last executing test programs: 9.277324796s ago: executing program 3 (id=3918): syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000300)=0xfffffffffffffffe, 0x7, 0x5) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0xff) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020e00000000000000070000000500060000000e000a004e24fffffffdfc010000000000000700000000000000988500000000000002000100000004d4008100000000000005000500000000000a004e22fffff800fc0100000000000000000000000000010600000000000000"], 0x70}, 0x1, 0x400000000000000}, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) (async) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x8, 0x3, 0x3c2}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) (async) r5 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) prctl$PR_SET_TSC(0x1a, 0x0) (rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 9.029393044s ago: executing program 3 (id=3920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) 8.888795305s ago: executing program 4 (id=3921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = signalfd4(r1, &(0x7f0000000040)={[0x3ff]}, 0x8, 0x800) sendfile(r1, r2, 0x0, 0x4000000003a) mkdirat(r0, 0x0, 0x184) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e00"], 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000fef000/0xe000)=nil, r3, 0x2000002, 0x12, r0, 0x0) write$evdev(r2, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x14, 0x2, 0x2}], 0x18) 8.727863612s ago: executing program 3 (id=3922): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x7, &(0x7f0000004200)=0x0) io_getevents(r0, 0x4, 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) eventfd(0x32a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x1fff, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002498293fce43cc00010026bd7000fcdb"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x1, @broadcast, 0x4c23, 0x1000, 'sh\x00', 0x7, 0x8, 0x2c}, 0x2c) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2) 7.022768264s ago: executing program 4 (id=3931): r0 = syz_usb_connect(0x0, 0x37d, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000001000000000000000000000000000000000000000000005000600ff0000000a2c95159100000000000000000000000000000000000001000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000108000000000005000500000000000a004e2100000000fc010000000000000000000000000001060000000000000005000700000000000a004e2100000006fc010000000000000000000000000001ff07000000000000020013000100000027bd700000000000"], 0xe8}}, 0x0) r2 = userfaultfd(0x801) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x55ce, &(0x7f00000002c0)={0x0, 0xdd70, 0x40, 0x3, 0x1fb}, &(0x7f00000001c0), &(0x7f0000000200)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r3, 0x1) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000040)=""/155) 5.300838878s ago: executing program 3 (id=3933): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xfd}, 'port1\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x7, 0x1}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x1630, &(0x7f0000003200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a848008100170086dd68"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x40, 0x1, 0x401, 0x3, {{0x1e, 0x4, 0x1, 0x3f, 0x78, 0x68, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @empty, {[@cipso={0x86, 0x5c, 0xffffffffffffffff, [{0x0, 0x6, "8a7d76e6"}, {0x1, 0x5, "c7fec6"}, {0x2, 0x11, "1ded7752981cb2d6446b19532b2a47"}, {0x0, 0x12, "b728b958239f81df48a9baf96dd1ecbd"}, {0x2, 0x2}, {0x6, 0x6, "f01104f9"}, {0x6, 0xc, "6576e96b8d15af7a9572"}, {0x2, 0x3, "e3"}, {0x0, 0x11, "75d2b79fdaa9d72b781e1c47a51965"}]}, @ssrr={0x89, 0x7, 0x6f, [@broadcast]}]}}}}}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000005c0)=[@uexit={0x0, 0x18, 0x6859}, @wr_drn={0x68, 0x20, {0x4, 0xd20}}, @nested_vmresume={0x130, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x66a1, 0x1}}, @wrmsr={0x65, 0x20, {0xab7, 0x8000000000000000}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x2, 0x4}}, @out_dx={0x6a, 0x28, {0xdd0f, 0x5, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest16=0x806, 0x7, 0x2, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x39, 0x1}}, @wrmsr={0x65, 0x20, {0x824, 0x80000001}}, @in_dx={0x69, 0x20, {0xe93d, 0x4}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x664, 0x3, 0x23, 0x7}}, @out_dx={0x6a, 0x28, {0x48e7, 0x6, 0x5}}, @out_dx={0x6a, 0x28, {0xd1d9, 0x2, 0x5}}, @out_dx={0x6a, 0x28, {0x8a5e, 0x0, 0x5}}, @out_dx={0x6a, 0x28, {0x5f0, 0x1, 0x2}}, @rdmsr={0x66, 0x18, {0x9d0}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x52b, 0x10, 0x9, 0x81}}], 0x328}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000900)={{0xfec33000, 0xeeee0000, 0x3, 0x7, 0x80, 0x6, 0x8c, 0x3, 0x0, 0x40, 0xf8, 0x53}, {0x100000, 0x1000, 0x8, 0x60, 0x4, 0xc, 0x9, 0x76, 0xc7, 0x8, 0xf4, 0x2}, {0x54000, 0x54000, 0xe, 0x6, 0xd, 0xe, 0x9, 0x7, 0x4}, {0x3000, 0x41000, 0xf546043ee359b368, 0x4, 0x7f, 0x9, 0x40, 0x4f, 0x9, 0xbf, 0x3, 0xa}, {0xdddd1000, 0x200000, 0x7, 0x2, 0x10, 0x9, 0x7, 0x9, 0x0, 0x2, 0x0, 0x81}, {0x5000, 0x7000, 0xb, 0x4, 0x8f, 0xeb, 0xa, 0x50, 0xc, 0x10, 0x6e}, {0xffffffff, 0x80a0000, 0x0, 0x9, 0x2d, 0x9, 0xf6, 0xac, 0xfb, 0x8, 0x7f, 0x40}, {0x30000, 0x3000, 0x4, 0xa7, 0x3, 0x8, 0x7f, 0xfc, 0x7f, 0x0, 0xc, 0x3}, {0x7e000, 0x4}, {0x50000, 0x5}, 0x60010001, 0x0, 0x41000, 0x140009, 0x1, 0x4000, 0xdddd1000, [0x0, 0x4a4, 0x1, 0x206]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000"], 0x0, 0x0}, 0x0) 2.836158819s ago: executing program 3 (id=3939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7400000010000104000000000000ffffffffffff", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005"], 0x74}}, 0x0) 2.602534882s ago: executing program 3 (id=3940): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'wlan0\x00', {0x2, 0x0, @empty}}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r1, 0x4, 0x2400) write$FUSE_LK(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x80, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x4006, 0x6, 0x3012, 0x5, 0x0, 0x7, 0x2, 0x6}}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000040)) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x5, "1605"}, @global=@item_4={0x3, 0x1, 0x0, '\r\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @local=@item_4={0x3, 0x2, 0x0, "d063770d"}, @main=@item_4={0x3, 0x0, 0x8, "00208000"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.355976516s ago: executing program 1 (id=3943): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) unshare(0x40000) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (rerun: 64) statx(r3, 0x0, 0x0, 0x80, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r4, 0x0, 0x8000, 0x0, 0x6, 0x7179e, 0x1f692c}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x9, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file1\x00'}) (async) ptrace(0x10, r5) (async) ptrace$setregset(0x4205, r5, 0xcf1f038a0dc030d3, 0xfffffffffffffffe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) r7 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x2, 0x801, 0x0, r6}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) (async, rerun: 32) io_uring_enter(r7, 0x7277, 0x0, 0x28, 0x0, 0x0) (rerun: 32) 2.332449135s ago: executing program 2 (id=3945): write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x7, 0xd5, 0xf7}}, 0xa) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x305000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) io_uring_enter(r5, 0x7ccf, 0xa940, 0x4, &(0x7f0000000240)={[0x7fffffffffffffff]}, 0x8) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000400)={r7, 0x4, &(0x7f0000000340)=[0x1, 0x8, 0x7, 0x8], &(0x7f0000000380)=[0x84, 0x1000], &(0x7f00000003c0)=[0x81, 0x2, 0x6]}) r8 = syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000480)={0x0, 0x0, {0x101, 0xe8f, 0x2020, 0x2, 0x0, 0x3, 0x0, 0x7}}) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000640)={&(0x7f0000000600)=[{0xd, 0x601, 0xe9, &(0x7f0000000500)="abe88da5a2680176653d70c4f307534b672a614b0c6b7f2dfb2f5a38c11905b0ea067ee1893530cd6c3285771359e978c544050300178b53331330f1bf19303b0445fdf6c01caa3ccd6360b4118effc8ceff118a3c643f554539658f1aec7266f120d847b331e6590f84d3214f2e82cb7247682cb9a9edd95c6b355bae9faee8ea9d78efe0879ac26045d87c1525d5e7634828deeb0f70dce1a5b684919857911fe086ab2b9da317f3c73b0f56c20662da201380251db6da24f2432f65e2c13787231af0c33852dae259a1d17720b76dfc147d3d2dde784f14d31ea7ec1518105a40948ad97028c074"}], 0x1}) r9 = syz_create_resource$binfmt(&(0x7f0000000680)='./file0\x00') execveat$binfmt(r4, r9, &(0x7f0000000900)={[&(0x7f00000006c0)='\x00', &(0x7f0000000700)='\'-%.)}\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='&\x00', &(0x7f00000007c0)='/dev/ocfs2_control\x00', &(0x7f0000000800)='/[@*\\\xed\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='/dev/radio#\x00', &(0x7f00000008c0)=']\x00']}, &(0x7f0000000b00)={[&(0x7f0000000980)='\\~\'\x00', &(0x7f00000009c0)='\x00', &(0x7f0000000a00)='&\xee*.[\':&-\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='/dev/ocfs2_control\x00', &(0x7f0000000ac0)='*\x00']}, 0x800) close_range(r4, r8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x2, &(0x7f0000000b40)) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000b80)) pivot_root(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00') ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r10 = open_tree(r1, &(0x7f0000000c40)='./file0\x00', 0x8001) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000c80)={0x1, r7, 0x7ff, 0x1, 0x6, 0x21840000, 0xa27}) epoll_create1(0x80000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000f80)={&(0x7f0000000d00)="26f46e262385737d448ff50215ebf4d571a0239f2f1d16f9a2cc9186", &(0x7f0000000d40)=""/220, &(0x7f0000000e40)="0fafed26abaaac0c1b75f4c202061b6840f5cbf218846f5f2b0af2ee71dbce11380ee604206ae487ac5b26bc363cd3716252666f8a28a2a87624", &(0x7f0000000e80)="07a7cc2fab53170bb69b20abb9070d3f534bde484d1cb3594c86298939585d8479c2572aec76572e70b3ed0dd7bdc5fa95266149188c0fb80fa7a243bc77b53310d876693d7bca0c4b8054c8a44157fdb326bd27816515bf1710a1b452d16ea64d77384893109e2fcbe20173d91459a01333b289f0318e68cb991cc5e2383a6c454995c89959eba8e396d87e127846e8562e91698a6227215a39103d2ea95411254d491ab38443cf6f202de4e036b7a1ce9ff212cb51643aa68e649cebf48c2053acd249c9c1b93203c239512ff9c796b7b8c4", 0x9, r10, 0x4}, 0x38) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000fc0)={0x1, "8375cd18afa414a031bd0b9f0a0322a092c62155699994d7c20aeb3a285bcd69", 0x3, 0x1}) 2.261897458s ago: executing program 2 (id=3946): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="00f3ff", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 2.139879596s ago: executing program 2 (id=3947): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) prctl$PR_CAPBSET_READ(0x17, 0x29) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c6000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r6, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000500)="b9ff0300600d69", 0x0, 0x100, 0x60000000, 0x0, 0xc0, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba"}, 0x50) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000004200)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000009, 0x0, 0x0) accept4(r3, 0x0, &(0x7f0000000000), 0x80000) 2.137847152s ago: executing program 1 (id=3948): r0 = syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000140), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a000000050004000000000009"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410072786500140033006c6f0009b01a2c"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x850) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000007b280000000c000180080001", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000002c0)=0x8) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x63e, 0x391, 0x1}) syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') 2.027894745s ago: executing program 1 (id=3949): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x7, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0x1]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xa, 0x9, 0x0, 0x5, 0x8, 0x3, 0x7, 0x0, 0x8, 0x25, 0x8b, 0x0, 0x2, 0x7, 0x1, 0x8, 0x4, 0x8a, '\x00', 0x8e, 0x100000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x7, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0x1]}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xa, 0x9, 0x0, 0x5, 0x8, 0x3, 0x7, 0x0, 0x8, 0x25, 0x8b, 0x0, 0x2, 0x7, 0x1, 0x8, 0x4, 0x8a, '\x00', 0x8e, 0x100000001}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 1.884472906s ago: executing program 4 (id=3950): unshare(0x2c020400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) close(r2) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) setns(r0, 0x20000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x98\x97\x7fw\x9ac\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d4\x98\x10\xfe\xe0D\x15\x9cQ\x10\xa0\x13 \x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89I\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2a\f\x928\xfdu\xa8\x019\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ\xedQ\xcf\xf6%~=l~3\x88\xc2VgjD=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\b\xc1\x85Y\x00\x00\x00\x00\x00\x00\xfd_\x94\xc7\x82\x1d\x18I\xac\xa2\x9a.\xecR\xed\x9d\xe5%\xef)Oo&\xe0\x81\x02\r\xbc\\\xc9\bBz\v\b\xa8\xc8F\xe1\fl\xfbV7s\xa7\x81\xd3:\xb4\xddw@\xa5\xee\xcf\x91\xf18B\xe3\r\xf5\xa2 j\xbc\xf4\x99\xb6K\xd5\x9f\xc8I\xea\xf5\x85/\x16\xc1)UF\xf9\xe3bX\x86*\xf6\t\xdf\xb5Fs\xd5O\xe7\x81\xfd DG\xdc\x0fE\x80k\xd9\xc3\xb2\x96\x1b\a\x13Mz\xb6G\x7f+\v@\x81#\xe68;1\\.+\x00.i-3\x1bUp\xfe\x04\xf5X\x1cT\x1dT\xd5\xe6E\xaa\x11\xb6\xc9\tr', 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404"], 0x0) unshare(0x2c020400) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) close(r2) (async) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) setns(r0, 0x20000) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x98\x97\x7fw\x9ac\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d4\x98\x10\xfe\xe0D\x15\x9cQ\x10\xa0\x13 \x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89I\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2a\f\x928\xfdu\xa8\x019\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ\xedQ\xcf\xf6%~=l~3\x88\xc2VgjD=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\b\xc1\x85Y\x00\x00\x00\x00\x00\x00\xfd_\x94\xc7\x82\x1d\x18I\xac\xa2\x9a.\xecR\xed\x9d\xe5%\xef)Oo&\xe0\x81\x02\r\xbc\\\xc9\bBz\v\b\xa8\xc8F\xe1\fl\xfbV7s\xa7\x81\xd3:\xb4\xddw@\xa5\xee\xcf\x91\xf18B\xe3\r\xf5\xa2 j\xbc\xf4\x99\xb6K\xd5\x9f\xc8I\xea\xf5\x85/\x16\xc1)UF\xf9\xe3bX\x86*\xf6\t\xdf\xb5Fs\xd5O\xe7\x81\xfd DG\xdc\x0fE\x80k\xd9\xc3\xb2\x96\x1b\a\x13Mz\xb6G\x7f+\v@\x81#\xe68;1\\.+\x00.i-3\x1bUp\xfe\x04\xf5X\x1cT\x1dT\xd5\xe6E\xaa\x11\xb6\xc9\tr', 0x0) (async) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404"], 0x0) (async) 1.399376747s ago: executing program 0 (id=3951): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) bind(r1, &(0x7f00000000c0)=@llc={0x1a, 0x498ef14165e31fc2, 0xe9, 0x7, 0x0, 0x10, @random="ff8dccf05c8e"}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) preadv(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203) socketpair$unix(0x1, 0xac2ffe9c2639f6f4, 0x0, &(0x7f00000002c0)) 1.395112752s ago: executing program 1 (id=3952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x29, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x5, 0x0, 0x40a, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0x248, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8000, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000007c0)={0x22c, 0x2, 0x0, {{0x500, 0xeb, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x10, '\bg\xa4m\v\x9c\r\xe2kw\x9c\xb0\x17\xc9l\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\x00\xfe\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a\n~'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x22c) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 1.224361916s ago: executing program 0 (id=3953): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7000000}, 0x94) 1.184316513s ago: executing program 1 (id=3954): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb45, 0x9, 0xc, 0x0, 0x1}, 0x0) (async) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r8 = fcntl$dupfd(r7, 0x0, r7) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f00000002c0)='\x97\xd0\xacB\x9f~\xcd\xc8\xa7f.\x8e;\xc8\x137', 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000280)={0x23a0, 0x277ac9dd, {}, {0xffffffffffffffff}, 0x2}) fchownat(r8, &(0x7f0000000240)='./file0\x00', r9, 0xee01, 0x400) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x4004) (async) read$dsp(r6, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a) 883.263101ms ago: executing program 0 (id=3955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000110a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b00070066696c"], 0xf4}}, 0x0) 789.732838ms ago: executing program 0 (id=3956): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000131ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 673.521534ms ago: executing program 4 (id=3957): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xffff700c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004e80)=@newchain={0x3ec4, 0x64, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x3e98, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_ACT={0x3e8c, 0x7, [@m_pedit={0x1e84, 0x1, 0x0, 0x0, {{0xa}, {0x1db0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x13c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x609, 0x8, 0x5, 0x6, 0x100}, 0xd, 0x5, [{0xffff, 0xdc50, 0x2, 0x0, 0x2, 0x2}]}, [{0x7, 0xf, 0x70, 0x8, 0xa05, 0x1}, {0x6, 0x0, 0x0, 0xb, 0xfffffff7, 0x6}, {0x100, 0xff, 0x6, 0xfffffffa, 0x1, 0x9}, {0x3, 0x6, 0x5, 0x7, 0xee0, 0xb3d}, {0x2, 0x6, 0x0, 0x6, 0xfbd, 0x4}, {0x1, 0x3, 0x9, 0x2, 0x1, 0x1}, {0xd, 0x5, 0x298, 0x0, 0x3, 0x3}, {0x8, 0x1, 0xa9c, 0x6, 0x8, 0x4}, {0xb, 0x3ff, 0xf, 0x2, 0x64, 0x5}, {0x80000001, 0x3, 0x3ff, 0x9, 0xc2, 0x80000000}, {0x56aa8c5c, 0xa6, 0x4, 0x7, 0x2, 0xa7}, {0x4, 0x5, 0x4, 0x6, 0x0, 0x9}, {0x2, 0x3, 0x4, 0x6, 0x400}, {0x3, 0x8, 0x10, 0x9, 0xa2, 0x6c9}, {0x1, 0x1, 0x9, 0x100, 0x4, 0xfffffff9}, {0x6, 0x0, 0xf, 0x9, 0x7, 0x1011}, {0x10000, 0x800, 0x5, 0x3, 0x4, 0x3}, {0x10, 0x0, 0x2d, 0x8, 0x4226}, {0x2, 0x8, 0x6, 0x5, 0xd, 0x5}, {0x50a6bf2d, 0x9, 0x6095, 0xa8c8, 0x5, 0x7}, {0x4, 0x4, 0x1000, 0x8, 0x52db, 0x6c}, {0x6, 0x6, 0x9, 0x40, 0x10, 0xb}, {0x3, 0x5, 0x663, 0x3, 0xfffffe00, 0x2}, {0x7f, 0x2ea6, 0x80, 0x0, 0x7, 0x3}, {0x80000001, 0xfda1, 0x6, 0x4, 0x7f, 0x7f}, {0x572, 0x174, 0x40, 0x3, 0xfffffffd, 0x800}, {0x8, 0xc8c8, 0x7, 0x79833598, 0x5, 0x1ff}, {0x3, 0x8, 0x7822, 0x6, 0xfff, 0xd}, {0x80000000, 0xfffffc00, 0x0, 0x80000000, 0x9, 0xfffff000}, {0x8, 0x56, 0xde, 0x6, 0x0, 0x2}, {0x2, 0x6, 0x5, 0x566, 0x7, 0x9}, {0x5, 0xfff, 0x0, 0x2, 0x3, 0x1}, {0x8, 0xabd, 0x5, 0xa, 0x80, 0x9df}, {0x1, 0x5c, 0x4, 0x62, 0x3, 0xffffff23}, {0x8, 0x3, 0x3, 0x3, 0x8}, {0xfff, 0x80, 0x0, 0x8d71, 0x9, 0x3}, {0x1, 0x8fc, 0x2, 0x6, 0x2, 0xe41}, {0xb1c, 0x0, 0x800, 0x0, 0x5, 0x6}, {0x8, 0x4, 0x0, 0x1, 0x9, 0x2}, {0x9, 0x200, 0xe4c8, 0xe, 0x4, 0x1}, {0x4, 0x1, 0x1000, 0x3, 0x8, 0xfffffff7}, {0x101, 0x9, 0x7fffffff, 0x0, 0x40, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x3000000, 0x7}, {0x7, 0x69bd, 0x9, 0x40, 0x100, 0x5}, {0x1000, 0x9, 0x4, 0x1c, 0x7f, 0xae}, {0x5, 0x23, 0x9, 0x4, 0x4, 0x7}, {0xb, 0x3, 0x9, 0xffffffb7, 0x5, 0x8}, {0x9, 0x6, 0x804d, 0xc, 0x6, 0x2}, {0x8, 0x3, 0x8, 0x6, 0x8, 0xfd}, {0x9, 0x4, 0x8, 0xf, 0x4, 0xa341}, {0x5, 0x8, 0x1, 0x9, 0x2, 0xfff}, {0x10001, 0x6, 0xe, 0xe, 0xfffffffb, 0x1}, {0x8, 0x5, 0xc, 0x55f, 0x59, 0xc}, {0x1, 0x3, 0x0, 0x100, 0x0, 0x6}, {0x7ff, 0x7ff, 0x5, 0x1, 0x1, 0xeda}, {0x1, 0x82d, 0x5e, 0x2, 0x4, 0x8}, {0x0, 0x5, 0x5, 0x6, 0x9, 0x4}, {0xff, 0xffff8000, 0x95, 0x5, 0x2, 0x3}, {0x4, 0x7, 0x2, 0x1ff, 0x6, 0x4}, {0x1, 0xff, 0x0, 0x8, 0x5be1c66f, 0x75}, {0x34, 0x7, 0xfff, 0x2, 0x4c, 0x127}, {0x4, 0x5, 0x1c2, 0x5, 0x2, 0x8}, {0x10, 0x0, 0x3, 0x1bff, 0xfffffffb, 0x8}, {0x9, 0x8, 0x1, 0x2, 0x200, 0x3}, {0x0, 0x8, 0x1, 0xe2b, 0x40, 0x3ff}, {0x40, 0x1, 0x8, 0x8000, 0x80000000, 0xffffff7f}, {0x5, 0x6, 0xfffffffc, 0x0, 0x101, 0x41eb}, {0x9, 0xa, 0x5, 0x6, 0x1ff, 0x9}, {0xffffffff, 0x0, 0x2, 0x10, 0x1, 0x4afc}, {0xfffffffc, 0xb, 0xff, 0x8, 0x8000, 0xc6c3}, {0x8, 0x8001, 0xfffffffc, 0xf7, 0x2, 0x81}, {0x3ff, 0x80, 0x7fffffff, 0xd66d, 0x7fffffff, 0xffffffff}, {0x40000, 0x4, 0xa, 0x1, 0x249b, 0x6}, {0x0, 0x6, 0x1, 0x64, 0x87, 0x7}, {0x8, 0x3, 0x7, 0x1, 0x7, 0x2}, {0x4, 0x3, 0xfffffffb, 0x6, 0x6, 0x80000001}, {0x81, 0x78, 0x3, 0x2227, 0x1, 0x7}, {0x3, 0x9, 0x5, 0x5}, {0x1fc1, 0x0, 0x9, 0xfb, 0xcf67}, {0x78f862a9, 0x0, 0xffffffff, 0x800, 0x9}, {0x45, 0x1, 0x5, 0xae, 0x7, 0x3}, {0xa8, 0x4, 0x4, 0x400, 0x4, 0x9}, {0xfd, 0x6d3, 0x4, 0x7, 0x1, 0x7}, {0x101, 0x5, 0x4, 0x1, 0xb, 0x7}, {0x7, 0x5, 0x40, 0x9, 0x7, 0x10000}, {0x1, 0xfffffff9, 0x5, 0xe241, 0x3ff, 0x81}, {0x6, 0xd078, 0x0, 0x9, 0x827, 0xbfa5}, {0x40, 0x3, 0x6, 0x8, 0x5, 0x2}, {0x6, 0x7245bc95, 0x8, 0xe, 0x9, 0xbc0}, {0xa0000, 0xfffffffb, 0x80000000, 0xff, 0x5, 0x1}, {0x7, 0x1, 0x10001, 0x8, 0x7, 0x4}, {0xfff, 0x2, 0x7, 0xe22, 0x59, 0x200}, {0x7e, 0xfffffff8, 0x7fff, 0x6, 0x7, 0x1ff}, {0x4, 0x1, 0x7, 0x9, 0x80, 0xfffff001}, {0x9d, 0x8, 0x100, 0x8, 0xff, 0x4}, {0xfffffffa, 0x3, 0x8000, 0x4, 0x8, 0x1}, {0x1, 0xade, 0x5, 0x129, 0x2, 0xb2fa}, {0x8000, 0x1, 0xe3, 0x10001, 0x6, 0x9}, {0xf, 0x0, 0x7, 0x13d1, 0xf25, 0xffffffff}, {0x6, 0x1, 0x4, 0x4, 0x8, 0xfffffff8}, {0xffffffff, 0x3ff, 0x3f9, 0x9, 0xfffffffd, 0x2}, {0x1, 