last executing test programs: 4m22.920774192s ago: executing program 0 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002800500060009e345637bb121d3a6507959eb83000000"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES16=0x0, @ANYRESOCT=r6], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv4_delrule={0x0, 0x21, 0x100, 0x70bd25, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x2, 0x4, 0x0, 0x0, 0x5, 0x19}, [@FRA_SRC={0x0, 0x2, @empty}, @FRA_DST={0x0, 0x1, @multicast1}]}, 0x64}}, 0x4884) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xfff}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x70}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x14) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) 4m19.61291699s ago: executing program 0 (id=1006): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x6122}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x6122}, 0x10) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) 4m18.873474713s ago: executing program 0 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') setns(r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0xb2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) 4m15.624594818s ago: executing program 0 (id=1012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000940000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120144297729042024040010000904430002317d550009050202d04620020200000905820200020000000000000000000000000000002000"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x3, 0x1, 0xe0e, 0x7, 0xf, 0x20000120000, 0x7f5d3dc9, 0x0, 0x8, 0x9, 0x2, 0x0, 0x101, 0x8, 0x2b48], 0xd5dd0000, 0x181204}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x4, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xb, 0x4, [@local, @private=0xa010102]}]}}}], 0x20}}], 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000a40)={0x20, 0x0, 0xcc, {0xcc, 0x7, "c4ab5bafbb277ce3d5c996ee1cf76306a30bef31b89d68252218805a85b30b3051414e8ddf7a3ad035d945ee761dc0ff67530e2ae055504f63bc3c9b09806991c7c19d126222d30b77a5563eca327855cd506248070eef37e374e037697c9926e92fbc62471113af0f21cc6977d3b45713834cbeec08fe2ae313e736fd73a5254ca0e1fd6faad26ade7847e8e13b62c6faba77d13b4c699348b52050a7e53aa6fd0b49b6edb295123500000000a37d5bd2231ea8f803d6fe97e37bbd3152b100c3531324d95f7dc2aaf0"}}, &(0x7f0000000200)={0x0, 0x3, 0x73, @string={0x73, 0x3, "e5452d6a0d4e53fcba4995ba3aafd9e0208b5237d79e0d9e8a5dc998a331dceebf9b03a199c186e996d79ebc2aab12dcd7cad43f38c59c171ee0a532812f4e20ee0107874fa0dd10bf774805a42b66d3ac4335cd61a9b24046f233252afb3bbee279c02382a1f0eba27432bd4528c97398"}}, &(0x7f00000002c0)={0x0, 0xf, 0x132, {0x5, 0xf, 0x132, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "10e4719d81dc4cd7d4e456c5d7aa545a"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x3, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x1, 0x4, 0xfffa, 0x1}, @generic={0x100, 0x10, 0x2, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x4}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x9, 0x8, "694604aa", "dd05cfb7"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x67, 0x18, 0x8, 0x7, 0x80, 0x14a, 0x6}}}, &(0x7f0000000940)={0x84, &(0x7f0000000540)={0x40, 0x10, 0x15, "8dcd9d8b9f4812de899339b3cf2145405e30e52436"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000140)=ANY=[@ANYBLOB="200004000000001004001fd21f8c8162b7dd7c52c543304e16e0eec0531a831bfa0c6daa810996aef8dccd208259f9570cc25b39bd968d16664cc5e8b24eed4fa7756a1a6c5c325d81a20d445a5ddece360188e0315d6b88e073f3fb6b9eff6c5858b880bca059234838b3836e0e8f7debe3a0bea960799015c7fdb7df81e445a2321bf7874a98ea222e6b06918e7d68463f59bf83a38fac58f333a6752a8c77793b525a8ae6303a395d3ac899a0faf4ea9b877bf410ef86da205de573b6"], &(0x7f0000000680)={0x40, 0x7, 0x2, 0xd}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0xb, 0x2, '$9'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="1528489c9cb2"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "0300"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x10}}) r9 = syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r9, 0x4038564f, &(0x7f0000000440)={{0x0, @addr=0xc9}, 0x8, 0x1, 0x3}) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x20, 0x14, 0x4, "f2010002"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000500)=0x400, 0x4) 4m13.73670173s ago: executing program 0 (id=1016): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x80000) (async) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendto$inet6(r2, &(0x7f0000000000)="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", 0x100, 0x24000014, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0xcf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) read$alg(r0, &(0x7f0000000200)=""/137, 0x89) (async) read$alg(r0, &(0x7f0000000200)=""/137, 0x89) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000000)=@unspec, 0xc) (async) connect$netlink(r6, &(0x7f0000000000)=@unspec, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) io_uring_enter(r7, 0x6aec, 0x4dc9, 0x6, &(0x7f0000000080)={[0x9]}, 0x8) 4m12.500522562s ago: executing program 0 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x10001, 0x9}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f757465"], 0x1ac}}, 0x0) (async) open_by_handle_at(r0, &(0x7f0000000080)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x2, 0x1, 0x80, 0x1}, 0x4, 0x5e2}}, 0x442e01) 4m12.175966044s ago: executing program 32 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x10001, 0x9}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f757465"], 0x1ac}}, 0x0) (async) open_by_handle_at(r0, &(0x7f0000000080)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x2, 0x1, 0x80, 0x1}, 0x4, 0x5e2}}, 0x442e01) 3m24.752802589s ago: executing program 4 (id=1163): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11032bbd7000fbdbdf25040000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), &(0x7f00000000c0)={0x0, 0xfb, 0x64, 0x3, 0x6, "c2f2cedfbaab41ffb39937944de0e129", "4cb97be475e0bd8e0e40360b8c17d7653ede4c07fdc702208d4638e4abc5b3b12d6e4b03208ccdf6379d0f3e5414f863ca062f988005b419324120ec95e5148dba7e423f2d020fa49522ea7c6c822b"}, 0x64, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m21.596963931s ago: executing program 4 (id=1169): syz_usb_connect(0x3, 0xd57, &(0x7f00000001c0)=ANY=[@ANYRES64], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3d, &(0x7f0000000080)=@string={0x3d, 0x3, "bf38d96733b1717616e310079eb181c418c5b6485fc7787a8325daf7c85845b5527165ef662b38c77b0717ab63678196cbfdc9cf753d047109e779"}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x86f075f740eff003}}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29a45139}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x461092ae}]}]}, @NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x37}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x40040}, 0x4008005) 3m18.528791764s ago: executing program 4 (id=1181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x130, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) socket(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$mouse(0x0, 0xe046, 0x202000) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x9, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x1, 0xf8, 0x4d, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendfile(0xffffffffffffffff, r4, &(0x7f00000000c0)=0xfffffffffffffffa, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x2cf, &(0x7f0000000280)=0x0) io_cancel(r6, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x6, 0x7, r5, 0x0, 0x0, 0xcf, 0x0, 0x1}, &(0x7f0000000f00)) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) 3m15.421122779s ago: executing program 4 (id=1188): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x4, 0x2, 0x8}]}]}, 0x20}}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r9, &(0x7f0000000100)='./file0\x00', 0x245) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 3m14.206801529s ago: executing program 4 (id=1192): mmap(&(0x7f0000406000/0x2000)=nil, 0x2000, 0xb635773f05ebbee8, 0x8010, 0xffffffffffffffff, 0xca340000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x5, 0x801) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0xa, 0x0, 0x1, r5}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000300)={0x28, 0x1, r8, 0x0, &(0x7f00004f1000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7aa, &(0x7f0000000000)={{@any, 0xffffffff}, @any, 0x7, 0x4, 0x40000, 0x7ffffffffffffffe, 0x7ffffffffffffffc, 0x0, 0x9}) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x100000000003, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = socket$kcm(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000080)={0xbc2, 0x5, 0x7, 0x3, 0x9, 0x0, 0xd, 0xf3}, &(0x7f00000000c0)={0x4, 0x1, 0x3, 0x541, 0x0, 0x8000, 0x5, 0xd55c}, &(0x7f0000000100)={0xc64a, 0x80, 0x0, 0x4, 0x35aa4f07, 0xa8, 0x4, 0x9}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f0000000180)={[0x7ff]}, 0x8}) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="1400000016000b63d2767228154c473c20bcff1c", 0x14}], 0x1}, 0x0) 3m13.748913029s ago: executing program 4 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcdcf}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x14) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[@ANYBLOB="020100020c0000002cbd70000000000005000500000000000a004e2000000008000000000000000000000000000000010100008000000000020013000100000028bd700002350000030006006c00000002"], 0x60}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000000101040000000000000000020000003800018014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async, rerun: 64) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000003c0)={0x5, 0x1, 0x1, 0x3}, 0x10) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x201, 0x8, 0x8, r9}, &(0x7f00000000c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @remote, 0x4}}, 0x88, 0x0, 0xf0000000, 0x4, 0x0, 0x7, 0xa}, &(0x7f0000000300)=0x9c) (async, rerun: 32) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpriority(0x1, 0x0, 0x1) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x30, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x8, {0x4, 0x0, 0x3, 0x4}}]}], {0x2, 0x0, 0x8}}}}}}, 0x0) 3m13.42463375s ago: executing program 33 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcdcf}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x14) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[@ANYBLOB="020100020c0000002cbd70000000000005000500000000000a004e2000000008000000000000000000000000000000010100008000000000020013000100000028bd700002350000030006006c00000002"], 0x60}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000000101040000000000000000020000003800018014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async, rerun: 64) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000003c0)={0x5, 0x1, 0x1, 0x3}, 0x10) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x201, 0x8, 0x8, r9}, &(0x7f00000000c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @remote, 0x4}}, 0x88, 0x0, 0xf0000000, 0x4, 0x0, 0x7, 0xa}, &(0x7f0000000300)=0x9c) (async, rerun: 32) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpriority(0x1, 0x0, 0x1) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x30, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x8, {0x4, 0x0, 0x3, 0x4}}]}], {0x2, 0x0, 0x8}}}}}}, 0x0) 7.968819691s ago: executing program 1 (id=1882): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x2020, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}}, 0x20}}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="d5", 0x1}], 0x1, 0x8, 0x0) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x2, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfe, 0x0, 0x3, 0x2}]}, 0x50}, 0x1, 0x7}, 0x0) 7.784541988s ago: executing program 1 (id=1884): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x4008000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r6, @ANYBLOB="7f2c62260e000000"], 0x20}}, 0x0) r8 = socket(0x2c, 0x803, 0x1000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100003000000", @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0xfffffffe, 0x1, 0x0, 'queue0\x00', 0x8}) write$sndseq(r11, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) 6.052913788s ago: executing program 1 (id=1889): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) (async) close(r1) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000140)=0x10, 0x4) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) (async) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="12000102030109028c00030104a0090904000000010100000a2401f7ff0702010209240303000303030b0904010000010200000904010101010200000924020182040910ca0c2402010904070683653215090501090004ffc80307250100040600090402000001020000090402010101020000082402010601020107240101c0010009058209080005084107250182010700"/158], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 5.612964365s ago: executing program 1 (id=1893): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r3, r4, 0x0, 0x80000003, 0x80000003, 0x0, 0x0, 0x5, 0xe, 0xc, 0x31e}) 5.492944481s ago: executing program 1 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYRES64=r2], 0x0) 5.258865909s ago: executing program 3 (id=1895): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000a1400fcffffffff000000020000000000000000000096"], 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000480)={0xb, 0x1}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007b01"]) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0xa577e000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 4.816606091s ago: executing program 3 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r5 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x4e23, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x81, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x4fe}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000740)={{0x3000, 0xeeef0000, 0x8, 0x4, 0x0, 0x5, 0x9, 0x4, 0x5, 0x5, 0x0, 0x8}, {0x100000, 0xeeef0000, 0xc, 0xf9, 0x4, 0x3, 0x4, 0x83, 0xe, 0x5, 0xfc}, {0x2000, 0x40ab6ab45e0d146f, 0xa, 0x7, 0x9, 0x6, 0x4, 0xde, 0x9, 0x1, 0xb, 0xc}, {0x1002, 0x1, 0xc, 0xf1, 0x0, 0x8, 0x0, 0x8, 0x9b, 0x8, 0x7, 0x7}, {0xeeee0000, 0xffff1000, 0x9, 0x4, 0x81, 0x2, 0x7, 0x8, 0x9, 0x0, 0x1, 0xf5}, {0xeeee0000, 0xeeef0000, 0x3, 0x9, 0x6, 0x6, 0x6, 0x9, 0x7, 0xb, 0x9, 0x9}, {0x5000, 0x6eee8000, 0xe, 0x57, 0x5, 0x5, 0x0, 0x4, 0x6, 0x8, 0xc, 0x10}, {0x1, 0xffff1000, 0x3, 0x9, 0x80, 0x0, 0x7f, 0x1, 0x9, 0xc4, 0x0, 0x6}, {0xe6e50000, 0x4ba}, {0x3000, 0x4}, 0x20050000, 0x0, 0x1000, 0x402012, 0x3, 0x3000, 0x5000, [0x5, 0x1, 0x2, 0xffffffff]}) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0xffffffff, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000", @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) 4.770492152s ago: executing program 5 (id=1897): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013420ce7e5906c08e90f01db9be9010203010902120001000000000904"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000006c0)=0x2cd, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x64e4, 0x30, 0x200, 0x9, 0x25dfdbfe, {}, [{0x3cc, 0x1, [@m_mpls={0xfc, 0x17, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x8e}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7fff, 0x8, 0x1, 0x10000}, 0x6}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80000000, 0x401, 0x0, 0x9, 0x9885}, 0x1}}]}, {0x8f, 0x6, "00150e539613134030d2ea4c1e5fea7c7cef84777960b28d550fa4cb59cce0eea0f859b80d1ed578e04b2940b8a09858ddaedd5a8cc58856e8f9ad609b9df0aee15299a0518ba1f939377d6ca303554fac6bb4ad64112ae94433fb5cdae28cad04afc243198d27cf83bca391725293615c1da12569e704017dbce6b99e9a427d9746004fc6873dad7e0070"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x158, 0x1d, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x5, 0x3, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x9, 0x6, 0x7ff, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xb401, 0x2, 0x200, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x18, 0xff, 0x8, 0x630, 0x8000}}]}, {0xcb, 0x6, "12f6e71bbf4f8c90ae752e195981b896833cc751aba070fc2218ff866e3c98e4e492e0ecb6221d2511c59c38076ebdca93fb4612b22cc6f1b9fd92663644b61770ecfec89dfeb1f7c363ae06b9771252d3a05887df9cec1e8aa6d30bc15a5e204e74d56776f9e341663363c8ab6a68368d2683524fe2642dd8c842ef5127cf964c9de3ab54b7f42cbf512f4e93c0d7c6751d95e3ccf5db34202e84338831c101e389b687c8305e7d6d3cda13988ee45ba14f1a99a70b434744d7cca21feca23e4a145a5c2d8ea3"}, {0xc, 0x7, {0x1, 0x2d6c5578a81d03e3}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x174, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xbb, 0x0, 0xffffffffffffffff, 0x1000, 0x100}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x7, 0xe046, 0x8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff}}]}, {0xfa, 0x6, "a7344a5099839bd1bd4ff556bbfb3000836b25bb275bf35a334b680df9a9dfbae4ae6c848a96c0cd436c0e0d8934e7df61439ab743f2468eddcd93300ed48b13f82efa7868b87723a35d02d66fb369bda38424940d1baaa04a6335c2bdf22eff05ce0e00ec7d57030aa27210766776e752445170a598e4d33adc17d29ac850e1c3148255d9909555cacbaa5ee9d7f77738217b9def5c91a08452a4ea6fc32008a26c76b197498e5b1351f64022d6992b8dbcd2ac8ab038917d37498f35d6caf34987f3700c3ac48d03a87a5463c6439e4363621fcc0f2477e0669467a3b5b96cded41759502b3f7e2e7e82fe343991ab741c651749f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x6084, 0x1, [@m_bpf={0x128, 0x19, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xf3, 0x6, "f16c11755d3e872926048822267d7633b07d5ff4927ba6a14d4854e0e504af2d13f2941b19020f8b82e5febc2325e389d0349c6866fa407e734cb4cb6c4fe476804ee8323bd8b5c046543172085d144a213b09387d2ff7c83366fab4de47b75d34aeb8f0b7750814c8defc8cab42728e7f40687ff80b2b36a5391336ff8bbfddb9afadb0bef66f15307a00f4348b3630f6591c60bc2ec726d620dab0d19bf843fb729d15b867f14f1d79b937e9a4cd045e33cf432d5fca78b16a71e68652342358a0616e76b47a137feed58cf9c8261c1fc10426bc070aa49e5181054138710e0e45725a17a70750e6b28995fe3c5b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xfc, 0x5, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0x9d, 0x6, "8303b2633ffc3d45f4ac65d5c17c707686a500f92bc3b3d2cb5563a831586fec2bb826e0d2fc5fab30310364fd8d13b5cc81086fd5f4f2babfe388bdae9c3c4e7220d3ec106a9b021e823aab8c0654139a60b338ac4a99ebda0610f4f3ef49fc471ae9231820c19c453c80ae6d3289f06bfd030f5c5649723cc6c4171306bf43d627d1e416aecf6151aadb94b0b16d3f9c22d69a113b170265"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x2fb8, 0x11, 0x0, 0x0, {{0xa}, {0x2ea4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x4, 0x1, 0x10000004, 0xfffffff7, 0x4}, 0x6, 0x1, [{0x0, 0x7, 0x9, 0x7, 0x4, 0x81}, {0x0, 0x7, 0x3, 0xbacc, 0x80000000, 0x3}, {0xe0a5, 0xcb, 0xf8, 0x8000, 0x0, 0x6}, {0x8, 0x6c, 0x28, 0x5, 0x4e, 0x1}, {0x5c, 0x0, 0x0, 0xffff7fff, 0x1, 0x6}, {0x0, 0x9, 0xffffff70, 0x4, 0x0, 0x80}, {0x10, 0x9, 0x1, 0x6, 0x2, 0xfffffffd}]}, [{0xa5e6, 0x6, 0x100, 0x2, 0x20, 0x8}, {0x800, 0x0, 0x5, 0x6, 0x5, 0x1}, {0xa84, 0x6, 0xe, 0x3, 0xfffff23d, 0x7}, {0xc, 0x101, 0x7, 0x0, 0x0, 0xfff}, {0xad4, 0xffff, 0x5, 0x6ca4, 0x9, 0x1}, {0x214910cf, 0x9, 0x3, 0x7, 0x0, 0x4d4}, {0x4000, 0xffff, 0xdb, 0xb, 0x3}, {0x9, 0x2, 0x8001, 0xd, 0x80, 0x1e4e9529}, {0x3, 0x7, 0x7fff, 0x2, 0x5, 0x800}, {0x1, 0xf, 0x541, 0x7, 0x3, 0x2}, {0x1, 0x92, 0x9, 0x5, 0x8, 0x88}, {0x100, 0x9, 0x8001, 0x101, 0x3, 0x1}, {0x6, 0x0, 0x4, 0x10, 0x80000001, 0x8}, {0x6, 0x6, 0x8, 0x2, 0x800, 0xffffffff}, {0x9, 0x7, 0x2570, 0x10, 0xd}, {0x100, 0x8, 0x66, 0x6, 0x7, 0x1}, {0xfffff19e, 0x9efd, 0xe7, 0x5, 0x6, 0xe}, {0x9, 0x32, 0x7, 0x7, 0x10, 0x100}, {0x140000, 0x6, 0x9, 0x53, 0xf7, 0xb09}, {0x40, 0x5, 0x5, 0x10001, 0x0, 0x3}, {0x2, 0x2, 0x343, 0x9, 0xc, 0x9}, {0x4, 0x7, 0xf, 0x0, 0x1, 0x1}, {0xffffff07, 0x1ff, 0x576, 0xb967, 0x40, 0x7}, {0x1, 0x3, 0x3, 0x6, 0xa, 0x3727}, {0x2, 0xfff, 0x7, 0x9, 0xc81, 0x9}, {0xff, 0x0, 0x4fa0, 0x4, 0x6, 0x6}, {0x9, 0x4, 0x5, 0x5, 0xa113, 0x101}, {0x80000000, 0x6, 0x4, 0x2, 0x1fdb, 0xfffffffe}, {0xa, 0x4, 0x1, 0x1000, 0x3, 0x6}, {0x80000000, 0x4, 0x5, 0x4, 0x5, 0x7}, {0x8, 0x4, 0x2, 0x9, 0xe, 0x2}, {0xd190, 0xfe, 0x3, 0x6bda, 0xffffffff, 0x9}, {0x0, 0x9, 0x1, 0x5, 0xef6a, 0x8}, {0x6, 0x100, 0x1000, 0x1, 0x0, 0x6}, {0x0, 0x4, 0x8001, 0x7fffffff, 0x800, 0x22}, {0xcf, 0x2, 0x6f, 0x800, 0x93f, 0x9b1}, {0x3, 0xb5a, 0x6, 0x0, 0x5, 0x7}, {0x3, 0x800, 0x6, 0x10000, 0x3, 0x7}, {0x6, 0x5, 0x3ad, 0x9, 0x80000000, 0x2a1}, {0x5, 0x9, 0x7, 0x80000001, 0x3, 0x9}, {0xa8, 0xb, 0x8711, 0x0, 0x7fffffff, 0x9}, {0x5, 0x0, 0x1, 0x7fffffff, 0x8, 0x2}, {0xe, 0xa26, 0x8f, 0x5159, 0xdae, 0x6}, {0x1, 0x8, 0x200, 0xb, 0x7, 0x3}, {0xf, 0x401, 0x105, 0xffff, 0x4, 0x4}, {0x200, 0xb5e, 0xffffffde, 0x5, 0xfffffff9, 0x9}, {0xa3, 0x5, 0x8001, 0x4a, 0x9, 0x5}, {0x6, 0xc6, 0x400, 0xa, 0x9, 0x3}, {0x80000000, 0xe46b, 0x2, 0x52, 0x3, 0x4}, {0x22, 0xc0, 0x4, 0x1, 0xfffffffc, 0xf}, {0x9057, 0x1, 0xd, 0x10000, 0x2, 0x2}, {0x1, 0x8, 0x4, 0x2, 0x9, 0x9}, {0x6, 0xec12, 0x40, 0x40, 0x2, 0xd24}, {0x80, 0x8, 0x8, 0x8, 0x1382, 0x2}, {0x10000, 0x6, 0xcaf1, 0x5, 0x8, 0x9}, {0x7fff, 0x5, 0x401, 0x5, 0x1000, 0x6}, {0xef5, 0x0, 0x6e0, 0x101, 0x0, 0x9}, {0x95, 0x80000001, 0x158d, 0x0, 0x368661b3}, {0x2, 0x6, 0x0, 0x80000000, 0x9, 0x1}, {0xa9, 0x4, 0xf4, 0x5, 0x1, 0x2}, {0x280, 0x3, 0x1, 0x0, 0x2, 0x265}, {0x1, 0x401, 0x3, 0x0, 0x8000, 0x1}, {0x40, 0x3ff, 0x6, 0x6, 0x8, 0x7fff}, {0xfffffffe, 0x0, 0x5, 0x5, 0x6, 0x1}, {0x4, 0x81, 0xda96, 0x8214aff, 0x2, 0xfffff58e}, {0x200, 0x4, 0x4, 0x5f7, 0x1, 0x2}, {0x9, 0xd, 0x9, 0x1, 0x200, 0xfffffffc}, {0x7ff, 0xfffffc00, 0xda, 0x8, 0xc, 0x8}, {0xfffffffb, 0x9329, 0x5, 0x7ff, 0xf7, 0x3}, {0x2, 0x9ed, 0x9, 0x7, 0x0, 0x5}, {0x26, 0x9f, 0x6041, 0x7, 0x9a4, 0x7}, {0x5, 0x1, 0xfbf, 0x256, 0x3, 0x401}, {0x1, 0x1, 0x3, 0x200, 0x5, 0xfff}, {0x3, 0x48563db8, 0x0, 0x8, 0x8ab, 0xfff}, {0x2, 0x2, 0xe5, 0x5, 0x1, 0x9}, {0x6, 0x5, 0xe, 0x1, 0xfffffff9, 0x3}, {0x866c, 0x2, 0x2c, 0x0, 0x7fffffff, 0x5}, {0x7ff, 0xffffffb6, 0xfffffffb, 0xc000000, 0x74d, 0x2f896e6}, {0xf73, 0x8, 0xf4, 0xffffff81, 0x8, 0x11a}, {0xa9, 0x4, 0x3, 0x9, 0x5, 0x81}, {0x9, 0x0, 0x2, 0x2812, 0x7, 0xfffffff7}, {0x800, 0x2, 0x7, 0x401, 0x14, 0x80000000}, {0x56, 0x7, 0x5, 0x4, 0x8, 0x3}, {0x5, 0x1, 0x5c, 0x60, 0x323, 0x5}, {0xf10d, 0x0, 0x6, 0x2, 0x50a8, 0x5}, {0x1, 0x7, 0x800, 0x100, 0x756, 0x598f}, {0x1, 0xbc90, 0x7, 0x3, 0x8001, 0x7ff}, {0xf6f, 0x7, 0x80000001, 0x5d, 0x5, 0xfffffffa}, {0x2, 0x2, 0x200, 0x9, 0x8, 0x5}, {0x3, 0x75d, 0x68, 0x9, 0xffff23f4, 0xfff}, {0x0, 0x7, 0x1, 0x7, 0x0, 0x7}, {0xeb98, 0x7d4, 0x7, 0x4, 0x10, 0xdf5e}, {0x2, 0xf7, 0x7, 0x0, 0x4, 0x4}, {0xafe5, 0x80000000, 0x800000, 0x6b3, 0x4, 0x4}, {0x40, 0x6, 0x200, 0x2, 0x3c, 0xffff}, {0x8, 0x80000000, 0x400, 0x0, 0x3, 0x1000}, {0x5, 0x2b, 0xf851, 0x9, 0xff}, {0x600000, 0x4, 0x6, 0x7, 0x3}, {0x0, 0x3, 0x23, 0x7db6, 0x7, 0x4}, {0x3, 0x8, 0x6, 0x10001, 0x1, 0x5}, {0x3, 0xd2, 0x6, 0x5, 0x8}, {0x8, 0xffffffff, 0x3ff, 0x2, 0xc, 0x3}, {0xd, 0x2, 0xc5, 0x1, 0x4, 0xfff}, {0x3, 0x0, 0x8000, 0x4, 0x2}, {0x7, 0x8, 0x2, 0x7fffffff, 0x6, 0x2}, {0x1, 0x80000000, 0x6, 0x8, 0xfffffff7, 0x6}, {0x6bc9437c, 0x0, 0xd1, 0x3, 0x8000}, {0x7fffffff, 0x10001, 0x0, 0xa0000000, 0x8, 0xf2}, {0x0, 0x4e8, 0x3ff, 0x5, 0x1, 0x7}, {0x6, 0x10002000, 0x3, 0xffff8001, 0xff, 0x9}, {0x100, 0x8000, 0x9, 0x1, 0x3, 0x81}, {0x9, 0x5, 0x5, 0x80, 0x3, 0x3ff}, {0x9a2b00, 0x6, 0x7, 0x3, 0x6, 0x2}, {0x9, 0x5, 0x7ff, 0x101, 0x58a9, 0xfffffeff}, {0x2, 0x0, 0x5, 0x8, 0x100, 