.150721][T15379] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.150767][T15379] ? __fget_files+0x2a/0x420 [ 690.150791][T15379] ? __fget_files+0x3a0/0x420 [ 690.150824][T15379] __x64_sys_sendmsg+0x1bd/0x2a0 [ 690.150846][T15379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.150873][T15379] ? __pfx_ksys_write+0x10/0x10 [ 690.150900][T15379] do_syscall_64+0x14d/0xf80 [ 690.150918][T15379] ? trace_irq_disable+0x3b/0x150 [ 690.150943][T15379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.150960][T15379] ? clear_bhb_loop+0x40/0x90 [ 690.150980][T15379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.150997][T15379] RIP: 0033:0x7faafb39c799 [ 690.151014][T15379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.151028][T15379] RSP: 002b:00007faafc310028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.151047][T15379] RAX: ffffffffffffffda RBX: 00007faafb615fa0 RCX: 00007faafb39c799 [ 690.151059][T15379] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 690.151070][T15379] RBP: 00007faafc310090 R08: 0000000000000000 R09: 0000000000000000 [ 690.151081][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.151091][T15379] R13: 00007faafb616038 R14: 00007faafb615fa0 R15: 00007faafb73fa48 [ 690.151116][T15379] [ 691.917473][T15425] bond3: down delay (383) is not a multiple of miimon (1847263240), value rounded to 0 ms [ 691.930874][T15425] bond3: entered promiscuous mode [ 691.936064][T15425] bond3: entered allmulticast mode [ 691.943035][T15425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 692.032703][T15425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.042040][ T5827] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 692.054487][T15425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.200625][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 692.208370][ T5827] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 692.228958][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.257420][ T5827] usb 4-1: config 0 has no interface number 0 [ 692.284832][ T5827] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 692.312759][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.339833][ T5827] usb 4-1: Product: syz [ 692.344072][ T5827] usb 4-1: Manufacturer: syz [ 692.348707][ T5827] usb 4-1: SerialNumber: syz [ 692.391260][ T5827] usb 4-1: config 0 descriptor?? [ 692.439268][ T5827] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 692.455933][ T5827] uvcvideo 4-1:0.105: No valid video chain found. [ 692.625439][ T5827] usb 4-1: USB disconnect, device number 73 [ 693.481053][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 693.594473][ T30] audit: type=1326 audit(1773479650.218:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 693.643948][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 693.651597][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 693.660158][ T24] usb 4-1: config 0 has no interface number 0 [ 693.660521][ T30] audit: type=1326 audit(1773479650.218:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 693.667519][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 693.738659][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 693.767993][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.782416][ T24] usb 4-1: Product: syz [ 693.788360][ T24] usb 4-1: Manufacturer: syz [ 693.793755][ T24] usb 4-1: SerialNumber: syz [ 693.811159][ T30] audit: type=1326 audit(1773479650.248:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 693.876843][ T30] audit: type=1326 audit(1773479650.248:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3a819c502 code=0x7ffc0000 [ 693.952049][ T30] audit: type=1326 audit(1773479650.248:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3a819c502 code=0x7ffc0000 [ 693.980080][ T24] usb 4-1: config 0 