0x9, 0x400, 0x1, 0x81, 0x4}, {0x1000, 0x7, 0x4, 0x4, 0x8, 0xbc0}, {0x9, 0x8, 0xd9, 0x4, 0x9, 0xa}, {0x1, 0x3, 0x9, 0x5, 0x1ff, 0x7fffffff}, {0x7, 0x3a, 0x2, 0x1, 0x400, 0x8}, {0x4ee3, 0x7, 0xffffffdc, 0x2, 0xf, 0x372b}, {0x5, 0x7, 0xfffffffb, 0x6, 0x0, 0xfffffff7}, {0x6, 0x6, 0x9, 0x0, 0x6, 0x5}, {0x2, 0x0, 0x3d, 0x4, 0xfffffffc, 0xff}, {0x0, 0x8, 0x8, 0x5, 0x1, 0x8}, {0xee, 0x4, 0xff3, 0x8, 0x872a37af, 0x2}, {0x0, 0xe, 0xfffffffe, 0x1ff, 0xd0, 0xa}, {0x80, 0x6, 0x5c, 0x0, 0x8, 0x401}, {0x1, 0xffff, 0xfffffff8, 0x1, 0x2000, 0x5}, {0x2, 0x6, 0x81, 0x1, 0x4, 0x6}, {0x5, 0x9, 0x40, 0xa, 0x1, 0x7}, {0x81, 0x0, 0x1, 0x2e1c, 0x4c9, 0xffffffff}, {0x6, 0x8, 0x861, 0x4, 0x0, 0x6}, {0xb, 0x8, 0x401, 0x7f, 0x9, 0x3}, {0xa5, 0x9, 0x1, 0x30, 0x7, 0xfffffffb}, {0x80, 0x5, 0x7ea, 0x3, 0x908f, 0xfff}, {0x5, 0x7, 0x1, 0x8012, 0x1, 0xc9a3}, {0x10001, 0x4, 0x4, 0xfffff001, 0x8, 0x3}, {0x8000, 0xa, 0x80000001, 0x8, 0x7, 0x80000000}, {0x3, 0x8, 0x8, 0x2, 0x5, 0xd7}, {0xaad1, 0x4, 0x200, 0xcff, 0x80000000, 0x2}, {0x5, 0x9, 0x9, 0x8, 0x7}], [{0x2517079c5b4f77ac, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0xf90f3bfc6d18a7af}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x515290b7819fe79f}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x3a3912336db64b07}, {0x2}, {0xcb9b2d5b15f0071d, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x538ea8f63286dc26}, {0x5}, {0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0xf349b32ff55f50b}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x3}, {0x43a29531df45b053}, {0x4}, {}, {}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x92859b9d09416ff6, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6, 0x200, 0x3, 0x1c, 0x4}, 0x4, 0x9, [{0x10, 0x8001, 0x2, 0x7f, 0x1, 0x5}]}, [{0x2, 0x28f41dcb, 0x1, 0xfffffffc, 0x2c, 0x5}, {0x339, 0x9, 0x2, 0x5, 0x4, 0x1000}, {0x1, 0x4, 0x2, 0x1, 0xfffffff9, 0x3}, {0x0, 0x10001, 0x5, 0x1ff, 0x7, 0x4}, {0x40, 0x8001, 0x5, 0x3, 0x7fffffff, 0xfffffc00}, {0x5, 0x8, 0x80000001, 0x6, 0x80000001, 0x4}, {0x9, 0x4, 0x1, 0x4, 0x3, 0xf9a6}, {0x6, 0x57, 0x7, 0xffffffd3}, {0x3, 0x0, 0x2, 0x6, 0x5}, {0xbc54, 0x3, 0x5, 0x0, 0x4, 0x7fffffff}, {0xbbe, 0x6, 0x8001, 0x2, 0x3, 0x4}, {0x9, 0x3, 0x3, 0x8, 0x1bb96085, 0x3}, {0x8, 0x7ae2, 0xe556, 0x58, 0x9}, {0x1, 0x7, 0xc2ee, 0x9, 0xb, 0x8}, {0x8bf, 0x9, 0x6, 0x8, 0x7ff, 0x9}, {0xe, 0x4, 0x1, 0x5, 0x0, 0x3}, {0x9, 0x2, 0xfff, 0x5d19, 0x8, 0x9}, {0x0, 0x3, 0x1000, 0x7, 0x1ff, 0x9}, {0xfe47, 0x40, 0x0, 0x2, 0x6, 0x8}, {0x6, 0x81, 0x368e1e5b, 0x0, 0x7, 0x800}, {0x7, 0x6d3d, 0xfffffffb, 0x8001, 0xa05d}, {0xac5, 0x5, 0x2, 0x0, 0x9, 0x1000}, {0xffff08bd, 0x9b1c, 0x101, 0x9, 0x9, 0x4}, {0x7, 0x2, 0x5600, 0x7, 0x4, 0x9}, {0xd, 0x9, 0x687, 0x9, 0x1000, 0x9}, {0x9, 0x3, 0x80, 0x8, 0x7fff, 0x7fff}, {0x0, 0x7f, 0x3, 0x4, 0x6, 0x81}, {0x9, 0x9, 0xf54, 0x2, 0x451, 0x14b984bb}, {0x800, 0x47c0, 0x5, 0xcf2, 0xa, 0x7}, {0x10000000, 0x7464, 0x4bff, 0x0, 0x9, 0x40000000}, {0x8, 0x2, 0x6, 0x400, 0x2, 0xe}, {0x7, 0x5, 0x6, 0x725, 0x2, 0x1}, {0x3, 0x5, 0x2fa7, 0xffffffff, 0x1, 0x101}, {0xd9, 0x5, 0x1, 0x3, 0x2, 0x5}, {0x2, 0x0, 0x8, 0x1e12, 0xd, 0x9}, {0x6, 0x7, 0x101, 0x6, 0x1c000000, 0x6}, {0x4000000, 0x9, 0x5, 0xfff, 0x0, 0x8000}, {0x2, 0x8000, 0x9a0, 0x55, 0x9, 0x1}, {0x4, 0x0, 0x2, 0x1f000000, 0x3, 0x4}, {0x6, 0x2, 0x1000, 0x4}, {0xf, 0xfe, 0x1, 0x6b5, 0x3, 0x401}, {0x7, 0x8, 0x1, 0xb, 0x1000, 0x1}, {0x6, 0x7, 0x0, 0x9, 0x7f, 0xd6}, {0x80000001, 0x4, 0x0, 0xfffffffb, 0x8, 0x9}, {0xffffffff, 0x5, 0xffff8000, 0x1, 0x3, 0x650}, {0x1, 0x5, 0x2, 0x6, 0xa16, 0xfffffffc}, {0x7f, 0x7, 0x401, 0xffff, 0x1306, 0x800}, {0xa, 0x4, 0x3000, 0x9, 0xe6, 0x26185476}, {0x5, 0x2077, 0xfffffffc, 0x8, 0x5, 0x5}, {0xf8c5, 0xecb, 0x9, 0x2, 0x2, 0x6}, {0x80000000, 0x3ff, 0x6, 0x9, 0xfffffff9, 0x2}, {0x0, 0x8, 0x4, 0x8, 0x6, 0x9}, {0x66, 0x4, 0x6, 0x36a, 0x9, 0x7ff}, {0x7ce0, 0x101, 0xfffffffa, 0x8, 0x99, 0x6}, {0x1, 0x800, 0x8, 0x69, 0x6, 0x6}, {0x2, 0x400, 0x5c4, 0x9, 0x4, 0x3}, {0x2, 0x7ff, 0x7f, 0x8a, 0x8, 0x7cf6}, {0x0, 0x0, 0x9, 0x8, 0x4, 0xfffffff3}, {0x4, 0xfffffff8, 0x5, 0x92ad, 0x2, 0x7}, {0x8, 0x4, 0xfffffff8, 0x58, 0xff, 0x80000000}, {0x3ff, 0x8, 0xf0700000, 0x3, 0x1, 0x1}, {0x4, 0x9, 0x8, 0x7, 0xfffeffff, 0x8001}, {0x6, 0x3, 0xa, 0x6, 0x9, 0x5119}, {0x3, 0x5, 0x6, 0x3ff, 0x7, 0x2}, {0x1000, 0x1, 0x6, 0x7ff, 0x80, 0x100}, {0x18a5, 0x0, 0x6, 0x1, 0x10, 0x3ff}, {0x3, 0x2, 0x6, 0x100, 0x1, 0x80000000}, {0x80000001, 0x8000, 0x5, 0x3, 0x8, 0x1}, {0x6, 0x3, 0x8, 0x2, 0x4, 0x2b}, {0x6, 0x4, 0xa, 0x7fff, 0x6, 0xffffffff}, {0x70e, 0x10, 0x1, 0x9, 0xd, 0x4}, {0xffffff00, 0x2, 0xffffffff, 0x1c0983e9, 0xc406b88c}, {0x9, 0x8, 0x4, 0x20, 0x1b, 0x4}, {0x10, 0xff, 0x1ff, 0x80, 0xc2b1}, {0x4, 0x5, 0x7, 0x65, 0x8, 0x9ac}, {0x4, 0x97, 0x4, 0x2, 0x8, 0xcbae}, {0xffff413c, 0xf3, 0x6, 0xffffffff, 0xa, 0x200}, {0x4, 0x8, 0x3, 0x2, 0x6, 0x400}, {0x7, 0x7fff, 0x0, 0x8, 0x4, 0x8}, {0x5, 0x10000, 0x6f, 0x5, 0x6, 0x2}, {0x9, 0x36ef0311, 0x9, 0x0, 0x2, 0x2}, {0x8, 0x5607, 0x2, 0xb8, 0x10000, 0x2}, {0x60, 0x1ff, 0x3, 0x4, 0xf42aa71}, {0x0, 0x1, 0x557, 0xeff9, 0xfffffff8, 0x8}, {0x12, 0x6, 0xf, 0x7, 0x3ff, 0x152}, {0x1, 0x8, 0x7, 0x1, 0x8000, 0x7fffffff}, {0x1, 0xfec, 0x0, 0xb, 0x9, 0x5}, {0x4, 0x2, 0x3, 0x9, 0xd4, 0x5}, {0x6, 0x9, 0x3, 0x5, 0x401, 0xd0}, {0x7, 0x2, 0x0, 0xe, 0x1}, {0x1, 0x0, 0x1ff, 0x7f, 0x80, 0x8ad}, {0x6, 0xffff, 0x71, 0x200, 0x2, 0x7}, {0x5, 0x7e6, 0x5f1c1114, 0x1f, 0x4, 0x7}, {0xd0, 0x4, 0x7, 0x9, 0x3, 0x4}, {0x5, 0x0, 0x1, 0x830, 0x40, 0x9}, {0x9, 0x1ff, 0x8, 0x2, 0xa7, 0x10001}, {0x0, 0x1, 0x10001, 0x6, 0x6}, {0x80000000, 0x80000000, 0x7f, 0x2, 0x8, 0x7}, {0x5, 0x0, 0x6, 0x8f9, 0x3, 0x7}, {0x7, 0x7fff, 0x40, 0x81c, 0xd898, 0x8}, {0x3, 0x9, 0x93, 0x8001, 0x2, 0x6ff}, {0x7fff, 0x5, 0x5, 0x7ff, 0x7, 0x7}, {0x8, 0x4, 0x8, 0xffff8001, 0xfffffff8, 0x9}, {0x5, 0x0, 0x2, 0x8, 0x7, 0x80}, {0xe, 0x2, 0xb0, 0x7f, 0xe, 0x7}, {0x9, 0x10000, 0x200, 0x0, 0x0, 0x9a5d6800}, {0x200, 0x40000000, 0x98, 0x81, 0xf, 0x5}, {0xfffffff8, 0x0, 0x10, 0x800, 0xd6f, 0x9}, {0x4, 0x8, 0x5b, 0xffff38e3, 0x5, 0x1}, {0x80000000, 0x1, 0x4, 0x80000000, 0x0, 0xb842}, {0x1, 0x5c1, 0x6, 0x1, 0x1, 0x7d}, {0x82d0, 0x0, 0x100, 0x6, 0x8, 0x3}, {0xa3, 0x9, 0x8001, 0xbde, 0xc, 0xce}, {0x1, 0xfff, 0x5, 0x89, 0x1, 0x72eb249b}, {0x7f, 0x4, 0x9a94, 0xdf06, 0x50d7a37e, 0x3}, {0x2, 0x3, 0x5, 0x9, 0xb, 0x97aa}, {0x0, 0x10000, 0x6, 0x80000001, 0x63d, 0x2}, {0x9dde, 0x5, 0x6, 0x7, 0x8, 0x4}, {0x1, 0x7ff, 0x10, 0x5, 0x10000, 0x1}, {0x1, 0x3, 0x0, 0x7, 0x8, 0x7}, {0x10, 0x0, 0x5, 0x0, 0x9, 0x400}, {0xfffffffd, 0x1ff, 0x0, 0x80000001, 0x9, 0x4}, {0x7ff, 0x8, 0x2, 0x1, 0x7ff, 0xe}, {0x97, 0x1, 0x5, 0x10, 0x5, 0x9}, {0x0, 0x70671d44, 0x8001, 0x7, 0x80, 0x5}, {0xc, 0x7, 0x1c, 0x400, 0x5, 0x401}, {0x9, 0x7, 0xb, 0x7, 0x2, 0x9e4a}, {0x1, 0x408, 0x7, 0x8000, 0x0, 0x7}], [{0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {0x2, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x643fcf6c713a9136}, {0x3}]}}]}, {0xa9, 0x6, "9863d0bf05012cb62f47fddc470af6206b6780e2187a77729cf8d13b760f1b6c73d8275082b76314d5f323298f8c6491bbd9671168c3b59478e41a348ec2de70a88f2ccca69dbb23a27f2c35b94f59ad0daaceac40844711f8020cf784e9bd03f53bd553b8e95ee037a3e5efb213cf90b5f115692d69a58402897543a05929ffc7fd4f1c765ee0ddc765bceb5baeead751b47c3c2d534bc01acf02bcd925906c805164d347"}, {0xc}, {0xc, 0x8, {0x7, 0x3}}}}, @m_pedit={0x2004, 0x1a, 0x0, 0x0, {{0xa}, {0x1f70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x401, 0x3, 0x6, 0x0, 0x4}, 0xc, 0x1, [{0xe, 0x0, 0x10, 0x5, 0x8, 0x9b0}, {0x6, 0x6, 0x9, 0x8, 0x400, 0x10}, {0x1000, 0x8, 0x0, 0xffff, 0x5, 0xd092}, {0x1, 0xffffffff, 0x80000001, 0x7, 0x9, 0x8}, {0x800, 0x7f, 0x2, 0x38ef, 0xa, 0x2}]}, [{0x5, 0x3d26, 0x7, 0x4ed4, 0x2, 0x8001}, {0x4, 0x4, 0xfffffff9, 0x9, 0x64, 0x9}, {0x2, 0x2, 0x9, 0x7, 0x4}, {0x6, 0x1, 0x9, 0x20d, 0x10000, 0x8f7}, {0x1, 0x4, 0x2, 0x2, 0x3, 0x80}, {0xf, 0x5c3c, 0x8000, 0xa, 0xbc1f, 0x7f}, {0x3ff, 0x8000, 0x401, 0x6, 0x9, 0x3}, {0x5, 0x7, 0xc, 0x0, 0x8, 0xfffffff8}, {0x0, 0x3, 0x0, 0x800, 0x64b, 0x2}, {0xe, 0x8000, 0x9, 0x300000, 0x8, 0x6}, {0x2, 0x3, 0x7ff, 0x101, 0xfffffffc, 0x363b}, {0xfffffe6f, 0x80000000, 0x8, 0x8, 0x5, 0x60}, {0xd, 0x8, 0x6, 0x9a36, 0x1, 0x3}, {0x7, 0x6, 0x9, 0x2, 0x0, 0x1ff}, {0xe, 0x10, 0x9, 0x8, 0xc, 0x762}, {0x9, 0x9, 0x2, 0x0, 0xfc000000, 0x3}, {0x6, 0x8, 0xffffffff, 0x8, 0x0, 0x7f}, {0x9a, 0x8, 0x7, 0xb412, 0x2, 0x4}, {0x64, 0x5, 0x1, 0xffffffff, 0x1, 0x7}, {0x2, 0x7fffffff, 0x8, 0x7fffffff, 0x0, 0xfffffffa}, {0x5, 0x0, 0x6, 0x8, 0x8c12, 0x7}, {0x3, 0x4, 0xde, 0x0, 0xffff, 0xffffff18}, {0x401, 0x10000, 0x8, 0x6, 0x100, 0x1}, {0x0, 0x9, 0x80000000, 0x0, 0x8}, {0x10001, 0x8, 0x2, 0x9, 0x5c99, 0x44}, {0x7, 0x3, 0x6, 0x10001, 0x80000001, 0x6}, {0x0, 0x0, 0x5, 0x0, 0x8, 0x5}, {0x19, 0x6, 0x2, 0x2, 0x6, 0x800}, {0x1200000, 0x556, 0x1, 0x100, 0x101, 0x7}, {0xd, 0x5, 0xffff220a, 0x5, 0xe7, 0x7}, {0x80000000, 0x6, 0xbc, 0xfffffff9, 0x3, 0x3277}, {0x1, 0x7fffffff, 0x8, 0x7, 0x4, 0xc3}, {0x1, 0x8, 0xd, 0x80000001, 0xfffffff8, 0x4}, {0x8, 0x5, 0x40, 0x1, 0x10000, 0x2}, {0x52cf, 0x2, 0x4, 0x2, 0x7, 0x6}, {0x7, 0x9, 0xffffffff, 0x1, 0x7, 0x3}, {0x9, 0xfffffff7, 0x0, 0x1000, 0xa44, 0x4}, {0x9ff0, 0x0, 0x5, 0x76, 0x8, 0x2}, {0x7, 0x1, 0x0, 0x7, 0x9, 0x5}, {0xffffffff, 0x0, 0x3, 0xce, 0x2, 0x8d3}, {0x4, 0x1ff, 0x7, 0xfffffffc, 0x3, 0x60}, {0x0, 0x7fffffff, 0x4, 0xff, 0x9, 0xf0}, {0x7, 0x2, 0x7, 0xfffffff8, 0x638, 0x40}, {0x5, 0x9, 0x3ff, 0xd, 0x5, 0xb2c}, {0x8, 0x8, 0x343f, 0x9, 0x7fff}, {0xa, 0x9, 0xabf1, 0x6, 0x57, 0x7}, {0xfffffffe, 0x9, 0x7, 0x1, 0xf, 0x8}, {0x2, 0x1, 0x5, 0x2, 0x4, 0x24000000}, {0x2, 0x200, 0x0, 0x0, 0x7ff}, {0x9, 0x1, 0x7, 0xc8, 0x823, 0x2}, {0x7ff, 0x81, 0x7fffffff, 0x9, 0x1, 0x7}, {0x5, 0x7, 0xb0d4, 0x3d, 0x5, 0x2df}, {0x7ff, 0x9, 0x7fffffff, 0xf, 0x80000001, 0x1}, {0x34e8, 0x9, 0x6, 0x5, 0x5, 0x84f}, {0x4338, 0x30000, 0x3, 0x5, 0x59, 0x7ff}, {0x3ff, 0x3, 0xff, 0x8, 0x5f, 0x80000001}, {0x0, 0xffffffff, 0x4b5, 0x80000000, 0x7, 0xce}, {0x1, 0x7fffffff, 0xff, 0x7, 0x1, 0x3}, {0x3, 0x7, 0xf3f4, 0xd5, 0x7, 0x4}, {0x2, 0x7f, 0x9, 0x7, 0xcd5b, 0x5}, {0x6, 0x401, 0x3, 0x1, 0x1000, 0x3}, {0x1ff, 0x8, 0x10, 0x8, 0xd7, 0x188}, {0x40, 0x8, 0x8, 0x1ff, 0x2, 0x4}, {0x89, 0xd, 0x6, 0x3, 0x7f, 0x5}, {0x80000001, 0xa, 0x2, 0x8, 0x10, 0x60}, {0x401, 0x6, 0x7, 0x0, 0x4b, 0x1ff}, {0x0, 0x4, 0x6, 0x1f32, 0x81, 0x1}, {0x33e3, 0x2, 0x4, 0x200, 0xa4c, 0x5}, {0x79f, 0x5c, 0x1f1, 0x0, 0xe, 0x7fffffff}, {0x0, 0x208, 0x100, 0x4, 0x5, 0x3}, {0x9, 0x9d, 0x80000001, 0x0, 0x2, 0x5}, {0x8, 0xe1f, 0x6, 0xa4b, 0x5, 0x9}, {0xfffffffd, 0x65d98c87, 0x80000001, 0xaa3, 0x7ff, 0x200}, {0x2, 0x7, 0x6, 0x401, 0xc268, 0x2}, {0xa, 0x9, 0x40, 0x1, 0xd0, 0x5}, {0x7f, 0x9dd, 0x4, 0x0, 0x9, 0x1000}, {0xa, 0x16, 0x2, 0xfffffffc, 0x401, 0x7}, {0x6, 0xfffffffc, 0xfffffff9, 0x5, 0x9, 0x8001}, {0xffff, 0x8001, 0x800, 0x2, 0x800, 0x1}, {0xfffffff7, 0x2, 0x8, 0x1, 0xe99, 0xfffffffb}, {0x0, 0x1, 0x101, 0x7, 0x9, 0x9}, {0x7fffffff, 0x7f, 0x3, 0x101, 0x5, 0x1}, {0x1, 0xfffffffa, 0x1f68, 0x519, 0x3, 0x7}, {0x4, 0xff, 0x3, 0x8000000, 0x5, 0x1}, {0x6, 0x10001, 0x1, 0x3, 0x9, 0x6}, {0x3ff, 0x9, 0x9, 0x9, 0x5bac, 0x100}, {0x1, 0x8, 0x2, 0xffff00, 0x6, 0x3}, {0x946, 0x8, 0x5, 0x3, 0x1, 0x100}, {0x3, 0x8, 0x4, 0x1, 0x9, 0xfffffffc}, {0x10001, 0x7d, 0x6, 0x200000, 0x1000, 0x80}, {0x0, 0xf, 0xf, 0xff, 0xb, 0xb}, {0x16f2, 0x0, 0x3, 0x2, 0x5, 0x1}, {0x5, 0x80000001, 0x3, 0x7f, 0x5, 0x7ff}, {0x4, 0x0, 0x14, 0x0, 0x7, 0xff}, {0xfffffffc, 0x0, 0x5, 0x5, 0x2, 0xec8}, {0xc0, 0xe78b, 0xb, 0x0, 0x4, 0x2}, {0x70000000, 0x382a, 0xa, 0x9, 0x5a331f6b, 0xfffffff7}, {0x2, 0x40, 0x9, 0x401, 0x8, 0x3}, {0x200, 0x9, 0x999, 0x9, 0xffffe263, 0x6}, {0x10, 0x5, 0x0, 0x6, 0x6517, 0x9}, {0x0, 0x7, 0x3, 0x0, 0x8, 0x3ff}, {0x7, 0x3, 0xffff, 0x9, 0x6, 0xb}, {0xe5c, 0x4, 0x80, 0xfffffff9, 0x8, 0xffff7fff}, {0x8, 0x5, 0xc0b3, 0x4, 0xff, 0xa}, {0x2, 0x8, 0x3ff, 0x800, 0x1, 0x3}, {0x9, 0x460, 0x8001, 0xd, 0x8000, 0x6947}, {0x200, 0xffffff03, 0x68d, 0x1, 0x9, 0x4}, {0x4, 0x9, 0x6, 0x7fffffff, 0x4cf, 0x1}, {0x8, 0xf8, 0x1000, 0x0, 0x1d, 0x6}, {0xc, 0x10001, 0x80000001, 0x712, 0x2, 0x1}, {0xfffff288, 0x1d7, 0x5, 0x5, 0x3e79, 0x5}, {0x4, 0x8000, 0x9, 0xc29, 0x5, 0x8}, {0x3, 0x3, 0x2800000, 0x31, 0x1, 0x6}, {0x5, 0x7, 0x2, 0xff, 0x6, 0x6}, {0x5, 0x4, 0x3, 0x80000001, 0x6, 0x6}, {0x2, 0xe, 0x1, 0x7, 0x6, 0x23f06cb9}, {0x5, 0x7, 0x8, 0xfffffffa, 0x5d0, 0x6}, {0xec, 0x3, 0xffff, 0x7f, 0x1ff}, {0x4d3, 0x6c, 0xd, 0x81, 0xfff, 0x80000000}, {0xb, 0x6, 0x7, 0x80000000, 0xff, 0xc9f}, {0x9, 0x4, 0xc0000000, 0x3ff, 0xc04, 0x4cf}, {0x200, 0x8, 0x27, 0xb52, 0x101, 0x421}, {0x7, 0x99, 0x7fffffff, 0x7, 0xffffffff, 0x5}, {0xfffffffc, 0x9, 0x0, 0x6, 0x6}, {0x627d, 0x4, 0xffffffff, 0x6060, 0x0, 0x128}, {0xda30, 0xfffffffe, 0x10001, 0x9, 0x3, 0x5}, {0x2, 0x10, 0x4c, 0xfff, 0x49d8, 0x8}, {0x4, 0x9, 0x8eb, 0x8, 0x800, 0x8000}], [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xcdb30f4f920f78d8}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {}, {}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x6, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x6}, {0x2, 0x1}, {0x2}, {0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x7}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xb5, 0x40, 0x2, 0x8, 0x9}, 0x5, 0x9, [{0x76, 0x0, 0x8, 0x10, 0x0, 0xffffffff}]}, [{0x5, 0x0, 0x2, 0x8, 0x10001, 0x401}, {0x44, 0x0, 0x4, 0x0, 0x1, 0x101}, {0x0, 0x7, 0x5, 0x8, 0x3, 0xa41c}, {0x7, 0x8, 0x7, 0x2, 0x668, 0x9}, {0x8, 0x2, 0x6, 0x2d5d, 0x4000000, 0x5}, {0x4, 0xfffffc00, 0x2, 0x77a4, 0x3, 0x8}, {0x2, 0xffffffff, 0x6, 0x568, 0x8, 0xf}, {0x9, 0x1, 0x30, 0xfffffff6, 0x10001, 0x100}, {0x5, 0xe63, 0x6e, 0x3, 0xe, 0x2}, {0xb, 0x800, 0x1, 0xfffffffa, 0x4105194d, 0x7fffffff}, {0x5, 0x1ff, 0x7, 0x9000, 0x3}, {0x4, 0x2, 0x8000, 0x9, 0x4, 0x401}, {0x2, 0x2002, 0x7, 0x7, 0x10001, 0x9}, {0x6, 0x8, 0x8, 0x4, 0x6, 0x80}, {0x2, 0x6, 0x7, 0x800, 0x3, 0xfffffff8}, {0xf0, 0xe, 0x0, 0x4, 0x9, 0x6}, {0x0, 0x8, 0x0, 0x3, 0xa3b, 0x3}, {0x4, 0x347, 0xe, 0x9, 0x3, 0x1}, {0x1ff, 0x400, 0x8, 0x9, 0x3, 0x7ff}, {0x80000000, 0x9, 0xffffffff, 0x3, 0x8, 0x4}, {0x10000, 0x575, 0x3, 0x2, 0x6, 0x6}, {0x7, 0xd3, 0x3, 0x4, 0x20000000, 0x200}, {0x6, 0x9, 0x6, 0x6, 0x3, 0x7fffffff}, {0x594afe69, 0x7fff, 0x3c84, 0xa, 0x7, 0x1}, {0x6, 0x1000, 0xd, 0xa45, 0x6, 0x8}, {0xfff, 0x3, 0x7, 0x10, 0x8d, 0x7}, {0xc, 0xfffffff3, 0x2, 0x3f, 0x6, 0x7}, {0x2, 0x8001, 0x1, 0x200, 0x2, 0x2}, {0x4, 0x9, 0xf, 0x4f, 0x80000000, 0xbd3}, {0x8782, 0xf4, 0x4, 0x9, 0x200, 0x462f}, {0x80, 0x5, 0x6, 0x8000, 0x9, 0x7}, {0x69, 0x8000, 0x10, 0x0, 0x4, 0x8}, {0x0, 0x5, 0x0, 0x5, 0x8, 0x3}, {0x2, 0x7, 0x9, 0x4, 0x6, 0x800}, {0x1, 0xd, 0x10001, 0x3, 0x8, 0x5ef}, {0x101, 0x4, 0x5, 0x6, 0x3, 0xd}, {0x7, 0xb, 0x4, 0xffff8001, 0x85, 0x7}, {0x5a, 0x1, 0xfffffff2, 0x8, 0x5, 0x4608}, {0x0, 0x4, 0x7, 0x1b, 0x10000}, {0x7, 0x0, 0x7fff, 0x1, 0x5, 0x8}, {0x2, 0x939, 0x81, 0x7, 0x5, 0x7}, {0x76180000, 0x800, 0x200, 0x40, 0x7, 0x3}, {0x101, 0xe, 0x7, 0x3, 0x7b26, 0xffff9b4a}, {0x0, 0xafd, 0xffff, 0x6, 0x10000, 0x3}, {0x6, 0x9, 0x6, 0x5, 0xffffffe1, 0x8}, {0x5, 0x101, 0x7, 0x4, 0x81, 0x4}, {0x3, 0x0, 0x5, 0x0, 0x5, 0xf2d2}, {0xbe87, 0x1, 0x7, 0x6, 0x5, 0x7}, {0x7fff, 0x1ff, 0x45, 0x0, 0x7, 0x7fff}, {0x5, 0x7, 0x4, 0x3, 0x10, 0x6}, {0x80000001, 0x3, 0x4, 0x0, 0x37, 0x7}, {0x5, 0xc, 0x7, 0x2, 0x1, 0xffffff00}, {0x81, 0x0, 0x77f266fe, 0x9, 0x57, 0x80000001}, {0x2, 0x8, 0x1ff, 0x4}, {0xfff, 0x40, 0xffffa7ec, 0x0, 0x80000001, 0x2}, {0x6, 0x552, 0x80000001, 0x1, 0xc, 0x7}, {0x7, 0x5, 0x4, 0x2, 0xa3, 0xffff2638}, {0x7, 0xffffffff, 0x10001, 0x3, 0xfff, 0x6}, {0x7, 0x6903, 0x1, 0x7, 0x9}, {0x100, 0x80000001, 0x5, 0x38, 0x1, 0x5}, {0x6, 0x9, 0xf, 0xfffff580, 0xf9, 0x1}, {0xfff, 0x6, 0x4, 0x84}, {0x0, 0x9, 0x1ff, 0x4, 0x983, 0xffff4757}, {0x4, 0xfff, 0x6, 0x7, 0x0, 0xf}, {0x8, 0x40, 0xb, 0x0, 0x7, 0x8}, {0x3, 0x9, 0xfffff801, 0x3, 0x2, 0xffffffff}, {0x4100000, 0x6, 0x5, 0x2, 0x6, 0x3}, {0x8, 0x5, 0xfffffff8, 0x714, 0xa, 0x5}, {0x7d1, 0x7, 0x1, 0x4, 0x3, 0x4b00}, {0x3, 0x10000, 0x5, 0x66, 0x8, 0xf}, {0x9, 0x10001, 0x0, 0x656, 0x0, 0x8}, {0x9, 0x401, 0x5e, 0xffffff7f, 0x3, 0x2}, {0x1000, 0xffffffff, 0x7ff, 0x5, 0x1, 0x8}, {0x7ff, 0x2, 0x7, 0x9, 0x9, 0x8}, {0x40, 0xfff, 0xf4, 0x3, 0x7, 0xfff}, {0xf9, 0x80000000, 0x926, 0x100, 0x81b}, {0x5, 0x9, 0x4, 0x7, 0x88b1, 0x7}, {0x6, 0x9, 0x9, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x7, 0x2, 0x0, 0x100}, {0x7, 0x5, 0x5, 0xa0d, 0x1, 0x3}, {0x40, 0x4c1, 0x0, 0x0, 0x5, 0xfffffc01}, {0x7f, 0xf, 0x2f6, 0x2, 0x6, 0x77}, {0x9, 0x1, 0x3, 0x1, 0x6, 0x4}, {0x5c, 0xffff421c, 0x656, 0x8, 0x6, 0x5}, {0x9, 0x6, 0x8, 0x6, 0x2, 0x10000}, {0x1c000000, 0x400, 0x9, 0x200, 0x6, 0xe78e}, {0x7f, 0x2, 0x2aaa, 0xfffffff8, 0x681e, 0xfb9}, {0x2, 0xffffffff, 0xb8, 0x5, 0x10, 0x7}, {0x800, 0x8, 0x1, 0x7f8, 0x400, 0x6}, {0x800, 0x4, 0x1, 0x8, 0x2, 0x3}, {0x10, 0x0, 0xfffff88b, 0x0, 0xfffffff7, 0x2}, {0x8001, 0xfffffffd, 0x0, 0x40, 0xd7f1, 0x81}, {0x4, 0xc, 0x7, 0xff, 0xd6d, 0x7f}, {0x1, 0x5790, 0x8, 0x9, 0xb, 0x10b4a763}, {0x3, 0x5, 0x8, 0x9, 0xffff, 0x7}, {0x17, 0x1, 0x4, 0x0, 0x80000001, 0x8}, {0xffffff8a, 0x2, 0x1, 0x1, 0x8, 0x3a04}, {0x8, 0x9, 0x9, 0x1000, 0x6, 0x8001}, {0x6, 0x7, 0x10, 0x7ff, 0x6, 0x5}, {0x7, 0x4000, 0xb, 0x4, 0xb, 0xbc}, {0x100, 0x0, 0x3, 0xfff, 0x6, 0x6}, {0x6, 0x8, 0x10000, 0x4, 0x1, 0x4}, {0x8, 0x8, 0x4, 0x8, 0x28e, 0x7}, {0x10000, 0x3, 0x401, 0xfff, 0x80000000}, {0x80, 0x40, 0x5, 0x8, 0x2, 0x8}, {0x1, 0x80000001, 0x5, 0xfe5, 0x7ff, 0x576d6c08}, {0xc5b, 0x52d8, 0x0, 0x2, 0xcf, 0xffff8f67}, {0x5, 0xfffff800, 0x4, 0x9, 0x1de, 0x4}, {0x7, 0x40, 0xff, 0x7}, {0x7, 0x80000000, 0x6, 0x749, 0x0, 0x7}, {0x81, 0x4, 0x6, 0x6, 0x0, 0x4}, {0x400, 0xc6c3, 0x0, 0x7, 0xa, 0x9}, {0xfffffeff, 0x9, 0x9, 0x4, 0x4, 0x8d8}, {0x9, 0x1, 0x6, 0xfff, 0x3, 0x8001}, {0xffffffff, 0x5, 0xe, 0x6, 0x0, 0x3}, {0xfff, 0x3ff, 0xfffffffb, 0xffff, 0x19d4, 0x5}, {0x81, 0x3ff, 0x7, 0x8, 0xc, 0x6}, {0x1, 0x2, 0x7fff, 0x3, 0xc7d}, {0x6, 0x8, 0x9, 0x306, 0x101, 0x1}, {0x745, 0x5, 0x0, 0x3, 0x4, 0x5}, {0x100, 0x7fffffff, 0x75ed, 0x929, 0x7, 0x1}, {0x3ff, 0x4, 0x688, 0x8, 0x3ff, 0x3}, {0xd7a, 0x80000000, 0x200, 0x1, 0x9, 0x80}, {0x3, 0x3, 0x5, 0x13b, 0x40, 0x4}, {0x7, 0x9, 0x0, 0x2, 0x4, 0xfff}, {0x0, 0x89fe, 0x10, 0x3, 0x1000}, {0x26bafcf1, 0x2, 0x7, 0xaca, 0x6, 0xb613494}, {0x0, 0x1831c575, 0x35de, 0x4, 0x401}], [{0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {0x4, 0x5affa558c4d22400}, {0x3}, {0x2}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x74a46f58890162e0, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1bb3117c9c764244}, {0x2}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x14f112d3d9fa5912, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1c4, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x69, 0x6, "0308b67c9438b2615d6654b3105222663963d86c68857a773297bdca91519d4947ec6a552362df783773e13ff6fc98ef63a05cead21d7040dfe3bc058c03f5bc3e0d134619d5dabe3ad05647f12ae50252b41319b3834d687d7318fff4cf9e43692dd982b1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3ec4}}, 0x4000) 464.157698ms ago: executing program 2 (id=3958): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0000000000000000000000000000000000000000000000000000000000000100"}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 451.658376ms ago: executing program 0 (id=3959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x0, 0x600}, 0x0) 402.590405ms ago: executing program 4 (id=3960): r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x9a, 0x200100) (async) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000000c0)={0xc}) (async) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0xb9, 0x612401) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/4096) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x10, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4004004}, 0x44004) (async) r5 = socket$unix(0x1, 0x5, 0x0) (async) fstat(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$sndpcmc(&(0x7f0000001440), 0x2, 0x80000) (async) statx(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x800, 0x40, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) (async) r10 = inotify_init1(0x80000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x80, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000001780)=0xe8) (async) getresgid(&(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)=0x0) (async) fstat(r3, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './file0\x00'}) (async) r16 = syz_open_dev$sndctrl(&(0x7f0000002d40), 0x400, 0x10002) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x1a, &(0x7f0000002d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xd69c}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9855, 0x0, 0x0, 0x0, 0x3ff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @exit, @ringbuf_query, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf8c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002e80)='GPL\x00', 0xfff, 0x77, &(0x7f0000002ec0)=""/119, 0xc2f00, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000002f40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002f80)={0x4, 0xd, 0x1, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000002fc0)=[r4, 0x1], 0x0, 0x10, 0x2}, 0x94) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000030c0)={0x0}, &(0x7f0000003100)=0xc) (async) lstat(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', 0x800, 0x80, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r21 = gettid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003740)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000003840)=0xe8) (async, rerun: 32) fstat(r2, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r24 = syz_open_dev$I2C(&(0x7f0000003900), 0xffffffffde670837, 0x775800) sendmmsg$unix(r5, &(0x7f0000003a40)=[{{&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001380)=[{&(0x7f00000012c0)='I', 