0x1}, {0x6619, 0x1000, 0x5, 0x4, 0xe, 0x10001}, {0x6, 0x4, 0x7, 0x8, 0x8, 0x8}, {0xe, 0x5, 0x4, 0x7, 0xe, 0x2f9}, {0x80000000, 0x81, 0x10001, 0x800, 0x4, 0x43aa6938}, {0xb, 0x9, 0x9, 0x8, 0x6, 0xfffffffe}, {0x3, 0x9, 0x8, 0xff, 0x0, 0x6}, {0x2, 0x3f8000, 0x1, 0xf, 0x7ff, 0x400}, {0x3, 0x8c, 0x9, 0x9, 0x40, 0xfff}, {0x101, 0x5, 0x1, 0x8, 0x3, 0x1}, {0x6, 0x7, 0x1, 0x7, 0x8, 0x100}, {0x6, 0x8, 0x63a, 0xfffffff4, 0x433, 0x7}, {0x4, 0x5, 0x0, 0x3, 0x2c5b44b0, 0x3}, {0x1, 0x2, 0x43, 0x2, 0x508, 0x4}], [{}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x4}, {}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x5}, {}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x4}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3}, {}, {0x4}, {0x2}, {0x2}, {}, {0x3}, {0x5}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x2}, {0x5}, {0x3}, {}, {0x3}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x7}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x7, 0xffff8001, 0x2, 0x1, 0x8}, 0x0, 0x2, [{0x401, 0xffffd1c5, 0x1, 0x10001, 0x9, 0x47}, {0xb6000, 0x8001, 0x8, 0x0, 0x3, 0x9}, {0x401, 0x0, 0x1ff, 0x1000, 0x7, 0x9}, {0x1ff, 0x4, 0x9, 0x171, 0x29a7, 0x1}, {0x8, 0x800, 0x9, 0xc799, 0x3, 0x7fff}, {0x7, 0x2a4, 0x5, 0x7, 0x3, 0xeb}]}, [{0x0, 0x7fffffff, 0x5, 0x0, 0x80000, 0x4}, {0x7, 0x0, 0x2, 0x5, 0x8}, {0x93d, 0x1, 0x0, 0x7, 0x8}, {0x5, 0xfffff7b7, 0x7ff, 0xfffffffe, 0x8, 0xecc}, {0x0, 0xffffffff, 0x3, 0xfd, 0x5, 0x1}, {0x4, 0x6, 0x10, 0x2, 0xe7d, 0x10}, {0x7, 0x81, 0x80000001, 0x7, 0x8, 0x8871}, {0xa, 0x6, 0xbe45, 0x5, 0x1ff, 0x8}, {0x8, 0x2, 0x2, 0x8, 0x6, 0x5}, {0xfff, 0x258, 0x9a6, 0xfffffffb, 0x0, 0x34}, {0x5, 0x6, 0x80, 0xdb51, 0x80000000, 0x2b}, {0x7f, 0x9, 0x7fff, 0x80000001, 0x5, 0x5}, {0x7, 0x10000, 0x40, 0x4, 0xa79, 0x7}, {0x4, 0x9, 0x1, 0x1, 0x1, 0xc}, {0x2, 0x7fffffff, 0x4, 0x0, 0x4, 0x101}, {0x7, 0x9, 0x3, 0x5a0232aa, 0x6, 0xc}, {0x18, 0x8, 0x400, 0xe9a3, 0x1, 0x2}, {0x1, 0x6, 0xa, 0x0, 0x6, 0xfffffff9}, {0x100, 0x8, 0x8, 0x7, 0x5}, {0x8, 0x5e5, 0xc0, 0x4, 0x2d6, 0x4}, {0xffffffc0, 0x6, 0x81, 0x2, 0x9, 0xc}, {0x80000001, 0x5, 0x3, 0x9, 0x9, 0x40}, {0xa, 0x8, 0x9329, 0x80, 0x100, 0xffffff01}, {0xc, 0x1, 0x9, 0x7, 0x0, 0xffff}, {0xfffff837, 0x6, 0x9, 0x101, 0x38, 0x2}, {0x10000, 0x6, 0x10001, 0x9, 0x76, 0x2}, {0x5, 0x22, 0x7, 0x6, 0x0, 0x9}, {0x3, 0x8, 0x5, 0x7, 0x8001, 0x9}, {0x200, 0x6, 0x0, 0x9, 0x2, 0x7}, {0x99, 0x6, 0x5, 0x2, 0xdb, 0x7fffffff}, {0xffffff7f, 0x7, 0xf2a, 0x0, 0x0, 0x3}, {0x8, 0xfffffff9, 0x200, 0x8, 0x8, 0x6}, {0xb, 0x1, 0xff, 0xe96, 0xcf, 0x2}, {0xa99, 0x6, 0x2, 0xffffffff, 0xd, 0xc132}, {0x5, 0x59e, 0x7, 0x1, 0x1ff, 0x4}, {0x2, 0xffff, 0x9, 0x81, 0x4, 0x7}, {0x49af, 0x3, 0x5, 0x8, 0x4, 0x8}, {0x4, 0xc, 0x2, 0x7, 0xfffff001, 0x1000}, {0xfffffffd, 0x2, 0x4, 0x3, 0x2e6, 0x80000000}, {0x7ff, 0x5, 0x6, 0x0, 0xffff, 0x1de}, {0x80, 0x8, 0x2, 0x9, 0xc8, 0x7ff}, {0x4, 0xfffffff7, 0x8, 0x6, 0x1, 0xfffff248}, {0x6, 0x1, 0x3, 0x0, 0x2, 0xfffffe9a}, {0x7, 0x8, 0x3, 0x4, 0x1, 0x1}, {0x10, 0xffffffff, 0x4, 0x2, 0xf6, 0xfffff000}, {0x22e22f04, 0x379d431c, 0x9, 0x5, 0x1, 0xfffffffb}, {0xffff4f79, 0x2, 0x4, 0x100, 0x3, 0x3}, {0x4, 0xa, 0x4, 0xfffffff8, 0x5, 0x9}, {0x6, 0x4b, 0x1000, 0x5, 0x816f, 0x9}, {0xc15, 0xb, 0x2, 0x6, 0x5, 0x9}, {0xddb7, 0x9, 0x7, 0x0, 0x9, 0x10}, {0x3, 0x80, 0x6, 0x6, 0xf, 0x7}, {0x1, 0x7, 0x0, 0x8, 0x5, 0x4}, {0xff, 0x7fff, 0x8, 0x0, 0x5, 0x3}, {0x0, 0xb7, 0x2, 0x42f, 0x7, 0x8}, {0x8, 0x0, 0x6, 0xff, 0x2b, 0xfffffff4}, {0x9dad, 0x0, 0x1, 0xffffff81, 0x40, 0x8}, {0x0, 0x7, 0x4, 0x1, 0x1, 0x3}, {0x8, 0x2, 0xfffffffe, 0x9, 0x3}, {0x1d, 0xffff, 0x10, 0x4, 0x6}, {0x25, 0x3, 0xd115, 0x4bc2, 0x6, 0x2a}, {0xfffffffa, 0x1, 0x2, 0xfff, 0xff, 0x8}, {0x7, 0x2, 0x4, 0x2, 0xa, 0x2}, {0x73, 0x3, 0xfffffff7, 0x2, 0x6, 0xfffffffb}, {0xffffffff, 0xff, 0x6, 0xbbc4, 0x8}, {0x5, 0xa, 0x4, 0x9faa, 0x3, 0xfff}, {0x1, 0x80, 0x3ff, 0xffffffff, 0x7d, 0x6}, {0x2, 0xb1f5, 0x5, 0x3, 0x10000, 0x3}, {0x8, 0x7, 0x7, 0x5, 0xb}, {0x2, 0x2, 0x56c, 0x8, 0x7, 0x3}, {0x3ff, 0x0, 0x80000000, 0x0, 0x6, 0x3}, {0xffffffff, 0x6, 0x0, 0x3, 0xd, 0x6}, {0x10, 0x4, 0x3, 0x41, 0x10001, 0x100}, {0x167, 0x3, 0x7, 0x5, 0x80000000, 0x6}, {0x656, 0x8, 0x8, 0x5, 0x3, 0xb41}, {0x6eb, 0xffffffff, 0x98, 0x1, 0x4}, {0x6, 0x0, 0x1, 0xffffff67, 0x6, 0x3}, {0x1, 0x6, 0x6, 0x726, 0xffffff2b, 0x6}, {0x2189a53a, 0x7, 0x7fffffff, 0x3, 0xe}, {0x6180, 0x5, 0x80, 0x2f, 0x520f3d34, 0x401}, {0x324f, 0x8e8, 0x3, 0x6c0b, 0xae63, 0x4}, {0x3, 0x8, 0x5, 0xdd6, 0x80}, {0xd7a, 0x2, 0xfb, 0x6, 0x2, 0x3}, {0xa0, 0x159f, 0x7, 0x6, 0x3114, 0x3}, {0x800, 0x9, 0x5, 0x8, 0x4e, 0xfb}, {0x1, 0x4, 0xfffffffa, 0x9, 0x8, 0x393b}, {0x0, 0x6, 0x2, 0x9, 0x1, 0xb2b2}, {0x74, 0x8, 0x8001, 0x58be, 0x2, 0x2}, {0x3, 0xfe0, 0x1, 0x200, 0x8ec, 0x7d}, {0x0, 0x8, 0x100, 0x727, 0x6, 0xe1e8}, {0xe, 0x37e, 0x6, 0x6, 0x6, 0x1}, {0x8000, 0x1, 0xc5d, 0xbc20, 0x7, 0x6}, {0x2, 0x7f, 0x1, 0x539acee9, 0x80, 0x5}, {0x401, 0x3, 0x7fffffff, 0x2, 0xffff, 0x8}, {0x94, 0x377, 0x280000, 0x3, 0x4, 0xfffffffa}, {0x0, 0x2, 0x9, 0x8, 0xd, 0x6}, {0x5, 0x9, 0x7fff, 0xfffffffb, 0xe47, 0xfff}, {0x6000000, 0x7, 0xc466, 0x4, 0x7, 0x100}, {0x6, 0x1, 0xc, 0x5, 0x90000, 0x49df}, {0x8, 0x8, 0xfff, 0xa6, 0x3, 0x5}, {0x800, 0x100, 0x10000, 0x9, 0xffffffff, 0xa}, {0x1ff, 0x8000, 0x9, 0xb, 0x20a558b4, 0xfffffff0}, {0xea, 0x6, 0x8, 0x4, 0x9, 0x9}, {0x3, 0x100, 0x4, 0x10001, 0xdc, 0x5}, {0x45, 0x4, 0x505c, 0x8, 0x8000, 0x5}, {0x1, 0x9b, 0x10, 0x3, 0x7, 0x8}, {0x4, 0x822a, 0xfffffff8, 0x7fff, 0x233, 0x4}, {0x2, 0xb, 0x0, 0x8, 0x2, 0x7fffffff}, {0x5, 0x81, 0x3, 0x4, 0x1, 0x8}, {0x6, 0x101, 0x5f, 0x4ccc9ddd, 0x0, 0x9}, {0x7b, 0x9, 0x0, 0xfffffffb, 0x4, 0x2}, {0x7, 0x1, 0xcd, 0x7, 0x3, 0x4f}, {0x90e, 0x7ea1, 0x0, 0x3, 0x400, 0x101}, {0x5, 0x4, 0x1, 0x3ff, 0x5, 0x80000000}, {0x7, 0x4, 0x7, 0x2, 0x2}, {0x2, 0x0, 0x1, 0x9, 0x80000001, 0x5}, {0x9, 0x1000, 0x5, 0x2, 0xffff}, {0x10001, 0x101, 0xd4, 0x81, 0x0, 0x1}, {0x4, 0x1, 0x6, 0x783c0137, 0x4}, {0x7, 0xed0e, 0x8, 0x6, 0x40000, 0x8}, {0x0, 0xfffffffe, 0x2, 0x7f, 0x90, 0x9}, {0x5, 0xb172, 0x2, 0x8, 0x73, 0x6}, {0xf8d, 0x10000, 0x9, 0x4, 0x3, 0xffffc224}, {0x1, 0x40, 0xfe2, 0x5, 0xe495, 0x100}, {0x8, 0x5, 0x10001, 0x400, 0x5, 0x8}, {0xd, 0x7fff, 0x80, 0x7fffffff, 0xfff, 0x81}, {0x6, 0x5, 0x0, 0x2800000, 0x1ff}, {0x101, 0x954, 0x7, 0x2, 0x6c3, 0x10}], [{0x0, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x1}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x4}, {0x3, 0x1}, {}, {}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x7}, {0x5}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x6, 0x1}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x188, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xc63f0fa83bf806ba}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x3, 0x81, 0x2, 0x400}, 0x3, 0x6, [{0xf, 0x3, 0xfffffffe, 0x4, 0x10, 0x3}, {0x3, 0x7f, 0x7, 0x7, 0x2, 0x1}, {0x9, 0xc0, 0x2, 0x4, 0x7f, 0x9}, {0x0, 0xfffff800, 0x7c, 0x6, 0x8, 0x9}]}, [{0x642, 0x8, 0x7337, 0xb, 0xd1b, 0x1}, {0x0, 0x8, 0xe29f, 0x5f, 0x8, 0x6}, {0x4, 0x6, 0x8, 0x1, 0x9, 0x4}, {0x7c, 0x6, 0x1, 0x8, 0x1, 0x8}, {0x9, 0x1, 0xffffffff, 0x3, 0x1, 0x800}, {0x9, 0x7, 0x99a, 0xc, 0x8, 0x6}, {0x1, 0xffff565d, 0x6185, 0xe8, 0x401, 0x783}, {0x0, 0x6, 0x1fe, 0x80000000, 0xffffff7f, 0x6ea4}, {0x4, 0xf0d9, 0x4d, 0x6, 0x80000001, 0x76}, {0x200, 0xbc, 0x4, 0x1, 0x6, 0x6}, {0x34b, 0x10000, 0x800, 0xc0c9, 0x1, 0xeb}, {0x0, 0x6, 0x5, 0x100, 0xffffffff, 0x1b}, {0xffff7d42, 0x1, 0x6, 0x7f, 0x1, 0x4}, {0x4, 0x6, 0x200, 0x976a, 0x6, 0x7}, {0xffff7adc, 0x9, 0x1ccc, 0x0, 0xf18, 0x2}, {0x7, 0xffffffff, 0xffff8000, 0x10, 0x4, 0xd}, {0x8001, 0xfffffffe, 0x7, 0x6, 0x3, 0x1}, {0xf, 0x0, 0x8000, 0x400, 0x401, 0x2}, {0x0, 0x6, 0x3, 0x80, 0xfffffff7, 0x4}, {0x0, 0x7, 0x5, 0x4, 0xfffffff7, 0x5}, {0x7, 0x9, 0x6, 0x1ff, 0x5, 0x204f}, {0x80000000, 0x401, 0x401, 0x4, 0x7, 0x7f}, {0x7, 0xe1b, 0x8, 0x4, 0x6, 0x80000000}, {0x4, 0x400, 0xf, 0x4, 0x401, 0x5c7a}, {0x3, 0x0, 0x7, 0x1ff, 0x3, 0x6}, {0x8, 0x3def, 0x80000001, 0x36, 0x3d6a, 0x6}, {0x6000000, 0x5cb35c4e, 0xbe0b, 0x100, 0x6, 0x80}, {0x6, 0x9, 0x6, 0xfff, 0x0, 0xf}, {0x9, 0x4, 0xffff, 0x3, 0x7, 0xfffffffa}, {0x3ff, 0x2, 0x4, 0x7, 0x5, 0x6}, {0x3, 0x1, 0x6, 0xba, 0xeab, 0x7}, {0x3, 0xb63d, 0xcd, 0x3, 0x2, 0x4}, {0x101, 0x7, 0x0, 0xfffffffd, 0x8, 0x80}, {0x1, 0x0, 0x4, 0x1, 0x4, 0x8}, {0x8, 0xe914, 0x5, 0x200, 0x3, 0x2}, {0x5, 0x5, 0xff, 0x9, 0x7, 0x5}, {0x1c00, 0x5, 0x0, 0x3, 0xffffffff, 0x10000}, {0xfff, 0x6, 0xfd4, 0x0, 0x528, 0x223ef120}, {0x9, 0x1000, 0x7, 0x5, 0x1, 0x10001}, {0x3, 0x1c1, 0xad3, 0xfffffffc, 0x5, 0x66a}, {0x7, 0x5, 0x7fff, 0x2, 0x2, 0x8}, {0x8, 0x5, 0x2, 0x4, 0xdc3, 0x7}, {0x5, 0x5, 0x8, 0x469, 0x44b9, 0x5}, {0x423, 0x0, 0xfff, 0x2, 0x80000000, 0x7fff}, {0x9, 0x0, 0x43c, 0x33c0, 0x8, 0x7}, {0x5, 0x200, 0x9, 0x0, 0x7, 0x4}, {0x80000000, 0xfff, 0x400, 0x1, 0x5, 0x7}, {0x3, 0x9, 0xfffffffb, 0xfffffffa, 0xffff8000, 0x2}, {0x5, 0x8000, 0x40000, 0x8, 0x3, 0x10000}, {0xc97, 0xfff, 0x10000, 0xfffffff9, 0xb, 0x1}, {0x1, 0x4, 0xeb8c, 0x2, 0xca7}, {0x0, 0x800, 0x1000, 0xa0cf, 0x400, 0x81}, {0x6, 0x9, 0x0, 0x35, 0xa8, 0xb336}, {0x9, 0x3, 0x31e4, 0x3, 0x0, 0x5}, {0x7, 0x3, 0x0, 0xfffffff7, 0x10000, 0xc}, {0x7fff, 0x2, 0x6, 0x6, 0xa565078, 0x9}, {0x40, 0x9, 0x5d37, 0x4, 0xef33}, {0x0, 0x4, 0xfffffffc, 0xd6f, 0x8, 0x4000000}, {0x8001, 0x6, 0x7, 0x3, 0x9, 0xd}, {0x67, 0x2, 0x3, 0x3, 0x6357, 0x3}, {0x9, 0x5, 0x4, 0x741f, 0x40, 0x4}, {0x795133af, 0x5, 0x2, 0x3, 0x5, 0x7}, {0x3, 0xd0, 0x6, 0x7fffffff, 0x5e, 0xe9}, {0xffff, 0x37a, 0x6, 0xff, 0x4, 0x4000}, {0x9, 0x0, 0x6, 0xd, 0x7, 0xffffffff}, {0x8, 0x6, 0x454adc72, 0x0, 0x33, 0x80000001}, {0xffff6b09, 0xb3, 0x1, 0xfffffff9, 0xffffff46, 0x3ff}, {0x7, 0x9, 0x61, 0x40, 0xe, 0x6d}, {0x4, 0x5, 0x0, 0x7fff, 0x3}, {0x6, 0x2, 0xe1a2, 0x6, 0x3, 0x9}, {0x3, 0x9, 0x0, 0x8357, 0xda, 0x80000001}, {0xd5, 0xa, 0x3, 0x5, 0xdb}, {0xd6, 0x8, 0x8, 0x1, 0x5, 0x7}, {0x2, 0x5, 0x234, 0x80000001, 0x5, 0x2}, {0x5, 0x5, 0x4, 0x0, 0x9, 0x8}, {0x8, 0x0, 0x7fff, 0xffffffff, 0x2, 0x9}, {0x3, 0x962, 0x2, 0x7ff, 0x5afc, 0x80000000}, {0x0, 0xb9, 0x2, 0xb, 0xa, 0x9}, {0xffff, 0x9, 0xfffffffc, 0xd6, 0x6, 0x5}, {0x4, 0x0, 0x45, 0x3, 0x8, 0x5}, {0x6, 0x9, 0x6, 0x4, 0x0, 0x7f}, {0xd9, 0x2, 0x6, 0x7, 0xafa9, 0xa}, {0x1c0, 0x8, 0x59b, 0x9, 0x0, 0x2}, {0x5, 0xc, 0x7ff, 0x3, 0xffffffff, 0x7}, {0x1, 0x0, 0x0, 0x1ff, 0x0, 0x9}, {0x4, 0x80000001, 0x3, 0xf4d0, 0x80000001, 0x4d}, {0x2, 0x3ff, 0x8, 0x8, 0x5, 0x451}, {0x2, 0x10079dba, 0x5, 0x3, 0x7fff, 0x43}, {0x7, 0x10001, 0xabe, 0x7, 0x1ff, 0x2}, {0xffffffff, 0x10000, 0x7fff, 0x5, 0x7, 0x81}, {0x9, 0x5, 0x0, 0x1fe, 0x5, 0x3ff}, {0x6, 0x1000, 0x2, 0x1, 0x7, 0xfff}, {0xffff0000, 0x4, 0x0, 0x7fffffff, 0x61ddbae9, 0x3}, {0x40, 0x7, 0x1, 0x3, 0x563}, {0xee5, 0x9, 0x5, 0x5, 0xffffffff, 0x3}, {0x2, 0x7, 0x3, 0x9, 0x2, 0x7fffffff}, {0x0, 0xa9, 0x51, 0x849, 0x3, 0xf}, {0x8, 0xe3, 0x4, 0x3ff, 0x2, 0x401}, {0x5, 0xb7, 0x3, 0x9, 0x8000, 0x81}, {0x2, 0x0, 0x8, 0x9, 0x400, 0x8}, {0x1ff, 0x2000, 0x5ce, 0x4, 0x6, 0xfffff362}, {0xfffffff8, 0x5, 0x6, 0x283d, 0x10, 0x5}, {0x1, 0x8, 0x50c, 0x8, 0x8, 0xfffffffa}, {0x4e64, 0x4, 0x6, 0xfffffffb, 0x100, 0x1}, {0x80, 0x7, 0x101, 0xe2, 0x7, 0x2}, {0x7, 0x3, 0x5, 0x3, 0x4b8a, 0x6}, {0x5, 0x3, 0x4, 0x32, 0x57d, 0x3}, {0x400, 0x80000000, 0x4, 0xfffffe01, 0x7, 0x2}, {0x8, 0xfffffff8, 0x1463, 0x7, 0x8000}, {0x47c4, 0x6f, 0x305, 0xa, 0x5, 0x7}, {0x7, 0x80000, 0xffffffff, 0xa, 0xd966, 0x37}, {0x1, 0xb0, 0x4, 0xfe60, 0x7, 0x8001}, {0x7, 0x7164, 0x1d, 0x25c, 0x1, 0x9}, {0x7, 0x1, 0x9, 0x7f, 0x2, 0x80000001}, {0x7, 0x6, 0x2, 0x3, 0xc, 0xb}, {0x80000000, 0xfffffff0, 0x2, 0x1, 0xfffffff7, 0x9}, {0x7200, 0x6f15, 0x7, 0x9e, 0x6ff7, 0x9}, {0x6, 0x6, 0x6, 0xffff, 0x0, 0x9}, {0x5, 0x5, 0x9, 0x1, 0xfff, 0x8}, {0x5, 0x9, 0x1ff, 0x2f, 0x3ff, 0x101}, {0x9f5a, 0x7, 0xf2, 0x9, 0xfffffffd, 0x80}, {0xffffffff, 0x8, 0x3, 0xd, 0x9d, 0x2}, {0x0, 0x8, 0x59b9, 0x3, 0x8, 0x3}, {0xe, 0x95f6, 0x2, 0x4, 0x3, 0x4}, {0x5, 0x5, 0x7ff, 0x2, 0x8, 0x81}, {0x1, 0x5, 0x7a151eb6, 0x1, 0x5f, 0xffffffff}, {0x2, 0x0, 0x6, 0x200000, 0x0, 0x4}, {0x9, 0x5, 0x2, 0x9, 0x4, 0xca}], [{0x3}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x40afd123d2392b5a, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0xb5736fb54f21fbf9}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {}, {0x1}, {0x5}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x1}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xe4, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x85f2bb06620eaa73}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1a8212558dafb3bb}]}]}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xec, 0x6, "e935cbd717abe0b2986035fd40dffcd7336abea86b13190c7c54fa6946d3cd57e62be165aa1b8ca8360ed17bd754f25ca10cb32cbb0b4781dee492d63b0b6f0a902b4c85fb875f73152760383ea82033d7928aaf06c0b877546323b09e2d729736e221338ef1ee889ac8bb8da5e81ac7cca253a21c59cc08a8597bd3ea5d0ad00cc9ea844488bed22f037e85c2477c7f85d4e26a01f71f8693cbd2aa19e50b832db41e3d477b2f7529fb0558beb0484aa352767ffef0a313ce7e4b8aaa685e6936b2c5ed09938d2b0895454a5c8b8edc7fd5182578f6bc385c7a52bc122adc0f1fc3f70015854457"}, {0xc, 0x7, {0x1, 0x44409e83ffd9ddda}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x2d48, 0x4, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xf742, 0xfffffffe, 0x5, 0x5, 0x8001}, 0x3, 0xc, [{0x0, 0x1, 0x8, 0x8, 0xd, 0x2}, {0x5, 0x9, 0x100, 0x5, 0x6, 0x400}, {0x0, 0x3c7d0484, 0x401, 0x0, 0xfffffffa}]}, [{0x1000, 0xe79, 0x6, 0x3, 0x8, 0x2}, {0x0, 0xbec8, 0x10000, 0x7, 0x6, 0x4a}, {0x0, 0xc, 0x81, 0x7b, 0x1, 0x5}, {0x2000, 0x8, 0x100, 0x789, 0x4, 0x6}, {0x1, 0x1, 0xffffffff, 0x5, 0x5, 0xb3f1}, {0xff, 0xffff7d4c, 0xd, 0x7, 0x2, 0x9}, {0x10, 0x5, 0x2, 0x2, 0x8001, 0xff}, {0x1c1, 0xc, 0x5, 0x4, 0xf764, 0x10001}, {0x9, 0x9, 0x0, 0x5, 0x7, 0x10}, {0x10, 0x6, 0x7, 0x7fffffff, 0x5, 0x1}, {0x80, 0x48, 0x200, 0x8, 0x1, 0x8}, {0xc30c761, 0xf4, 0x4, 0x9, 0x7, 0x8001}, {0xffff, 0x2eee, 0x1, 0x8000, 0xfffffff7, 0x7}, {0x7fff, 0x6, 0x9, 0x8000, 0x7, 0xf}, {0xa396, 0x6, 0x6, 0x8000, 0x10, 0x10}, {0x9, 0x6, 0x3, 0x3, 0x7, 0x1ce1}, {0x6, 0x7fff, 0x7aa, 0x1, 0x0, 0xe}, {0x400, 0x3ace, 0xffff, 0x0, 0x4, 0x8}, {0x3, 0xfb, 0x6, 0x0, 0x2, 0x4}, {0x3, 0xfffffffc, 0x7, 0x1, 0xb1, 0x3}, {0xffff7fff, 0x2, 0xffffffff, 0x9, 0x8}, {0x0, 0x2, 0x5, 0x7, 0x5, 0x271}, {0x101, 0x800, 0x4, 0x3, 0x8, 0x1}, {0xffff9790, 0x1, 0x80000000, 0x9, 0xb6cc, 0x8}, {0x6, 0x7, 0xf, 0x8001, 0x6, 0x6}, {0x3, 0x2, 0x8, 0x4, 0x4, 0x401}, {0x3, 0x80000001, 0x7, 0x0, 0x9b68, 0x4}, {0xf5d, 0x3, 0x7f, 0x4, 0x8000}, {0x2ee, 0x0, 0x10001, 0x80000000, 0x93f3, 0xd}, {0x80000001, 0xfffffffd, 0xe, 0x3, 0x7, 0x80}, {0x7, 0xe0000000, 0x6, 0xffffffff, 0x9, 0x200}, {0x3, 0x4, 0x70a, 0x80d, 0xb12, 0xffffffff}, {0x0, 0x0, 0x3, 0x3, 0x1, 0x7}, {0x80000001, 0x5, 0x1, 0x7fffffff, 0x7, 0x7}, {0x81, 0xf, 0x8, 0x5, 0xe0c6, 0xffff6deb}, {0x4, 0x40, 0x4, 0xfffffffb, 0x1, 0x5}, {0xfff, 0x2, 0x8, 0x7ff, 0x1, 0x8}, {0x9, 0x4, 0x1, 0x9, 0xc}, {0x7fffffff, 0x6, 0x2, 0xfffffffe, 0x1, 0xf}, {0x80000001, 0x100, 0x27, 0x6da, 0x5, 0x8}, {0x80, 0xfff, 0x3, 0x5e, 0x4, 0x7}, {0x6, 0x2, 0x4, 0x6, 0xe11f, 0xfe7}, {0x7fff, 0x8, 0x3, 0x5, 0xfffffffe, 0x4}, {0x7, 0x1, 0x1, 0x3, 0x1, 0x6}, {0x80, 0x12c9, 0xd8, 0x240a, 0xedc, 0x8}, {0xf, 0x1, 0x7fffffff, 0x2, 0x101, 0x2}, {0x4, 0x9, 0xef0e, 0xfffffffe, 0x9, 0x6}, {0x39d, 0x6, 0xa686, 0x7fff, 0x24a, 0x7fffffff}, {0x1, 0x5, 0x7, 0x3, 0x7, 0x7}, {0x80000001, 0x80000000, 0x3, 0x81, 0x8b1, 0x442f}, {0x80000001, 0x1, 0x6, 0x3, 0x6, 0x2}, {0xfffffbff, 0x5, 0x2, 0x5ec0, 0x1, 0x9}, {0x80000000, 0x69, 0x84c, 0x6, 0xffffffff, 0x5}, {0x0, 0x9, 0x3, 0x2, 0x7, 0x82}, {0x1, 0x101, 0xa4, 0xfffffa07, 0x4, 0x5}, {0x8, 0x7, 0xeff862e2, 0x5, 0x3, 0x2}, {0x4, 0x67cf, 0x3, 0x4f92, 0x24000000, 0x7}, {0x6, 0x72, 0x2, 0x8001, 0xfffffffb, 0x4}, {0x9, 0x8000, 0x6, 0x8, 0x8, 0x7}, {0x8, 0x7, 0x7, 0x3, 0x200, 0x8}, {0xff, 0x1, 0xcd28, 0x6, 0x800, 0xa85}, {0x1, 0xfffffffa, 0x7fff, 0x2, 0x1, 0x4000000}, {0x8, 0x10000, 0x59, 0x1, 0x80000000, 0xffac}, {0xfff00, 0x682, 0x3, 0x9, 0xe2b5, 0x2}, {0x5, 0x3, 0x2, 0x6, 0xcf, 0x3}, {0x7, 0x101, 0xffffff7b, 0x3e, 0x6, 0x9}, {0xffffff80, 0x2, 0x4, 0xb11, 0x5, 0xffff}, {0x8, 0x5, 0xfffffff7, 0x2, 0xffff8cb7, 0x1}, {0x5, 0x101, 0x7, 0x8, 0x80, 0xfffffffb}, {0x5, 0xbc5, 0x100, 0x9, 0xebfc, 0x1}, {0x5, 0x5, 0xef15f1d, 0x3, 0xa2, 0x2}, {0xe, 0x80, 0x1, 0x100, 0x200, 0x83}, {0x2, 0x101, 0xfffffffb, 0x2, 0x9, 0x800}, {0x8, 0x5, 0x8001, 0x101, 0x8, 0x92}, {0x81, 0x2, 0x101, 0x8, 0xa2, 0x5}, {0x6, 0x200, 0x0, 0x2, 0x800, 0x1}, {0x7, 0x1, 0x0, 0x0, 0x80000001, 0x4}, {0x5, 0xc, 0x2, 0x800, 0x3, 0xfffffff8}, {0x5, 0x7, 0x2, 0x2, 0x4, 0x5}, {0x1000, 0x80000000, 0x4, 0x100, 0x30c1, 0x48000000}, {0x100, 0x2a2, 0x9d, 0x9b, 0x80000000, 0x10001}, {0x7f5, 0x3, 0x7, 0x9, 0x0, 0xffffff20}, {0x226f, 0x40, 0x4, 0xffffffff, 0xacb2, 0x1}, {0x8000, 0x13bb, 0x2, 0xffff8000, 0xffffffff, 0x4}, {0x7, 0xfffffff8, 0x80000000, 0xc, 0x4, 0x3}, {0xf2c, 0x8, 0x1, 0x10001, 0x3, 0x9}, {0x80, 0x7, 0x80, 0x6, 0x2, 0x44}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x4}, {0x6, 0x4, 0x30, 0x7, 0x101, 0x80000001}, {0x1, 0x2, 0x3, 0xc, 0x5, 0x6}, {0x7, 0xd2, 0xf5, 0x9, 0xd, 0x4}, {0x7, 0x600000, 0x8001, 0x5, 0xa2, 0x7}, {0x7, 0x4, 0x7, 0x401, 0x6, 0x5}, {0x3, 0x1, 0x9, 0x1, 0x10000, 0xc76}, {0x10000, 0x13, 0xffffff81, 0x8000, 0x8, 0x8}, {0x5, 0x8001, 0x0, 0x6, 0x1, 0x400}, {0x4, 0x100, 0x6, 0x6, 0x5, 0xfffffffa}, {0x2, 0x1, 0x1, 0x17e1, 0x1000, 0x1a13}, {0x4, 0x5, 0xc7a, 0x1, 0x7ff, 0x67f}, {0x1, 0x1, 0x101, 0xfffffffb, 0x5, 0x8}, {0x0, 0x22c4, 0x7fff, 0xf, 0x3, 0x8000}, {0x4, 0x7fff, 0x7, 0xe26, 0xfc63, 0x2}, {0xb2, 0xfffffffb, 0xa, 0x7fff, 0x6, 0x40}, {0x1d, 0x3ff, 0x131, 0x3, 0xfffffff7}, {0xa824, 0x8000, 0x80000001, 0x8, 0x6, 0x8}, {0x2, 0xffffffff, 0x2, 0x2f, 0x9, 0x7}, {0x1, 0x6, 0x0, 0x7fff, 0xc, 0x1}, {0x8, 0x1000, 0x1, 0xffffffff, 0x8001, 0xffff}, {0x81, 0x0, 0xfffffffe, 0x1a4, 0x200, 0x80000001}, {0x1, 0x42, 0x0, 0x0, 0x400, 0x5}, {0x3, 0x1, 0x1, 0xd4c5ad6, 0xfffffffc, 0x7}, {0x182, 0x1c000, 0xf81, 0xffffffff, 0x41, 0x380000}, {0xc41, 0x0, 0x2, 0x2, 0x2}, {0x5, 0x0, 0x2a2b, 0x9, 0xffffffff, 0xe46}, {0xfff, 0x4, 0x2, 0x100, 0xb, 0x5}, {0x8001, 0x6, 0x100, 0x3c, 0x3, 0x8001}, {0x2, 0x401, 0x40, 0x5, 0xbb4d, 0x3}, {0xffffffff, 0x6, 0x7, 0x7ff, 0x8, 0x6}, {0xffffffde, 0x7fffffff, 0xf7eb, 0x7fffffff, 0x182b, 0x9}, {0xe, 0x80000001, 0xa1a, 0x2, 0x2, 0xd59}, {0xc, 0x9, 0x3, 0x80000001, 0xfffeffff, 0x8001}, {0x0, 0x2, 0x5, 0x60, 0x5, 0xb80}, {0x3, 0x5, 0x7fffffff, 0x10000, 0x3, 0x5}, {0xf29f, 0xb, 0x6, 0x2, 0x2, 0x6}, {0x2, 0x2, 0x9, 0x7f, 0x1ff, 0x8001}, {0x1, 0x4, 0x4, 0x4, 0x4, 0x7}, {0x14, 0xff22, 0x4, 0xfffffff7, 0x10001, 0xfffffffe}, {0x800, 0x2, 0x7f, 0x4, 0xb34c, 0x5}], [{0x5}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {}, {}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x2}, {0x1}, {0x4, 0x3bcc2a3d3fae8e7f}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x7, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4}, {0x3}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5}, {0x5}, {0x5}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x7}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x76a1bd204465b8ac}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0xffffffc0, 0x5, 0x5, 0x7, 0x3}, 0x51, 0x9, [{0x6, 0x3, 0x9, 0x9, 0x40, 0x4}, {0x73, 0x10001, 0x2, 0x0, 0xffffff80, 0x7f}, {0x897, 0x4a, 0xffffff53, 0x7, 0x5, 0x8}, {0x7, 0x4, 0x6, 0x4, 0x7, 0x3ff}, {0x4, 0x3, 0x4, 0x0, 0x7, 0x1}, {0x3, 0x5, 0x8, 0x3b40, 0x1, 0x58af}]}, [{0x7, 0x7, 0x1, 0x9, 0x8001, 0xa}, {0x401, 0x4, 0x52ca, 0x101, 0x5, 0x9ff}, {0x1, 0x8, 0x5, 0xfffff05f, 0x8, 0x8}, {0x600000, 0x9, 0x8, 0x0, 0xfffff15f, 0x800}, {0x5, 0x7, 0x40a89860, 0x3, 0x1}, {0x800, 0x3, 0x4, 0x1ff, 0xde, 0x98a}, {0x6, 0xfffffffc, 0xa9e, 0x9, 0x2}, {0x200, 0x4, 0x4, 0x7dcc, 0x0, 0x400000}, {0x936, 0x0, 0x9, 0x3, 0x6, 0xfcde}, {0xa, 0x32, 0xffff, 0x9, 0x2, 0x80000001}, {0x3, 0x40, 0xd, 0x400, 0xd9, 0x7f}, {0x8, 0xf437, 0x8, 0x0, 0x1, 0x2}, {0x3, 0x2, 0x10001, 0x5, 0x3}, {0x9, 0x7, 0x3, 0x9, 0x5, 0x3e}, {0xb, 0xff, 0xfffffffd, 0x7, 0xffffffdf, 0x1}, {0x5, 0x606c29c6, 0x7, 0x40, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x7, 0x9, 0x7}, {0x8, 0x4, 0x39ac, 0x2, 0x10, 0x2}, {0x2d2, 0x0, 0x7fffffff, 0x4, 0x1, 0x5}, {0x3, 0x2, 0xe, 0x5, 0x8, 0xf3f5}, {0x26, 0x0, 0x400, 0xfffffffd, 0x800}, {0x0, 0x4, 0x1, 0x6, 0xa9, 0x34}, {0x6, 0x9, 0x7, 0x7fff, 0x7, 0xd}, {0x1000, 0x170, 0x3, 0xc, 0x101, 0x6}, {0x5, 0x5, 0x3, 0x10000, 0xecb, 0x1}, {0x7, 0x7, 0x10, 0x15, 0xa56, 0x1000}, {0x8, 0x1ac, 0x9, 0x5, 0x7, 0xffff}, {0x10001, 0x8, 0x4, 0xde2, 0xa80, 0x4}, {0x10150000, 0xa, 0x8, 0x1, 0x100, 0x1ff}, {0x1, 0x6, 0xfffffff9, 0x800, 0xffff, 0x8000}, {0xdb09, 0x5, 0x1, 0x18000000, 0x9, 0x626c}, {0x4, 0x7, 0x7fffffff, 0x4, 0x4}, {0x0, 0x0, 0xb8, 0x2f, 0x8d, 0xa9}, {0x8, 0x5, 0xfffffff8, 0x0, 0x80}, {0x80000000, 0x80, 0x6, 0x4, 0x6, 0xf}, {0x1f, 0x6, 0xfffffff9, 0x8, 0x25, 0x400}, {0x9, 0x7, 0x7fffffff, 0x100, 0x0, 0x101}, {0x101, 0x1, 0x7, 0xe0000000, 0x2, 0x8}, {0x0, 0xffffffff, 0x4, 0x1, 0x7fff, 0x9}, {0x9, 0x8, 0x1ff, 0xfffffff1, 0x7fffffff}, {0x101, 0x1, 0x7, 0xdb0, 0xff, 0x80}, {0x9, 0x8, 0x7408, 0x1, 0xd, 0x8}, {0xafa, 0x6, 0xffffff00, 0xdb2, 0xfe5c, 0xb6}, {0x4, 0x100, 0x8, 0x0, 0x5}, {0x2, 0x2, 0xfffffff9, 0x4, 0x9, 0x10000}, {0x5, 0x0, 0xb, 0x8, 0x80}, {0x8, 0x3e, 0x3, 0x2, 0x3c6e8fed, 0x7}, {0xe, 0x0, 0x6, 0x2, 0x3, 0x80000000}, {0x3, 0x2, 0xfffffc01, 0x6, 0x2, 0xb228}, {0xe1f6, 0x1c0, 0x99c, 0x4, 0x5, 0x5}, {0x80000001, 0x8, 0x0, 0x2, 0x8, 0x6}, {0x0, 0xfffffffa, 0x8, 0x88, 0x0, 0x8}, {0x4, 0x8, 0x553c, 0xe, 0x8000, 0x4}, {0x6, 0x8000000, 0xe22, 0x0, 0x28c4, 0x3}, {0xe, 0x2, 0x8, 0x8, 0x8}, {0x3, 0x1000, 0xb67, 0x0, 0x2, 0x400}, {0x1000, 0x101, 0x7f, 0x8, 0xd, 0x1}, {0xf, 0x3, 0x2, 0x4, 0x6, 0x8000}, {0x79a9, 0xf5, 0x4, 0x7, 0xca3, 0x4}, {0x1000, 0x7, 0x2, 0xfffff9f1, 0x10000, 0x8}, {0xce, 0x9638, 0x7ff, 0x7, 0xffffffff, 0x1}, {0x80000001, 0xffffffff, 0xffffb210, 0x9, 0x6, 0x265}, {0x9, 0x1, 0xffffffff, 0xa, 0x5}, {0x5, 0x401, 0x2, 0xa, 0x0, 0x7}, {0xfffffffa, 0x849b, 0x3, 0x32ebc576, 0x6, 0x8}, {0x3, 0xfffffff8, 0x4, 0xffff8909, 0x101, 0x7fffffff}, {0x838, 0x8, 0x101, 0x10001, 0x5, 0x2}, {0x10, 0x7, 0x7fffffff, 0x400, 0x5, 0x5}, {0x7ff, 0x8, 0xd, 0x9, 0xf, 0x1000}, {0x10000, 0x6a, 0x5b, 0x9, 0x0, 0xa13}, {0xc11b, 0x10000, 0x7, 0xffff8000, 0x5, 0xfffffffa}, {0x6, 0x1, 0x1, 0x200, 0x9, 0xfffffc01}, {0x7, 0x0, 0x2, 0x7, 0xfffffffd, 0x5}, {0x78, 0x9, 0x9, 0x10, 0x1, 0x10001}, {0x5, 0x9, 0x0, 0x2, 0x101, 0x1}, {0xf99, 0x0, 0xfff, 0x80, 0x9, 0x4}, {0x7, 0x6, 0x6, 0x1, 0x3, 0xfffffffd}, {0x8, 0x0, 0x8, 0xf8e3, 0x80000001, 0x2}, {0x1a7f, 0x0, 0x3, 0x97e3, 0xffff, 0x5}, {0x1ae0000, 0x8, 0x7, 0xfffffffe, 0xa258, 0x2}, {0x32, 0x9, 0x2, 0x9, 0x6, 0x7}, {0xf, 0x8, 0x80000001, 0x6, 0x2, 0x3}, {0x10000, 0x6, 0xf56, 0x1, 0x1, 0x9}, {0x8, 0x827, 0xffff098a, 0x7, 0x94, 0x5}, {0x4, 0x9, 0x7fff, 0x10, 0x9, 0xfffffff9}, {0x9, 0x0, 0x1, 0x2, 0x0, 0x9}, {0x9, 0x6, 0x10e, 0x6, 0x9e28, 0x3}, {0x1, 0x4, 0xc4, 0x1, 0x8001, 0x2f40}, {0x79a, 0x401, 0x8, 0xc, 0x1, 0x8}, {0x2, 0x5, 0x800, 0x7, 0x7, 0xf87}, {0x1, 0x7, 0x1, 0x3, 0x1, 0x400}, {0xfffffffe, 0x1e9, 0x6, 0x4, 0x0, 0x3}, {0xffffffff, 0xb, 0x10, 0xfffffffa, 0x1, 0x6}, {0x4, 0xb7, 0x8, 0x66, 0x2, 0x8}, {0x0, 0x9, 0x1, 0x6, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x9, 0x3, 0x7}, {0x7, 0x1, 0x2, 0xffffffff, 0x483ffae5, 0x5}, {0xcc82, 0x9c85, 0x0, 0x0, 0x2, 0x10001}, {0xed57, 0x3, 0x9, 0x7, 0x8, 0x3}, {0x2800000, 0x30000000, 0x0, 0x5, 0x1, 