descriptor?? [ 694.022590][ T30] audit: type=1326 audit(1773479650.248:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 694.098094][ T30] audit: type=1326 audit(1773479650.248:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 694.168550][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 694.180626][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 694.195524][ T30] audit: type=1326 audit(1773479650.248:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 694.299621][ T30] audit: type=1326 audit(1773479650.248:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 694.394957][ T30] audit: type=1326 audit(1773479650.248:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15454 comm="syz.4.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a819c799 code=0x7ffc0000 [ 694.570364][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (24) [ 695.294871][T15483] binder: 15470:15483 ioctl c0306201 2000000001c0 returned -14 [ 695.773043][T15491] netlink: 'syz.2.2384': attribute type 2 has an invalid length. [ 695.793601][T15491] !: entered promiscuous mode [ 696.200808][ T24] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 696.215195][ T24] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 696.242739][ T24] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 696.256391][T15493] trusted_key: encrypted_key: keyword 'ÿew' not recognized [ 696.329894][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 696.339826][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 696.348101][ T5917] em28xx 4-1:0.132: Registering V4L2 extension [ 696.563916][ T5917] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 696.607633][ T5829] usb 4-1: USB disconnect, device number 74 [ 696.613875][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 696.623070][ T5829] em28xx 4-1:0.132: Disconnecting em28xx [ 696.629904][ T5917] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 696.798388][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 696.809478][ T24] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 696.832987][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 696.869802][ T24] usb 1-1: can't read configurations, error -61 [ 696.957703][ T5917] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 696.999849][ T5917] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 697.029826][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 697.044547][ T5917] em28xx 4-1:0.132: No AC97 audio processor [ 697.138608][ T5917] usb 4-1: Decoder not found [ 697.192648][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 697.208488][ T5917] em28xx 4-1:0.132: failed to create media graph [ 697.297827][ T24] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 697.317364][ T5917] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 697.340105][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 697.348355][ T24] usb 1-1: can't read configurations, error -61 [ 697.355335][ T24] usb usb1-port1: attempt power cycle [ 697.390678][T15507] ================================================================== [ 697.398803][T15507] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 697.406216][T15507] Read of size 8 at addr ffff88802967c748 by task v4l_id/15507 [ 697.413765][T15507] [ 697.416129][T15507] CPU: 0 UID: 0 PID: 15507 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 697.416152][T15507] Tainted: [L]=SOFTLOCKUP [ 697.416158][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 697.416168][T15507] Call Trace: [ 697.416175][T15507] [ 697.416183][T15507] dump_stack_lvl+0xe8/0x150 [ 697.416206][T15507] print_report+0xba/0x230 [ 697.416224][T15507] ? v4l2_fh_open+0xac/0x420 [ 697.416242][T15507] kasan_report+0x117/0x150 [ 697.416262][T15507] ? v4l2_fh_open+0xac/0x420 [ 697.416282][T15507] v4l2_fh_open+0xac/0x420 [ 