0x1}, {&(0x7f0000001300)="6eef975aa11e48538aa307c86431e2ac127985728c747677d5146b8d44464009ca6912f559ab798e02a12fd766030d0130cb824b335137ce408f267d1171c41d4a0ffb48832fbdf65123902866c0d0aed535", 0x52}], 0x2, &(0x7f0000001880)=[@rights={{0x24, 0x1, 0x1, [r4, r3, r3, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, r8, r9}}}, @rights={{0x1c, 0x1, 0x1, [r2, r10, r11]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r1, r12, r13}}}], 0xd8, 0x40}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001980)="1e944d4dceec51cef7a60a5a8d005bc5248d1993e188a1120df79514342d3ec8bb9df75c93ca851bec648aebf1d77e072dd235dfd2af3af2dc7c5777fcfc883d8dcf80fb4b877ff93af8997ce4a33578bb58a87a2cd2d27f984e72df97b9a522ec652dacd3ccc6d4693486e2f04d35584ae51c666e69adbaa06a9ab8", 0x7c}, {&(0x7f0000001a00)="73287d1da9f92765ae98649470237076346634b02e56d824268805da3fd7b12e51606553ccfed208e7999add5597af32c01b2fd5c80e6becdeeb3fcc679bfc2025f9785448a88e4634a44e02fbf5e5e897de9fd482ee8de3b50ef5aec394a061e8e42d25cb35edeb9e31fa9cc1daf56ff9a0f1ecf12e082498b0af07605d31d42d5c47971042afed59aa23be5864bee61832b63d610c8e", 0x97}, {&(0x7f0000001ac0)="c76526c597d68282958d75f5017b7f14572abd67a2", 0x15}, {&(0x7f0000001b00)="5dbc3faf1d6d8ce451956d9803510379b947ab56a8c3a57f21c39881c6669b32e67af98a4e28afd0a0fba77d146fb7c3eea9e0496d62f9fcaac036fce2c8a16a6f95eaa224ef57fdcff55790c682d576144e75a9c6cc43012c1ce2204692eb9fc46a791e958061aeb006b530e4873e4af475bd591d2abd11eac49643dc8d1d1946ee28e5e21f42fcb9fe0214ecda21cc67e02201d0d304e6ff7f4c01fa7d05702f9a56f07767da081c62a62909f2f248a6acb18ecc84270d1a131998f31003ebbd9c7c62869212eeddcdafbf0b219b7094876c4abd197295ce8c4b9ce4d154b1059fd91b822b0f56dcec8cef301401b1a69c0a8d593d8c4ff78b778db52b19fed62c0bfc452ae3255bfb17c715b05775d18efc3a356c34676cab01f1124076184976872105af3dd255d8e2c4e54384307f3348e6dc1c2055dbfb88a8d9d99345dd828a69ea8070f192bff4633bab833f62cb29b4283fdcbb87bbe62e0eceb0a8abf32025e3b8a9c058a418dea8841fbb1fc0b6009e8fba59482cea59655c4396f36fa28f2c9cc30b84c95c4fe9fe7a8346f3c1f4acb68976839cef504a452507e9ce4f8caf8b736e80b7bbef996da5838ed8947e5526ff3f9c8c8517a03e5827f9d40389b3f20c2de759eacac64470683f8a9a4e6a6d2cadcc33655ff1cc3dca455d95d7379b05b162352748bd0acacc054d486761b6d05d59d7e171d7c7f3a186298a97710f4b81febb2017ee9e0f4724a262f8e8e35cdec21dd60c360f504962c2bc045fcd1de46fcd0833c63f9cbdb05ab9370f5e596091ad3ca0aafe763a6de140d791bf31e7ba01c0207e5b5c28d252788ce56a95c71b4f26978011cee0fba27b4722b4242e51f554e97f124869ef574ac9e98938ca83f025df4443b60636194a04294d5f5b54efaaffc81d20323fd4b80ff225996dccbac63f178b69e9183196e5e403b4596bda2cb5d320bb3a555f771558f38ca08a62d70281850c69ee07f62afeb7d4b04552bd699fde884d9cb62e20b37004f6f27e9dc758e45eb656676f7d6eac6ae6abce47513a1399a5ab685f65ab3b810430af3721c5c37af9675c3ebfce3bbfecbf0001eb63ca0f994d37b7561c991c669517531327f18acde3a004e98bfbd239ac72dde22dd27fe4d0ce0d7a1ed163eb70ba6aed041af0a15d89753c631eb4354c1d9d6cb4abb01cd7776f9a151d0f2972318e764b985a3355de4fbdb7c98ff0c332163b47d8879f6ef7dcb1b3561c91da52e6662af62b92e077794f78265c8ea365b40b23c973363a7fff262049a23a56dd9783d95c63feb4ca3ea39062172b2cc11e02eb9bcaccb542e6be25c0bf3c1552093b8383c8662d76845bce02b3e544a3417f86a0402c29a40795b9b8101cdc30ab22c6e3757cbd3f465abd767c88c04ecd86c5d267a4aa175c1b33f722ed829b1f9196601a8273fbf40ff01faa02bcec9ed08f6a4608d2fbda94e5ce7b5b794517a129bcf1086e50c06b4828c603bf7fe11a589859c9577eef6e56b8a89e6c11d1cfae6b9dc44266a645152483c621980228f7cfe6f6efa5f1d6f2347b0e0d2d8e7434a74d3645610fe0a9609f0de493497d145adf7ed5b8d737a113a7510e993f4d4b9821e9622bfc3b7fd13a8b5ee286aca6c6b4dbec99af88aed286ed3bdf055f099904e0187a5690e552305d3b16fd16df358435512d57230d252a327b52589f13b97cc66e3189087349ef1031693c894ecbedb7bd783f6de406cd36d56a8386c23da7764573a930e21814650b872f7440e615b551764f387f56e44842868ee5122fbc80d640fd401ee8518ec7af51f2b1519a70e1ea104d027dbf346593ef1f559bd43410c925d84bba7ec0ae36aeb780b2098ebf9c7074dc4d1fb8815c463afeb64eb031c6fb5e1ac19e546db4620ce24710482da1cb52819729b47558bac8eb72c94d522d65bf12b1203b0e0f19f23e43409a6dfdb82b79c6c6342438a6706f9e28c31fd9a16232734d53c4eb7b6c20ca7df2b870a51a0de2bdab46c9d08bc69768126461d512a66307d20ad84cba0ab9b5db5787146baef57ca38fca8d48ae3969da14a0ea0eec9d15ed65928ea0779a59eabe4be23c5e8fdac96317cf667f795dcd2f36c8b7944095709b8a75a64f3674e1f54499ca7a85536a42a30a09d0a3e4ca7f8f1adf9b9782100a61887980dcfb71c2bcff2301dd2466e0d0ead4767ab8c8e66646df4fb56204d8a61376c096c7fdd9175ede915bd65bf15959749af52fc7cd06f62eea58d5df074fe30c0c655bf9c88de12f563dae21ef8c46f86dfdc9844321b0bc712b9ae5a014294a33327b9c482dc24b8e8d0d9a8025b142ae304caeeb2d6901533fca86b40652ff08c9687f410f48f81adb11ba6496ba29d8bd8fbf585fb5bb3e90a9de4449f1c85aad8d58b75538c84622711500984d806157effb3c6767becc4e026136d848a2a38db83e92ebd78b2294ef2487a4e0d9389984bb16ba87610e991b39ace9c4762c33544967debf768a1a2ed04fa1e97f3f53168c5b4cd57f1daae28f8140b9ea3f55d935f7d6b32704c5c9fe6363009c33fca36aa34bc4726df1ed56cf1d5938a06332764026d42be61ceb386f5b2cd5b3670c0d71824840f7a5c0e2e321ce995bb0aa813d1c3e7685cfa118659534f53cc8e53139c5cdff17a7cc76d0407ff74a076eab6f546fb2393160ff788f347ee607678b656e050d050d4ebbd02fdd31f5b8be0c4b5ca1454e72f74ce2fb4051b5577999453c6e63b9b92f7f6ec7a29d70e906bc6023b1365267441f37ff11dd3b24fbe0861d154a7a675d7f24198b8cc4a2f25cf9f492e18493822699dd49b841cb51d818344e0aff6fe8b30f021100a4b58b3d2bbcd59444cb4561027d748a0d9545b9ab3df165d991ec38a99c5bf438f52e6e1470b88474994e725a0f886724a830eed6e2e5a0c51ab22e90f10378378de761b58588220248ba516d9f83d9b2fe3161ad08de686c7b8c87c2e5027c0c284902510b4dc2c64a100385ed2a9f3d407a2a1057fcda0d07dfab79ee0fb5d2373aa7ed39e9cfdd3c0ead47bb15f57203cf5511b533be689b3638a68b06f514ad0540a3c44c9768dc69401529a47727247f8b12418a8c9e2352ff9bc6074db611514226266cc4a067da1f0cb4c00f9b3a6d4ade11e02262ec4de5336049450fb7c0440d4868a4d88801dea5d55c39bc1151dd8a62f5e6204e19362decdc5281a94a92e7612c68e510294d49ca2ce9bd3375e39ce1771324edaa89abf445cf389bedfd0fe30537874ba7edd1f71cbd4c28f16bd67c2f85d277fa854ba2b12cf5dde6c3d9ae6e0735b43e39d370cb3c11bc48fd1b3ce796bc1d81673a3215b00c074898406c7f68829a4cdc29ac6442cf23b5a44f278b6a6da9da92433ed869f517767201c47f009fd705420f7a8b43b275a1def3b1ab56c0cb92ddcaa1f4b658a479107be5e01adb54d3a594d361b95d21bb77c3ec05433d29bf4c61e4c3ff28d2a5bda851b70f5b3f3bb894d0bb43169c438a07f426846c6ddeab608bac0a1709e5dc9e4dc41954c2ecc57568df2f4c774326b213556db22743d10d820751f17a1e9c392ca84459189afc316d3d92aafb4290cf55c4e52214909814ec689dd3c3f0d6074d18c97b690de289bcd280f3337c741a252d809fe5cacc065c83e1603f84eb60685db319549e9462955bf2f846b5fff727b86d771d674d3ce4706ff29df974b9f0d02b62017f84e4afbc224552c1f3d531d159fa6fd2f57885a19d38fe92c91508ab0004bb1b34a1cca6fc1125054c54e765441a5205963413f3c3d099d657637bd4ad9e7b1c007c4d7aa6b58a052619594d4c9567db968a964f6de2a6240d8311aecb8e4d2d443a8c830140a2fcb614a42bc5173bebb5a7a4858e7b514430c3f1c304c07a1a256676801e0ee75ff792d20c2cb58afb93517b5df4dd52b7e6eafeaabe4a1b6759fbb1fa2f76710630dec3b94667ab1736c339bbf3a4fb3e69b73b1a654dfd349c4dd4fc04d8400dcfe7e7707ab6c84e4142d301e138b47789bc83ca0608a0c370a1639540f3b11c0f4e564e7e02328bcb803fe7dd9c42d99d6023909d7ea16ab11869ce2ea3688095563104f5190d8a2b792a7ef5be3350d0d7db6959a4a15ca3ed9542edc529696845448d7d77fe4066d752f89cd9f8e8dffac2ef9af8598cd906ff4f047f1997f2934a1190cb20e2573292fd87adfe22469298c1d0e6e1440543efd81f91974b73340e7b1c7468df718312f67919b615fe7b94a5cb9c1c7efa3032e838031d2f37e26f4784cf5257e4c65a2cd9c387f7dadc72ece78089309067b235ba1699ca7bd3ef42e8e80968c93dbfb122011c2eaf8295d31585a363ac077f7dd190e786455eddbf86d22ca89428f9df130ebd1dac1cab00c43da38ec4a922024e587bda299d11f07c2d4b72d1f3a9b587bb114e563bf69aa8969d2fbd39bed292d9dfd3a8f32409b2b10e3a7f9d8006a1f2943e88e36efb805f26ef14e74bab71283aa76bf6055b083e6f6d63007177a22d4a15c9d0a2f8a6d21593a3fb3244f1e38ff8e007b23066b860a6c9bd776f42a2788e51e3647674914ba4c706efb543da6ef2f87764f2bc40b9d7bd8ae48c111d2360607ce00f7fd78f9c803d2a0e089e1f026ae5e1d8c01da2b3b20d23f5b8d1da7493b2b71de6ffec53d4314101e264c9ae11342abf824f5c1fbb26b72017613aa64d8c81bad135154ea256c1c0f1c5fed24354ad5aea5071580a518d0df822d4184a3721e28000ec510f0aa918edfb6db4b07f28d7b64f3836df3f0716e0a11062c52848d03b9895a56e83edd82bf8c2412c1af43d0153aed4f3f6f4b1768e17488ae40e8957b0e6aa87539a85dee20063256f53e9b149ae6832e7e92de3269fc464eec00b64a802df0fc796b16a544959631f1f20fbd95de013e3e30fe134bc2c5803974fae082311bf328ba513aa220ee482e75a8f811c761ef184e473772a3fc9d4e0bd975d9d5dc453cdd2523b878ba6a50a5e877e18f674d336c6e80187fefd2dd47cd119a97bb9b25d2874d268cc08ddc448e806e24385662fc8afe0870f40aaf6fba663946163aaffd6b1aeacaeda5c089d2f3a1586d1b54c3ad9a7dbfc4ed7f979f607ce6b883d39c51016520bfbba7ea5b1d358d0186a3782db75f24791236c10583f7fc89d9275c22d796b8c35b46b30b844015ee22d3510d9472671c4c2ed09c3a4b75bdb7274c5415e155da668a4945c83587ad38033ae939cffad7fd170182655d7721154ea38865e00c96176df3d39b01bd4d3b87c1d6d7ba2a0955ab9c8b798091b19d1b576e8c00765207d0d4a01bc42a2af40392d97a7e9abf1527d68b9b670305e699cf60cae1f9536ce30e8fc06cb005d35cb6fff9c50505c499db1309c11bcf2a61827a977f96706b05d3b3432bf72383021a0caed60baaf6c5438d934aba94a741b73a31ed28086a59cb23b603a51ec473711f4d50f0d2aba6b8775bed796c4fcc455d9f9aa45e22fb0b99698ba8179ac32f296ea8ae5bdb2d764a59d262c02596c19e7a423037bbce2ee5fb45f3aef54b38c23671fb918b76f3c66ce92a3b4a4ed26d6d71a6ac6721cd85a34fdc1ac687f6de816765f94c84a259548d468857c9821a90051af2ca8a826675f8bb7b2196bcada96c0c5f1aa461ad5ce558957c091a71630bdcfba8a97bb1b656dfc120e832c040008914a2e0764fae767c9f64ac5180f980a0e1a443c2fb1671ea21848967f1dac728383f6d99491ffe6dac7f3e735c349f6b470", 0x1000}, {&(0x7f0000002b00)="8a8e7d259fd6b6f95b66a4526b9dff0b4457447fa5c4d6344bedfb443c97c6e4b9f6abc99acf598febcd5d9c546663330fd8bdfea5b91a894c7b60b6b23418f2068eb54b6afbc2ac5661f7a872b6ab81d240147433d6d4a7c4ffb792c381fac06b87e1ab9332221bfa6eb364ad71b78951f316c2e5ef2b643bd016fa1520549e767c55645901dec7ceb1d46941bfeb13df29a086ffe62d8f", 0x98}, {&(0x7f0000002bc0)="7119126efcf8ed19edd3bcff74969c48e3d299b80165e627294927db98444522f6", 0x21}], 0x6, &(0x7f0000003340)=[@cred={{0x1c, 0x1, 0x2, {r1, r14, r15}}}, @rights={{0x38, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r2, r0, r2, r4, r3, r4, r4]}}, @rights={{0x2c, 0x1, 0x1, [r0, r16, r4, r4, r17, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0xa8, 0x8010}}, {{&(0x7f0000003400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003480)="74ae5913987d1523caac19b921696d44734bc1c00edef006d99ec432a0e3601eb1e29a7bcaad4f695ad054cc1e4e35573eda0ccc870607aa61f0cf165e155c02880fbe2356d3e3bb6c82591773e828dfc260182fe39454de7d77f8fd729304e6410c45c6a98fa4b657e13da0e9910bec8a17abe93a89b325fb11a0d6945dc45940dce00ed2edb84c90db6427f1c74caa01463348e7ff427a410b6bfc71ef05b53bc4364c6a9a1936dcab0f4c71233d8f366e3ac0eac341d2e694008984894abe575e8e33db49e51f7157534da85f", 0xce}], 0x1, 0x0, 0x0, 0x40800}}, {{&(0x7f00000035c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003640)="02ea66f6237e01b1ff45969df2a91302c1df7c9df62ad3c7f0cdb80fa4c1bf5ae43ecbe9675800df5b1704c6a4bb8a003990eefce3b6", 0x36}, {&(0x7f0000003680)="2427de740db33366a46fc37e999ffa1af3a6f9cba7ea5df52e939d42062798594a286652cf912308ca9b3bac57149604cde65cd13eb7f13a732dfc50ce0cdaa1616efac24816c62da3f88518dc97857cfadb2a5fe2f0ce7a9c709bdd64894694", 0x60}], 0x2, &(0x7f0000003980)=[@cred={{0x1c, 0x1, 0x2, {r21, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, r22, r23}}}, @rights={{0x38, 0x1, 0x1, [r4, r3, r2, r24, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3, r4, r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x90, 0x4000042}}], 0x4, 0x4004) 259.904106ms ago: executing program 4 (id=3961): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000018300)='./file1\x00', 0x1000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000e0a01030000000000000000070000000900020073797a31000000000900010073797a300000"], 0xd4}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x3) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r7 = dup2(r6, r5) write$RDMA_USER_CM_CMD_NOTIFY(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r11, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)="70d8", 0x2, 0x600}]) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r12, 0x3b88, &(0x7f0000000140)={0xc, r13}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r12, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f0000000000200000000000000001"]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 259.532153ms ago: executing program 2 (id=3962): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 185.422087ms ago: executing program 0 (id=3963): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002100000225bd7000fbdbdf250a1480090100000604000000140002000000000000000000000000000000000014000200fe800000003e6600000000e5ffffffbb509e395b75b6a56c578598b8cc2a8427a86c1e486bf7f7e1a218b476"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sched_setattr(r3, 0x0, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f00100000001010420000000000000000200000024000180"], 0x1f0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) write$binfmt_misc(r7, &(0x7f00000001c0)="978203f6fb974201433525c97c6ba921528cbe90fc013c8611e02239836535cb4661142d1a163bec4a995f98a9a927cb64dbf288d31f9015c6eb04", 0x3b) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 145.652572ms ago: executing program 2 (id=3964): syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x76, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x4, [{@private, 0x1000004}, {@private=0xa010101}, {@broadcast}, {@local}, {@private, 0xc}, {@empty}, {@private}]}]}}, "c1e6cd009998"}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x6, 0x10, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x9, 0x8}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x9, 0x5, "91b40ac3f52d"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x81, 0x2, "1a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xed, 0x9, 0x1, {0x7, 0x25, 0x1, 0x3, 0xe, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xef, 0x9, 0x0, {0x7, 0x25, 0x1, 0x2, 0xee, 0xbf17}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 1 (id=3965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000004000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b00070066696c7465"], 0xf4}}, 0x0) kernel console output (not intermixed with test programs): files+0x2a/0x420 [ 1178.965981][T18958] ? __fget_files+0x3a0/0x420 [ 1178.966008][T18958] ? __fget_files+0x2a/0x420 [ 1178.966046][T18958] __x64_sys_preadv+0x197/0x2a0 [ 1178.966074][T18958] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1178.966111][T18958] do_syscall_64+0xec/0xf80 [ 1178.966134][T18958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.966156][T18958] ? trace_irq_disable+0x37/0x100 [ 1178.966184][T18958] ? clear_bhb_loop+0x60/0xb0 [ 1178.966211][T18958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.966233][T18958] RIP: 0033:0x7f99ea78f749 [ 1178.966254][T18958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.966273][T18958] RSP: 002b:00007f99eb594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1178.966297][T18958] RAX: ffffffffffffffda RBX: 00007f99ea9e5fa0 RCX: 00007f99ea78f749 [ 1178.966315][T18958] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 1178.966330][T18958] RBP: 00007f99ea813f91 R08: 0000000000006a76 R09: 0000000000000000 [ 1178.966345][T18958] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1178.966358][T18958] R13: 00007f99ea9e6038 R14: 00007f99ea9e5fa0 R15: 00007f99eab0fa28 [ 1178.966393][T18958] [ 1179.373442][T18918] usb 1-1: USB disconnect, device number 32 [ 1179.727639][ T6531] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1179.847620][ T6105] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1179.887680][ T6531] usb 3-1: device descriptor read/64, error -71 [ 1180.007264][T18918] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1180.053617][T11943] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.064123][ T6105] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.075028][T11943] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.075710][ T6105] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1180.118298][T11943] .` (unregistering): Released all slaves [ 1180.126332][ T6105] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1180.135722][ T6531] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1180.158145][ T6105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1180.172333][ T6105] usb 4-1: SerialNumber: syz [ 1180.243619][T18918] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1180.281710][ T6531] usb 3-1: device descriptor read/64, error -71 [ 1180.300487][T18918] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.352742][T18918] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1180.366867][T18918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.411313][ T6105] usb 4-1: 0:2 : does not exist [ 1180.418125][ T6531] usb usb3-port1: attempt power cycle [ 1180.447676][T15713] Bluetooth: hci2: command tx timeout [ 1180.551948][T18918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1180.576501][ T6105] usb 4-1: USB disconnect, device number 53 [ 1180.586751][T18918] usb 1-1: invalid MIDI out EP 0 [ 1180.750373][T18968] fuse: Unknown parameter 'rootmod' [ 1180.782052][T18918] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1180.847624][ T6531] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1180.958390][ T6531] usb 3-1: device descriptor read/8, error -71 [ 1180.996746][T13048] udevd[13048]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1181.220381][ T6531] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1181.256342][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3581'. [ 1181.264950][ T6531] usb 3-1: device descriptor read/8, error -71 [ 1181.271633][T18918] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1181.291784][T18984] netlink: 'syz.3.3581': attribute type 5 has an invalid length. [ 1181.318433][T18984] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3581'. [ 1181.395894][ T6531] usb usb3-port1: unable to enumerate USB device [ 1181.443880][T18918] usb 5-1: Using ep0 maxpacket: 8 [ 1181.463094][T18918] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1181.509313][T18918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.517817][T18983] syz_tun: left promiscuous mode [ 1181.533372][T18918] usb 5-1: Product: syz [ 1181.545926][T18918] usb 5-1: Manufacturer: syz [ 1181.560988][T18918] usb 5-1: SerialNumber: syz [ 1181.582007][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.589646][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.605544][T18918] usb 5-1: config 0 descriptor?? [ 1181.636685][T18918] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1181.828277][T18983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.842369][T18983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.078916][T18984] geneve2: entered promiscuous mode [ 1182.096967][T18984] geneve2: entered allmulticast mode [ 1182.116113][T18918] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1182.127416][T18918] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 1182.142105][ T4030] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.153990][T18918] usb 5-1: USB disconnect, device number 42 [ 1182.173060][ T4030] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 35351 - 0 [ 1182.195229][ T4030] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.222416][ T4030] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 35351 - 0 [ 1182.244004][T11943] hsr_slave_0: left promiscuous mode [ 1182.250565][T11943] hsr_slave_1: left promiscuous mode [ 1182.257128][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.265474][T11943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.275285][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.285178][T11943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.329758][T11943] veth1_macvtap: left promiscuous mode [ 1182.336036][T11943] veth0_macvtap: left promiscuous mode [ 1182.343311][T11943] veth1_vlan: left promiscuous mode [ 1182.350113][T11943] veth0_vlan: left promiscuous mode [ 1182.522586][T15713] Bluetooth: hci2: command tx timeout [ 1182.616734][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.623726][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.157719][T18922] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1183.203851][T18918] usb 1-1: USB disconnect, device number 33 [ 1183.371894][T18922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.382479][T18922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1183.418770][T18922] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1183.428810][T18922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1183.436949][T18922] usb 5-1: SerialNumber: syz [ 1183.497685][ T6537] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1183.565595][T11943] team0 (unregistering): Port device team_slave_1 removed [ 1183.633885][T11943] team0 (unregistering): Port device team_slave_0 removed [ 1183.677694][ T6537] usb 4-1: Using ep0 maxpacket: 8 [ 1183.695862][ T6537] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1183.705928][ T6537] usb 4-1: config 0 has no interface number 0 [ 1183.714812][ T6537] usb 4-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1183.737220][T18922] usb 5-1: 0:2 : does not exist [ 1183.747735][ T6537] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1183.768127][ T6537] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1183.778322][ T6537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.786471][ T6537] usb 4-1: Product: syz [ 1183.793313][T18922] usb 5-1: USB disconnect, device number 43 [ 1183.805163][ T6537] usb 4-1: Manufacturer: syz [ 1183.812589][ T6537] usb 4-1: SerialNumber: syz [ 1183.834503][ T6537] usb 4-1: config 0 descriptor?? [ 1183.864047][T13048] udevd[13048]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.094034][ T6537] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1184.111543][ T6537] gspca_m5602: Failed to find a sensor [ 1184.117154][ T6537] ALi m5602 4-1:0.1: ALi m5602 webcam failed [ 1184.147864][ T6537] usb 4-1: unknown interface protocol 0x1, assuming v1 [ 1184.154824][ T6537] usb 4-1: cannot find UAC_HEADER [ 1184.194516][ T6537] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 1184.206159][ T6537] usb 4-1: USB disconnect, device number 54 [ 1184.231933][T13048] udevd[13048]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.460462][ T4030] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.470456][ T4030] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 35351 - 0 [ 1184.479504][ T4030] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.488990][ T4030] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 35351 - 0 [ 1184.575980][T18951] chnl_net:caif_netlink_parms(): no params data found [ 1184.600082][T15713] Bluetooth: hci2: command tx timeout [ 1185.060435][T18951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.095172][T18951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.115559][T18951] bridge_slave_0: entered allmulticast mode [ 1185.151797][T18951] bridge_slave_0: entered promiscuous mode [ 1185.191988][T19014] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1185.208419][T19014] team0: Port device batadv2 added [ 1185.215989][T18951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.267750][T18951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.275078][T18951] bridge_slave_1: entered allmulticast mode [ 1185.319093][T18951] bridge_slave_1: entered promiscuous mode [ 1185.438575][T19014] syz.2.3588 (19014): drop_caches: 1 [ 1185.525190][T18951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.554296][T18951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.183618][T18951] team0: Port device team_slave_0 added [ 1186.215194][T18951] team0: Port device team_slave_1 added [ 1186.275178][T19033] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1186.310461][T19033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1186.320456][T15745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1186.348695][T15745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1186.366123][T15745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1186.380514][T15745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1186.396582][T15745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1186.460842][T19039] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1186.690904][T15745] Bluetooth: hci2: command tx timeout [ 1186.726065][T18951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.749996][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.829746][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1186.864369][T19047] netlink: 'syz.2.3593': attribute type 5 has an invalid length. [ 1186.873583][T19047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1186.917805][T18951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.122477][T19045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.130147][T19045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.392917][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.412427][T19045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.597749][T18920] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1187.641462][T19047] geneve2: entered promiscuous mode [ 1187.646874][T19047] geneve2: entered allmulticast mode [ 1187.694642][T18951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.730367][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.758050][T18920] usb 5-1: device descriptor read/64, error -71 [ 1187.765266][T18951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.847298][T17504] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.887609][T17504] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 43844 - 0 [ 1187.896801][T17504] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.914211][T17504] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 43844 - 0 [ 1187.923695][T17504] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.932797][T17504] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 43844 - 0 [ 1187.953295][T17504] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.963733][T17504] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 43844 - 0 [ 1188.017872][T18920] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1188.076788][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1188.088816][ T6537] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1188.106617][T18951] hsr_slave_0: entered promiscuous mode [ 1188.114143][T18951] hsr_slave_1: entered promiscuous mode [ 1188.121583][T18951] debugfs: 'hsr0' already exists in 'hsr' [ 1188.127372][T18951] Cannot create hsr debugfs directory [ 1188.137480][T19071] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1188.177721][T18920] usb 5-1: device descriptor read/64, error -71 [ 1188.258998][ T6537] usb 3-1: Using ep0 maxpacket: 32 [ 1188.279062][ T6537] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1188.291313][T18920] usb usb5-port1: attempt power cycle [ 1188.298402][ T6537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1188.310462][ T6537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1188.339970][ T6537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1188.365544][ T6537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1188.397652][T12473] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1188.412452][ T6537] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1188.428332][ T6537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.436462][ T6537] usb 3-1: Product: syz [ 1188.441177][T15745] Bluetooth: hci4: command tx timeout [ 1188.450481][ T6537] usb 3-1: Manufacturer: syz [ 1188.455505][ T6537] usb 3-1: SerialNumber: syz [ 1188.465447][ T6537] usb 3-1: config 0 descriptor?? [ 1188.581470][T12473] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1188.597783][T12473] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1188.617648][T12473] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1188.647170][T12473] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1188.657782][T18920] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1188.686746][T12473] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1188.697260][T18920] usb 5-1: device descriptor read/8, error -71 [ 1188.704971][T12473] usb 4-1: Product: syz [ 1188.709424][T12473] usb 4-1: Manufacturer: syz [ 1188.714109][T12473] usb 4-1: SerialNumber: syz [ 1188.730303][T12473] usb 4-1: config 0 descriptor?? [ 1188.739223][T12473] hub 4-1:0.0: bad descriptor, ignoring hub [ 1188.745248][T12473] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1188.767916][T12473] usb 4-1: selecting invalid altsetting 0 [ 1188.896915][ T6537] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1188.909436][ T6537] input input115: Device does not respond to id packet M [ 1188.945035][ T6537] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1188.957981][T18920] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1188.974596][ T6537] input input115: Device does not respond to id packet P [ 1189.001616][ T6537] input input115: Device does not respond to id packet B [ 1189.011970][T18920] usb 5-1: device descriptor read/8, error -71 [ 1189.111684][T12473] usb 4-1: USB disconnect, device number 55 [ 1189.128274][T18920] usb usb5-port1: unable to enumerate USB device [ 1189.203794][ T6537] input input115: Limiting number of effects to 32 (device reports 214) [ 1189.408492][T11943] .` (unregistering): Released all slaves [ 1189.425852][ T6537] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.446171][ T6537] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.461446][T11943] bond1 (unregistering): Released all slaves [ 1189.479222][ T6537] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.485890][ T6537] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1189.504246][ T6537] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input115 [ 1189.535976][ T6537] usb 3-1: USB disconnect, device number 77 [ 1189.738985][T11943] tipc: Left network mode [ 1189.833351][T19038] chnl_net:caif_netlink_parms(): no params data found [ 1189.988096][T12473] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1190.075589][T11943] hsr_slave_0: left promiscuous mode [ 1190.082217][T11943] hsr_slave_1: left promiscuous mode [ 1190.102245][T11943] team0 (unregistering): Port device batadv2 removed [ 1190.124399][T11943] team0 (unregistering): Port device batadv1 removed [ 1190.167612][T12473] usb 4-1: Using ep0 maxpacket: 8 [ 1190.174726][T12473] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1190.186056][T12473] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1190.217282][T12473] usb 4-1: config 0 has no interface number 0 [ 1190.227795][T12473] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1190.249549][T12473] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1190.272108][T12473] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1190.308819][T19051] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1190.316959][T12473] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1190.326219][T12473] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1190.339225][T12473] usb 4-1: Product: syz [ 1190.366442][T12473] usb 4-1: config 0 descriptor?? [ 1190.374962][T19089] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1190.487695][T19051] usb 3-1: Using ep0 maxpacket: 32 [ 1190.494798][T19051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.517718][T15745] Bluetooth: hci4: command tx timeout [ 1190.529313][T19051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.539500][T19051] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1190.555844][T19051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.603826][T19051] usb 3-1: config 0 descriptor?? [ 1190.626686][T19051] hub 3-1:0.0: USB hub found [ 1190.633612][T12473] usb 4-1: USB disconnect, device number 56 [ 1190.830533][T19051] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 1191.694865][T19106] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1192.153810][T19038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.171024][T19038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.184695][T19038] bridge_slave_0: entered allmulticast mode [ 1192.204228][T19038] bridge_slave_0: entered promiscuous mode [ 1192.265926][T19038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.306015][T19038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.331602][T19051] usbhid 3-1:0.0: can't add hid device: -71 [ 1192.345305][T19051] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1192.365032][T19038] bridge_slave_1: entered allmulticast mode [ 1192.378469][T19038] bridge_slave_1: entered promiscuous mode [ 1192.493743][T19051] usb 3-1: USB disconnect, device number 78 [ 1192.597759][T15745] Bluetooth: hci4: command tx timeout [ 1192.614716][T19038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.680633][T19038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.751850][T19038] team0: Port device team_slave_0 added [ 1192.778660][T19038] team0: Port device team_slave_1 added [ 1192.865733][T18951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1192.988230][T18951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1193.020103][T19038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.028976][T19116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1193.043205][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.125189][T19038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.330384][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 1193.360950][T19127] netlink: 'syz.3.3608': attribute type 5 has an invalid length. [ 1193.379239][T19127] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3608'. [ 1193.396370][T18951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1193.449982][T19124] geneve2: left promiscuous mode [ 1193.458525][T19124] geneve2: left allmulticast mode [ 1193.479623][T19038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.509121][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.572996][T19038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.612636][T18951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1193.644293][T14941] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 35351 - 0 [ 1193.674412][T14941] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 35351 - 0 [ 1193.745665][T14941] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 35351 - 0 [ 1193.807613][T14941] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 35351 - 0 [ 1193.931737][T19146] program syz.3.3609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1193.983747][T19038] hsr_slave_0: entered promiscuous mode [ 1193.999223][T19038] hsr_slave_1: entered promiscuous mode [ 1194.026930][T19038] debugfs: 'hsr0' already exists in 'hsr' [ 1194.052639][T19038] Cannot create hsr debugfs directory [ 1194.749464][T15745] Bluetooth: hci4: command tx timeout [ 1195.370680][T18951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.519877][T18951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.572366][T14941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.579616][T14941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.609213][T19165] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1195.616216][T19165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1195.624358][T19167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3613'. [ 1195.641336][T19165] vhci_hcd vhci_hcd.0: Device attached [ 1195.682843][T17653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.690091][T17653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.699473][T19168] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0 [ 1195.723243][T10863] vhci_hcd vhci_hcd.3: stop threads [ 1195.749162][T10863] vhci_hcd vhci_hcd.3: release socket [ 1195.754666][T10863] vhci_hcd vhci_hcd.3: disconnect device [ 1196.235947][T19038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1196.304826][T19038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1196.373760][T19038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1196.413916][T19038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1196.475503][T18951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.535289][ T30] audit: type=1326 audit(1766983458.726:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.568433][ T30] audit: type=1326 audit(1766983458.756:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.591376][ T30] audit: type=1326 audit(1766983458.756:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.660113][T19050] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1196.671869][ T30] audit: type=1326 audit(1766983458.756:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.698821][T19051] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1196.711467][ T30] audit: type=1326 audit(1766983458.756:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.735092][ T30] audit: type=1326 audit(1766983458.756:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.784099][T19038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.794891][T18951] veth0_vlan: entered promiscuous mode [ 1196.807379][T18951] veth1_vlan: entered promiscuous mode [ 1196.847654][T19050] usb 4-1: Using ep0 maxpacket: 32 [ 1196.855276][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.863288][ T30] audit: type=1326 audit(1766983458.756:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.896789][T19038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.913571][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.921040][T10863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.930489][T19051] usb 5-1: Using ep0 maxpacket: 32 [ 1196.939901][T19051] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1196.948792][ T30] audit: type=1326 audit(1766983458.756:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1196.974519][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.985010][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1196.996198][ T30] audit: type=1326 audit(1766983458.756:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1197.044177][T17504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.051418][T17504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.065280][T19050] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1197.094230][ T30] audit: type=1326 audit(1766983458.756:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19193 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f998f749 code=0x7ffc0000 [ 1197.099038][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1197.130472][T19050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.148805][T19194] usb usb8: usbfs: process 19194 (syz.2.3618) did not claim interface 0 before use [ 1197.171556][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1197.189634][T19050] usb 4-1: config 0 descriptor?? [ 1197.195967][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1197.210414][T19194] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1197.221957][T19050] hub 4-1:0.0: USB hub found [ 1197.230635][T19051] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1197.246970][T19194] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1197.256200][T19194] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1197.272034][T18951] veth0_macvtap: entered promiscuous mode [ 1197.275511][T19051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.286097][T19051] usb 5-1: Product: syz [ 1197.290672][T19051] usb 5-1: Manufacturer: syz [ 1197.295472][T19051] usb 5-1: SerialNumber: syz [ 1197.308103][T19051] usb 5-1: config 0 descriptor?? [ 1197.324414][T18951] veth1_macvtap: entered promiscuous mode [ 1197.425970][T19050] hub 4-1:0.0: 1 port detected [ 1197.446348][T18951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.479305][T18951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.508843][T12473] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1197.525624][T11947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.551228][T11947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.578174][T11947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.599936][T11947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.668826][T12473] usb 3-1: device descriptor read/64, error -71 [ 1197.686861][T19038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.741054][T19051] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1197.772025][T19051] input input117: Device does not respond to id packet M [ 1197.788537][T19051] input input117: Device does not respond to id packet P [ 1197.823301][T14941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.851955][T14941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.910195][T12473] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1197.928368][T14941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.932548][T19038] veth0_vlan: entered promiscuous mode [ 1197.945091][T14941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.989245][T19051] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1197.996361][T19186] netlink: 'syz.4.3619': attribute type 4 has an invalid length. [ 1198.005515][T19038] veth1_vlan: entered promiscuous mode [ 1198.020672][T19051] input input117: Device does not respond to id packet B [ 1198.028102][T19186] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3619'. [ 1198.062393][T19051] input input117: Limiting number of effects to 32 (device reports 214) [ 1198.078230][T12473] usb 3-1: device descriptor read/64, error -71 [ 1198.108021][T19186] .