0x1741ce19}, {0x2, 0x9, 0x7ff, 0x3, 0x6, 0x6}, {0xbd66, 0x10000, 0x3, 0x7, 0x6, 0x2}, {0x0, 0x1, 0x7f, 0x6, 0x8e, 0x2}, {0x7fffffff, 0x8, 0x0, 0x10000, 0x6, 0x1}, {0x672, 0x401, 0x3, 0x0, 0x7710, 0x10001}, {0x3b, 0x5, 0xfffffff7, 0x2, 0x800, 0x8}, {0x8001, 0x6c2a, 0xd, 0x1, 0xfff, 0x1}, {0xf3, 0x0, 0x2, 0x2, 0x1ff, 0x8}, {0xffffffff, 0x6b42, 0x6, 0x0, 0x2, 0x1}, {0x1000, 0x80000, 0x5, 0x9, 0x7ff, 0x4}, {0x7, 0x3, 0x8, 0x0, 0x3, 0x1}, {0xfffffffb, 0x48000000, 0x1, 0x7, 0x6, 0x1000}, {0xfffff180, 0x4, 0xeb7, 0x9, 0x80000000, 0x3}, {0x5, 0x0, 0x100, 0xf, 0xb, 0x83}, {0x83, 0x8a, 0x2, 0x0, 0x0, 0x1}, {0x5, 0x35d5, 0x7, 0x6, 0x0, 0x4}, {0x400, 0x2e7, 0x6, 0x7, 0x5, 0x5}, {0x200, 0xff800000, 0x3, 0x80000001, 0x1ff, 0x7}, {0x7, 0x4, 0x78, 0x3, 0x4, 0xce0b}, {0x8, 0x0, 0x7, 0x7fffffff, 0x6, 0x5}, {0x8, 0x9, 0x3, 0x0, 0x3, 0x81}, {0x9f14, 0x9, 0xffff, 0xc, 0x4, 0x80000000}, {0x3, 0x3ff, 0x10, 0x2, 0x6, 0x7fff}, {0x46f, 0x6, 0x4, 0x9, 0x5, 0x5f4}, {0x7, 0x6, 0x1, 0x5, 0x7}, {0x54, 0x4, 0x1000, 0x7, 0x4, 0x8000}, {0x1000, 0x7, 0xfffffffe, 0x8, 0x9, 0x7ff}, {0xa26c, 0xbffc, 0x2, 0x14, 0x46, 0x4}], [{0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x3}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xf220e3904a7b1283}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1}, {0x5, 0x1}, {0xd5ee99f7888cb39d, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x2}, {0x4}, {0x2}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0xd51d356c1835016b}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x3}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x1, 0xfa4c34d9584e2648}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x5}, {0x2, 0x1}]}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x15c, 0x1e, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x6, 0xfffffffd}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xffffe8b4, 0xffffffffeffffff1, 0x2f2, 0x9}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x545, 0x4414, 0x2, 0x6}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x3, 0x3}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xec, 0x1, 0x391, 0x8000}, 0x38}}]}, {0xa4, 0x6, "a293ea51b9407e404095b041b77d136370ac7d5da58d6fa182c9d102a9616b60cf05472f1e0ef42f402bd83d8259b29bb99e1298c8fc0b5bef793789976b9d3b9b230d437f9a057764512ae5613ad9bb144df9498fdab0a6a422610d6e3893151400088769635e3a53e7088a9812b0d35e53af804b82db3da02c0471828593c3bbc7b202588fa5907eb36fa01199d069304f1a7640d1ad8cedef4c7b5649091e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x80, 0x1, [@m_ct={0x7c, 0xb, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_LABELS={0x14, 0x7, "379e2ecdd721c9c2874b027e5c026df4"}, @TCA_CT_ZONE={0x6, 0x4, 0xff6a}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x8, 0xc599f0fc964b1c3a, 0x600000}}]}, {0x18, 0x6, "d1680e748678f5fb6d9f9fbf4eefab7049b0d0ce"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64e4}, 0x1, 0x0, 0x0, 0xc000}, 0x20000040) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.868939665s ago: executing program 3 (id=1901): r0 = io_uring_setup(0x369f, &(0x7f0000000340)={0x0, 0x86f1, 0x40}) (async) r1 = socket(0x1e, 0x4, 0x0) (async, rerun: 32) r2 = socket(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x1000000}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) close(r0) (rerun: 64) 3.760847507s ago: executing program 5 (id=1902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_clone(0x9cfdaa7c58b8bd70, &(0x7f0000000400)="1bcdffeda9e9c0e64ab53003301941bbeb88eb563314aafa43300466c4903a572cdc7339b50ff0960981448126008227f4da625c7bde48c2be65e090f4127c87a3284c7652e1af88ef78dac0d949668e09b31a5571c08f1d27b8b1b1eef3bd78485bdde818b5a764070f44ebbfa229db11871f45788aefef8c5b7ebdc8e6ebaeedf5d91f2c0aad7f3d396a4e238d", 0x8e, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000004c0)="9f99a1775f6c74226cc7a6463c75887260ba0c761c96f0746bc373fa14ea48b03769ba99d27a43cd794806b914f8eb9dd996e43c88024e5fb55ecf9d39f420cef43e591258266e6bc5f442389d0cd76ac9f980017ad20717f90615fd65bfb302ee4a34147881912fb823241012c4b6ebefa029ee54543d8e76a8482957424eb1cf8859ccb778ed4ea7fbd7694b5c6be16af9b285f1f20fec22b73d3414166e2221f6c8300cfff9bc4512518a161a14722393a261d8b5838fbff41fa1b4549b79f70548078999") ptrace$peek(0x1, r1, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xb9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @empty, 0x1}, 0x1c, 0x0}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000029000000040000006c00000000000000180000000000000029000000040000002b0b"], 0x30}}], 0x2, 0x80080) syz_io_uring_setup(0x7660, &(0x7f00000007c0)={0x0, 0x766b, 0x0, 0x1, 0x175}, &(0x7f0000000080), &(0x7f00000001c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ce) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x0) socket(0x2a, 0x80001, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) 3.760372994s ago: executing program 3 (id=1903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x7}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x210800, 0x0) 3.665160031s ago: executing program 2 (id=1904): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_pressure(r2, &(0x7f00000002c0)='io.pressure\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000200)=""/56, 0x38, 0x100000000) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x9, 0x2, {0xa, @vbi={0x0, 0x0, 0x4, 0x32314752, [0xffff, 0x802], [0x9], 0x108}}, 0xbd}) (async, rerun: 64) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e004b05000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000f507000a009e"], 0x28}}, 0x9) 3.55412365s ago: executing program 3 (id=1905): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x1000, 0x1, 0x5, 0xe8, 0x0, [{0x8, 0x2, 0x3c, '\x00', 0x8}, {0x0, 0x1, 0x3, '\x00', 0x7f}, {0xf9, 0x9, 0xf, '\x00', 0xbd}, {0x1, 0x4, 0x1, '\x00', 0xc}, {0x61, 0x10, 0x6}, {0x1, 0x9, 0x6, '\x00', 0x27}, {0x2, 0xd1, 0x7}, {0x58, 0x0, 0x0, '\x00', 0xba}, {0xf7, 0x5, 0x5, '\x00', 0x6}, {0x4, 0x9, 0x80, '\x00', 0xb2}, {0x2, 0x6, 0x8, '\x00', 0x4}, {0xfe, 0xcb, 0x0, '\x00', 0xf7}, {0x9, 0x6, 0xb0, '\x00', 0x5}, {0x81, 0x4, 0x4, '\x00', 0x6}, {0xb2, 0x9, 0x7f, '\x00', 0x3}, {0x8, 0x7, 0x8}, {0x1c, 0x80, 0x4, '\x00', 0x1}, {0x3, 0x2, 0x2}, {0x1, 0x8, 0x1, '\x00', 0x1}, {0x3, 0x2, 0x32, '\x00', 0x8}, {0x8, 0x2b, 0x6}, {0xb, 0x7, 0xe}, {0x9, 0x81, 0x98, '\x00', 0x3}, {0x4, 0x7f, 0x9, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x200}, {r1, 0x10}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x22020600) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r7) recvfrom(r8, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0xffff, @loopback}}) 3.412847144s ago: executing program 2 (id=1906): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/66) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x6, 0x8, 0x0, 0x700, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, @sadb_sa={0x2, 0x1, 0x2, 0xfe, 0x0, 0x3, 0x2, 0x40000000}]}, 0x40}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, 0xa}) close_range(r0, 0xffffffffffffffff, 0x0) 2.406869826s ago: executing program 3 (id=1907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000000004000000000000000000000ffff7f00000100000400000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000ed2f1947f8acf2d3988725e2f896c7573f514173d924519642766750b7ab814f64f543b260d1ce51a86686f790e247369732042ecb9cbbd9692a9ac461c557fa5823635d46bd1d38778afb174dea8d40357e4374722f964f750ebf06fa"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ce0000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000feb4008747fff3465442903bd86bdaaa7f35289d6b159b82304e8e4ce3093f74712ed58ac890af0dd1d8", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/112], 0xb8}}, 0x4000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x8000000}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) 2.373347388s ago: executing program 1 (id=1908): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0xfffffffe, 0x6, 0x372, 0x3, 0xd, "40cb4400000000000000021700"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="4801128ae919f7dcf8c7ebda95e2deabe9bc912df2882600815e35efff4cba8bef81ccbf60086a0476052437542bec72c4146e9074ff3ecb44e820eb91752c434d75d8dd38e16e8cfef6ad7ca23b643822320d806d8ffba1b6049b463d4ce160072eed6cc6bb0617d7d60a07146f42bf85863bfba82783a546458d71602c30d3425f07570966da7a21baddfa30aecff3b1", 0x91}, {&(0x7f0000000440)="b01e42cf6cd92475f7eea9df2d781501ad9926631f26d94d26f2c82d4fc354661d05a30eb30acf1f4528a547d4eeebd368d689a8114395741d05259635e37226f616ad628a834be987836b9be048b9c76f7f26d507678cb6e7e94fad56714ffafa0c8d7faf1b8aa7d8ef7d3da0428197f219d26bdb65ee8026fa8050ad4e5bb40880af2361e3268fa3c247bc", 0x8c}, {&(0x7f0000000500)="ded6f7dbf1017b350e3f6b5d13035707950df82fe664ad7751abd19389720aae909e6de5546a0ac154a61352f2bf83da4896b2adb527d7d9eafc7eb41d82a21813fa943e09dca90ab5bbe45f30193667d5b4ea7d55d7a4aaadcf50f29a725b26a67daa46f4e9f9184b83721d9f3c81576526b8f128a394aba885aef365baddae9e99ff", 0x83}], 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, 0x0, 0x20000040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r7 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r1, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) syz_io_uring_setup(0x369, &(0x7f00000000c0)={0x0, 0x8c67, 0x1200, 0x1, 0x1a5}, &(0x7f0000000140), &(0x7f0000000180)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) 1.999310788s ago: executing program 2 (id=1911): r0 = socket$kcm(0x1e, 0x5, 0x0) socket$inet(0x2, 0x5, 0xdd) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd51eeba0af2c87cb}, 0x40c0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0xac}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r8, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(r10, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r9, r8, 0x0, 0x578410eb) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r11, 0x1, 0x3d, &(0x7f0000001ac0)=""/4, &(0x7f0000005bc0)=0x4) 1.060755527s ago: executing program 5 (id=1912): r0 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0xc, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000005ff0400000000", @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) recvmsg$kcm(r6, &(0x7f00000038c0)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000002840)=[{&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000002700)=""/19, 0x13}, {&(0x7f0000002740)=""/232, 0xe8}], 0x6, &(0x7f00000028c0)=""/4096, 0x1000}, 0x0) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x406001) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f00000002c0)='./file0\x00', r8, 0x4000, r3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x29, 0xf6, 0x9, 0xa88ba82, 0x75, @dev={0xfe, 0x80, '\x00', 0x2f}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x8000, 0x35}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf24818090000000000000000000cc95d0e596a9f031efcd99bdfe2dce540b1eff553076490f62e89a28aa616a46ea54c8f536beca55735aacc558d5627b57ea1d5ef91ebda8d6742e1d5c6c0dd62f28470b8a09a1f62d4f13ae3c21ab4ce03baead0a27ebf737cfc2633ff8f363fa9ca72b7c622e07dd4a38eca8dc10fadf14ab9180face266bfd92f5e207c677ea9c5a6e"], 0x1c}}, 0x44800) 967.207404ms ago: executing program 2 (id=1913): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x129340, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r7, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000000080)='*!$]@^.+\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='$\x00'], 0x0, 0x2}}, 0x30) mmap(&(0x7f0000a45000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000000) 847.941646ms ago: executing program 2 (id=1914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x183, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r8 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r9}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01864ba, &(0x7f0000000300)={0x14, r11, r9}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x23) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 740.530332ms ago: executing program 2 (id=1915): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x62, 0xe1, 0xba, 0x10, 0x10b9, 0x8000, 0xc0fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc8, 0x58, 0x7e}}]}}]}}, 0x0) 560.955116ms ago: executing program 6 (id=1916): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x30020000}, 0xfffffffffffffdbb}, 0x48) 549.082086ms ago: executing program 6 (id=1917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x6, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fddbdf250a0000060128000300000008000600", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000030000000800000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='!\x00'/25], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x10, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x26b}]}, 0x3c}}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="41c2b1af", 0x4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)='1', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000400)={r8}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x150) r10 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0xe1) fcntl$notify(r10, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) 420.868749ms ago: executing program 6 (id=1918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 316.643726ms ago: executing program 6 (id=1919): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f0000002cc0)=[{{&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1, &(0x7f0000000180)=""/73, 0x49}, 0xfc000000}, {{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/18, 0x12}, {&(0x7f0000000500)=""/211, 0xd3}], 0x3, &(0x7f0000000640)}, 0x10000000}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/7, 0x7}, {&(0x7f00000006c0)=""/250, 0xfa}], 0x2, &(0x7f0000000880)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000800)=""/2, 0x2}, {&(0x7f0000001880)=""/52, 0x34}], 0x2}}, {{&(0x7f0000001900)=@pppol2tpin6, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001980)=""/209, 0xd1}, {&(0x7f0000001a80)=""/29, 0x1d}, {&(0x7f0000001ac0)=""/25, 0x19}, {&(0x7f0000001b00)=""/135, 0x87}, {&(0x7f0000001bc0)=""/49, 0x31}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/45, 0x2d}], 0x7}, 0x8}], 0x5, 0x12101, &(0x7f0000002e00)={0x0, 0x3938700}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) (async) syz_usb_disconnect(r0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000640)=0x1) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) write$nbd(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="6744669800e7ffff0100010001000000"], 0x10) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000003240)={0x14, &(0x7f00000031c0)={0x40, 0x31, 0x15, {0x15, 0x3, "3da5dcdecaa083b40698ec1f9c92a9ac886245"}}, &(0x7f0000003200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003580)={0x44, &(0x7f0000003280)={0x60, 0x5, 0xfd, "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"}, &(0x7f00000033c0)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000003400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000003440)={0x20, 0x80, 0x1c, {0x401, 0x3, 0xb, 0x3, 0x40, 0x9, 0x7ff, 0x4, 0xe, 0xc4, 0x6, 0x6}}, &(0x7f0000003480)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000034c0)={0x20, 0x83, 0x2}, &(0x7f0000003500)={0x20, 0x87, 0x2, 0xff50}, &(0x7f0000003540)={0x20, 0x89, 0x2}}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 294.236452ms ago: executing program 6 (id=1920): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}) syz_usb_connect$uac1(0x4, 0x8f, &(0x7f0000000140)=ANY=[], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x400}], 0x18, 0x20000840}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) recvmsg$can_bcm(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000c40)=""/138, 0x8a}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000a40)=""/219, 0xdb}], 0x7}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 136.263442ms ago: executing program 5 (id=1921): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8cffffff, 0x0) epoll_create1(0x80000) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000fc0)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x2, 0x4000000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async, rerun: 64) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (async, rerun: 64) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) (async, rerun: 32) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f746865"], 0x1, 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0, r3}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) socket(0x22, 0x2, 0x24) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) (rerun: 64) 0s ago: executing program 5 (id=1922): syz_emit_ethernet(0xc8, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @void, {@llc_tr={0x11, {@llc={0xdc, 0xdc, "85c2", "b03291f041f3cc570463cc7218afffbb9e9def72b584b2133eb998e9dd882b4a1572838ed40c48e43faa78779d8a54bbd046bf8c1c50170d91c815324c958b32eb9f68f487529fda37c32212a9ef04419710ddea23a2da63127fd71e4cf926fec86ae9d3bddcb71a90ad25a661faa67c7fccdca202ad5bce373ae79da991a2449583689df51c91369d7ed241e6b25b264191c80ac194678b357b67f1f55aba4b3293ca5380864d2940d4ce181f4f2db654101ce720fc"}}}}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x2, @loopback, 0x7, 0x3}, 0x20) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x8, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x14b, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x1, 0x7, 0x135, 0x65, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_addr={0x44, 0xc, 0x82, 0x1, 0x4, [{@empty, 0x3a}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x7f, [@loopback, @empty, @rand_addr=0x64010102, @rand_addr=0x64010102, @private=0xa010102]}, @rr={0x7, 0x13, 0xf, [@rand_addr=0x64010100, @remote, @empty, @local]}]}}, {{0x4e22, 0x4e22, r1, r2, 0x0, 0x0, 0x16, 0xc2, 0x9, 0x0, 0xd88, {[@generic={0xfe, 0x12, "456d2ed5acf57e5978f92743df7a0781"}, @exp_fastopen={0xfe, 0x8, 0xf989, "dbed7e17"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x14, 0xf989, "efdb24a225814fb6030381f03b48108c"}, @mptcp=@synack={0x1e, 0x10, 0x5, 0x2, 0x2, 0x6, 0x4a4c}]}}, {"9217f5667dc4eba8f6aafaf38c978ffdd4ff21d30955ffdb63fa747d531f68afd2833834a1c119e48e7131977fba31f7e9418c95b2bdd4c7f653502ba4103d50deef2a254c0f52c331fc6e7c4594b6fb4a37af661b2f40b0393cc1545a615728d10620d2c3bd9545f06cee8eef0fc15cc571f1fb9626610699ff89c32eb7fb68658725a88401c2bfd45addc19c"}}}}}}, &(0x7f0000000340)={0x0, 0x1, [0x864, 0x7cb, 0xce7, 0xb8b]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'sit0\x00', r3, 0x20, 0x8, 0x2, 0x6, {{0x14, 0x4, 0x3, 0x7, 0x50, 0x64, 0x0, 0x9, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x3c, 0x64, 0x1, 0x6, [{@remote, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x7}, {@broadcast, 0x7}, {@loopback, 0x6}, {@empty, 0x8000}, {@private=0xa010102, 0xb}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xa4}}, 0x20008001) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f0000000680)=0x40, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000700)=0x5) ioctl$SNDCTL_TMR_SOURCE(r8, 0xc0045406) r9 = syz_io_uring_setup(0x4b57, &(0x7f0000000740)={0x0, 0xff9b, 0x2, 0x1, 0xe2, 0x0, r8}, &(0x7f00000007c0), &(0x7f0000000800)) syz_io_uring_setup(0x337e, &(0x7f0000000840)={0x0, 0x52af, 0x80, 0x2, 0x3c3, 0x0, r9}, &(0x7f00000008c0), &(0x7f0000000900)) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000940)=0x80) socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x294, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x46d}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x291b6bcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @loopback, 0xfffffffc}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffff955}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2603}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b3d7ffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x48010}, 0x800) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000d00), 0x200080, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6gre0\x00', r3, 0x4, 0x6, 0x4, 0x7, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8, 0x6b7f39c3}}) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000e00)={0xdddd0000, 0x1c000}) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000003180)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000003280)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000032c0)={0x0, 0x0, 0x0}, &(0x7f0000003300)=0xc) syz_fuse_handle_req(r11, &(0x7f0000000e80)="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", 0x2000, &(0x7f0000003d00)={&(0x7f0000002e80)={0x50, 0x0, 0x9d35, {0x7, 0x2b, 0x8001, 0x120040, 0xc, 0x3, 0x4, 0x6, 0x0, 0x0, 0x3, 0x9}}, &(0x7f0000002f00)={0x18, 0x0, 0x0, {0x200}}, &(0x7f0000002f40)={0x18, 0xffffffffffffffda, 0xffffffffffffff80, {0x9}}, &(0x7f0000002f80)={0x18, 0x0, 0x8001, {0xe}}, &(0x7f0000002fc0)={0x18, 0x0, 0x7fff, {0x200}}, &(0x7f0000003000)={0x28, 0x0, 0xf700000000000000, {{0x1, 0x4, 0x1, 0xffffffffffffffff}}}, &(0x7f0000003040)={0x60, 0xfffffffffffffff5, 0x702, {{0x5, 0x6, 0xfffffffffffffff9, 0x1, 0x5, 0x5, 0xe6, 0x9}}}, &(0x7f00000030c0)={0x18, 0x0, 0xd9, {0x6}}, &(0x7f0000003100)={0x13, 0x0, 0x0, {'\t)\x00'}}, &(0x7f0000003140)={0x20, 0x0, 0x9}, &(0x7f0000003340)={0x78, 0x0, 0x5, {0x6, 0x1, 0x0, {0x5, 0x1, 0x4, 0x3, 0x4, 0x40, 0x430e, 0x6, 0x0, 0x2000, 0x4, r12, r13, 0x2, 0xe87}}}, &(0x7f0000003440)={0x90, 0x760319baeb16f3a1, 0x4, {0x3, 0x1, 0xfffffffffffffffb, 0x2d4, 0x4, 0xc5, {0x1, 0x280000000000, 0x9, 0x0, 0x5, 0x3, 0x7, 0x12, 0x5, 0x3000, 0xf88, 0x0, 0xee01, 0x10000, 0x1}}}, &(0x7f0000003500)={0x30, 0x0, 0x3, [{0x5, 0x3, 0x5, 0x3, 'syz0\x00'}]}, &(0x7f0000003640)={0x148, 0x0, 0x7, [{{0x1, 0x2, 0xff, 0xff, 0x400, 0xfffffbff, {0x1, 0x1, 0x10000, 0x5, 0x8000000000000001, 0x8, 0x0, 0x200, 0x4, 0x8000, 0x51c, 0x0, 0xee00, 0x81, 0x40}}, {0x1, 0x5, 0x8, 0x4000, 'ethtool\x00'}}, {{0x2, 0x0, 0x100000000, 0x10, 0x8001, 0x9, {0x3, 0xd7c, 0x8000000000000000, 0xcad, 0x3, 0xffffffff, 0x6, 0x7eb3, 0xae4a, 0xc000, 0x4, 0x0, 0x0, 0x7, 0x1f}}, {0x4, 0x5, 0x0, 0x6}}]}, &(0x7f0000003900)={0xa0, 0xffffffffffffffda, 0x100, {{0x5, 0x2, 0x4, 0xffffffffffffffff, 0x8001, 0x3, {0x4, 0x9, 0x9, 0xd, 0xdc, 0x100000001, 0xfffffff7, 0x8, 0x0, 0x8000, 0x8, 0x0, 0xffffffffffffffff, 0x10, 0x3}}, {0x0, 0x5}}}, &(0x7f00000039c0)={0x20, 0x0, 0x4, {0xb4, 0x4, 0x3a76, 0x23}}, &(0x7f0000003bc0)={0x130, 0x0, 0xffff, {0x5, 0x8, 0x0, '\x00', {0x8000, 0xb, 0x0, 0xfffffffb, 0x0, 0x0, 0x4000, '\x00', 0x9, 0x5, 0xffffffffffffffff, 0x6, {0x3, 0x6}, {0xda41, 0xc49d}, {0x6, 0x1000}, {0x7, 0x7}, 0x8, 0x0, 0x9, 0x80000001}}}}) kernel console output (not intermixed with test programs): truncated [ 558.154271][ T5959] usb 3-1: config 10 interface 211 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 558.165913][T12781] loop2: p2 start 1702059890 is beyond EOD, truncated [ 558.173809][ T5959] usb 3-1: config 10 interface 211 altsetting 14 endpoint 0x9 has an invalid bInterval 222, changing to 7 [ 558.363562][ T5959] usb 3-1: config 10 interface 211 has no altsetting 0 [ 558.373395][T11235] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.390708][T11235] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 558.445221][T11235] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.478958][ T5959] usb 3-1: string descriptor 0 read error: -22 [ 558.485581][ T5959] usb 