697.416301][T15507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 697.416320][T15507] em28xx_v4l2_open+0x157/0x9a0 [ 697.416335][T15507] ? do_raw_spin_lock+0x12b/0x2f0 [ 697.416354][T15507] v4l2_open+0x1bf/0x3a0 [ 697.416385][T15507] chrdev_open+0x4cd/0x5e0 [ 697.416405][T15507] ? __pfx_chrdev_open+0x10/0x10 [ 697.416422][T15507] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 697.416440][T15507] ? __pfx_chrdev_open+0x10/0x10 [ 697.416457][T15507] do_dentry_open+0x785/0x14e0 [ 697.416483][T15507] vfs_open+0x3b/0x340 [ 697.416501][T15507] ? path_openat+0x2df0/0x3860 [ 697.416519][T15507] path_openat+0x2e08/0x3860 [ 697.416539][T15507] ? __pfx_stack_trace_save+0x10/0x10 [ 697.416557][T15507] ? stack_depot_save_flags+0x33/0x810 [ 697.416583][T15507] ? __pfx_path_openat+0x10/0x10 [ 697.416620][T15507] ? __x64_sys_openat+0x138/0x170 [ 697.416648][T15507] ? do_syscall_64+0x14d/0xf80 [ 697.416669][T15507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.416698][T15507] ? __lock_acquire+0x6b5/0x2cf0 [ 697.416720][T15507] do_file_open+0x23e/0x4a0 [ 697.416738][T15507] ? __pfx_do_file_open+0x10/0x10 [ 697.416762][T15507] ? _raw_spin_unlock+0x28/0x50 [ 697.416774][T15507] ? alloc_fd+0x64b/0x6c0 [ 697.416798][T15507] do_sys_openat2+0x113/0x200 [ 697.416829][T15507] ? __pfx_do_sys_openat2+0x10/0x10 [ 697.416850][T15507] ? exc_page_fault+0x6a/0xc0 [ 697.416867][T15507] ? do_user_addr_fault+0xc6f/0x1340 [ 697.416888][T15507] __x64_sys_openat+0x138/0x170 [ 697.416911][T15507] do_syscall_64+0x14d/0xf80 [ 697.416926][T15507] ? trace_irq_disable+0x3b/0x150 [ 697.416948][T15507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.416963][T15507] ? clear_bhb_loop+0x40/0x90 [ 697.416980][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.416995][T15507] RIP: 0033:0x7fb882ea7407 [ 697.417010][T15507] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 697.417024][T15507] RSP: 002b:00007ffddf5b3740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 697.417040][T15507] RAX: ffffffffffffffda RBX: 00007fb88355a880 RCX: 00007fb882ea7407 [ 697.417051][T15507] RDX: 0000000000000000 RSI: 00007ffddf5b4f1b RDI: ffffffffffffff9c [ 697.417062][T15507] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 697.417071][T15507] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 697.417080][T15507] R13: 00007ffddf5b3990 R14: 00007fb88365f000 R15: 000055d76e31d4d8 [ 697.417098][T15507] [ 697.417103][T15507] [ 697.718893][T15507] Allocated by task 5917: [ 697.723217][T15507] kasan_save_track+0x3e/0x80 [ 697.728001][T15507] __kasan_kmalloc+0x93/0xb0 [ 697.732597][T15507] __kmalloc_cache_noprof+0x31c/0x660 [ 697.737983][T15507] em28xx_v4l2_init+0x10b/0x2e70 [ 697.742933][T15507] em28xx_init_extension+0x120/0x1c0 [ 697.748226][T15507] process_scheduled_works+0xb6e/0x18c0 [ 697.753777][T15507] worker_thread+0xa53/0xfc0 [ 697.758394][T15507] kthread+0x388/0x470 [ 697.762460][T15507] ret_from_fork+0x51e/0xb90 [ 697.767058][T15507] ret_from_fork_asm+0x1a/0x30 [ 697.771830][T15507] [ 697.774159][T15507] Freed by task 5917: [ 697.778159][T15507] kasan_save_track+0x3e/0x80 [ 697.782840][T15507] kasan_save_free_info+0x46/0x50 [ 697.787871][T15507] __kasan_slab_free+0x5c/0x80 [ 697.792721][T15507] kfree+0x1c1/0x630 [ 697.796620][T15507] em28xx_v4l2_init+0x1683/0x2e70 [ 697.801688][T15507] em28xx_init_extension+0x120/0x1c0 [ 697.806986][T15507] process_scheduled_works+0xb6e/0x18c0 [ 697.812535][T15507] worker_thread+0xa53/0xfc0 [ 697.817146][T15507] kthread+0x388/0x470 [ 697.821220][T15507] ret_from_fork+0x51e/0xb90 [ 697.825826][T15507] ret_from_fork_asm+0x1a/0x30 [ 697.830594][T15507] [ 697.832917][T15507] The buggy address belongs to the object at ffff88802967c000 [ 697.832917][T15507] which belongs to the cache kmalloc-8k of size 8192 [ 697.846997][T15507] The