`: renamed from bond0 (while UP) [ 1198.209887][T12473] usb usb3-port1: attempt power cycle [ 1198.242623][T19184] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1198.301124][T19184] bond2 (unregistering): Released all slaves [ 1198.333797][T19208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.354528][T19208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.420961][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1198.439707][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1198.460573][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1198.467320][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1198.479394][T19051] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input117 [ 1198.498770][T19216] syzkaller1: entered promiscuous mode [ 1198.542426][T19051] usb 5-1: USB disconnect, device number 48 [ 1198.551526][T19050] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1198.565809][T19216] syzkaller1: entered allmulticast mode [ 1198.569931][T12473] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 1198.586625][T17504] usb 4-1: Failed to suspend device, error -71 [ 1198.586646][T18918] usb 4-1: USB disconnect, device number 57 [ 1198.638054][T12473] usb 3-1: device descriptor read/8, error -71 [ 1198.796078][T19038] veth0_macvtap: entered promiscuous mode [ 1198.814235][T19038] veth1_macvtap: entered promiscuous mode [ 1198.860747][T19038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.888969][T12473] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1198.901779][T19038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.919594][T12473] usb 3-1: device descriptor read/8, error -71 [ 1198.935757][ T4030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.971597][ T4030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.995899][ T4030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.028378][T12473] usb usb3-port1: unable to enumerate USB device [ 1199.073358][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1199.090691][T19226] netlink: 'syz.1.3620': attribute type 5 has an invalid length. [ 1199.098949][T19226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1199.177110][T19224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.185269][T19224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.205627][T19228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3621'. [ 1199.416286][T19239] netlink: 'syz.3.3622': attribute type 13 has an invalid length. [ 1199.424377][T19239] netlink: 'syz.3.3622': attribute type 27 has an invalid length. [ 1199.433942][T19239] netlink: 'syz.3.3622': attribute type 21 has an invalid length. [ 1199.781989][T19224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.824500][T19224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.929046][ T4030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.954729][T19226] geneve2: entered promiscuous mode [ 1200.979025][T19226] geneve2: entered allmulticast mode [ 1201.057344][T19253] tipc: Enabling of bearer rejected, failed to enable media [ 1201.076989][ T4030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.125869][ T4030] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 32903 - 0 [ 1201.135151][ T4030] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.144444][ T4030] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 32903 - 0 [ 1201.185252][ T4030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.213696][ T4030] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 32903 - 0 [ 1201.243789][ T4030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.261886][ T4030] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 32903 - 0 [ 1201.307008][T19051] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1201.419176][T10863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.450231][T10863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.490346][T19051] usb 5-1: Using ep0 maxpacket: 32 [ 1201.509352][T19051] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1201.532832][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1201.556388][T17504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.576533][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1201.586625][T17504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.620583][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1201.671500][T19051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1201.711460][T19051] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1201.734172][T19051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.763025][T19051] usb 5-1: Product: syz [ 1201.776247][T19051] usb 5-1: Manufacturer: syz [ 1201.793439][T19051] usb 5-1: SerialNumber: syz [ 1201.823320][T19051] usb 5-1: config 0 descriptor?? [ 1201.972427][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1201.972448][ T30] audit: type=1326 audit(1766983464.166:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.016071][ T30] audit: type=1326 audit(1766983464.206:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.196468][ T30] audit: type=1326 audit(1766983464.206:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19264 comm="syz.1.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67698f749 code=0x7ffc0000 [ 1202.284102][T19051] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1202.291619][T19051] input input118: Device does not respond to id packet M [ 1202.315475][T19051] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1202.317979][ T30] audit: type=1326 audit(1766983464.206:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19264 comm="syz.1.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67698f749 code=0x7ffc0000 [ 1202.370991][ T30] audit: type=1326 audit(1766983464.236:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.397047][ T30] audit: type=1326 audit(1766983464.236:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.418026][T19051] input input118: Device does not respond to id packet P [ 1202.421870][ T30] audit: type=1326 audit(1766983464.236:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.467691][T19054] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1202.495877][T19051] input input118: Device does not respond to id packet B [ 1202.577845][ T30] audit: type=1326 audit(1766983464.236:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.601753][ T30] audit: type=1326 audit(1766983464.236:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.624946][ T30] audit: type=1326 audit(1766983464.236:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd938f749 code=0x7ffc0000 [ 1202.668894][T19051] input input118: Limiting number of effects to 32 (device reports 214) [ 1202.680211][T19290] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1202.734161][T19290] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1202.812101][T19290] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1202.824763][T19288] usb usb8: usbfs: process 19288 (syz.0.3634) did not claim interface 0 before use [ 1202.853418][T19054] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1202.863079][T19054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.893872][T19054] usb 4-1: Product: syz [ 1202.905869][T19054] usb 4-1: Manufacturer: syz [ 1202.913733][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1202.940700][T19054] usb 4-1: SerialNumber: syz [ 1202.965018][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1202.979393][T12468] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1203.011884][T19054] usb 4-1: config 0 descriptor?? [ 1203.019246][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1203.047823][T19050] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1203.059128][T19051] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1203.079963][T19051] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input118 [ 1203.103282][T19051] usb 5-1: USB disconnect, device number 49 [ 1203.167725][T17137] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 1203.202060][T19050] usb 2-1: device descriptor read/64, error -71 [ 1203.209011][T12468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.260223][T12468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1203.300341][T12468] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1203.308068][T17137] usb 1-1: device descriptor read/64, error -71 [ 1203.367777][T12468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1203.393510][T12468] usb 3-1: SerialNumber: syz [ 1203.467727][T19050] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1203.577825][T17137] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 1203.615860][T19050] usb 2-1: device descriptor read/64, error -71 [ 1203.672487][T12468] usb 3-1: 0:2 : does not exist [ 1203.695590][T12468] usb 3-1: USB disconnect, device number 83 [ 1203.748376][T19050] usb usb2-port1: attempt power cycle [ 1203.777664][T17137] usb 1-1: device descriptor read/64, error -71 [ 1203.864606][T12227] udevd[12227]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1204.029275][T17137] usb usb1-port1: attempt power cycle [ 1204.149020][T19050] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1204.367709][T17137] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 1204.390641][T17137] usb 1-1: device descriptor read/8, error -71 [ 1204.522259][T19050] usb 2-1: device descriptor read/8, error -71 [ 1204.677670][T17137] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 1204.702674][T17137] usb 1-1: device descriptor read/8, error -71 [ 1204.823868][T17137] usb usb1-port1: unable to enumerate USB device [ 1205.444438][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'. [ 1205.521253][T19328] netlink: 'syz.0.3639': attribute type 5 has an invalid length. [ 1205.576328][T19328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3639'. [ 1205.907475][T19326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.915175][T19326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.290928][T19326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.331751][T19326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.411052][T18925] usb 4-1: USB disconnect, device number 58 [ 1206.787702][T18925] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1206.977744][T18925] usb 4-1: Using ep0 maxpacket: 32 [ 1207.003702][T18925] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1207.021348][T18925] usb 4-1: config 0 has no interface number 0 [ 1207.043800][T18925] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1207.057681][T12468] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1207.067253][T18925] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1207.087634][T18925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.104743][T18925] usb 4-1: Product: syz [ 1207.116917][T18925] usb 4-1: Manufacturer: syz [ 1207.127187][T18925] usb 4-1: SerialNumber: syz [ 1207.142972][T18925] usb 4-1: config 0 descriptor?? [ 1207.237769][T12468] usb 3-1: Using ep0 maxpacket: 8 [ 1207.254657][T12468] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1207.274164][T12468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.287979][T12468] usb 3-1: Product: syz [ 1207.292214][T12468] usb 3-1: Manufacturer: syz [ 1207.308322][T12468] usb 3-1: SerialNumber: syz [ 1207.326499][T12468] usb 3-1: config 0 descriptor?? [ 1207.380322][T12468] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1207.677989][T19327] syzkaller0: entered promiscuous mode [ 1207.687890][T19327] syzkaller0: entered allmulticast mode [ 1207.758846][T19328] geneve2: entered promiscuous mode [ 1207.764159][T19328] geneve2: entered allmulticast mode [ 1207.783825][T19333] tipc: Started in network mode [ 1207.817939][T19333] tipc: Node identity b2c4a1647d52, cluster identity 4711 [ 1207.828858][T19333] tipc: Enabled bearer , priority 0 [ 1207.836817][T19324] tipc: Resetting bearer [ 1207.928255][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1207.928275][ T30] audit: type=1326 audit(1766983470.126:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1207.969974][T19324] tipc: Disabling bearer [ 1207.975961][ T30] audit: type=1326 audit(1766983470.146:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.003400][T12468] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1208.021347][T12468] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 1208.052241][T10863] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.070778][T10863] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 49782 - 0 [ 1208.098035][T10863] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.139026][T12468] usb 3-1: USB disconnect, device number 84 [ 1208.149177][T10863] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 49782 - 0 [ 1208.178134][T10863] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.232340][T10863] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 49782 - 0 [ 1208.253727][T10863] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.276970][T10863] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 49782 - 0 [ 1208.292637][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3646'. [ 1208.358747][ T30] audit: type=1326 audit(1766983470.556:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.472801][ T30] audit: type=1326 audit(1766983470.556:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.536338][ T30] audit: type=1326 audit(1766983470.586:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.563435][T19344] usb usb8: usbfs: process 19344 (syz.4.3642) did not claim interface 0 before use [ 1208.573231][ T30] audit: type=1326 audit(1766983470.586:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.610774][T19344] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1208.619494][T19344] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1208.635877][ T30] audit: type=1326 audit(1766983470.586:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.662759][T19344] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1208.762429][ T30] audit: type=1326 audit(1766983470.586:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.897181][ T30] audit: type=1326 audit(1766983470.586:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.927698][T12468] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 1208.950897][ T30] audit: type=1326 audit(1766983470.596:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9098f749 code=0x7ffc0000 [ 1208.968209][T19330] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1209.067595][T12468] usb 5-1: device descriptor read/64, error -71 [ 1209.249910][T19330] usb 3-1: Using ep0 maxpacket: 32 [ 1209.278241][T19330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.294157][T19330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.307625][T19330] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1209.317379][T19330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.397617][T12468] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 1209.925685][T19330] usb 3-1: config 0 descriptor?? [ 1209.961782][T19330] hub 3-1:0.0: USB hub found [ 1210.517753][T19330] hub 3-1:0.0: 1 port detected [ 1210.560158][T19338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.578220][T19338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.815792][T18925] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1210.825228][T18925] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1210.855625][T18925] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1210.877750][T18925] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1210.979895][T18925] usb 4-1: USB disconnect, device number 59 [ 1211.429969][T19330] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1211.450731][T19330] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1211.482514][T19330] usbhid 3-1:0.0: can't add hid device: -71 [ 1211.493565][T19330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1211.528514][T19330] usb 3-1: USB disconnect, device number 85 [ 1211.637935][T12468] usb usb5-port1: attempt power cycle [ 1211.977684][T12468] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1211.998412][T12468] usb 5-1: Using ep0 maxpacket: 32 [ 1212.018298][T12468] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.049131][T12468] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1212.077569][T12468] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.107206][T12468] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1212.144013][T12468] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1212.161581][T12468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.170103][T12468] usb 5-1: Product: syz [ 1212.174983][T12468] usb 5-1: Manufacturer: syz [ 1212.180523][T12468] usb 5-1: SerialNumber: syz [ 1212.203528][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1212.233678][T12468] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input119 [ 1212.428938][T12468] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1212.456727][T12468] (id 0x00) [ 1212.567656][T12468] rc_core: IR keymap rc-imon-pad not found [ 1212.582740][T19424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3659'. [ 1212.584707][T12468] Registered IR keymap rc-empty [ 1212.621432][T12468] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1212.641262][T12468] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1212.651002][T19421] nvme_fabrics: missing parameter 'transport=%s' [ 1212.659138][T19421] nvme_fabrics: missing parameter 'nqn=%s' [ 1212.701446][T12468] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1212.743926][T12468] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input120 [ 1212.785381][T12468] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:52> initialized [ 1213.020818][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 1213.661041][T19439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1213.675374][T19439] netlink: 'syz.0.3664': attribute type 21 has an invalid length. [ 1213.722964][T19050] usb 5-1: USB disconnect, device number 52 [ 1213.729271][T19443] imon:send_packet: packet tx failed (-71) [ 1213.775970][T19443] imon:vfd_write: send packet #3 failed [ 1213.827661][T12468] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1214.138735][T12468] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.169769][T12468] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.180233][T12468] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1214.193002][T12468] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1214.203092][T12468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.275722][T12468] usb 4-1: config 0 descriptor?? [ 1214.710597][T19449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.754099][T19449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.797726][T18925] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1215.016762][T19466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.038274][T19466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.089890][T18925] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1215.167946][T18925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.218123][T18925] usb 3-1: Product: syz [ 1215.233002][T18925] usb 3-1: Manufacturer: syz [ 1215.244625][T18925] usb 3-1: SerialNumber: syz [ 1215.956364][T19465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3669'. [ 1215.995175][T19465] netlink: 'syz.4.3669': attribute type 21 has an invalid length. [ 1216.632755][T18925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1216.752315][T18925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1216.766815][T18925] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1216.908453][T19483] block device autoloading is deprecated and will be removed. [ 1216.961203][T18925] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1216.994771][T18925] usb 3-1: USB disconnect, device number 86 [ 1217.207773][T12468] usbhid 4-1:0.0: can't add hid device: -71 [ 1217.213863][T12468] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1217.377454][T12468] usb 4-1: USB disconnect, device number 60 [ 1217.569068][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1217.585021][T19497] netlink: 'syz.0.3678': attribute type 5 has an invalid length. [ 1217.615525][T19497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1217.674739][T19493] syzkaller1: entered promiscuous mode [ 1217.681178][T19493] syzkaller1: entered allmulticast mode [ 1217.697315][T19496] geneve2: left promiscuous mode [ 1217.717779][T19496] geneve2: left allmulticast mode [ 1217.776480][T12468] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1217.911344][ T1149] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 49782 - 0 [ 1217.943265][ T1149] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 49782 - 0 [ 1217.957904][T12468] usb 4-1: Using ep0 maxpacket: 8 [ 1217.976642][T12468] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1217.986809][T12468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.995812][T12468] usb 4-1: Product: syz [ 1218.008589][ T1149] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 49782 - 0 [ 1218.026155][ T1149] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 49782 - 0 [ 1218.036649][T12468] usb 4-1: Manufacturer: syz [ 1218.046174][T12468] usb 4-1: SerialNumber: syz [ 1218.081114][T12468] usb 4-1: config 0 descriptor?? [ 1218.110551][T12468] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1218.217944][T19062] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1218.317878][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1218.389559][T19062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.414688][T19062] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1218.424977][T19062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.541870][T19062] usb 5-1: config 0 descriptor?? [ 1218.792215][T19062] usbhid 5-1:0.0: can't add hid device: -71 [ 1218.798813][T19062] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1218.814522][T19062] usb 5-1: USB disconnect, device number 53 [ 1219.165165][T12468] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1219.174388][T12468] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 1219.221627][T12468] usb 4-1: USB disconnect, device number 61 [ 1219.252240][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1219.262293][T19517] netlink: 'syz.2.3684': attribute type 21 has an invalid length. [ 1219.357650][T19062] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1219.560734][T19062] usb 5-1: Using ep0 maxpacket: 16 [ 1219.577923][T19062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.648137][T19062] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1219.667703][T19062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.711315][T19062] usb 5-1: config 0 descriptor?? [ 1219.783941][T19521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1220.755107][T19062] usbhid 5-1:0.0: can't add hid device: -71 [ 1220.809090][T19062] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1220.841335][T19062] usb 5-1: USB disconnect, device number 54 [ 1221.166892][T19550] syzkaller1: entered promiscuous mode [ 1221.173828][T19550] syzkaller1: entered allmulticast mode [ 