3-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=99.7e [ 558.506349][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.535897][T11235] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 558.564735][T11235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.600712][ T5959] appletouch 3-1:10.211: Could not find int-in endpoint [ 558.630322][T11235] usb 7-1: Product: syz [ 558.636029][ T5959] appletouch 3-1:10.211: probe with driver appletouch failed with error -5 [ 558.659531][T11235] usb 7-1: Manufacturer: syz [ 558.678732][T11235] usb 7-1: SerialNumber: syz [ 558.688226][ T5959] usbhid 3-1:10.211: couldn't find an input interrupt endpoint [ 558.728816][T11235] hub 7-1:1.0: bad descriptor, ignoring hub [ 558.745702][T11235] hub 7-1:1.0: probe with driver hub failed with error -5 [ 558.812625][ T5959] usb 3-1: USB disconnect, device number 121 [ 559.031723][ T24] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 559.465627][ T24] usb 4-1: USB disconnect, device number 105 [ 559.553304][T11235] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 559.667432][T11235] usb 7-1: USB disconnect, device number 21 [ 559.717316][T11235] usblp0: removed [ 559.903895][T12813] tipc: Started in network mode [ 559.924573][T12813] tipc: Node identity 920ed19fe196, cluster identity 4711 [ 559.961360][T12813] tipc: Enabled bearer , priority 0 [ 559.995306][T12813] syzkaller0: entered promiscuous mode [ 560.002268][T12813] syzkaller0: entered allmulticast mode [ 560.461480][T11235] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 560.523051][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 560.540345][T12805] tipc: Resetting bearer [ 560.603677][T12805] tipc: Disabling bearer [ 560.633251][T11235] usb 4-1: Invalid ep0 maxpacket: 32 [ 560.638766][T12830] tipc: Enabled bearer , priority 0 [ 560.646592][T12830] syzkaller0: entered promiscuous mode [ 560.653856][T12830] syzkaller0: entered allmulticast mode [ 560.677625][T12830] tipc: Resetting bearer [ 560.688244][T12829] tipc: Resetting bearer [ 560.744397][T12829] tipc: Disabling bearer [ 560.781250][T11235] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 560.951926][T11235] usb 4-1: Invalid ep0 maxpacket: 32 [ 560.966704][T11235] usb usb4-port1: attempt power cycle [ 561.080693][ T5959] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 561.250757][ T5959] usb 7-1: Using ep0 maxpacket: 16 [ 561.297786][ T5959] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 561.320652][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.334006][T11235] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 561.353842][ T5959] usb 7-1: config 0 descriptor?? [ 561.382466][T11235] usb 4-1: Invalid ep0 maxpacket: 32 [ 561.543799][T11235] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 561.572225][T11235] usb 4-1: Invalid ep0 maxpacket: 32 [ 561.601208][T11235] usb usb4-port1: unable to enumerate USB device [ 561.772701][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 561.833587][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 561.953550][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.076448][ T10] usb 2-1: config 1 interface 0 has no altsetting 1 [ 562.133568][ T10] usb 2-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 562.158741][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.184990][ T10] usb 2-1: Product: syz [ 562.195025][ T10] usb 2-1: Manufacturer: syz [ 562.210937][ T10] usb 2-1: SerialNumber: syz [ 562.748305][T12850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.758688][T12850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.796194][T12113] usb 2-1: USB disconnect, device number 123 [ 562.910923][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 563.009423][T12871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1559'. [ 563.024604][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.033406][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.075059][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.088611][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.099783][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 563.109825][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.125321][ T10] usb 3-1: config 0 descriptor?? [ 563.251117][T12113] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 563.339197][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.351061][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.378470][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 563.378489][ T30] audit: type=1326 audit(1756021173.027:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.2.1557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa68598ebe9 code=0x0 [ 563.408691][ T24] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 563.452486][T12113] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 563.470739][T12113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.489182][T12113] usb 6-1: Product: syz [ 563.498174][T12113] usb 6-1: Manufacturer: syz [ 563.510134][T12113] usb 6-1: SerialNumber: syz [ 563.524445][T12113] usb 6-1: config 0 descriptor?? [ 563.560988][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 563.568616][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 563.580873][ T5936] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 563.588702][ T24] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 563.599111][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.610199][ T24] usb 2-1: config 0 descriptor?? [ 563.635381][T12877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.656474][T12877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.743319][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 563.754856][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 563.768322][ T5936] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 563.769935][T12113] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 563.777924][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.821949][T12113] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 563.835713][T12113] usb 6-1: USB disconnect, device number 41 [ 563.887057][ T5936] usb 4-1: config 0 descriptor?? [ 563.904476][T12875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 563.928403][ T5959] usbhid 7-1:0.0: can't add hid device: -71 [ 563.943201][ T5959] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 563.991655][ T5959] usb 7-1: USB disconnect, device number 22 [ 564.210883][T12881] netlink: 'syz.1.1560': attribute type 15 has an invalid length. [ 564.461046][T12883] sctp: [Deprecated]: syz.5.1563 (pid 12883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.461046][T12883] Use struct sctp_sack_info instead [ 564.546721][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.582370][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.682240][ T5936] hid (null): report_id 57294 is invalid [ 564.692827][ T5936] asus 0003:0B05:18C6.001D: collection stack underflow [ 564.699760][ T5936] asus 0003:0B05:18C6.001D: item 0 1 0 12 parsing failed [ 564.709489][ T5936] asus 0003:0B05:18C6.001D: Asus hid parse failed: -22 [ 564.727374][ T5936] asus 0003:0B05:18C6.001D: probe with driver asus failed with error -22 [ 564.737060][T12885] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1561'. [ 565.156727][T12113] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 565.663536][T12113] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 565.733189][T12113] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 565.760492][T12113] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 565.782839][T12113] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 565.792498][T12113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.825305][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 565.860304][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 565.869306][T12113] usb 7-1: Product: syz [ 565.902802][T12113] usb 7-1: Manufacturer: syz [ 565.920108][ T10] usb 3-1: USB disconnect, device number 122 [ 565.930911][T12113] usb 7-1: SerialNumber: syz [ 565.966473][T12113] usb 7-1: config 0 descriptor?? [ 566.001114][T12887] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 566.017126][T12887] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 566.055995][T12113] usb 7-1: ucan: probing device on interface #0 [ 566.836866][T12113] usb 7-1: ucan: device reported invalid device info [ 566.967572][T12113] usb 7-1: ucan: probe failed; try to update the device firmware [ 567.013381][T12113] usb 7-1: USB disconnect, device number 23 [ 567.084290][ T10] usb 4-1: USB disconnect, device number 110 [ 567.109753][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 567.172733][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 567.243996][ T24] usb 2-1: USB disconnect, device number 124 [ 567.301321][T12908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 567.563214][T12914] tipc: Started in network mode [ 567.580742][T12914] tipc: Node identity , cluster identity 4711 [ 567.630051][T12914] tipc: Failed to obtain node identity [ 567.684465][T12914] tipc: Enabling of bearer rejected, failed to enable media [ 567.745238][T12916] syzkaller0: entered promiscuous mode [ 567.769326][T12916] syzkaller0: entered allmulticast mode [ 568.116027][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 568.373879][T12926] fuse: Unknown parameter '0xffffffffffffffff' [ 568.388774][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.419985][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.460779][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.505629][T12927] fuse: Unknown parameter 'fd00000000000000000000017ÿÿÿÿÿÿÿÿ00000000000000000000' [ 568.541076][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.587952][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.641903][ T24] usb 3-1: config 0 descriptor?? [ 569.114615][ T24] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 569.403096][T12931] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 569.454228][T12931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 569.640951][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 569.644847][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1577'. [ 569.707562][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1577'. [ 569.798002][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.819780][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.848732][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 569.868355][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.889064][ T10] usb 4-1: config 0 descriptor?? [ 570.123682][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.134407][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.217951][ T30] audit: type=1326 audit(1756021179.857:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12932 comm="syz.3.1576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f128d58ebe9 code=0x0 [ 570.458834][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.469838][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.116465][T11235] usb 3-1: USB disconnect, device number 123 [ 571.388695][T12956] netlink: 'syz.2.1582': attribute type 4 has an invalid length. [ 571.455951][T12956] netlink: 'syz.2.1582': attribute type 4 has an invalid length. [ 572.000861][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 572.112935][T12965] dvmrp0: entered allmulticast mode [ 572.177840][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.208643][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 572.240750][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.294560][ T24] usb 6-1: config 0 descriptor?? [ 572.323510][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 572.525744][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 572.556336][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 572.660824][ T10] usb 4-1: USB disconnect, device number 111 [ 572.839426][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 572.877043][T12985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.499296][T12990] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 573.522989][T12990] ipvlan0: entered promiscuous mode [ 573.529607][T12990] ipvlan0: left promiscuous mode [ 573.553788][T12990] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 573.603786][T12994] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.1592'. [ 573.701884][T12994] openvswitch: netlink: Flow key attr not present in new flow. [ 573.783093][T12995] FAULT_INJECTION: forcing a failure. [ 573.783093][T12995] name failslab, interval 1, probability 0, space 0, times 0 [ 573.862462][T12995] CPU: 0 UID: 0 PID: 12995 Comm: syz.1.1593 Not tainted syzkaller #0 PREEMPT(full) [ 573.862492][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.862505][T12995] Call Trace: [ 573.862514][T12995] [ 573.862523][T12995] dump_stack_lvl+0x189/0x250 [ 573.862552][T12995] ? __pfx____ratelimit+0x10/0x10 [ 573.862580][T12995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.862603][T12995] ? __pfx__printk+0x10/0x10 [ 573.862632][T12995] ? __pfx___might_resched+0x10/0x10 [ 573.862642][T12995] ? fs_reclaim_acquire+0x7d/0x100 [ 573.862661][T12995] should_fail_ex+0x414/0x560 [ 573.862678][T12995] should_failslab+0xa8/0x100 [ 573.862695][T12995] __kmalloc_cache_noprof+0x70/0x3d0 [ 573.862709][T12995] ? snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 573.862727][T12995] snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 573.862744][T12995] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 573.862761][T12995] ? rcu_is_watching+0x15/0xb0 [ 573.862774][T12995] ? __mutex_lock+0xd3b/0x1350 [ 573.862792][T12995] ? __mutex_lock+0x5bb/0x1350 [ 573.862809][T12995] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 573.862826][T12995] ? __pfx___mutex_lock+0x10/0x10 [ 573.862846][T12995] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 573.862862][T12995] snd_pcm_oss_make_ready+0x11b/0x340 [ 573.862881][T12995] snd_pcm_oss_set_trigger+0x95/0x740 [ 573.862900][T12995] snd_pcm_oss_poll+0x841/0x980 [ 573.862918][T12995] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 573.862935][T12995] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 573.862948][T12995] do_sys_poll+0x8c6/0x1070 [ 573.862967][T12995] ? do_sys_poll+0x361/0x1070 [ 573.862986][T12995] ? __pfx_do_sys_poll+0x10/0x10 [ 573.863005][T12995] ? __pfx___pollwait+0x10/0x10 [ 573.863021][T12995] ? __pfx_pollwake+0x10/0x10 [ 573.863037][T12995] ? __pfx_pollwake+0x10/0x10 [ 573.863076][T12995] ? rcu_read_lock_any_held+0xb3/0x120 [ 573.863088][T12995] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 573.863101][T12995] ? vfs_write+0x956/0xb30 [ 573.863129][T12995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.863143][T12995] ? set_user_sigmask+0xc7/0x1b0 [ 573.863154][T12995] ? __pfx_set_user_sigmask+0x10/0x10 [ 573.863164][T12995] ? __fget_files+0x3a0/0x420 [ 573.863184][T12995] __se_sys_ppoll+0x1ff/0x260 [ 573.863200][T12995] ? __pfx___se_sys_ppoll+0x10/0x10 [ 573.863215][T12995] ? __pfx_ksys_write+0x10/0x10 [ 573.863230][T12995] ? do_syscall_64+0xbe/0x3b0 [ 573.863245][T12995] ? __x64_sys_ppoll+0x20/0xc0 [ 573.863260][T12995] do_syscall_64+0xfa/0x3b0 [ 573.863274][T12995] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.863288][T12995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.863298][T12995] ? clear_bhb_loop+0x60/0xb0 [ 573.863311][T12995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.863321][T12995] RIP: 0033:0x7fcdb398ebe9 [ 573.863332][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.863342][T12995] RSP: 002b:00007fcdb1bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 573.863360][T12995] RAX: ffffffffffffffda RBX: 00007fcdb3bb6090 RCX: 00007fcdb398ebe9 [ 573.863368][T12995] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 573.863375][T12995] RBP: 00007fcdb1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 573.863382][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.863388][T12995] R13: 00007fcdb3bb6128 R14: 00007fcdb3bb6090 R15: 00007fcdb3cdfa28 [ 573.863405][T12995] [ 574.448135][T13009] loop2: detected capacity change from 0 to 7 [ 574.455574][T13009] Dev loop2: unable to read RDB block 7 [ 574.461238][T13009] loop2: AHDI p1 p2 p3 [ 574.465472][T13009] loop2: partition table partially beyond EOD, truncated [ 574.472869][T13009] loop2: p1 start 1601398130 is beyond EOD, truncated [ 574.479943][T13009] loop2: p2 start 1702059890 is beyond EOD, truncated [ 574.823043][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 574.862366][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 574.881323][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 574.963489][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 575.002295][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 575.021756][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 575.033586][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 575.075644][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 575.109175][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 575.120874][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 575.157755][T11519] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.170838][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 575.181181][T11519] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.196138][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 575.211771][T11519] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.220513][T11519] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.236693][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 575.275436][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 575.310226][ T24] pwc: Registered as video103. [ 575.390916][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 575.491326][ T24] usb 6-1: USB disconnect, device number 42 [ 575.966155][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 576.206019][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.260938][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.318676][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 576.328316][T11235] IPVS: starting estimator thread 0... [ 576.331390][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.334193][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 576.386435][ T24] usb 6-1: config 0 descriptor?? [ 576.452189][T13042] IPVS: using max 50 ests per chain, 120000 per kthread [ 576.501324][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 576.514345][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.534489][ T10] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 576.557483][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.622107][ T10] usb 4-1: config 0 descriptor?? [ 576.668916][T13048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1606'. [ 576.689731][T13016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.699632][T13016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.747231][ T30] audit: type=1326 audit(1756021186.377:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.5.1600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff55d78ebe9 code=0x0 [ 577.014823][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.048066][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.125257][ T10] aquacomputer_d5next 0003:0C70:F003.001F: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 577.300856][T12113] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 577.338709][T11235] usb 4-1: USB disconnect, device number 112 [ 577.500927][T12113] usb 2-1: Using ep0 maxpacket: 8 [ 577.511030][T12113] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 577.529370][T12113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.557203][T12113] usb 2-1: Product: syz [ 577.568502][T12113] usb 2-1: Manufacturer: syz [ 577.583628][T12113] usb 2-1: SerialNumber: syz [ 577.613350][T12113] usb 2-1: config 0 descriptor?? [ 577.866449][T12113] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 578.353958][T13058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.571023][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 578.586630][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 578.611049][ T24] usb 6-1: USB disconnect, device number 43 [ 578.728566][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 579.003661][T13074] tipc: Started in network mode [ 579.008555][T13074] tipc: Node identity , cluster identity 4711 [ 579.051049][T13074] tipc: Failed to obtain node identity [ 579.087184][T13074] tipc: Enabling of bearer rejected, failed to enable media [ 579.915873][T12113] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 579.942805][T12113] usb 2-1: USB disconnect, device number 125 [ 580.150382][T13095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.852347][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 580.941292][T11235] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 581.013010][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.033462][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 581.055241][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 581.079257][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.095973][T11235] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 581.115119][T11235] usb 3-1: config 150 has no interface number 0 [ 581.122394][T11235] usb 3-1: config 150 interface 204 has no altsetting 0 [ 581.139963][T13102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 581.161425][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.178294][T11235] usb 3-1: config 150 interface 1 has no altsetting 0 [ 581.201406][T11235] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 581.211613][T11235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.229830][T11235] usb 3-1: Product: syz [ 581.234657][T11235] usb 3-1: Manufacturer: syz [ 581.239370][T11235] usb 3-1: SerialNumber: syz [ 581.426964][ T10] usb 2-1: USB disconnect, device number 126 [ 581.576443][T11235] xr_serial 3-1:150.204: xr_serial converter detected [ 582.168474][T11235] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 582.179144][T11235] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 582.546395][T13115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'. [ 582.569992][T13115] loop6: detected capacity change from 0 to 8191 [ 582.601864][T11235] usb 3-1: USB disconnect, device number 124 [ 582.614428][T11235] xr_serial 3-1:150.204: device disconnected [ 582.627480][T13109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.634149][T13109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 582.684163][T13109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 582.723382][T13109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 582.731223][T13115] vlan2: entered allmulticast mode [ 582.736492][T13115] erspan0: entered allmulticast mode [ 582.886760][T13109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.934079][T13109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.112276][T13109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.121682][T13121] netlink: 'syz.3.1624': attribute type 1 has an invalid length. [ 583.244145][T13121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.467387][T13123] bond2: (slave gretap1): making