buggy address is located 1864 bytes inside of [ 697.846997][T15507] freed 8192-byte region [ffff88802967c000, ffff88802967e000) [ 697.860970][T15507] [ 697.863318][T15507] The buggy address belongs to the physical page: [ 697.869737][T15507] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29678 [ 697.878522][T15507] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 697.887025][T15507] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 697.894592][T15507] page_type: f5(slab) [ 697.898576][T15507] raw: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 697.907162][T15507] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 697.915754][T15507] head: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 697.924596][T15507] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 697.933268][T15507] head: 00fff00000000003 ffffea0000a59e01 00000000ffffffff 00000000ffffffff [ 697.942028][T15507] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 697.950697][T15507] page dumped because: kasan: bad access detected [ 697.957203][T15507] page_owner tracks the page as allocated [ 697.962918][T15507] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15491, tgid 15486 (syz.2.2384), ts 695781213927, free_ts 695626254000 [ 697.984279][T15507] post_alloc_hook+0x231/0x280 [ 697.989072][T15507] get_page_from_freelist+0x24dc/0x2580 [ 697.994625][T15507] __alloc_frozen_pages_noprof+0x18d/0x380 [ 698.000443][T15507] allocate_slab+0x77/0x660 [ 698.004963][T15507] refill_objects+0x331/0x3c0 [ 698.009700][T15507] __pcs_replace_empty_main+0x2e6/0x730 [ 698.015303][T15507] __kvmalloc_node_noprof+0x657/0x8a0 [ 698.020687][T15507] ovs_flow_tbl_init+0x3f6/0x7f0 [ 698.025656][T15507] ovs_dp_cmd_new+0x264/0xb30 [ 698.030343][T15507] genl_family_rcv_msg_doit+0x22a/0x330 [ 698.035914][T15507] genl_rcv_msg+0x61c/0x7a0 [ 698.040437][T15507] netlink_rcv_skb+0x232/0x4b0 [ 698.045237][T15507] genl_rcv+0x28/0x40 [ 698.049229][T15507] netlink_unicast+0x80f/0x9b0 [ 698.053997][T15507] netlink_sendmsg+0x813/0xb40 [ 698.058768][T15507] ____sys_sendmsg+0x972/0x9f0 [ 698.063535][T15507] page last free pid 15466 tgid 15466 stack trace: [ 698.070034][T15507] __free_frozen_pages+0xc2b/0xdb0 [ 698.075147][T15507] __slab_free+0x263/0x2b0 [ 698.079584][T15507] qlist_free_all+0x97/0x100 [ 698.084182][T15507] kasan_quarantine_reduce+0x148/0x160 [ 698.089645][T15507] __kasan_slab_alloc+0x22/0x80 [ 698.094534][T15507] __kmalloc_cache_noprof+0x2ba/0x660 [ 698.099914][T15507] snd_pcm_hw_param_near+0x7f/0x4d0 [ 698.105153][T15507] snd_pcm_oss_change_params_locked+0x1f86/0x3e00 [ 698.111577][T15507] snd_pcm_oss_sync+0x570/0xfc0 [ 698.116439][T15507] snd_pcm_oss_release+0xff/0x250 [ 698.121475][T15507] __fput+0x44f/0xa70 [ 698.125467][T15507] task_work_run+0x1d9/0x270 [ 698.130096][T15507] exit_to_user_mode_loop+0xed/0x480 [ 698.135438][T15507] do_syscall_64+0x32d/0xf80 [ 698.140065][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.145988][T15507] [ 698.148322][T15507] Memory state around the buggy address: [ 698.153963][T15507] ffff88802967c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 698.162050][T15507] ffff88802967c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 698.170114][T15507] >ffff88802967c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 698.178174][T15507] ^ [ 698.184594][T15507] ffff88802967c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 698.192698][T15507] ffff88802967c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 698.200761][T15507] ================================================================== [ 698.213567][ T5917] em28xx 4-1:0.132: Remote control support is not available for this card. [ 698.222416][ T5829] em28xx 4-1:0.132: Closing input extension [ 698.532552][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 