1221.750987][T19555] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1222.787688][T19357] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1222.937784][T19357] usb 3-1: device descriptor read/64, error -71 [ 1223.027669][T19062] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1223.069145][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1223.134943][T19581] netlink: 'syz.1.3701': attribute type 21 has an invalid length. [ 1223.167668][T19062] usb 1-1: device descriptor read/64, error -71 [ 1223.187659][T19357] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1223.338817][T19357] usb 3-1: device descriptor read/64, error -71 [ 1223.397660][T19050] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1223.407671][T19062] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1223.448160][T19357] usb usb3-port1: attempt power cycle [ 1223.537908][T19062] usb 1-1: device descriptor read/64, error -71 [ 1223.549646][T19050] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1223.567656][T19050] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1223.586158][T19050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.620333][T19050] usb 4-1: config 0 descriptor?? [ 1223.648690][T19062] usb usb1-port1: attempt power cycle [ 1223.787725][T19357] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1223.832266][T19357] usb 3-1: device descriptor read/8, error -71 [ 1223.998841][T19062] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1224.038493][T19062] usb 1-1: device descriptor read/8, error -71 [ 1224.118649][T19357] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1224.180729][T19357] usb 3-1: device descriptor read/8, error -71 [ 1224.308090][T19357] usb usb3-port1: unable to enumerate USB device [ 1224.311120][T19062] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1224.378948][T19062] usb 1-1: device descriptor read/8, error -71 [ 1224.431684][T19603] syzkaller1: entered promiscuous mode [ 1224.437365][T19603] syzkaller1: entered allmulticast mode [ 1224.499182][T19062] usb usb1-port1: unable to enumerate USB device [ 1224.682180][T19050] usb 4-1: string descriptor 0 read error: -71 [ 1224.718826][T19050] usb 4-1: USB disconnect, device number 62 [ 1224.967799][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1224.979190][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1225.419349][T19062] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1225.602266][T19062] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1225.611310][T19062] usb 5-1: not running at top speed; connect to a high speed hub [ 1225.630737][T19062] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.662968][T19062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1225.757674][T19062] usb 5-1: string descriptor 0 read error: -22 [ 1225.764196][T19062] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.795802][T19062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.843725][T19062] usb 5-1: 0:2 : does not exist [ 1225.860961][T19633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3715'. [ 1227.418491][T19062] usb 5-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 1227.449262][T19062] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 1227.644318][T19062] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1227.649805][T19062] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1227.801590][T19062] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1227.840666][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 1227.841472][T19658] netlink: 'syz.1.3718': attribute type 21 has an invalid length. [ 1227.901477][T19062] usb 5-1: USB disconnect, device number 55 [ 1228.033537][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 1228.497683][T18925] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1228.648002][T18925] usb 3-1: Using ep0 maxpacket: 32 [ 1228.658286][T18925] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1228.678417][T18925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.701880][T18925] usb 3-1: Product: syz [ 1228.711871][T18925] usb 3-1: Manufacturer: syz [ 1228.720453][T18925] usb 3-1: SerialNumber: syz [ 1228.735775][T18925] usb 3-1: config 0 descriptor?? [ 1228.758877][T18925] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1228.780155][T18925] dvb-usb: bulk message failed: -22 (2/0) [ 1228.804916][T18925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1228.830140][T19674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3726'. [ 1228.837847][T18925] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1228.877699][T18925] usb 3-1: media controller created [ 1228.953266][T18925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1229.004507][T18925] usb 3-1: selecting invalid altsetting 7 [ 1229.021420][T18925] cxusb: set interface failed [ 1229.026452][T18925] dvb-usb: bulk message failed: -22 (1/0) [ 1229.034263][T19681] input: syz0 as /devices/virtual/input/input121 [ 1229.136929][T18925] DVB: Unable to find symbol lgdt330x_attach() [ 1229.161290][T18925] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1229.318131][T18925] rc_core: IR keymap rc-dvico-portable not found [ 1229.357847][T18925] Registered IR keymap rc-empty [ 1229.364169][T18925] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1229.405599][T18925] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input122 [ 1229.443848][T18925] dvb-usb: schedule remote query interval to 100 msecs. [ 1229.464783][T18925] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1229.488842][T19062] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1229.517786][T19701] netlink: 'syz.0.3731': attribute type 21 has an invalid length. [ 1229.581881][T18925] dvb-usb: bulk message failed: -22 (1/0) [ 1229.647698][T19062] usb 4-1: device descriptor read/64, error -71 [ 1229.709074][T18925] dvb-usb: bulk message failed: -22 (1/0) [ 1229.837730][T19356] dvb-usb: bulk message failed: -22 (1/0) [ 1229.907733][T19062] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1229.947683][T19356] usb 3-1: USB disconnect, device number 91 [ 1230.043462][T19356] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1230.047718][T19062] usb 4-1: device descriptor read/64, error -71 [ 1230.217966][T19062] usb usb4-port1: attempt power cycle [ 1230.577728][T19062] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1230.601219][T19722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1230.615491][T19062] usb 4-1: device descriptor read/8, error -71 [ 1230.958290][T19062] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1230.989687][T19062] usb 4-1: device descriptor read/8, error -71 [ 1231.030194][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'. [ 1231.040388][T19720] netlink: 'syz.1.3736': attribute type 21 has an invalid length. [ 1231.108684][T19062] usb usb4-port1: unable to enumerate USB device [ 1231.117665][T18925] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1231.278502][T18925] usb 3-1: Using ep0 maxpacket: 16 [ 1231.285739][T18925] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1231.298047][T18925] usb 3-1: config 0 has no interface number 0 [ 1231.311118][T18925] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.341533][T18925] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.367644][T18925] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1231.385205][T18925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.409427][T18925] usb 3-1: config 0 descriptor?? [ 1231.567745][T19062] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1231.777663][T19062] usb 1-1: Using ep0 maxpacket: 16 [ 1231.802383][T19062] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1231.827856][T19062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.857723][T19062] usb 1-1: config 0 has no interface number 0 [ 1231.861279][T18925] usbhid 3-1:0.1: can't add hid device: -71 [ 1231.864024][T19062] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1231.872848][T18925] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1231.894646][T18925] usb 3-1: USB disconnect, device number 92 [ 1231.934612][T19062] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1231.964981][T19062] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1232.003985][T19062] usb 1-1: Product: syz [ 1232.027598][T19062] usb 1-1: SerialNumber: syz [ 1232.045312][T19062] usb 1-1: config 0 descriptor?? [ 1232.092212][T19062] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1233.015466][T19746] FAULT_INJECTION: forcing a failure. [ 1233.015466][T19746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.037878][T19746] CPU: 1 UID: 0 PID: 19746 Comm: syz.3.3745 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.037915][T19746] Tainted: [L]=SOFTLOCKUP [ 1233.037925][T19746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1233.037938][T19746] Call Trace: [ 1233.037951][T19746] [ 1233.037962][T19746] dump_stack_lvl+0xe8/0x150 [ 1233.037997][T19746] should_fail_ex+0x414/0x560 [ 1233.038037][T19746] _copy_from_user+0x2d/0xb0 [ 1233.038058][T19746] do_fcntl+0x5c1/0x1a50 [ 1233.038084][T19746] ? __fget_files+0x2a/0x420 [ 1233.038103][T19746] ? __pfx_do_fcntl+0x10/0x10 [ 1233.038131][T19746] ? __fget_files+0x2a/0x420 [ 1233.038151][T19746] ? __fget_files+0x2a/0x420 [ 1233.038175][T19746] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1233.038195][T19746] __se_sys_fcntl+0xc8/0x150 [ 1233.038219][T19746] do_syscall_64+0xec/0xf80 [ 1233.038236][T19746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.038251][T19746] ? trace_irq_disable+0x37/0x100 [ 1233.038271][T19746] ? clear_bhb_loop+0x60/0xb0 [ 1233.038289][T19746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.038304][T19746] RIP: 0033:0x7f99ea78f749 [ 1233.038319][T19746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.038332][T19746] RSP: 002b:00007f99eb594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1233.038349][T19746] RAX: ffffffffffffffda RBX: 00007f99ea9e5fa0 RCX: 00007f99ea78f749 [ 1233.038361][T19746] RDX: 0000200000000200 RSI: 0000000000000005 RDI: 0000000000000004 [ 1233.038371][T19746] RBP: 00007f99eb594090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.038381][T19746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.038390][T19746] R13: 00007f99ea9e6038 R14: 00007f99ea9e5fa0 R15: 00007f99eab0fa28 [ 1233.038415][T19746] [ 1233.584807][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 1233.634921][T19758] netlink: 'syz.4.3747': attribute type 5 has an invalid length. [ 1233.643033][T19758] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3747'. [ 1233.681950][T19754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.689454][T19754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.732032][T19760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1233.971269][T19754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.008439][T19754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.586544][T19758] geneve2: entered promiscuous mode [ 1234.599842][T19758] geneve2: entered allmulticast mode [ 1234.640151][T19759] geneve3: entered promiscuous mode [ 1234.647671][T19759] geneve3: entered allmulticast mode [ 1234.714597][T14943] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.727228][T14943] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 59663 - 0 [ 1234.754071][T14943] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.824990][T19356] usb 1-1: USB disconnect, device number 42 [ 1234.831191][T14943] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 59663 - 0 [ 1234.841192][T14943] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.850495][T14943] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 59663 - 0 [ 1234.860072][T14943] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.926765][T14943] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 59663 - 0 [ 1234.985460][T19773] netlink: 'syz.4.3751': attribute type 21 has an invalid length. [ 1235.065247][T19778] netlink: 'syz.2.3754': attribute type 10 has an invalid length. [ 1235.474620][T14943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1235.497684][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1235.508772][T19789] netlink: 'syz.3.3753': attribute type 21 has an invalid length. [ 1235.619386][T19787] netlink: 'syz.0.3755': attribute type 1 has an invalid length. [ 1235.698974][T14943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1235.788935][T14943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1235.833843][T14943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1236.237697][T19356] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1236.407742][T19356] usb 3-1: Using ep0 maxpacket: 16 [ 1236.426287][T19356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.455451][T19356] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1236.472708][T19356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.506270][T19356] usb 3-1: config 0 descriptor?? [ 1236.757760][T17812] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1236.928491][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.947421][T17812] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1236.963038][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.982209][T17812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1236.995917][T19356] mcp2221 0003:04D8:00DD.0034: unbalanced delimiter at end of report description [ 1237.007678][T19062] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1237.010186][T17812] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1237.029589][T19356] mcp2221 0003:04D8:00DD.0034: can't parse reports [ 1237.036518][T19356] mcp2221 0003:04D8:00DD.0034: probe with driver mcp2221 failed with error -22 [ 1237.047127][T17812] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1237.056909][T17812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.092469][T17812] usb 5-1: config 0 descriptor?? [ 1237.139152][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1237.148487][T19821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1237.158230][T19821] netlink: 484 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1237.167707][T19821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3767'. [ 1237.182085][T19356] usb 3-1: USB disconnect, device number 93 [ 1237.197580][T19062] usb 1-1: Using ep0 maxpacket: 16 [ 1237.205787][T19062] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1237.214660][T19062] usb 1-1: config 0 has no interface number 0 [ 1237.221290][T19062] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.232866][T19062] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.243641][T19062] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1237.253271][T19062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.272299][T19062] usb 1-1: config 0 descriptor?? [ 1237.687680][T19062] usbhid 1-1:0.1: can't add hid device: -71 [ 1237.707411][T19062] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1237.763560][T19062] usb 1-1: USB disconnect, device number 43 [ 1238.087720][T19062] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1238.185905][T17812] a4tech 0003:09DA:001A.0035: item fetching failed at offset 5/7 [ 1238.198730][T17812] a4tech 0003:09DA:001A.0035: parse failed [ 1238.204913][T17812] a4tech 0003:09DA:001A.0035: probe with driver a4tech failed with error -22 [ 1238.257620][T19062] usb 2-1: Using ep0 maxpacket: 8 [ 1238.269636][T19062] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 1238.300516][T19062] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 76, using maximum allowed: 30 [ 1238.344896][T19062] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 76 [ 1238.367600][T12468] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1238.401006][T19062] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1238.411825][T19062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.422439][T19840] netlink: 'syz.3.3772': attribute type 21 has an invalid length. [ 1238.488881][T19062] usb 2-1: Product: syz [ 1238.493245][T19062] usb 2-1: Manufacturer: syz [ 1238.498579][T19062] usb 2-1: SerialNumber: syz [ 1238.520461][T19062] usb 2-1: config 0 descriptor?? [ 1238.567626][T12468] usb 3-1: Using ep0 maxpacket: 8 [ 1238.575258][T12468] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 1238.588697][T12468] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1238.613304][T12468] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.634034][T12468] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1238.681038][T12468] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1238.688445][T12468] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1238.698559][T12468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.719047][T12468] usb 3-1: config 0 descriptor?? [ 1239.076050][T19062] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1239.092388][T19062] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1239.119776][T19062] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1239.158492][T19062] usb 2-1: USB disconnect, device number 48 [ 1239.577996][T17812] usb 5-1: USB disconnect, device number 56 [ 1239.805209][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'. [ 1240.172517][T12468] logitech-djreceiver 0003:046D:C53A.0036: hidraw0: USB HID v0.81 Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 1240.433364][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3775'. [ 1240.444971][T19858] netlink: 'syz.1.3775': attribute type 21 has an invalid length. [ 1241.937598][T19050] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1242.057888][T19885] Option ' ' to dns_resolver key: bad/missing value [ 1242.097657][T19050] usb 5-1: Using ep0 maxpacket: 16 [ 1242.112619][T19050] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1242.124289][T19062] usb 3-1: USB disconnect, device number 94 [ 1242.160579][T19050] usb 5-1: config 0 has no interface number 0 [ 1242.183441][T19050] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.215086][T19050] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.228042][T19050] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1242.237290][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.250195][T19050] usb 5-1: config 0 descriptor?? [ 1242.467977][T19891] netlink: 'syz.3.3787': attribute type 21 has an invalid length. [ 1242.663325][T19050] usbhid 5-1:0.1: can't add hid device: -71 [ 1242.692135][T19050] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1242.727388][T19050] usb 5-1: USB disconnect, device number 57 [ 1243.187618][T19050] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1243.319410][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1243.358095][T19050] usb 3-1: Using ep0 maxpacket: 32 [ 1243.365263][T19050] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1243.386629][T19050] usb 3-1: config 0 has no interface number 0 [ 1243.393099][T19050] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1243.418195][T19050] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1243.447695][T19050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.455869][T19050] usb 3-1: Product: syz [ 1243.460270][T19050] usb 3-1: Manufacturer: syz [ 1243.465107][T19050] usb 3-1: SerialNumber: syz [ 1243.471841][T19914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1243.577633][T17812] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1243.591764][T19050] usb 3-1: config 0 descriptor?? [ 1243.751941][T17812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1243.774542][T17812] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1243.808433][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1243.818300][T19919] netlink: 'syz.3.3795': attribute type 21 has an invalid length. [ 1243.844427][T17812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 65401, setting to 1024 [ 1243.862732][T17812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1243.912711][T17812] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1243.922413][T17812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.933898][T17812] usb 5-1: Product: syz [ 1243.944316][T17812] usb 5-1: Manufacturer: syz [ 1243.956927][T17812] usb 5-1: SerialNumber: syz [ 1243.981640][T17812] usb 5-1: config 0 descriptor?? [ 1243.998868][T19904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1244.006314][T19904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1244.022098][T17812] usb 5-1: ucan: probing device on interface #0 [ 1244.045780][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.052437][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.567469][T17812] usb 5-1: ucan: failed to retrieve device info [ 1244.592152][T17812] usb 5-1: ucan: probe failed; try to update the device firmware [ 1244.612079][T17812] usb 5-1: USB disconnect, device number 58 [ 1244.964051][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1245.032050][T19928] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1245.990676][T19935] netlink: 'syz.0.3799': attribute type 8 has an invalid length. [ 1246.113006][T19939] syzkaller1: entered promiscuous mode [ 1246.119606][T19939] syzkaller1: entered allmulticast mode [ 1246.267664][T19062] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1246.589998][T19062] usb 1-1: Using ep0 maxpacket: 8 [ 1246.599671][T19062] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1246.632892][T19062] usb 1-1: config 2 has no interface number 0 [ 1246.639402][T19062] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1246.653399][T19062] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1246.669152][T19950] netlink: 'syz.1.3803': attribute type 21 has an invalid length. [ 