interface the new active one [ 583.522435][T13123] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 583.630693][T12113] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 583.741137][T10427] Bluetooth: hci1: command 0x0405 tx timeout [ 583.753125][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 583.785161][T12113] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 583.805844][T12113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.845403][T12113] usb 3-1: config 0 descriptor?? [ 583.897061][T12113] cp210x 3-1:0.0: cp210x converter detected [ 583.921353][ T24] usb 7-1: device descriptor read/64, error -71 [ 583.947798][T13133] binder: 13132:13133 ioctl c0306201 2000000003c0 returned -14 [ 584.087001][T12113] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 584.126550][T12113] cp210x 3-1:0.0: querying part number failed [ 584.167496][T12113] usb 3-1: cp210x converter now attached to ttyUSB0 [ 584.181473][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 584.330735][T11235] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 584.331386][ T24] usb 7-1: device descriptor read/64, error -71 [ 584.474520][ T24] usb usb7-port1: attempt power cycle [ 584.480997][T11235] usb 4-1: device descriptor read/64, error -71 [ 584.702045][T10427] Bluetooth: hci0: command 0x0419 tx timeout [ 584.730924][T11235] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 584.842246][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 584.870806][T11235] usb 4-1: device descriptor read/64, error -71 [ 584.913832][ T24] usb 7-1: device descriptor read/8, error -71 [ 584.939630][T13139] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 584.947540][T10427] Bluetooth: hci2: command 0x0c1a tx timeout [ 584.991843][T11235] usb usb4-port1: attempt power cycle [ 585.171181][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 585.206444][ T24] usb 7-1: device descriptor read/8, error -71 [ 585.323716][ T24] usb usb7-port1: unable to enumerate USB device [ 585.341939][T11235] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 585.461128][T11235] usb 4-1: device descriptor read/8, error -71 [ 585.718076][T11235] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 585.751426][T11235] usb 4-1: device descriptor read/8, error -71 [ 585.820716][T10427] Bluetooth: hci1: command 0x0405 tx timeout [ 585.861075][T11235] usb usb4-port1: unable to enumerate USB device [ 586.011365][ T5959] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 586.175122][ T5959] usb 2-1: config 0 has no interfaces? [ 586.186965][ T5959] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 586.244112][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.276145][ T5959] usb 2-1: Product: syz [ 586.299307][ T5959] usb 2-1: Manufacturer: syz [ 586.330526][ T5959] usb 2-1: SerialNumber: syz [ 586.396722][ T5959] usb 2-1: config 0 descriptor?? [ 586.422001][ T24] usb 3-1: USB disconnect, device number 125 [ 586.445096][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 586.484857][ T24] cp210x 3-1:0.0: device disconnected [ 586.687548][T13156] fuse: Bad value for 'fd' [ 586.741226][T13157] netdevsim netdevsim5: Direct firmware load for x failed with error -2 [ 586.749669][T13157] netdevsim netdevsim5: Falling back to sysfs fallback for: x [ 586.850654][T10427] Bluetooth: hci0: command 0x0419 tx timeout [ 587.034334][T10427] Bluetooth: hci2: command 0x0c1a tx timeout [ 587.036836][T13148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.255300][T13148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.830316][T13174] VFS: Mount too revealing [ 587.841410][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1638'. [ 587.887583][T13176] hub 9-0:1.0: USB hub found [ 587.959485][T13176] hub 9-0:1.0: 1 port detected [ 588.133273][T13181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.376275][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1641'. [ 589.002055][T11235] usb 2-1: USB disconnect, device number 127 [ 589.095149][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1643'. [ 589.111296][T10427] Bluetooth: hci2: command 0x0c1a tx timeout [ 589.436085][T13205] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1647'. [ 589.481561][T11235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 589.641188][T11235] usb 2-1: Using ep0 maxpacket: 32 [ 589.649744][T11235] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 589.661686][T11235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 589.673206][T11235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 589.683287][T11235] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.695241][T11235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 589.706369][T11235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 589.726532][T11235] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 589.737960][T11235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.752066][T11235] usb 2-1: Product: syz [ 589.756253][T11235] usb 2-1: Manufacturer: syz [ 589.765661][T11235] usb 2-1: SerialNumber: syz [ 589.774028][T11235] usb 2-1: config 0 descriptor?? [ 590.003065][ T24] usb 2-1: USB disconnect, device number 2 [ 590.424758][T13215] netlink: 'syz.6.1650': attribute type 9 has an invalid length. [ 590.454072][T13215] netlink: 146708 bytes leftover after parsing attributes in process `syz.6.1650'. [ 590.960753][T11235] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 591.127302][T11235] usb 4-1: Using ep0 maxpacket: 32 [ 591.137064][T11235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 591.157020][T11235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 591.177147][T11235] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 591.195684][T11235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.205733][T11235] usb 4-1: Product: syz [ 591.209950][T11235] usb 4-1: Manufacturer: syz [ 591.218816][T11235] usb 4-1: SerialNumber: syz [ 591.239782][T11235] usb 4-1: config 0 descriptor?? [ 591.245143][ T5959] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 591.421005][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 591.441341][ T5959] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 591.453658][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.462970][ T5959] usb 3-1: Product: syz [ 591.467484][ T5959] usb 3-1: Manufacturer: syz [ 591.538223][ T5959] usb 3-1: SerialNumber: syz [ 591.627068][ T5959] usb 3-1: config 0 descriptor?? [ 591.673445][ T5959] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 592.710836][T12414] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 592.803541][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.826496][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.893163][T12414] usb 7-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 592.904535][T12414] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 592.924179][T12414] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 592.938818][T12414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.947325][T12414] usb 7-1: Product: syz [ 592.951873][T12414] usb 7-1: Manufacturer: syz [ 592.956781][T12414] usb 7-1: SerialNumber: syz [ 592.993777][T12414] usb 7-1: config 0 descriptor?? [ 593.228473][T12414] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 593.243088][T11235] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 593.260960][T12414] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 593.280147][T11235] usb 4-1: USB disconnect, device number 117 [ 593.310519][T12414] usb 7-1: USB disconnect, device number 28 [ 593.500835][ T5876] Bluetooth: hci2: command 0x0c1a tx timeout [ 594.024012][ T24] usb 3-1: USB disconnect, device number 126 [ 594.392550][ T24] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 594.536064][T13258] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1660'. [ 594.582348][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 594.612316][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.654711][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 594.683285][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.760691][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 594.790116][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.821069][T12414] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 594.863899][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 594.891652][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 594.919700][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 594.959396][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 594.966970][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 595.045875][T12414] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.086617][T12414] usb 6-1: config 0 has no interfaces? [ 595.104834][T12414] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 595.123881][T12414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.140492][T12414] usb 6-1: config 0 descriptor?? [ 595.244840][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.254265][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.275421][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.285598][ T30] audit: type=1326 audit(1756021204.917:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.287872][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.432849][T13258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.453501][T13258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.466936][ T30] audit: type=1326 audit(1756021204.917:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.513641][ T30] audit: type=1326 audit(1756021204.917:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.545634][ T30] audit: type=1326 audit(1756021204.917:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.586508][ T30] audit: type=1326 audit(1756021204.917:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.610316][ T30] audit: type=1326 audit(1756021204.917:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.725753][ T30] audit: type=1326 audit(1756021204.917:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.752051][ T30] audit: type=1326 audit(1756021204.917:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.787527][ T30] audit: type=1326 audit(1756021204.917:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 595.963625][ T30] audit: type=1326 audit(1756021204.917:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68598ebe9 code=0x7ffc0000 [ 596.360806][T11235] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 596.510744][T11235] usb 2-1: Using ep0 maxpacket: 32 [ 596.635945][T11235] usb 2-1: config index 0 descriptor too short (expected 36, got 30) [ 596.656586][T11235] usb 2-1: config 0 has an invalid interface number: 181 but max is 0 [ 596.680534][T11235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.712437][T11235] usb 2-1: config 0 has no interface number 0 [ 596.719012][T11235] usb 2-1: config 0 interface 181 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.758528][T11235] usb 2-1: config 0 interface 181 has no altsetting 0 [ 596.839643][T11235] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=8a.13 [ 596.889821][T11235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.913078][T11235] usb 2-1: Product: syz [ 596.927376][T11235] usb 2-1: Manufacturer: syz [ 596.938175][T11235] usb 2-1: SerialNumber: syz [ 596.967335][T11235] usb 2-1: config 0 descriptor?? [ 596.975433][T11235] bfusb 2-1:0.181: probe with driver bfusb failed with error -5 [ 597.199401][ T24] usb 2-1: USB disconnect, device number 3 [ 597.490483][T11235] usb 6-1: USB disconnect, device number 44 [ 597.603252][T13307] netlink: 'syz.1.1670': attribute type 16 has an invalid length. [ 597.626269][T13306] netlink: 'syz.1.1670': attribute type 16 has an invalid length. [ 597.668778][T13306] netlink: 'syz.1.1670': attribute type 3 has an invalid length. [ 597.690855][T13307] netlink: 'syz.1.1670': attribute type 3 has an invalid length. [ 597.700253][T13308] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1670'. [ 597.705501][T13306] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1670'. [ 597.740244][T13307] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1670'. [ 597.861127][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 598.013689][T13275] delete_channel: no stack [ 598.042756][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.124162][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.131386][T11235] usb 3-1: USB disconnect, device number 127 [ 598.186096][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 598.226036][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.289828][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.324090][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.350886][ T24] usb 7-1: config 0 descriptor?? [ 598.823280][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 598.835919][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 599.104740][ T24] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max [ 599.169238][ T24] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 599.239166][T13335] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.1679'. [ 599.288835][T13335] batman_adv: batadv0: Adding interface: macsec1 [ 599.298656][T13335] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.453720][ T5959] usb 7-1: USB disconnect, device number 29 [ 599.500163][T13335] batman_adv: batadv0: Interface activated: macsec1 [ 599.729735][T13338] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 599.754578][T13339] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 599.848832][T13347] veth1_macvtap: mtu less than device minimum [ 600.370338][T13364] netlink: 'syz.5.1688': attribute type 4 has an invalid length. [ 600.410675][ T1212] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 600.431806][T13364] netlink: 'syz.5.1688': attribute type 4 has an invalid length. [ 600.491297][T13366] hsr0: entered promiscuous mode [ 600.617173][ T1212] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 600.631188][T13365] hsr0: left promiscuous mode [ 600.656880][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.694405][ T1212] usb 4-1: Product: syz [ 600.698627][ T1212] usb 4-1: Manufacturer: syz [ 600.715266][ T1212] usb 4-1: SerialNumber: syz [ 600.738410][ T1212] usb 4-1: config 0 descriptor?? [ 600.810853][T11235] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 600.965856][ T1212] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 600.992210][T11235] usb 7-1: unable to get BOS descriptor or descriptor too short [ 601.012438][T11235] usb 7-1: not running at top speed; connect to a high speed hub [ 601.094133][T11235] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 601.118463][ T1212] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 601.137377][T11235] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 601.142389][ T1212] usb 4-1: USB disconnect, device number 118 [ 601.189014][T11235] usb 7-1: Dual-Role OTG device on HNP port [ 601.201899][T11235] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.243206][T11235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.271252][T11235] usb 7-1: Product: syz [ 601.287176][T11235] usb 7-1: Manufacturer: syz [ 601.316240][T11235] usb 7-1: SerialNumber: syz [ 601.590887][T11235] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 601.619101][T11235] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 601.732866][T11235] usb 7-1: USB disconnect, device number 30 [ 602.040544][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.111376][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.271067][T12261] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 602.281487][T13392] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0 [ 602.423044][T12261] usb 2-1: Using ep0 maxpacket: 32 [ 602.435085][T12261] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 602.460676][T12261] usb 2-1: config 0 has no interface number 0 [ 602.491374][T12261] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 602.541003][ T1212] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 602.617421][T12261] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 602.653497][T12261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.688221][T12261] usb 2-1: Product: syz [ 602.712119][T12261] usb 2-1: Manufacturer: syz [ 602.733249][T12261] usb 2-1: SerialNumber: syz [ 602.754555][T12261] usb 2-1: config 0 descriptor?? [ 602.770750][ T1212] usb 7-1: Using ep0 maxpacket: 8 [ 602.780146][T12261] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 602.798305][ T1212] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 602.818297][T12261] em28xx 2-1:0.132: Video interface 132 found: [ 602.826131][ T1212] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 602.848139][ T1212] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 602.872714][ T1212] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.914790][ T1212] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 602.936165][ T1212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.112489][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 603.112509][ T30] audit: type=1800 audit(1756021212.757:2171): pid=13413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1702" name="nullb0" dev="devtmpfs" ino=3234 res=0 errno=0 [ 603.143744][T12261] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 603.172183][ T1212] usb 7-1: GET_CAPABILITIES returned 0 [ 603.186586][ T1212] usbtmc 7-1:16.0: can't read capabilities [ 603.225441][T12261] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 603.252038][T12261] em28xx 2-1:0.132: board has no eeprom [ 603.351095][T12261] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 603.375776][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 603.385331][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 603.394784][T13397] usbtmc 7-1:16.0: Unable to send data, error -71 [ 603.419854][T12261] em28xx 2-1:0.132: analog set to bulk mode. [ 603.436960][ T1212] em28xx 2-1:0.132: Registering V4L2 extension [ 603.461415][T12261] usb 2-1: USB disconnect, device number 4 [ 603.516431][T12261] em28xx 2-1:0.132: Disconnecting em28xx [ 603.524208][ T5936] usb 7-1: USB disconnect, device number 31 [ 603.772830][T13429] tipc: Enabled bearer , priority 0 [ 603.792433][T13429] syzkaller0: entered promiscuous mode [ 603.819376][T13429] syzkaller0: entered allmulticast mode [ 603.851264][T12414] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 603.886641][T13429] tipc: Resetting bearer [ 603.919962][T13428] tipc: Resetting bearer [ 603.966462][T13428] tipc: Disabling bearer [ 603.978132][ T1212] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 603.989656][ T1212] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 603.997951][ T1212] em28xx 2-1:0.132: No AC97 audio processor [ 604.014774][T12414] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 604.030741][T12414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.052968][ T1212] usb 2-1: Decoder not found [ 604.057500][T12414] usb 6-1: Product: syz [ 604.082464][T12414] usb 6-1: Manufacturer: syz [ 604.098371][T12414] usb 6-1: SerialNumber: syz [ 604.103050][ T1212] em28xx 2-1:0.132: failed to create media graph [ 604.103102][ T1212] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 604.119626][ T1212] em28xx 2-1:0.132: Remote control support is not available for this card. [ 604.171592][T12414] usb 6-1: config 0 descriptor?? [ 604.191422][T12261] em28xx 2-1:0.132: Closing input extension [ 604.235838][T13435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1710'. [ 604.269820][T12261] em28xx 2-1:0.132: Freeing device [ 604.404803][T12414] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 604.447859][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 604.452167][T11235] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 604.471175][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 604.492063][T12414] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 604.502681][T12414] usb 6-1: USB disconnect, device number 45 [ 604.646151][T11235] usb 7-1: config 0 has an invalid interface number: 188 but max is 3 [ 604.656198][T11235] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 604.665574][T11235] usb 7-1: config 0 has an invalid interface number: 96 but max is 3 [ 604.676003][T11235] usb 7-1: config 0 has an invalid interface number: 78 but max is 3 [ 604.684694][T11235] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 604.714459][T13460] fuse: Bad value for 'group_id' [ 604.719724][T13460] fuse: Bad value for 'group_id' [ 604.720752][T11235] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 604.740837][T11235] usb 7-1: config 0 has no interface number 0 [ 604.746960][T11235] usb 7-1: config 0 has no interface number 1 [ 604.765075][T11235] usb 7-1: config 0 has no interface number 2 [ 604.831727][T11235] usb 7-1: config 0 interface 188 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 604.858358][T11235] usb 7-1: config 0 interface 188 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 604.869459][T11235] usb 7-1: config 0 interface 188 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 604.883178][T11235] usb 7-1: config 0 interface 188 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 604.894448][T11235] usb 7-1: config 0 interface 188 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 604.905724][T11235] usb 7-1: config 0 interface 188 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 604.946451][ T30] audit: type=1800 audit(1756021214.597:2172): pid=13465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1717" name="nullb0" dev="devtmpfs" ino=3234 res=0 errno=0 [ 604.991693][T11235] usb 7-1: config 0 interface 188 altsetting 6 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 605.003716][T11235] usb 7-1: config 0 interface 96 altsetting 98 has a duplicate endpoint with address 0xA, skipping [ 605.014780][T11235] usb 7-1: config 0 interface 96 altsetting 98 has a duplicate endpoint with address 0x9, skipping [ 605.025865][T11235] usb 7-1: config 0 interface 96 altsetting 98 has a duplicate endpoint with address 0xB, skipping [ 605.037811][T11235] usb 7-1: config 0 interface 96 altsetting 98 has a duplicate endpoint with address 0xB, skipping [ 605.060341][T11235] usb 7-1: config 0 interface 78 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.073684][T11235] usb 7-1: config 0 interface 188 has no altsetting 0 [ 605.080806][T11235] usb 7-1: config 0 interface 96 has no altsetting 0 [ 605.081646][ T5936] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 605.087769][T11235] usb 7-1: config 0 interface 78 has no altsetting 0 [ 605.106939][T11235] usb 7-1: New USB device found, idVendor=0cad, idProduct=9001, bcdDevice=7a.d9 [ 605.119254][ T30] audit: type=1326 audit(1756021214.767:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.5.1719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff55d78ebe9 code=0x0 [ 605.141211][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.147993][T11235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.159305][T11235] usb 7-1: Product: syz [ 605.164293][T11235] usb 7-1: Manufacturer: syz [ 605.172912][T11235] usb 7-1: SerialNumber: syz [ 605.212870][T11235] usb 7-1: config 0 descriptor?? [ 605.251760][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 605.270134][ T5936] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 605.290125][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.329051][ T5936] usb 4-1: Product: syz [ 605.338772][ T5936] usb 4-1: Manufacturer: syz [ 605.348879][ T5936] usb 4-1: SerialNumber: syz [ 605.374229][ T5936] usb 4-1: config 0 descriptor?? [ 605.389351][ T5936] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 605.405691][ T5936] usb 4-1: Detected FT232H [ 605.592184][ T5936] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 606.010814][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 606.164269][ T9] usb 3-1: config 2 has an invalid interface number: 207 but max is 1 [ 606.208399][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 606.235895][ T9] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 606.268037][ T9] usb 3-1: config 2 has no interface number 0 [ 606.311323][ T9] usb 3-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 606.340744][ T9] usb 3-1: config 2 interface 207 has no altsetting 0 [ 606.356230][ T9] usb 3-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=95.7e [ 606.367584][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.386932][ T9] usb 3-1: Product: syz [ 606.396775][ T9] usb 3-1: Manufacturer: syz [ 606.408831][ T9] usb 3-1: SerialNumber: syz [ 606.469926][ T5936] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 606.548590][ T5936] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 606.569790][ T5936] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 606.653080][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.681193][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.707007][T13495] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 606.899526][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.903225][ T5936] usb 4-1: USB disconnect, device number 119 [ 607.033484][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.066144][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.092257][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.102228][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.157662][ T5936] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 607.176166][ T5936] ftdi_sio 4-1:0.0: device disconnected [ 607.385856][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.440358][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.478201][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.551669][T11235] usb 7-1: USB disconnect, device number 32 [ 607.682986][ T9] qmi_wwan 3-1:2.207: skipping garbage [ 607.690277][ T9] qmi_wwan 3-1:2.207: skipping garbage [ 607.697060][ T9] qmi_wwan 3-1:2.207: bogus CDC Union: master=0, slave=0 [ 607.705739][ T9] qmi_wwan 3-1:2.207: probe with driver qmi_wwan failed with error -22 [ 607.727111][ T9] usb 3-1: USB disconnect, device number 2 [ 607.950700][ T5936] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 608.144685][ T5936] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 608.154396][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.163858][ T5936] usb 4-1: Product: syz [ 608.168233][ T5936] usb 4-1: Manufacturer: syz [ 608.175234][ T5936] usb 4-1: SerialNumber: syz [ 608.189302][ T5936] usb 4-1: config 0 descriptor?? [ 608.484949][ T5936] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 608.567259][ T5936] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 609.497427][ T5936] usb 4-1: USB disconnect, device number 120 [ 609.848436][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 609.968884][ T30] audit: type=1800 audit(1756021219.617:2174): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1732" name="nullb0" dev="devtmpfs" ino=3234 res=0 errno=0 [ 610.174545][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.189042][ T9] usb 3-1: config 0 has no interface number 0 [ 610.225910][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 610.240705][T12113] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 610.268974][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 610.283463][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 610.297805][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.314886][ T9] usb 3-1: config 0 descriptor?? [ 610.321200][T13524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 610.339325][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 610.402758][T12113] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 610.442849][T12113] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 610.454106][T12113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.475392][T12113] usb 2-1: Product: syz [ 610.479589][T12113] usb 2-1: Manufacturer: syz [ 610.494705][T12113] usb 2-1: SerialNumber: syz [ 610.521979][T12113] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 610.591752][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 610.610438][ T5936] usb 3-1: USB disconnect, device number 3 [ 610.616730][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 610.782869][ T30] audit: type=1326 audit(1756021220.427:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 610.810211][T13542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'. [ 610.842645][T13531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.853038][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.877325][T13531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.900419][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.910207][ T30] audit: type=1326 audit(1756021220.427:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 610.983067][T13531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.983882][ T30] audit: type=1326 audit(1756021220.427:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 611.020665][ T30] audit: type=1326 audit(1756021220.427:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 611.040427][T13531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.104116][ T30] audit: type=1326 audit(1756021220.427:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 611.118234][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.188528][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.283391][T13531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.298004][ T30] audit: type=1326 audit(1756021220.427:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 611.365106][T13531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.409345][ T30] audit: type=1326 audit(1756021220.427:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 611.470319][T12113] usb 2-1: USB disconnect, device number 5 [ 611.670209][ T30] audit: type=1326 audit(1756021220.857:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 611.692977][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 611.737481][ T9] ath9k_htc: Failed to initialize the device [ 611.789510][T12113] usb 2-1: ath9k_htc: USB layer deinitialized [ 611.833091][ T30] audit: type=1326 audit(1756021220.857:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.6.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12ab8ebe9 code=0x7ffc0000 [ 612.013430][T13555] netlink: 'syz.3.1739': attribute type 4 has an invalid length. [ 612.181406][T13559] ptrace attach of "./syz-executor exec"[10356] was attempted by "./syz-executor exec"[13559] [ 612.192122][T12113] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 612.204560][T13557] dns_resolver: Unsupported server list version (0) [ 612.283348][T13558] binfmt_misc: register: failed to install interpreter file ./file0 [ 612.373325][T12113] usb 2-1: Using ep0 maxpacket: 32 [ 612.393627][T12113] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 612.404466][T12113] usb 2-1: config 0 has no interface number 0 [ 612.436161][T12113] usb 2-1: config 0 interface 12 has no altsetting 0 [ 612.446502][T12113] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 612.482487][T12113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.491350][T12113] usb 2-1: Product: syz [ 612.495682][T12113] usb 2-1: Manufacturer: syz [ 612.500333][T12113] usb 2-1: SerialNumber: syz [ 612.569143][T12113] usb 2-1: config 0 descriptor?? [ 612.680874][T12414] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 612.801433][ T5936] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 612.863931][T12414] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 612.881014][T12414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.920182][T12414] usb 4-1: Product: syz [ 612.925632][T12414] usb 4-1: Manufacturer: syz [ 612.931936][T12414] usb 4-1: SerialNumber: syz [ 612.997839][ T5936] usb 3-1: Invalid ep0 maxpacket: 32 [ 613.049915][T13573] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 613.079854][T12414] usb 4-1: config 0 descriptor?? [ 613.130732][ T5936] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 613.295826][ T5936] usb 3-1: Invalid ep0 maxpacket: 32 [ 613.325455][ T5936] usb usb3-port1: attempt power cycle [ 613.345552][T13577] syzkaller1: tun_chr_ioctl cmd 35108 [ 613.403460][T12414] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 613.472799][T12414] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 613.503766][T12414] usb 4-1: USB disconnect, device number 121 [ 613.680771][ T5936] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 613.711779][ T5936] usb 3-1: Invalid ep0 maxpacket: 32 [ 613.841051][ T5936] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 613.861781][ T5936] usb 3-1: Invalid ep0 maxpacket: 32 [ 613.867869][ T5936] usb usb3-port1: unable to enumerate USB device [ 613.977309][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'. [ 614.012992][T13589] sctp: [Deprecated]: syz.5.1750 (pid 13589) Use of int in maxseg socket option. [ 614.012992][T13589] Use struct sctp_assoc_value instead [ 614.057772][T13592] usb usb8: usbfs: process 13592 (syz.3.1749) did not claim interface 0 before use [ 614.084659][T13593] usb usb8: usbfs: process 13593 (syz.3.1749) did not claim interface 0 before use [ 614.266955][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.295660][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.051564][T13611] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1754'. [ 615.060971][T13611] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1754'. [ 615.070002][T13611] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1754'. [ 615.081583][T13611] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1754'. [ 615.470728][T12414] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 615.670083][T12414] usb 4-1: device descriptor read/64, error -71 [ 615.950271][T12113] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 615.966270][T12414] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 615.988821][T12113] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 616.014470][T12113] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 616.034969][T12113] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 616.085652][T12113] usb 2-1: USB disconnect, device number 6 [ 616.132208][T12414] usb 4-1: device descriptor read/64, error -71 [ 616.251481][T12414] usb usb4-port1: attempt power cycle [ 616.612341][T12414] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 616.661421][T12414] usb 4-1: device descriptor read/8, error -71 [ 616.680928][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 616.846275][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 616.856501][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.887304][T13634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.895340][ T9] usb 3-1: Product: syz [ 616.907725][ T9] usb 3-1: Manufacturer: syz [ 616.912785][T12414] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 616.930853][ T9] usb 3-1: SerialNumber: syz [ 616.931190][ T54] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 616.952043][ T9] usb 3-1: config 0 descriptor?? [ 616.958206][T12414] usb 4-1: device descriptor read/8, error -71 [ 617.050887][ T5936] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 617.081377][T12414] usb usb4-port1: unable to enumerate USB device [ 617.101254][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 617.131667][ T54] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 617.143549][ T54] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 617.149447][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1764'. [ 617.153860][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.171033][ T54] usb 2-1: Product: syz [ 617.176639][ T54] usb 2-1: Manufacturer: syz [ 617.185846][ T54] usb 2-1: SerialNumber: syz [ 617.189907][ T9] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 617.195911][ T54] usb 2-1: config 0 descriptor?? [ 617.212320][T13641] bridge0: port 3(vlan3) entered blocking state [ 617.223642][T13641] bridge0: port 3(vlan3) entered disabled state [ 617.229406][ T54] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 617.231519][ T9] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 617.237097][ T5936] usb 6-1: Using ep0 maxpacket: 16 [ 617.243650][T13641] vlan3: entered allmulticast mode [ 617.243673][T13641] bridge0: entered allmulticast mode [ 617.248693][ T9] usb 3-1: USB disconnect, device number 8 [ 617.268391][ T5936] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 617.268634][T13641] vlan3: left allmulticast mode [ 617.294703][T13641] bridge0: left allmulticast mode [ 617.298860][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.325998][ T5936] usb 6-1: Product: syz [ 617.330471][ T5936] usb 6-1: Manufacturer: syz [ 617.335611][ T5936] usb 6-1: SerialNumber: syz [ 617.351585][ T5936] usb 6-1: config 0 descriptor?? [ 617.365461][ T5936] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 617.377169][ T5936] usb 6-1: Detected FT-X [ 617.560980][ T5936] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 617.576896][ T5936] ftdi_sio 6-1:0.0: GPIO initialisation failed: -32 [ 617.594067][ T5936] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 617.821837][ T9] usb 6-1: USB disconnect, device number 46 [ 617.832435][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 617.880292][ T9] ftdi_sio 6-1:0.0: device disconnected [ 618.215671][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'. [ 618.551347][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 618.761607][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.782984][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.820656][ T9] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 618.848796][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.882930][ T9] usb 6-1: config 0 descriptor?? [ 619.327371][ T9] waterforce 0003:1044:7A4D.0021: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 619.515273][ T9] waterforce 0003:1044:7A4D.0021: fw version request failed with -38 [ 619.557549][ T9] usb 6-1: USB disconnect, device number 47 [ 619.818746][T13678] syz.2.1776 (13678) used greatest stack depth: 18040 bytes left [ 619.844731][T13681] fido_id[13681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 619.941612][ T54] gspca_zc3xx: i2c_r status error 8a [ 620.358561][ T54] gspca_zc3xx: reg_r err -71 [ 620.434472][ T1212] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 620.608707][ T1212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.671034][ T1212] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 620.998107][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.028921][ T1212] usb 6-1: config 0 descriptor?? [ 621.036821][ T54] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 621.057362][ T54] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 621.127913][ T54] usb 2-1: USB disconnect, device number 7 [ 621.214288][T13698] netlink: 'syz.1.1783': attribute type 11 has an invalid length. [ 621.226598][T13698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1783'. [ 621.246834][T13700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1784'. [ 621.261614][T12113] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 621.400777][T12113] usb 3-1: device descriptor read/64, error -71 [ 621.650709][T12113] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 621.681979][T13714] FAULT_INJECTION: forcing a failure. [ 621.681979][T13714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.745127][ T1212] usbhid 6-1:0.0: can't add hid device: -71 [ 621.751669][T13714] CPU: 1 UID: 0 PID: 13714 Comm: syz.6.1787 Not tainted syzkaller #0 PREEMPT(full) [ 621.751715][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.751733][T13714] Call Trace: [ 621.751741][T13714] [ 621.751749][T13714] dump_stack_lvl+0x189/0x250 [ 621.751778][T13714] ? __pfx____ratelimit+0x10/0x10 [ 621.751804][T13714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.751825][T13714] ? __pfx__printk+0x10/0x10 [ 621.751851][T13714] ? __might_fault+0xb0/0x130 [ 621.751896][T13714] should_fail_ex+0x414/0x560 [ 621.751928][T13714] _copy_from_user+0x2d/0xb0 [ 621.751952][T13714] do_ipv6_setsockopt+0x23e/0x2eb0 [ 621.751983][T13714] ? aa_label_sk_perm+0x4cd/0x630 [ 621.752017][T13714] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 621.752046][T13714] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 621.752085][T13714] ? vfs_write+0x956/0xb30 [ 621.752115][T13714] ? __pfx___might_resched+0x10/0x10 [ 621.752144][T13714] ? __lock_acquire+0xab9/0xd20 [ 621.752177][T13714] ? aa_sk_perm+0x81e/0x950 [ 621.752210][T13714] ? __pfx_aa_sk_perm+0x10/0x10 [ 621.752240][T13714] ? __fget_files+0x2a/0x420 [ 621.752267][T13714] ? aa_sock_opt_perm+0xff/0x1b0 [ 621.752289][T13714] ipv6_setsockopt+0x59/0x170 [ 621.752314][T13714] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 621.752346][T13714] do_sock_setsockopt+0x17c/0x1b0 [ 621.752372][T13714] __x64_sys_setsockopt+0x13f/0x1b0 [ 621.752398][T13714] do_syscall_64+0xfa/0x3b0 [ 621.752426][T13714] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.752453][T13714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.752473][T13714] ? clear_bhb_loop+0x60/0xb0 [ 621.752497][T13714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.752517][T13714] RIP: 0033:0x7fa12ab8ebe9 [ 621.752535][T13714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.752553][T13714] RSP: 002b:00007fa128dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 621.752574][T13714] RAX: ffffffffffffffda RBX: 00007fa12adb6090 RCX: 00007fa12ab8ebe9 [ 621.752589][T13714] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 621.752602][T13714] RBP: 00007fa128dd5090 R08: 0000000000000004 R09: 0000000000000000 [ 621.752614][T13714] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 621.752627][T13714] R13: 00007fa12adb6128 R14: 00007fa12adb6090 R15: 00007fa12aedfa28 [ 621.752659][T13714] [ 621.759945][ T1212] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 621.810800][T12113] usb 3-1: device descriptor read/64, error -71 [ 621.823885][T13717] loop2: detected capacity change from 0 to 7 [ 621.973888][T12113] usb usb3-port1: attempt power cycle [ 622.041340][T13717] Dev loop2: unable to read RDB block 7 [ 622.047340][T13717] loop2: AHDI p1 p2 p3 [ 622.052091][T13717] loop2: partition table partially beyond EOD, truncated [ 622.059781][T13717] loop2: p1 start 1601398130 is beyond EOD, truncated [ 622.069288][T13717] loop2: p2 start 1702059890 is beyond EOD, truncated [ 622.109859][ T1212] usb 6-1: USB disconnect, device number 48 [ 622.381502][T12113] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 622.444771][T12113] usb 3-1: device descriptor read/8, error -71 [ 622.561135][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 622.651940][T12414] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 622.710731][T12113] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 622.730835][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 622.738008][T12113] usb 3-1: device descriptor read/8, error -71 [ 622.747605][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.760638][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.780795][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 622.789868][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.828413][ T9] usb 4-1: config 0 descriptor?? [ 622.837312][T12414] usb 2-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config [ 622.850928][T12414] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.861771][T12113] usb usb3-port1: unable to enumerate USB device [ 622.891059][T12414] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.910361][T12414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.918608][T12414] usb 2-1: Product: syz [ 622.930898][T12414] usb 2-1: Manufacturer: syz [ 622.935645][T12414] usb 2-1: SerialNumber: syz [ 623.163092][T12414] usb 2-1: 0:2 : does not exist [ 623.184459][T12414] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 623.237671][T12414] usb 2-1: USB disconnect, device number 8 [ 623.297035][ T9] ft260 0003:0403:6030.0022: unknown main item tag 0x7 [ 623.312818][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.493202][ T9] ft260 0003:0403:6030.0022: chip code: 6424 8183 [ 623.590961][ T24] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 623.709685][ T9] ft260 0003:0403:6030.0022: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 623.743062][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.762527][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.779656][ T24] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 623.800909][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.844277][ T24] usb 6-1: config 0 descriptor?? [ 623.921361][ T9] ft260 0003:0403:6030.0022: failed to retrieve status: -32, no wakeup [ 623.940032][ T9] ft260 0003:0403:6030.0022: failed to retrieve status: -32 [ 624.179358][ T1212] usb 4-1: USB disconnect, device number 126 [ 624.427174][ T24] glorious 0003:258A:0036.0023: item fetching failed at offset 0/2 [ 624.464523][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.504718][ T24] glorious 0003:258A:0036.0023: probe with driver glorious failed with error -22 [ 624.532227][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.644396][ T24] usb 6-1: USB disconnect, device number 49 [ 624.650712][T12414] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 624.828593][T12414] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 624.836937][T12414] usb 2-1: config 0 has no interface number 0 [ 624.853153][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 624.867441][T12414] usb 2-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 624.887043][T12414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.942867][T12414] usb 2-1: config 0 descriptor?? [ 624.951970][T13760] loop2: detected capacity change from 0 to 7 [ 624.969123][T13760] Dev loop2: unable to read RDB block 7 [ 624.979063][T13760] loop2: AHDI p1 p2 p3 [ 624.997407][T13760] loop2: partition table partially beyond EOD, truncated [ 625.020429][T13760] loop2: p1 start 1601398130 is beyond EOD, truncated [ 625.042636][T13760] loop2: p2 start 1702059890 is beyond EOD, truncated [ 625.176381][T13766] FAULT_INJECTION: forcing a failure. [ 625.176381][T13766] name failslab, interval 1, probability 0, space 0, times 0 [ 625.381030][T13766] CPU: 1 UID: 0 PID: 13766 Comm: syz.3.1802 Not tainted syzkaller #0 PREEMPT(full) [ 625.381058][T13766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.381069][T13766] Call