698.652245][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 698.661114][ T24] usb 1-1: too many configurations: 22, using maximum allowed: 8 [ 698.678925][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 698.687840][ T24] usb 1-1: can't read configurations, error -61 [ 698.748600][T15507] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 698.755993][T15507] CPU: 0 UID: 0 PID: 15507 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 698.766597][T15507] Tainted: [L]=SOFTLOCKUP [ 698.770946][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 698.781042][T15507] Call Trace: [ 698.784329][T15507] [ 698.787277][T15507] vpanic+0x56c/0xa60 [ 698.791278][T15507] ? __pfx_vpanic+0x10/0x10 [ 698.795791][T15507] panic+0xc5/0xd0 [ 698.799539][T15507] ? __pfx_panic+0x10/0x10 [ 698.803972][T15507] ? preempt_schedule_thunk+0x16/0x30 [ 698.809399][T15507] ? preempt_schedule_thunk+0x16/0x30 [ 698.814786][T15507] ? v4l2_fh_open+0xac/0x420 [ 698.819385][T15507] check_panic_on_warn+0x89/0xb0 [ 698.824334][T15507] ? v4l2_fh_open+0xac/0x420 [ 698.828943][T15507] end_report+0x73/0x180 [ 698.833235][T15507] ? v4l2_fh_open+0xac/0x420 [ 698.837855][T15507] kasan_report+0x128/0x150 [ 698.842393][T15507] ? v4l2_fh_open+0xac/0x420 [ 698.847003][T15507] v4l2_fh_open+0xac/0x420 [ 698.851445][T15507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 698.857459][T15507] em28xx_v4l2_open+0x157/0x9a0 [ 698.862357][T15507] ? do_raw_spin_lock+0x12b/0x2f0 [ 698.867421][T15507] v4l2_open+0x1bf/0x3a0 [ 698.871722][T15507] chrdev_open+0x4cd/0x5e0 [ 698.876151][T15507] ? __pfx_chrdev_open+0x10/0x10 [ 698.881099][T15507] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 698.887477][T15507] ? __pfx_chrdev_open+0x10/0x10 [ 698.892423][T15507] do_dentry_open+0x785/0x14e0 [ 698.897204][T15507] vfs_open+0x3b/0x340 [ 698.901283][T15507] ? path_openat+0x2df0/0x3860 [ 698.906058][T15507] path_openat+0x2e08/0x3860 [ 698.910661][T15507] ? __pfx_stack_trace_save+0x10/0x10 [ 698.916036][T15507] ? stack_depot_save_flags+0x33/0x810 [ 698.921509][T15507] ? __pfx_path_openat+0x10/0x10 [ 698.926471][T15507] ? __x64_sys_openat+0x138/0x170 [ 698.931503][T15507] ? do_syscall_64+0x14d/0xf80 [ 698.936273][T15507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.942352][T15507] ? __lock_acquire+0x6b5/0x2cf0 [ 698.947314][T15507] do_file_open+0x23e/0x4a0 [ 698.951838][T15507] ? __pfx_do_file_open+0x10/0x10 [ 698.956906][T15507] ? _raw_spin_unlock+0x28/0x50 [ 698.961800][T15507] ? alloc_fd+0x64b/0x6c0 [ 698.966166][T15507] do_sys_openat2+0x113/0x200 [ 698.970890][T15507] ? __pfx_do_sys_openat2+0x10/0x10 [ 698.976128][T15507] ? exc_page_fault+0x6a/0xc0 [ 698.980832][T15507] ? do_user_addr_fault+0xc6f/0x1340 [ 698.986148][T15507] __x64_sys_openat+0x138/0x170 [ 698.991045][T15507] do_syscall_64+0x14d/0xf80 [ 698.995657][T15507] ? trace_irq_disable+0x3b/0x150 [ 699.000725][T15507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.006841][T15507] ? clear_bhb_loop+0x40/0x90 [ 699.011554][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.017476][T15507] RIP: 0033:0x7fb882ea7407 [ 699.021920][T15507] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 699.041556][T15507] RSP: 002b:00007ffddf5b3740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 699.049997][T15507] RAX: ffffffffffffffda RBX: 00007fb88355a880 RCX: 00007fb882ea7407 [ 699.057994][T15507] RDX: 0000000000000000 RSI: 00007ffddf5b4f1b RDI: ffffffffffffff9c [ 699.065989][T15507] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 699.073988][T15507] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 699.082010][T15507] R13: 00007ffddf5b3990 R14: 00007fb88365f000 R15: 000055d76e31d4d8 [ 699.090038][T15507] [ 699.093674][T15507] Kernel Offset: disabled [ 699.098035][T15507] Rebooting in 86400 seconds..