1246.768969][T19062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.777126][T19062] usb 1-1: Product: syz [ 1246.781832][T19062] usb 1-1: Manufacturer: syz [ 1246.786639][T19062] usb 1-1: SerialNumber: syz [ 1246.792407][T19902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.876499][T19902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.886332][T19062] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1247.168393][T17812] usb 1-1: USB disconnect, device number 44 [ 1247.226524][T19050] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1247.238007][T19050] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1247.254385][T19050] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1247.277990][T19050] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1247.298632][T19050] usb 3-1: USB disconnect, device number 95 [ 1247.721001][T19953] ipvlan2: entered promiscuous mode [ 1247.726814][T19953] ipvlan2: entered allmulticast mode [ 1247.733624][T19953] team0: entered allmulticast mode [ 1247.739364][T19953] team_slave_0: entered allmulticast mode [ 1247.746005][T19953] team_slave_1: entered allmulticast mode [ 1247.756600][T19953] bridge_slave_0: left allmulticast mode [ 1247.762757][T19953] bridge_slave_0: left promiscuous mode [ 1247.769047][T19953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.781474][T19953] bridge_slave_1: left allmulticast mode [ 1247.787174][T19953] bridge_slave_1: left promiscuous mode [ 1247.799274][T19953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.881628][T19953] bond0: (slave bond_slave_0): Releasing backup interface [ 1247.897889][T19953] bond0: (slave bond_slave_1): Releasing backup interface [ 1247.950821][T19953] team_slave_0: left allmulticast mode [ 1247.978447][T19953] team0: Port device team_slave_0 removed [ 1248.004631][T19953] team_slave_1: left allmulticast mode [ 1248.044870][T19953] team0: Port device team_slave_1 removed [ 1248.058869][T19953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.090265][T19953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.121681][T19953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1248.557863][T17812] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1248.757599][T19356] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1248.779581][T17812] usb 4-1: Using ep0 maxpacket: 8 [ 1248.836311][T17812] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1248.847786][T17812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.855848][T17812] usb 4-1: Product: syz [ 1248.886645][T17812] usb 4-1: Manufacturer: syz [ 1248.901582][T17812] usb 4-1: SerialNumber: syz [ 1248.937406][T19356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1248.956245][T19356] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1248.967982][T19356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.977590][T19356] usb 5-1: Product: syz [ 1248.984075][T19356] usb 5-1: Manufacturer: syz [ 1249.006825][T19356] usb 5-1: SerialNumber: syz [ 1249.014189][T17812] usb 4-1: config 0 descriptor?? [ 1249.051140][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1249.068248][T19981] netlink: 'syz.1.3811': attribute type 21 has an invalid length. [ 1249.189746][T17812] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1249.196669][T19356] usb 5-1: config 0 descriptor?? [ 1249.592815][T17812] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 1249.643788][T17812] sq905 4-1:0.0: probe with driver sq905 failed with error -32 [ 1249.908975][T17812] usb 4-1: USB disconnect, device number 67 [ 1250.237145][T19992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1250.287829][T19993] netlink: 'syz.0.3814': attribute type 21 has an invalid length. [ 1250.868120][T17812] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1251.124868][T17812] usb 4-1: Using ep0 maxpacket: 8 [ 1251.319877][T17812] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1251.351167][T17812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.384088][T17812] usb 4-1: Product: syz [ 1251.398039][T17812] usb 4-1: Manufacturer: syz [ 1251.418116][T17812] usb 4-1: SerialNumber: syz [ 1251.448352][T17812] usb 4-1: config 0 descriptor?? [ 1251.500792][T17812] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1252.388689][T19050] usb 5-1: USB disconnect, device number 59 [ 1253.375557][T20033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1253.442093][T20033] netlink: 'syz.1.3826': attribute type 10 has an invalid length. [ 1253.463918][T20033] syz_tun: entered promiscuous mode [ 1253.493050][T20033] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1253.923798][T17812] gspca_sonixj: reg_w1 err -71 [ 1253.997854][T17812] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1254.050559][T17812] usb 4-1: USB disconnect, device number 68 [ 1254.070460][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1254.080422][T20041] netlink: 'syz.2.3828': attribute type 21 has an invalid length. [ 1254.277450][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1254.290153][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1254.829854][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1254.844124][T20060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1254.888579][T17504] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.899170][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1254.908548][T17504] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1254.918561][T20060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1255.126253][T17504] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1255.174505][T17504] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1256.812917][T20078] syzkaller0: entered promiscuous mode [ 1256.828294][T20078] syzkaller0: entered allmulticast mode [ 1256.870350][T17812] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1256.912550][T20078] tipc: Enabled bearer , priority 0 [ 1256.967884][T20077] tipc: Resetting bearer [ 1257.039359][T17812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.052904][T17812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1257.065317][T17812] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1257.074981][T17812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1257.083847][T17812] usb 4-1: SerialNumber: syz [ 1257.090667][T20077] tipc: Disabling bearer [ 1257.265685][T19356] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1257.316929][T17812] usb 4-1: 0:2 : does not exist [ 1257.382684][T17812] usb 4-1: USB disconnect, device number 69 [ 1257.412250][T20092] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3844'. [ 1257.419010][T19356] usb 3-1: Using ep0 maxpacket: 32 [ 1257.433025][T19356] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1257.444899][T19356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1257.465410][T20092] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1257.485710][T19356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1257.497398][T19356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1257.509474][T19356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1257.534912][T13048] udevd[13048]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.539854][T19356] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1257.560300][T19356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.569084][T19356] usb 3-1: Product: syz [ 1257.577984][T19356] usb 3-1: Manufacturer: syz [ 1257.587754][T19356] usb 3-1: SerialNumber: syz [ 1257.617347][T19356] usb 3-1: config 0 descriptor?? [ 1257.883647][T17812] IPVS: starting estimator thread 0... [ 1258.067733][T19356] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1258.073989][T19356] input input124: Device does not respond to id packet M [ 1258.090843][T20096] delete_channel: no stack [ 1258.096409][T19356] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1258.098103][T20098] IPVS: using max 26 ests per chain, 62400 per kthread [ 1258.110850][T19356] input input124: Device does not respond to id packet P [ 1258.119558][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 1258.149381][T19356] input input124: Device does not respond to id packet B [ 1258.359993][T19356] input input124: Limiting number of effects to 32 (device reports 214) [ 1258.397657][T17812] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1258.586014][T19356] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1258.628094][T19356] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1258.654461][T17812] usb 4-1: device descriptor read/64, error -71 [ 1258.691637][T19356] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1258.704872][T19356] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1258.717959][T19356] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input124 [ 1258.780905][T19356] usb 3-1: USB disconnect, device number 96 [ 1258.850301][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1258.951165][T20109] netlink: 'syz.1.3847': attribute type 21 has an invalid length. [ 1258.982415][T17812] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1259.128710][T17812] usb 4-1: device descriptor read/64, error -71 [ 1259.248113][T17812] usb usb4-port1: attempt power cycle [ 1259.348351][T20111] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1259.597958][T17812] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1259.629972][T17812] usb 4-1: device descriptor read/8, error -71 [ 1259.880014][T17812] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1259.918501][T17812] usb 4-1: device descriptor read/8, error -71 [ 1259.967738][T19050] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1260.028299][T17812] usb usb4-port1: unable to enumerate USB device [ 1260.062964][T20130] geneve2: left promiscuous mode [ 1260.068464][T20130] geneve2: left allmulticast mode [ 1260.076217][T17653] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 59663 - 0 [ 1260.087340][T17653] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 59663 - 0 [ 1260.087459][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1260.099166][T17653] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 59663 - 0 [ 1260.112300][T20130] netlink: 'syz.4.3855': attribute type 5 has an invalid length. [ 1260.129106][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3854'. [ 1260.147852][T19050] usb 1-1: Using ep0 maxpacket: 8 [ 1260.147856][T17653] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 59663 - 0 [ 1260.177426][T19050] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1260.177881][T20130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1260.190924][T19050] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1260.203692][T19050] usb 1-1: config 0 has no interface number 0 [ 1260.212640][T19050] usb 1-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1260.225445][T19050] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1260.235224][T19050] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1260.243722][T19050] usb 1-1: Product: syz [ 1260.258519][T19050] usb 1-1: config 0 descriptor?? [ 1260.517669][T17812] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1260.607767][T19050] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1260.671912][T17812] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1260.681329][T17812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.689865][T17812] usb 3-1: Product: syz [ 1260.694119][T17812] usb 3-1: Manufacturer: syz [ 1260.699211][T17812] usb 3-1: SerialNumber: syz [ 1260.706216][T17812] usb 3-1: config 0 descriptor?? [ 1260.715440][T17812] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1260.767595][T19050] usb 5-1: Using ep0 maxpacket: 16 [ 1260.775033][T19050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.786664][T19050] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1260.795893][T19050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.807738][T19050] usb 5-1: config 0 descriptor?? [ 1261.241768][T20137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.255658][T20137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.272186][T19050] mcp2221 0003:04D8:00DD.0037: unbalanced delimiter at end of report description [ 1261.297456][T19050] mcp2221 0003:04D8:00DD.0037: can't parse reports [ 1261.305195][T19050] mcp2221 0003:04D8:00DD.0037: probe with driver mcp2221 failed with error -22 [ 1261.447641][T19062] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1261.601887][T17812] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1261.609627][T17812] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 1261.621035][T17812] usb 3-1: USB disconnect, device number 97 [ 1261.629910][T19062] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.640892][T13048] udevd[13048]: setting mode of /dev/bus/usb/003/097 to 020664 failed: No such file or directory [ 1261.651966][T19062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.658811][T13048] udevd[13048]: setting owner of /dev/bus/usb/003/097 to uid=0, gid=0 failed: No such file or directory [ 1261.663734][T19050] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1261.682455][T19062] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1261.692720][T19062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1261.701332][T19062] usb 2-1: SerialNumber: syz [ 1261.847785][T19050] usb 4-1: Using ep0 maxpacket: 16 [ 1261.869914][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.897592][T19050] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1261.906768][T19050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.918602][T20156] can: request_module (can-proto-0) failed. [ 1261.929135][T19050] usb 4-1: config 0 descriptor?? [ 1261.943011][T19062] usb 2-1: cannot find UAC_HEADER [ 1261.971933][T19062] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1261.983676][T19062] usb 2-1: USB disconnect, device number 49 [ 1262.010623][T13048] udevd[13048]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1262.351987][T20155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.370359][T20155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.388588][T19050] mcp2221 0003:04D8:00DD.0038: unbalanced delimiter at end of report description [ 1262.399485][T19050] mcp2221 0003:04D8:00DD.0038: can't parse reports [ 1262.406415][T19050] mcp2221 0003:04D8:00DD.0038: probe with driver mcp2221 failed with error -22 [ 1262.680123][T19050] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1262.710733][T19062] usb 1-1: USB disconnect, device number 45 [ 1262.887915][T19050] usb 3-1: Using ep0 maxpacket: 16 [ 1262.896358][T19050] usb 3-1: config 6 has an invalid interface number: 104 but max is 3 [ 1262.907124][T19050] usb 3-1: config 6 has an invalid interface number: 7 but max is 3 [ 1262.919643][T19050] usb 3-1: config 6 has an invalid interface number: 138 but max is 3 [ 1262.941733][T19050] usb 3-1: config 6 has an invalid interface number: 84 but max is 3 [ 1262.962609][T19050] usb 3-1: config 6 has an invalid descriptor of length 36, skipping remainder of the config [ 1262.991545][T19050] usb 3-1: config 6 has no interface number 0 [ 1263.010394][T19050] usb 3-1: config 6 has no interface number 1 [ 1263.019253][T19050] usb 3-1: config 6 has no interface number 2 [ 1263.025935][T19050] usb 3-1: config 6 has no interface number 3 [ 1263.032554][T19050] usb 3-1: config 6 interface 104 altsetting 1 endpoint 0xF has invalid maxpacket 1096, setting to 64 [ 1263.043757][T19050] usb 3-1: config 6 interface 104 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1263.055092][T19050] usb 3-1: config 6 interface 104 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1263.066310][T19050] usb 3-1: config 6 interface 7 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 1263.067219][T20179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3871'. [ 1263.087657][T19050] usb 3-1: config 6 interface 7 altsetting 247 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1263.122425][T20179] netlink: 'syz.0.3871': attribute type 10 has an invalid length. [ 1263.144424][T20179] syz_tun: entered promiscuous mode [ 1263.150019][T19050] usb 3-1: config 6 interface 7 altsetting 247 has a duplicate endpoint with address 0xD, skipping [ 1263.166477][T19050] usb 3-1: config 6 interface 7 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 1263.176494][T20179] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1263.274987][T19050] usb 3-1: config 6 interface 7 altsetting 247 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1263.304230][T19050] usb 3-1: config 6 interface 138 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1263.495976][T19050] usb 3-1: config 6 interface 138 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 64 [ 1263.517542][T19050] usb 3-1: config 6 interface 138 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1263.540651][T20174] can: request_module (can-proto-0) failed. [ 1263.577815][T19050] usb 3-1: config 6 interface 138 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1263.593605][T19050] usb 3-1: config 6 interface 138 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1263.604645][T19050] usb 3-1: config 6 interface 104 has no altsetting 0 [ 1263.611756][T19050] usb 3-1: config 6 interface 7 has no altsetting 0 [ 1263.619820][T19050] usb 3-1: config 6 interface 138 has no altsetting 0 [ 1263.627849][T19050] usb 3-1: config 6 interface 84 has no altsetting 0 [ 1263.643475][T19050] usb 3-1: New USB device found, idVendor=083a, idProduct=5046, bcdDevice=95.af [ 1263.655990][T19050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.664468][T19050] usb 3-1: Product: syz [ 1263.669090][T19050] usb 3-1: Manufacturer: syz [ 1263.676130][T19050] usb 3-1: SerialNumber: syz [ 1263.703676][T19062] usb 5-1: USB disconnect, device number 60 [ 1263.764448][T20185] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1263.919939][T19050] pegasus 3-1:6.104: probe with driver pegasus failed with error -71 [ 1264.224255][T20191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3875'. [ 1264.247688][T19050] pegasus 3-1:6.7: probe with driver pegasus failed with error -71 [ 1264.288453][T19050] pegasus 3-1:6.138: probe with driver pegasus failed with error -71 [ 1264.322188][T19050] pegasus 3-1:6.84: probe with driver pegasus failed with error -71 [ 1264.497212][T19050] usb 3-1: USB disconnect, device number 98 [ 1264.909445][T19050] usb 4-1: USB disconnect, device number 74 [ 1265.058993][T20206] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1265.073601][T20206] team0: Port device batadv3 added [ 1265.439310][T20211] pimreg: entered allmulticast mode [ 1265.841727][T20211] pimreg: left allmulticast mode [ 1266.061342][T19050] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1266.175887][T20206] syz.2.3877 (20206): drop_caches: 1 [ 1266.217648][T19050] usb 4-1: Using ep0 maxpacket: 32 [ 1266.224463][T19050] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1266.236488][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1266.285444][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1266.305641][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1266.322044][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1266.333386][T17812] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1266.339266][T19050] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1266.393051][T19050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.413239][T19050] usb 4-1: Product: syz [ 1266.421124][T19050] usb 4-1: Manufacturer: syz [ 1266.429383][T19050] usb 4-1: SerialNumber: syz [ 1266.439799][T19050] usb 4-1: config 0 descriptor?? [ 1266.515645][T17812] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1266.532152][T17812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.559510][T17812] usb 1-1: Product: syz [ 1266.566052][T17812] usb 1-1: Manufacturer: syz [ 1266.573746][T17812] usb 1-1: SerialNumber: syz [ 1266.606476][T17812] usb 1-1: config 0 descriptor?? [ 1266.619513][T17812] hso 1-1:0.0: Not our interface [ 1266.628686][T17812] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1266.838749][T19062] usb 1-1: USB disconnect, device number 46 [ 1266.857261][T19050] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1266.866506][T19050] input input125: Device does not respond to id packet M [ 1266.886287][T19050] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1266.893356][T19050] input input125: Device does not respond to id packet P [ 1266.910058][T19050] input input125: Device does not respond to id packet B [ 1267.108930][T19050] input input125: Limiting number of effects to 32 (device reports 214) [ 1267.367336][T19050] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1267.378632][T19050] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1267.401162][T19050] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1267.462209][T19050] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1267.480176][T19050] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input125 [ 1267.516206][T19050] usb 4-1: USB disconnect, device number 75 [ 1267.599249][T20233] xt_hashlimit: overflow, try lower: 3/0 [ 1267.737762][T17812] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1267.809131][T20235] syzkaller0: entered promiscuous mode [ 1267.828517][T20235] syzkaller0: entered allmulticast mode [ 1267.887842][T17812] usb 1-1: Using ep0 maxpacket: 32 [ 1267.907684][T17812] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1267.924152][T20235] tipc: Started in network mode [ 1267.941857][T20235] tipc: Node identity 2e544df1822c, cluster identity 4711 [ 1267.951932][T17812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1267.977685][T20235] tipc: Enabled bearer , priority 0 [ 1267.984420][T17812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1268.006459][T20234] tipc: Resetting bearer [ 1268.015000][T17812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1268.038305][T17812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1268.082043][T17812] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1268.108058][T17812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.125371][T20234] tipc: Disabling bearer [ 1268.131555][T17812] usb 1-1: Product: syz [ 1268.136015][T17812] usb 1-1: Manufacturer: syz [ 1268.142657][T17812] usb 1-1: SerialNumber: syz [ 1268.159098][T17812] usb 1-1: config 0 descriptor?? [ 1268.299550][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1268.325427][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1268.668193][T17812] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1268.706563][T17812] input input126: Device does not respond to id packet M [ 1268.727238][T17812] input input126: Device does not respond to id packet P [ 1268.750338][T20253] syz.2.3892 (20253): drop_caches: 1 [ 1268.960768][T17812] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 1268.967152][T20232] netlink: 'syz.0.3887': attribute type 4 has an invalid length. [ 1268.987614][T17812] input input126: Device does not respond to id packet B [ 1268.998463][T20232] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3887'. [ 1269.069974][T20232] .