Trace: [ 625.381077][T13766] [ 625.381085][T13766] dump_stack_lvl+0x189/0x250 [ 625.381113][T13766] ? __pfx____ratelimit+0x10/0x10 [ 625.381141][T13766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.381164][T13766] ? __pfx__printk+0x10/0x10 [ 625.381193][T13766] ? __lock_acquire+0xab9/0xd20 [ 625.381229][T13766] should_fail_ex+0x414/0x560 [ 625.381261][T13766] should_failslab+0xa8/0x100 [ 625.381300][T13766] kmem_cache_alloc_noprof+0x73/0x3c0 [ 625.381326][T13766] ? skb_clone+0x212/0x3a0 [ 625.381352][T13766] skb_clone+0x212/0x3a0 [ 625.381375][T13766] __netlink_deliver_tap+0x404/0x850 [ 625.381416][T13766] ? netlink_deliver_tap+0x2e/0x1b0 [ 625.381446][T13766] netlink_deliver_tap+0x19c/0x1b0 [ 625.381475][T13766] netlink_unicast+0x7fa/0x9e0 [ 625.381508][T13766] ? __pfx_netlink_unicast+0x10/0x10 [ 625.381536][T13766] ? netlink_sendmsg+0x642/0xb30 [ 625.381563][T13766] ? skb_put+0x11b/0x210 [ 625.381585][T13766] netlink_sendmsg+0x805/0xb30 [ 625.381622][T13766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.381654][T13766] ? aa_sock_msg_perm+0xf1/0x1d0 [ 625.381674][T13766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.381695][T13766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.381724][T13766] __sock_sendmsg+0x21c/0x270 [ 625.381753][T13766] ____sys_sendmsg+0x505/0x830 [ 625.381782][T13766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.381812][T13766] ? import_iovec+0x74/0xa0 [ 625.381839][T13766] ___sys_sendmsg+0x21f/0x2a0 [ 625.381862][T13766] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.381918][T13766] ? __fget_files+0x2a/0x420 [ 625.381947][T13766] ? __fget_files+0x3a0/0x420 [ 625.381991][T13766] __x64_sys_sendmsg+0x19b/0x260 [ 625.382014][T13766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.382046][T13766] ? __pfx_ksys_write+0x10/0x10 [ 625.382069][T13766] ? rcu_is_watching+0x15/0xb0 [ 625.382095][T13766] ? do_syscall_64+0xbe/0x3b0 [ 625.382128][T13766] do_syscall_64+0xfa/0x3b0 [ 625.382152][T13766] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.382176][T13766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.382195][T13766] ? clear_bhb_loop+0x60/0xb0 [ 625.382216][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.382233][T13766] RIP: 0033:0x7f128d58ebe9 [ 625.382250][T13766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.382269][T13766] RSP: 002b:00007f128e3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.382298][T13766] RAX: ffffffffffffffda RBX: 00007f128d7b5fa0 RCX: 00007f128d58ebe9 [ 625.382312][T13766] RDX: 0000000000044800 RSI: 0000200000000140 RDI: 0000000000000003 [ 625.382325][T13766] RBP: 00007f128e3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 625.382338][T13766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.382349][T13766] R13: 00007f128d7b6038 R14: 00007f128d7b5fa0 R15: 00007f128d8dfa28 [ 625.382380][T13766] [ 626.310822][ T5959] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 626.451243][T13787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.563572][T12414] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 626.575706][T12414] asix 2-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 626.615383][T12414] asix 2-1:0.102: probe with driver asix failed with error -71 [ 626.657499][T12414] usb 2-1: USB disconnect, device number 9 [ 626.746730][T13806] FAULT_INJECTION: forcing a failure. [ 626.746730][T13806] name failslab, interval 1, probability 0, space 0, times 0 [ 626.759761][T13806] CPU: 0 UID: 0 PID: 13806 Comm: syz.3.1814 Not tainted syzkaller #0 PREEMPT(full) [ 626.759787][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.759799][T13806] Call Trace: [ 626.759808][T13806] [ 626.759817][T13806] dump_stack_lvl+0x189/0x250 [ 626.759847][T13806] ? __pfx____ratelimit+0x10/0x10 [ 626.759877][T13806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.759909][T13806] ? __pfx__printk+0x10/0x10 [ 626.759937][T13806] ? skb_network_protocol+0x4fe/0x760 [ 626.759962][T13806] ? __lock_acquire+0xab9/0xd20 [ 626.760000][T13806] should_fail_ex+0x414/0x560 [ 626.760032][T13806] should_failslab+0xa8/0x100 [ 626.760072][T13806] kmem_cache_alloc_noprof+0x73/0x3c0 [ 626.760098][T13806] ? skb_clone+0x212/0x3a0 [ 626.760125][T13806] skb_clone+0x212/0x3a0 [ 626.760145][T13806] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 626.760165][T13806] dev_queue_xmit_nit+0x416/0xcc0 [ 626.760183][T13806] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 626.760214][T13806] dev_hard_start_xmit+0x1be/0x830 [ 626.760256][T13806] __dev_queue_xmit+0x1b8d/0x3b50 [ 626.760292][T13806] ? __dev_queue_xmit+0x27b/0x3b50 [ 626.760332][T13806] ? __pfx___dev_queue_xmit+0x10/0x10 [ 626.760370][T13806] ? __copy_skb_header+0xa7/0x550 [ 626.760394][T13806] ? __asan_memcpy+0x40/0x70 [ 626.760417][T13806] ? __skb_clone+0x63/0x7a0 [ 626.760444][T13806] ? __skb_clone+0x483/0x7a0 [ 626.760473][T13806] ? skb_clone+0x246/0x3a0 [ 626.760499][T13806] __netlink_deliver_tap+0x5ad/0x850 [ 626.760542][T13806] ? netlink_deliver_tap+0x2e/0x1b0 [ 626.760576][T13806] netlink_deliver_tap+0x19c/0x1b0 [ 626.760604][T13806] netlink_unicast+0x7fa/0x9e0 [ 626.760643][T13806] ? __pfx_netlink_unicast+0x10/0x10 [ 626.760671][T13806] ? netlink_sendmsg+0x642/0xb30 [ 626.760697][T13806] ? skb_put+0x11b/0x210 [ 626.760718][T13806] netlink_sendmsg+0x805/0xb30 [ 626.760754][T13806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.760784][T13806] ? aa_sock_msg_perm+0xf1/0x1d0 [ 626.760804][T13806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 626.760824][T13806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.760852][T13806] __sock_sendmsg+0x21c/0x270 [ 626.760881][T13806] ____sys_sendmsg+0x505/0x830 [ 626.760908][T13806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.760939][T13806] ? import_iovec+0x74/0xa0 [ 626.760966][T13806] ___sys_sendmsg+0x21f/0x2a0 [ 626.760989][T13806] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.761050][T13806] ? __fget_files+0x2a/0x420 [ 626.761085][T13806] ? __fget_files+0x3a0/0x420 [ 626.761122][T13806] __x64_sys_sendmsg+0x19b/0x260 [ 626.761146][T13806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 626.761179][T13806] ? __pfx_ksys_write+0x10/0x10 [ 626.761201][T13806] ? rcu_is_watching+0x15/0xb0 [ 626.761227][T13806] ? do_syscall_64+0xbe/0x3b0 [ 626.761259][T13806] do_syscall_64+0xfa/0x3b0 [ 626.761287][T13806] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.761312][T13806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.761330][T13806] ? clear_bhb_loop+0x60/0xb0 [ 626.761352][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.761371][T13806] RIP: 0033:0x7f128d58ebe9 [ 626.761388][T13806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.761406][T13806] RSP: 002b:00007f128e3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.761428][T13806] RAX: ffffffffffffffda RBX: 00007f128d7b5fa0 RCX: 00007f128d58ebe9 [ 626.761444][T13806] RDX: 0000000000044800 RSI: 0000200000000140 RDI: 0000000000000003 [ 626.761458][T13806] RBP: 00007f128e3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 626.761471][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.761484][T13806] R13: 00007f128d7b6038 R14: 00007f128d7b5fa0 R15: 00007f128d8dfa28 [ 626.761517][T13806] [ 627.218095][T13811] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 627.472468][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 627.710762][T12113] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 627.761021][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 627.871017][T12113] usb 7-1: Using ep0 maxpacket: 32 [ 627.884062][T12113] usb 7-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 627.907173][T12113] usb 7-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 627.936484][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 627.946360][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.954742][ T24] usb 2-1: Product: syz [ 627.959126][ T24] usb 2-1: Manufacturer: syz [ 627.964159][ T24] usb 2-1: SerialNumber: syz [ 627.986442][T12113] usb 7-1: config 0 interface 0 has no altsetting 0 [ 627.994832][T12113] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 628.009485][T12113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.045540][T12113] usb 7-1: config 0 descriptor?? [ 628.066789][T12113] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 628.167448][T13837] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1824'. [ 628.260405][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.271018][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.314691][T12113] usb 7-1: USB disconnect, device number 33 [ 628.500373][T13844] vlan0: entered promiscuous mode [ 629.861432][T13864] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1832'. [ 629.880538][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1832'. [ 629.904727][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1832'. [ 630.283055][ T1212] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 630.330116][ T1212] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 630.413804][T13822] fuse: Bad value for 'user_id' [ 630.418872][T13822] fuse: Bad value for 'user_id' [ 630.454232][T13822] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 630.659020][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 630.674524][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 630.696310][T13874] fido_id[13874]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 630.720667][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 630.734070][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 630.778721][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 630.802111][ T24] usb 2-1: USB disconnect, device number 10 [ 630.830699][T12414] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 630.994691][T12414] usb 6-1: Using ep0 maxpacket: 16 [ 631.002904][T12414] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 631.015962][T12414] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.030029][T12414] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.031021][ T1212] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 631.112685][T12414] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.139220][T12414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.160731][T12414] usb 6-1: Product: syz [ 631.164936][T12414] usb 6-1: Manufacturer: syz [ 631.191034][T12414] usb 6-1: SerialNumber: syz [ 631.215540][ T1212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.250265][ T1212] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 631.300044][ T1212] usb 3-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 631.323033][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 631.341045][ T1212] usb 3-1: Product: syz [ 631.348350][ T1212] usb 3-1: Manufacturer: syz [ 631.380074][ T1212] usb 3-1: SerialNumber: syz [ 631.400218][ T1212] usb 3-1: config 0 descriptor?? [ 631.543058][T13898] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:21 [ 631.617567][T13881] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1836'. [ 631.644909][T12414] usb 6-1: 0:2 : does not exist [ 631.702795][T13904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.711910][T13904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.727788][T13883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1837'. [ 631.738430][T13883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.791041][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.851368][ T54] usb 3-1: USB disconnect, device number 13 [ 632.058836][T13915] tipc: Enabled bearer , priority 0 [ 632.087367][T13915] syzkaller0: entered promiscuous mode [ 632.097114][T13915] syzkaller0: entered allmulticast mode [ 632.144303][T13915] tipc: Resetting bearer [ 632.175095][T13914] tipc: Resetting bearer [ 632.271327][ T5959] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 632.302931][T12414] usb 6-1: USB disconnect, device number 50 [ 632.305242][T13914] tipc: Disabling bearer [ 632.405146][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.450749][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 632.472794][ T5959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.489223][T13923] loop8: detected capacity change from 0 to 8 [ 632.506104][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 632.519723][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.537463][T13923] Dev loop8: unable to read RDB block 8 [ 632.560739][ T5959] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 632.618038][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.641720][T13923] loop8: unable to read partition table [ 632.662167][T13923] loop8: partition table beyond EOD, truncated [ 632.678658][T13923] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 632.684757][ T5959] hub 4-1:1.0: bad descriptor, ignoring hub [ 632.734655][ T5959] hub 4-1:1.0: probe with driver hub failed with error -5 [ 632.771482][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 632.830049][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 632.840193][ T5959] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 633.017264][T13940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.025711][ T54] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 633.034295][T13940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.051642][T13940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.061043][T13940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.100831][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 633.100848][ T30] audit: type=1326 audit(1756021242.697:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 633.175667][ T30] audit: type=1326 audit(1756021242.697:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 633.207702][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.240755][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 633.308416][ T30] audit: type=1326 audit(1756021242.697:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 633.380213][ T54] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 633.386377][ T30] audit: type=1326 audit(1756021242.697:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 633.411673][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.431925][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.460334][ T30] audit: type=1326 audit(1756021242.697:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 633.491239][ T30] audit: type=1326 audit(1756021242.697:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 633.517392][ T30] audit: type=1326 audit(1756021242.697:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 633.592328][ T54] usb 3-1: Product: syz [ 633.612022][ T54] usb 3-1: Manufacturer: syz [ 633.623440][ T54] usb 3-1: SerialNumber: syz [ 633.833810][ T54] usb 3-1: config 0 descriptor?? [ 633.862692][ T54] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 633.912686][ T30] audit: type=1326 audit(1756021242.697:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 634.038500][ T30] audit: type=1326 audit(1756021242.697:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 634.060957][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.077391][ T30] audit: type=1326 audit(1756021242.697:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f128d58ebe9 code=0x7ffc0000 [ 634.323114][ T54] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 634.348257][ T54] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 634.400142][ T54] usb 3-1: USB disconnect, device number 14 [ 635.418393][T13974] tipc: Enabled bearer , priority 0 [ 635.581075][T13964] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1856'. [ 635.590188][T13964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.702912][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.871265][T13975] syzkaller0: entered promiscuous mode [ 635.876944][T13975] syzkaller0: entered allmulticast mode [ 635.901820][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.933992][T13976] tipc: Resetting bearer [ 635.971253][T13939] delete_channel: no stack [ 636.004772][T13973] tipc: Resetting bearer [ 636.110931][T12414] usb 4-1: USB disconnect, device number 2 [ 636.130028][T13973] tipc: Disabling bearer [ 636.178892][T13980] loop8: detected capacity change from 0 to 8 [ 636.236085][ T5990] Dev loop8: unable to read RDB block 8 [ 636.260749][ T5990] loop8: unable to read partition table [ 636.282990][ T5990] loop8: partition table beyond EOD, truncated [ 636.300501][T13980] Dev loop8: unable to read RDB block 8 [ 636.330774][T13980] loop8: unable to read partition table [ 636.363268][T13980] loop8: partition table beyond EOD, truncated [ 636.381689][T13980] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 636.411062][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 636.446452][T13988] tipc: Enabled bearer , priority 0 [ 636.471361][T13988] syzkaller0: entered promiscuous mode [ 636.476874][T13988] syzkaller0: entered allmulticast mode [ 636.513644][T13988] tipc: Resetting bearer [ 636.562135][T13986] tipc: Resetting bearer [ 636.571248][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 636.593522][ T54] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 636.610769][T12414] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 636.611873][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.672153][T13986] tipc: Disabling bearer [ 636.713325][ T54] usb 4-1: Product: syz [ 636.718598][ T54] usb 4-1: Manufacturer: syz [ 636.744037][ T54] usb 4-1: SerialNumber: syz [ 636.807219][ T54] usb 4-1: config 0 descriptor?? [ 636.812881][T12414] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.816543][ T54] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 636.835616][T13996] syzkaller1: entered promiscuous mode [ 636.841306][T13996] syzkaller1: entered allmulticast mode [ 636.891823][T12414] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 636.922382][T12414] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.942979][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.149958][T14002] fuse: Unknown parameter 'f‘0x0000000000000009' [ 637.213736][T12414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.334274][T12414] usb 6-1: Product: syz [ 637.377604][T12414] usb 6-1: Manufacturer: syz [ 637.510823][T12113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.532284][T12414] usb 6-1: SerialNumber: syz [ 637.573874][T12414] cdc_mbim 6-1:1.0: skipping garbage [ 637.768606][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.782455][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.807102][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.832528][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.881276][ T54] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 637.909998][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.921079][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 637.953777][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.982396][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.003137][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.035511][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.094645][ T24] usb 2-1: config 0 has no interfaces? [ 638.106573][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 638.141350][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.142614][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.167459][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.224693][ T24] usb 2-1: Product: syz [ 638.242483][ T24] usb 2-1: Manufacturer: syz [ 638.255700][ T24] usb 2-1: SerialNumber: syz [ 638.296078][ T24] usb 2-1: config 0 descriptor?? [ 638.315832][T13983] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 638.377650][T12414] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 638.384424][T12414] cdc_mbim 6-1:1.0: bind() failure [ 638.394237][T12414] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 638.456489][T12414] cdc_ncm 6-1:1.1: bind() failure [ 638.505466][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1867'. [ 638.628852][T14005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.647082][T14005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.848045][T14010] tipc: Enabled bearer , priority 0 [ 638.855686][T14010] syzkaller0: entered promiscuous mode [ 638.861268][T14010] syzkaller0: entered allmulticast mode [ 638.879581][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 638.986506][T14010] netlink: 'syz.6.1868': attribute type 2 has an invalid length. [ 639.016246][T14011] tipc: Resetting bearer [ 639.022999][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.078899][T14010] k›*·]‘: entered promiscuous mode [ 639.181407][T12414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.240908][ T24] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 639.307949][T14009] tipc: Resetting bearer [ 639.389463][T12113] usb 6-1: USB disconnect, device number 51 [ 639.415450][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 639.424520][T14009] tipc: Disabling bearer [ 639.437099][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 639.483265][ T24] usb 3-1: config 7 has an invalid interface number: 178 but max is 0 [ 639.501208][ T24] usb 3-1: config 7 has no interface number 0 [ 639.560662][ T24] usb 3-1: config 7 interface 178 has no altsetting 0 [ 639.579386][T12113] usb 4-1: USB disconnect, device number 3 [ 639.581002][ T24] usb 3-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=50.c2 [ 639.608250][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.666649][ T24] usb 3-1: Product: syz [ 639.682321][ T24] usb 3-1: Manufacturer: syz [ 639.686960][ T24] usb 3-1: SerialNumber: syz [ 639.917849][ T24] usb 3-1: Could not find all expected endpoints [ 639.920679][T12414] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 639.948687][ T24] usb 3-1: USB disconnect, device number 15 [ 639.973854][T12113] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 639.990909][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 640.062266][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.090774][T12414] usb 6-1: Using ep0 maxpacket: 8 [ 640.100657][T12414] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.116545][T12414] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 640.130809][T12113] usb 4-1: Using ep0 maxpacket: 16 [ 640.141547][T12414] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.157679][T12113] usb 4-1: config 0 has an invalid interface number: 94 but max is 0 [ 640.169841][ T9] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 640.185111][T12113] usb 4-1: config 0 has no interface number 0 [ 640.191515][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.203778][T12414] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 640.221151][T12113] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 640.235476][ T9] usb 7-1: config 0 has no interface number 0 [ 640.241715][T12414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.249725][T12113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.260277][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 640.279951][T12113] usb 4-1: Product: syz [ 640.287072][T12414] hub 6-1:1.0: bad descriptor, ignoring hub [ 640.296225][ T9] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.309566][T12113] usb 4-1: Manufacturer: syz [ 640.316431][T12414] hub 6-1:1.0: probe with driver hub failed with error -5 [ 640.326964][T12113] usb 4-1: SerialNumber: syz [ 640.339245][T12414] cdc_wdm 6-1:1.0: skipping garbage [ 640.345574][T12113] usb 4-1: config 0 descriptor?? [ 640.356792][ T9] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 640.366072][T12414] cdc_wdm 6-1:1.0: skipping garbage [ 640.377132][T12113] usb 4-1: unsupported MDLM descriptors [ 640.384763][T12414] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 640.397911][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.419328][ T9] usb 7-1: Product: syz [ 640.427450][ T9] usb 7-1: Manufacturer: syz [ 640.437754][ T9] usb 7-1: SerialNumber: syz [ 640.455586][ T9] usb 7-1: config 0 descriptor?? [ 640.541290][T12414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.544282][T14029] tipc: Started in network mode [ 640.555320][T14029] tipc: Node identity , cluster identity 4711 [ 640.561966][T14029] tipc: Failed to obtain node identity [ 640.567901][T14029] tipc: Enabling of bearer rejected, failed to enable media [ 640.702630][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.712184][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.729640][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.738673][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.805107][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 640.805125][ T30] audit: type=1326 audit(1756021250.377:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 640.905038][ T30] audit: type=1326 audit(1756021250.377:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 640.965635][ T30] audit: type=1326 audit(1756021250.377:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 641.051222][ T30] audit: type=1326 audit(1756021250.377:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 641.073739][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.116842][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.117356][T12414] usb 2-1: USB disconnect, device number 11 [ 641.216118][ T30] audit: type=1326 audit(1756021250.377:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 641.231618][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.311827][ T30] audit: type=1326 audit(1756021250.377:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 641.393140][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.448489][ T24] usb 4-1: USB disconnect, device number 4 [ 641.493533][T14040] tipc: Started in network mode [ 641.498576][T14040] tipc: Node identity f23a86c9254f, cluster identity 4711 [ 641.519211][T12113] usb 7-1: USB disconnect, device number 34 [ 641.527436][ T30] audit: type=1326 audit(1756021250.377:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 642.039548][T14040] tipc: Enabled bearer , priority 10 [ 642.141921][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.179934][ T30] audit: type=1326 audit(1756021250.377:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 642.260697][ T30] audit: type=1326 audit(1756021250.377:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 642.434868][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 642.492631][ T30] audit: type=1326 audit(1756021250.377:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d78ebe9 code=0x7ffc0000 [ 642.583095][T12113] tipc: Node number set to 3614803657 [ 642.638878][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 642.656338][ T9] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 642.665400][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.680900][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 642.725143][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 642.790916][ T9] usb 2-1: config 0 has no interface number 0 [ 642.797717][ T9] usb 2-1: too many endpoints for config 0 interface 1 altsetting 61: 142, using maximum allowed: 30 [ 642.817374][ T9] usb 2-1: config 0 interface 1 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 642.834007][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.841439][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 642.854485][ T9] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 642.913521][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.919012][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 643.123168][T14030] delete_channel: no stack [ 643.162498][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.176744][ T9] usb 2-1: config 0 descriptor?? [ 643.182224][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.202712][ T24] usb 7-1: config 0 descriptor?? [ 643.237151][ T9] usb 2-1: selecting invalid altsetting 0 [ 643.243683][T12414] usb 6-1: USB disconnect, device number 52 [ 643.441933][T14044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.451272][T14044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.463053][T14047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.501731][T14047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.546840][T14047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.609935][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.620630][T12414] usb 2-1: USB disconnect, device number 12 [ 643.638495][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1881'. [ 643.649962][T14047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.971452][T14047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.221490][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.271556][T14047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.500749][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 644.599002][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 644.626187][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 644.659735][ T9] usb 3-1: device descriptor read/64, error -71 [ 644.680393][ T24] usb 7-1: USB disconnect, device number 35 [ 644.931084][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 645.067167][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1884'. [ 645.078811][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1884'. [ 645.087971][ T9] usb 3-1: device descriptor read/64, error -71 [ 645.211217][ T9] usb usb3-port1: attempt power cycle [ 645.261290][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.270878][T11235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 645.537369][T11235] usb 4-1: Using ep0 maxpacket: 8 [ 645.551033][T11235] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 645.567259][T11235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.580771][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 645.608916][T11235] usb 4-1: Product: syz [ 645.621548][ T9] usb 3-1: device descriptor read/8, error -71 [ 645.630623][T11235] usb 4-1: Manufacturer: syz [ 645.635252][T11235] usb 4-1: SerialNumber: syz [ 645.673672][T11235] usb 4-1: config 0 descriptor?? [ 645.722406][T11235] usb 4-1: bad CDC descriptors [ 645.751803][T11235] usb 4-1: unsupported MDLM descriptors [ 645.903771][T14085] netdevsim netdevsim6: Direct firmware load for x failed with error -2 [ 645.923944][T14085] netdevsim netdevsim6: Falling back to sysfs fallback for: x [ 645.931678][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 645.961911][T11235] usb 4-1: USB disconnect, device number 5 [ 645.996604][ T9] usb 3-1: device descriptor read/8, error -71 [ 646.121181][ T9] usb usb3-port1: unable to enumerate USB device [ 646.305509][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.621216][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.915433][T14102] tipc: Enabled bearer , priority 0 [ 646.931629][T14103] tipc: Enabling of bearer rejected, already enabled [ 646.966146][T14102] syzkaller0: entered promiscuous mode [ 646.977602][T14102] syzkaller0: entered allmulticast mode [ 647.203463][T14102] tipc: Resetting bearer [ 647.258123][T14102] tipc: Disabling bearer [ 647.264399][ T54] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 647.342149][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.410972][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 647.425931][ T54] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 647.438587][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.457406][ T54] usb 7-1: Product: syz [ 647.467582][ T54] usb 7-1: Manufacturer: syz [ 647.477756][ T54] usb 7-1: SerialNumber: syz [ 647.493443][ T54] usb 7-1: config 0 descriptor?? [ 647.550879][ T24] usb 2-1: device descriptor read/64, error -71 [ 647.776555][ T54] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 647.799661][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 647.813240][ T54] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 647.834137][ T54] usb 7-1: USB disconnect, device number 36 [ 647.886127][T14122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.907634][T14122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.926187][T14122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.940286][T14122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.957797][ T24] usb 2-1: device descriptor read/64, error -71 [ 647.981320][T14122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.989761][T14122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.048229][T14122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.071522][ T24] usb usb2-port1: attempt power cycle [ 648.420931][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 648.442931][ T24] usb 2-1: device descriptor read/8, error -71 [ 648.680732][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 648.690789][T11235] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 648.706097][ T24] usb 2-1: device descriptor read/8, error -71 [ 648.821248][ T24] usb usb2-port1: unable to enumerate USB device [ 648.855314][T11235] usb 7-1: Using ep0 maxpacket: 16 [ 648.920500][T11235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.941932][T11235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.960672][T11235] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 648.985510][T11235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.019807][T11235] usb 7-1: config 0 descriptor?? [ 649.318000][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'. [ 649.792794][T11235] gt683r_led 0003:1770:FF00.0025: unbalanced delimiter at end of report description [ 649.833543][T11235] gt683r_led 0003:1770:FF00.0025: hid parsing failed [ 649.848204][T11235] gt683r_led 0003:1770:FF00.0025: probe with driver gt683r_led failed with error -22 [ 649.867884][T11235] usb 7-1: USB disconnect, device number 37 [ 649.939894][T14157] netdevsim netdevsim5: Direct firmware load for x failed with error -2 [ 649.949877][T14157] netdevsim netdevsim5: Falling back to sysfs fallback for: x [ 650.801074][ T54] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 650.957801][ T54] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 651.037790][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.069017][ T54] usb 7-1: Product: syz [ 651.088966][ T54] usb 7-1: Manufacturer: syz [ 651.103097][ T54] usb 7-1: SerialNumber: syz [ 651.121633][ T54] usb 7-1: config 0 descriptor?? [ 651.436215][ T54] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 651.476790][ T54] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 651.524736][ T54] usb 7-1: USB disconnect, device number 38 [ 651.710366][T14183] syzkaller0: left allmulticast mode [ 651.787722][T14186] tipc: Enabled bearer , priority 0 [ 651.795336][T14186] syzkaller0: entered allmulticast mode [ 651.902814][ T24] net_ratelimit: 1827 callbacks suppressed [ 651.902834][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.150926][T11235] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 652.311926][T11235] usb 3-1: Using ep0 maxpacket: 16 [ 652.324416][T11235] usb 3-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 652.342995][T11235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.358857][T11235] usb 3-1: Product: syz [ 652.366613][T11235] usb 3-1: Manufacturer: syz [ 652.378065][T11235] usb 3-1: SerialNumber: syz [ 652.389666][T11235] usb 3-1: config 0 descriptor?? [ 652.495234][T14205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.540782][ T5876] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.618601][T11235] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 652.631704][ T31] INFO: task kworker/1:7:5995 blocked for more than 143 seconds. [ 652.644612][ T31] Not tainted syzkaller #0 [ 652.652289][T11235] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 652.659062][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.683010][T11235] usb 3-1: USB disconnect, device number 20 [ 652.698848][ T31] task:kworker/1:7 state:D stack:21128 pid:5995 tgid:5995 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 652.713724][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.748911][ T31] Workqueue: usb_hub_wq hub_event [ 652.765076][ T31] Call Trace: [ 652.773151][ T31] [ 652.779538][ T31] __schedule+0x1798/0x4cc0 [ 652.790305][ T31] ? __pfx___schedule+0x10/0x10 [ 652.803664][ T31] ? schedule+0x91/0x360 [ 652.813590][ T31] schedule+0x165/0x360 [ 652.819144][ T31] schedule_preempt_disabled+0x13/0x30 [ 652.824762][ T31] __mutex_lock+0x7e6/0x1350 [ 652.829386][ T31] ? __mutex_lock+0x5bb/0x1350 [ 652.834564][ T31] ? hub_event+0x21e5/0x4a20 [ 652.839184][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 652.844318][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 652.850340][ T31] hub_event+0x21e5/0x4a20 [ 652.855175][ T31] ? do_raw_spin_lock+0x121/0x290 [ 652.860263][ T31] ? __pfx_hub_event+0x10/0x10 [ 652.866421][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 652.874004][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.879332][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 652.885579][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 652.891531][ T31] process_scheduled_works+0xae1/0x17b0 [ 652.897200][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.903381][ T31] worker_thread+0x8a0/0xda0 [ 652.908008][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 652.915000][ T31] ? __kthread_parkme+0x7b/0x200 [ 652.920014][ T31] kthread+0x70e/0x8a0 [ 652.924424][ T31] ? __pfx_worker_thread+0x10/0x10 [ 652.929603][ T31] ? __pfx_kthread+0x10/0x10 [ 652.934323][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.939546][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.945970][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.955108][ T31] ? __pfx_kthread+0x10/0x10 [ 652.959729][ T31] ret_from_fork+0x3f9/0x770 [ 652.964595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 652.969726][ T31] ? __switch_to_asm+0x39/0x70 [ 652.974859][ T31] ? __switch_to_asm+0x33/0x70 [ 652.979649][ T31] ? __pfx_kthread+0x10/0x10 [ 652.985309][ T31] ret_from_fork_asm+0x1a/0x30 [ 652.990119][ T31] [ 652.993391][ T31] [ 652.993391][ T31] Showing all locks held in the system: [ 653.002272][ T31] 1 lock held by khungtaskd/31: [ 653.007154][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 653.017128][ T31] 2 locks held by getty/5624: [ 653.027840][ T31] #0: ffff888033b7f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 653.038029][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 653.048283][ T31] 5 locks held by kworker/0:5/5958: [ 653.053624][ T31] #0: ffff888143e93d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 653.065362][ T31] #1: ffffc9000b1c7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 653.077368][ T31] #2: ffff88823be86998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 653.086432][ T31] #3: ffff888028a92518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 653.096841][ T31] #4: ffff8880289d3668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 653.106730][ T31] 5 locks held by kworker/1:7/5995: [ 653.112079][ T31] #0: ffff888143e93d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 653.133279][ T31] #1: ffffc9000b327bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 653.153061][ T31] #2: ffff888028af9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 653.167897][ T31] #3: ffff888028b1b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 653.178372][ T31] #4: ffff8880289d3668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 653.191229][ T31] 2 locks held by kworker/u8:15/9529: [ 653.196706][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 653.209363][ T31] #1: ffffc90003f4fbc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 653.220998][ T31] 2 locks held by syz.3.1907/14159: [ 653.226325][ T31] [ 653.228718][ T31] ============================================= [ 653.228718][ T31] [ 653.237851][ T31] NMI backtrace for cpu 1 [ 653.237869][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 653.237892][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.237905][ T31] Call Trace: [ 653.237913][ T31] [ 653.237922][ T31] dump_stack_lvl+0x189/0x250 [ 653.237954][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.237979][ T31] ? __pfx__printk+0x10/0x10 [ 653.238018][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 653.238046][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 653.238073][ T31] ? __pfx__printk+0x10/0x10 [ 653.238105][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.238138][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 653.238166][ T31] watchdog+0xf93/0xfe0 [ 653.238199][ T31] ? watchdog+0x1de/0xfe0 [ 653.238230][ T31] kthread+0x70e/0x8a0 [ 653.238258][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.238284][ T31] ? __pfx_kthread+0x10/0x10 [ 653.238309][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.238335][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.238361][ T31] ? __pfx_kthread+0x10/0x10 [ 653.238386][ T31] ret_from_fork+0x3f9/0x770 [ 653.238410][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 653.238437][ T31] ? __switch_to_asm+0x39/0x70 [ 653.238460][ T31] ? __switch_to_asm+0x33/0x70 [ 653.238483][ T31] ? __pfx_kthread+0x10/0x10 [ 653.238508][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.238550][ T31] [ 653.238558][ T31] Sending NMI from CPU 1 to CPUs 0: [ 653.390570][ C0] NMI backtrace for cpu 0 [ 653.390585][ C0] CPU: 0 UID: 0 PID: 5885 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 653.390605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.390615][ C0] RIP: 0010:lockdep_hardirqs_off+0x4b/0x110 [ 653.390645][ C0] Code: 91 00 00 00 48 89 fb 65 8b 05 31 a6 26 07 a9 00 00 f0 00 74 69 83 3d 13 f9 31 0e 00 75 15 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 7e 65 8b 05 cd e2 26 07 85 c0 74 57 65 4c [ 653.390661][ C0] RSP: 0018:ffffc90004c9f968 EFLAGS: 00000046 [ 653.390677][ C0] RAX: 0000000000000000 RBX: ffffffff8b7a815f RCX: a16bfb0148a2a000 [ 653.390691][ C0] RDX: 0000000000000000 RSI: ffffffff8da0809b RDI: ffffffff8be33680 [ 653.390704][ C0] RBP: ffffc90004c9fbb8 R08: ffffffff8fa38937 R09: 1ffffffff1f47126 [ 653.390718][ C0] R10: dffffc0000000000 R11: fffffbfff1f47127 R12: dffffc0000000000 [ 653.390731][ C0] R13: 0000000000000000 R14: ffff888020ea8000 R15: 1ffff110170c7551 [ 653.390744][ C0] FS: 0000555595549500(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 653.390760][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.390773][ C0] CR2: 00005555784865c8 CR3: 0000000032e54000 CR4: 00000000003526f0 [ 653.390789][ C0] Call Trace: [ 653.390797][ C0] [ 653.390806][ C0] ? __schedule+0x34f/0x4cc0 [ 653.390828][ C0] trace_hardirqs_off+0x12/0x40 [ 653.390852][ C0] __schedule+0x34f/0x4cc0 [ 653.390874][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 653.390898][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 653.390922][ C0] ? ktime_get+0x3e/0x1f0 [ 653.390945][ C0] ? __lock_acquire+0xab9/0xd20 [ 653.390969][ C0] ? __pfx___schedule+0x10/0x10 [ 653.390999][ C0] ? schedule+0x91/0x360 [ 653.391021][ C0] schedule+0x165/0x360 [ 653.391044][ C0] do_nanosleep+0x1c7/0x600 [ 653.391066][ C0] ? do_nanosleep+0x7f/0x600 [ 653.391086][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 653.391108][ C0] ? __hrtimer_setup+0x187/0x210 [ 653.391123][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 653.391143][ C0] hrtimer_nanosleep+0x169/0x360 [ 653.391162][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 653.391180][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 653.391199][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 653.391222][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 653.391254][ C0] __se_sys_clock_nanosleep+0x2ee/0x380 [ 653.391281][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 653.391305][ C0] ? rcu_is_watching+0x15/0xb0 [ 653.391325][ C0] ? do_syscall_64+0xbe/0x3b0 [ 653.391352][ C0] do_syscall_64+0xfa/0x3b0 [ 653.391377][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.391394][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 653.391412][ C0] ? clear_bhb_loop+0x60/0xb0 [ 653.391432][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.391449][ C0] RIP: 0033:0x7fcdb39c14a5 [ 653.391463][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 653.391484][ C0] RSP: 002b:00007fcdb3cdfd40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 653.391502][ C0] RAX: ffffffffffffffda RBX: 000000000000056b RCX: 00007fcdb39c14a5 [ 653.391516][ C0] RDX: 00007fcdb3cdfd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 653.391527][ C0] RBP: 00007fcdb3cdfdec R08: 0000000000000000 R09: 0000000000000000 [ 653.391539][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000016c [ 653.391551][ C0] R13: 0000000000000040 R14: 000000000009ece3 R15: 00007fcdb3cdfe40 [ 653.391571][ C0] [ 653.737558][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.744808][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 653.751742][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 653.760862][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.770933][ T31] Call Trace: [ 653.774224][ T31] [ 653.777165][ T31] dump_stack_lvl+0x99/0x250 [ 653.781779][ T31] ? __asan_memcpy+0x40/0x70 [ 653.786385][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.791595][ T31] ? __pfx__printk+0x10/0x10 [ 653.796226][ T31] vpanic+0x281/0x750 [ 653.800228][ T31] ? __pfx_vpanic+0x10/0x10 [ 653.804742][ T31] ? preempt_schedule+0xae/0xc0 [ 653.809612][ T31] ? preempt_schedule_common+0x83/0xd0 [ 653.815095][ T31] panic+0xb9/0xc0 [ 653.818826][ T31] ? __pfx_panic+0x10/0x10 [ 653.823245][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 653.828625][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 653.834775][ T31] watchdog+0xfd2/0xfe0 [ 653.838929][ T31] ? watchdog+0x1de/0xfe0 [ 653.843258][ T31] kthread+0x70e/0x8a0 [ 653.847327][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.852000][ T31] ? __pfx_kthread+0x10/0x10 [ 653.856586][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.861780][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.866970][ T31] ? __pfx_kthread+0x10/0x10 [ 653.871555][ T31] ret_from_fork+0x3f9/0x770 [ 653.876151][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 653.881277][ T31] ? __switch_to_asm+0x39/0x70 [ 653.886049][ T31] ? __switch_to_asm+0x33/0x70 [ 653.890812][ T31] ? __pfx_kthread+0x10/0x10 [ 653.895402][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.900170][ T31] [ 653.903533][ T31] Kernel Offset: disabled [ 653.907843][ T31] Rebooting in 86400 seconds..