`: renamed from bond0 [ 1269.077689][T17812] input input126: Limiting number of effects to 32 (device reports 214) [ 1269.531519][T20257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.548048][T20257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.575250][T20261] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1269.665932][T20261] netdevsim netdevsim1: Direct firmware load for / [ 1269.665932][T20261] failed with error -2 [ 1269.677158][T20261] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 1269.677158][T20261] [ 1269.702646][T17812] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1269.709227][T17812] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1269.728131][T17812] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1269.759168][T17812] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1269.784930][T17812] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input126 [ 1269.945041][T17812] usb 1-1: USB disconnect, device number 47 [ 1270.770239][T20267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.799006][T20267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.831002][T20269] xt_hashlimit: overflow, try lower: 3/0 [ 1270.997705][T17812] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1271.124057][T20275] kvm: emulating exchange as write [ 1271.527312][T20289] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3904'. [ 1271.947672][T19050] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1272.124601][T19050] usb 4-1: Using ep0 maxpacket: 16 [ 1272.134495][T19050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.207781][T19050] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1272.217243][T19050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.232495][T20300] openvswitch: netlink: ERSPAN option length err (len 468, max 255). [ 1272.265220][T19050] usb 4-1: config 0 descriptor?? [ 1272.427702][T17812] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1272.587802][T17812] usb 1-1: Using ep0 maxpacket: 16 [ 1272.605791][T17812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.626904][T17812] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1272.678289][T19050] usbhid 4-1:0.0: can't add hid device: -71 [ 1272.684388][T19050] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1272.713151][T19050] usb 4-1: USB disconnect, device number 76 [ 1272.739780][T17812] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1272.769597][T17812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.800312][T17812] usb 1-1: Product: syz [ 1272.818647][T17812] usb 1-1: Manufacturer: syz [ 1272.831381][T17812] usb 1-1: SerialNumber: syz [ 1272.963340][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3911'. [ 1272.978811][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 1273.099476][T17812] usb 1-1: 0:2 : does not exist [ 1273.162024][T17812] usb 1-1: USB disconnect, device number 49 [ 1273.224306][T13048] udevd[13048]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.544723][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1273.544744][ T30] audit: type=1326 audit(1766983535.736:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1273.639299][ T30] audit: type=1326 audit(1766983535.776:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1273.694089][ T30] audit: type=1326 audit(1766983535.776:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1273.737028][ T30] audit: type=1326 audit(1766983535.776:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1273.777941][ T30] audit: type=1326 audit(1766983535.776:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1273.928935][ T30] audit: type=1326 audit(1766983535.776:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1274.096567][T20333] syz.0.3917 (20333): drop_caches: 1 [ 1274.119976][ T30] audit: type=1326 audit(1766983535.776:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1274.154592][ T30] audit: type=1326 audit(1766983535.776:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f99ea78de97 code=0x7ffc0000 [ 1274.396434][ T30] audit: type=1326 audit(1766983535.776:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f99ea790eea code=0x7ffc0000 [ 1274.457856][ T30] audit: type=1326 audit(1766983535.776:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20319 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ea78f749 code=0x7ffc0000 [ 1274.480574][T19050] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1274.669802][T20344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3923'. [ 1274.687654][T19050] usb 5-1: Using ep0 maxpacket: 32 [ 1274.699410][T19050] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.710251][T19050] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.772981][T19050] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1274.797642][T19050] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1274.817647][T19050] usb 5-1: Product: syz [ 1274.822036][T19050] usb 5-1: Manufacturer: syz [ 1274.842970][T19050] usb 5-1: SerialNumber: syz [ 1274.875849][T19050] usb 5-1: config 0 descriptor?? [ 1274.939589][T19050] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1275.102529][T19050] usb 5-1: USB disconnect, device number 61 [ 1275.117883][T17653] usb 5-1: Failed to submit usb control message: -71 [ 1275.158940][T17653] usb 5-1: unable to send the bmi data to the device: -71 [ 1275.189679][T17653] usb 5-1: unable to get target info from device [ 1275.196542][T17653] usb 5-1: could not get target info (-71) [ 1275.204614][T17653] usb 5-1: could not probe fw (-71) [ 1275.773527][T20345] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1275.947318][T20372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3930'. [ 1276.258934][T20378] hub 1-0:1.0: USB hub found [ 1276.325388][T20378] hub 1-0:1.0: 1 port detected [ 1276.447601][T19050] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1276.693936][T19050] usb 5-1: Using ep0 maxpacket: 8 [ 1276.747349][T20385] F2FS-fs: Conflicting test_dummy_encryption options [ 1276.862224][T19050] usb 5-1: config 0 has an invalid interface number: 245 but max is 0 [ 1276.872492][T19050] usb 5-1: config 0 has no interface number 0 [ 1276.887701][T19050] usb 5-1: config 0 interface 245 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1276.899788][T19050] usb 5-1: config 0 interface 245 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1276.911830][T19050] usb 5-1: config 0 interface 245 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1276.958092][T19050] usb 5-1: config 0 interface 245 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1276.988749][T19050] usb 5-1: config 0 interface 245 altsetting 0 endpoint 0x8 has invalid maxpacket 991, setting to 64 [ 1277.017754][T19050] usb 5-1: config 0 interface 245 altsetting 0 endpoint 0xA has invalid maxpacket 64272, setting to 64 [ 1277.054836][T19050] usb 5-1: config 0 interface 245 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1277.077664][T19050] usb 5-1: config 0 interface 245 altsetting 0 endpoint 0x4 has an invalid bInterval 186, changing to 11 [ 1277.116642][T19050] usb 5-1: config 0 interface 245 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1277.137625][T19050] usb 5-1: config 0 interface 245 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1277.200700][T19050] usb 5-1: New USB device found, idVendor=0403, idProduct=eeec, bcdDevice=57.b0 [ 1277.227534][T19050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.239145][T19050] usb 5-1: Product: syz [ 1277.259553][T19050] usb 5-1: Manufacturer: syz [ 1277.264218][T19050] usb 5-1: SerialNumber: syz [ 1277.306082][T19050] usb 5-1: config 0 descriptor?? [ 1277.346754][T19050] ftdi_sio 5-1:0.245: FTDI USB Serial Device converter detected [ 1277.387221][T19050] ftdi_sio ttyUSB0: unknown device type: 0x57b0 [ 1277.968026][T17812] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1278.140282][T17812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.163126][T17812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.182149][T17812] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1278.197761][T17812] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1278.209103][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1278.224601][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1278.250608][T17812] usb 4-1: Manufacturer: syz [ 1278.262288][T17812] usb 4-1: config 0 descriptor?? [ 1278.530594][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1278.540111][T20400] xfrm0: entered promiscuous mode [ 1278.556970][T20400] xfrm0: entered allmulticast mode [ 1278.562587][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1279.169303][T20388] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1279.486686][T17812] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #100: -71 [ 1279.497113][T17812] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71 [ 1279.515360][T17812] uclogic 0003:256C:006D.0039: failed probing pen v1 parameters: -71 [ 1279.541445][T17812] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 1279.557168][T17812] uclogic 0003:256C:006D.0039: probe with driver uclogic failed with error -71 [ 1279.585802][T17812] usb 4-1: USB disconnect, device number 77 [ 1280.105474][T20413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1280.165562][T18384] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.182836][T18384] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.198492][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3939'. [ 1280.210816][T18384] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.221980][T20415] netlink: 'syz.3.3939': attribute type 5 has an invalid length. [ 1280.237839][T18384] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.251001][T20415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3939'. [ 1280.697612][T19062] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1280.705721][T20423] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 1280.716829][T20423] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 1280.826809][T20436] netlink: 194768 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1280.857628][T19062] usb 4-1: device descriptor read/64, error -71 [ 1280.867568][T19050] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1280.906608][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1281.058215][T17812] usb 5-1: USB disconnect, device number 62 [ 1281.066126][T19050] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.099672][T17812] ftdi_sio 5-1:0.245: device disconnected [ 1281.107667][T19062] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1281.157864][T19050] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1281.168488][T19050] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1281.178211][T19050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.190303][T19050] usb 1-1: config 0 descriptor?? [ 1281.253965][T20441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1281.307666][T19062] usb 4-1: device descriptor read/64, error -71 [ 1281.440512][T19062] usb usb4-port1: attempt power cycle [ 1281.478413][T17812] usb 1-1: USB disconnect, device number 50 [ 1281.589021][T20453] input: syz0 as /devices/virtual/input/input127 [ 1281.837655][T19062] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1281.988897][T19062] usb 4-1: device descriptor read/8, error -71 [ 1282.240864][T19062] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1282.278381][T19062] usb 4-1: device descriptor read/8, error -71 [ 1282.428145][T19062] usb usb4-port1: unable to enumerate USB device [ 1282.588539][T20476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1282.635659][T20476] netlink: 'syz.0.3959': attribute type 10 has an invalid length. [ 1282.956053][T20492] [ 1282.958568][T20492] ===================================================== [ 1282.965894][T20492] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1282.973434][T20492] syzkaller #0 Tainted: G L [ 1282.979548][T20492] ----------------------------------------------------- [ 1282.986544][T20492] syz.0.3963/20492 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1282.994403][T20492] ffff8880339b3d38 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1283.003259][T20492] [ 1283.003259][T20492] and this task is already holding: [ 1283.010648][T20492] ffff888029e2c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1283.020387][T20492] which would create a new lock dependency: [ 1283.026290][T20492] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1283.034352][T20492] [ 1283.034352][T20492] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1283.043825][T20492] (&dev->event_lock#2){..-.}-{3:3} [ 1283.043864][T20492] [ 1283.043864][T20492] ... which became SOFTIRQ-irq-safe at: [ 1283.056803][T20492] lock_acquire+0x107/0x340 [ 1283.061433][T20492] _raw_spin_lock_irqsave+0x40/0x60 [ 1283.066752][T20492] input_inject_event+0xa5/0x340 [ 1283.071808][T20492] kd_sound_helper+0x19f/0x210 [ 1283.076694][T20492] input_handler_for_each_handle+0x101/0x1c0 [ 1283.082914][T20492] call_timer_fn+0x16e/0x590 [ 1283.087703][T20492] __run_timer_base+0x61a/0x860 [ 1283.092663][T20492] run_timer_softirq+0xb7/0x180 [ 1283.097618][T20492] handle_softirqs+0x22b/0x7c0 [ 1283.102485][T20492] run_ksoftirqd+0x36/0x60 [ 1283.107008][T20492] smpboot_thread_fn+0x542/0xa60 [ 1283.112098][T20492] kthread+0x711/0x8a0 [ 1283.116302][T20492] ret_from_fork+0x510/0xa50 [ 1283.121054][T20492] ret_from_fork_asm+0x1a/0x30 [ 1283.126063][T20492] [ 1283.126063][T20492] to a SOFTIRQ-irq-unsafe lock: [ 1283.133110][T20492] (tasklist_lock){.+.+}-{3:3} [ 1283.133144][T20492] [ 1283.133144][T20492] ... which became SOFTIRQ-irq-unsafe at: [ 1283.146004][T20492] ... [ 1283.146016][T20492] lock_acquire+0x107/0x340 [ 1283.153221][T20492] _raw_read_lock+0x36/0x50 [ 1283.157933][T20492] __do_wait+0xde/0x740 [ 1283.162203][T20492] do_wait+0x1e8/0x4f0 [ 1283.166379][T20492] kernel_wait+0xab/0x170 [ 1283.170837][T20492] call_usermodehelper_exec_work+0xbe/0x230 [ 1283.176852][T20492] process_scheduled_works+0xad1/0x1770 [ 1283.182508][T20492] worker_thread+0x8a0/0xda0 [ 1283.187207][T20492] kthread+0x711/0x8a0 [ 1283.191406][T20492] ret_from_fork+0x510/0xa50 [ 1283.196108][T20492] ret_from_fork_asm+0x1a/0x30 [ 1283.201027][T20492] [ 1283.201027][T20492] other info that might help us debug this: [ 1283.201027][T20492] [ 1283.211361][T20492] Chain exists of: [ 1283.211361][T20492] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1283.211361][T20492] [ 1283.224346][T20492] Possible interrupt unsafe locking scenario: [ 1283.224346][T20492] [ 1283.232683][T20492] CPU0 CPU1 [ 1283.238094][T20492] ---- ---- [ 1283.243518][T20492] lock(tasklist_lock); [ 1283.247787][T20492] local_irq_disable(); [ 1283.254653][T20492] lock(&dev->event_lock#2); [ 1283.262184][T20492] lock(&new->fa_lock); [ 1283.268997][T20492] [ 1283.272468][T20492] lock(&dev->event_lock#2); [ 1283.277439][T20492] [ 1283.277439][T20492] *** DEADLOCK *** [ 1283.277439][T20492] [ 1283.285600][T20492] 6 locks held by syz.0.3963/20492: [ 1283.290910][T20492] #0: ffff888029e2e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1283.300573][T20492] #1: ffff888029e2c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1283.311649][T20492] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1283.323219][T20492] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1283.333947][T20492] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 1283.344153][T20492] #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1283.353373][T20492] [ 1283.353373][T20492] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1283.363822][T20492] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1283.369485][T20492] IN-SOFTIRQ-W at: [ 1283.373609][T20492] lock_acquire+0x107/0x340 [ 1283.379889][T20492] _raw_spin_lock_irqsave+0x40/0x60 [ 1283.386813][T20492] input_inject_event+0xa5/0x340 [ 1283.393544][T20492] kd_sound_helper+0x19f/0x210 [ 1283.400031][T20492] input_handler_for_each_handle+0x101/0x1c0 [ 1283.407792][T20492] call_timer_fn+0x16e/0x590 [ 1283.414071][T20492] __run_timer_base+0x61a/0x860 [ 1283.420603][T20492] run_timer_softirq+0xb7/0x180 [ 1283.427143][T20492] handle_softirqs+0x22b/0x7c0 [ 1283.433735][T20492] run_ksoftirqd+0x36/0x60 [ 1283.439937][T20492] smpboot_thread_fn+0x542/0xa60 [ 1283.446563][T20492] kthread+0x711/0x8a0 [ 1283.452336][T20492] ret_from_fork+0x510/0xa50 [ 1283.458623][T20492] ret_from_fork_asm+0x1a/0x30 [ 1283.465092][T20492] INITIAL USE at: [ 1283.469050][T20492] lock_acquire+0x107/0x340 [ 1283.475166][T20492] _raw_spin_lock_irqsave+0x40/0x60 [ 1283.481978][T20492] input_inject_event+0xa5/0x340 [ 1283.488513][T20492] kbd_led_trigger_activate+0xbc/0x100 [ 1283.495558][T20492] led_trigger_set+0x52d/0x950 [ 1283.501909][T20492] led_trigger_set_default+0x260/0x2a0 [ 1283.508967][T20492] led_classdev_register_ext+0x73d/0x960 [ 1283.516204][T20492] input_leds_connect+0x517/0x790 [ 1283.522829][T20492] input_register_device+0xd00/0x1170 [ 1283.529796][T20492] atkbd_connect+0x73b/0xa50 [ 1283.535975][T20492] serio_driver_probe+0x82/0xd0 [ 1283.542419][T20492] really_probe+0x26d/0xad0 [ 1283.548522][T20492] __driver_probe_device+0x18c/0x320 [ 1283.555418][T20492] driver_probe_device+0x4f/0x240 [ 1283.562083][T20492] __driver_attach+0x349/0x650 [ 1283.568443][T20492] bus_for_each_dev+0x233/0x2b0 [ 1283.574933][T20492] serio_handle_event+0x1f9/0x8d0 [ 1283.581558][T20492] process_scheduled_works+0xad1/0x1770 [ 1283.588701][T20492] worker_thread+0x8a0/0xda0 [ 1283.594888][T20492] kthread+0x711/0x8a0 [ 1283.600562][T20492] ret_from_fork+0x510/0xa50 [ 1283.606730][T20492] ret_from_fork_asm+0x1a/0x30 [ 1283.613090][T20492] } [ 1283.615608][T20492] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1283.624664][T20492] [ 1283.624664][T20492] the dependencies between the lock to be acquired [ 1283.624676][T20492] and SOFTIRQ-irq-unsafe lock: [ 1283.638221][T20492] -> (tasklist_lock){.+.+}-{3:3} { [ 1283.643551][T20492] HARDIRQ-ON-R at: [ 1283.647730][T20492] lock_acquire+0x107/0x340 [ 1283.654266][T20492] _raw_read_lock+0x36/0x50 [ 1283.660797][T20492] __do_wait+0xde/0x740 [ 1283.666979][T20492] do_wait+0x1e8/0x4f0 [ 1283.673161][T20492] kernel_wait+0xab/0x170 [ 1283.679528][T20492] call_usermodehelper_exec_work+0xbe/0x230 [ 1283.687436][T20492] process_scheduled_works+0xad1/0x1770 [ 1283.695000][T20492] worker_thread+0x8a0/0xda0 [ 1283.701610][T20492] kthread+0x711/0x8a0 [ 1283.707706][T20492] ret_from_fork+0x510/0xa50 [ 1283.714444][T20492] ret_from_fork_asm+0x1a/0x30 [ 1283.721241][T20492] SOFTIRQ-ON-R at: [ 1283.725419][T20492] lock_acquire+0x107/0x340 [ 1283.731961][T20492] _raw_read_lock+0x36/0x50 [ 1283.738599][T20492] __do_wait+0xde/0x740 [ 1283.744801][T20492] do_wait+0x1e8/0x4f0 [ 1283.750892][T20492] kernel_wait+0xab/0x170 [ 1283.757247][T20492] call_usermodehelper_exec_work+0xbe/0x230 [ 1283.765165][T20492] process_scheduled_works+0xad1/0x1770 [ 1283.772750][T20492] worker_thread+0x8a0/0xda0 [ 1283.779375][T20492] kthread+0x711/0x8a0 [ 1283.785472][T20492] ret_from_fork+0x510/0xa50 [ 1283.792094][T20492] ret_from_fork_asm+0x1a/0x30 [ 1283.798923][T20492] INITIAL USE at: [ 1283.803017][T20492] lock_acquire+0x107/0x340 [ 1283.809473][T20492] _raw_write_lock_irq+0x3d/0x50 [ 1283.816345][T20492] copy_process+0x2185/0x3950 [ 1283.822974][T20492] kernel_clone+0x21e/0x820 [ 1283.829424][T20492] user_mode_thread+0xdd/0x140 [ 1283.836139][T20492] rest_init+0x23/0x300 [ 1283.842250][T20492] start_kernel+0x381/0x3d0 [ 1283.848706][T20492] x86_64_start_reservations+0x24/0x30 [ 1283.856116][T20492] x86_64_start_kernel+0x143/0x1c0 [ 1283.863255][T20492] common_startup_64+0x13e/0x147 [ 1283.870130][T20492] INITIAL READ USE at: [ 1283.874656][T20492] lock_acquire+0x107/0x340 [ 1283.881524][T20492] _raw_read_lock+0x36/0x50 [ 1283.888427][T20492] __do_wait+0xde/0x740 [ 1283.894958][T20492] do_wait+0x1e8/0x4f0 [ 1283.901426][T20492] kernel_wait+0xab/0x170 [ 1283.908159][T20492] call_usermodehelper_exec_work+0xbe/0x230 [ 1283.916476][T20492] process_scheduled_works+0xad1/0x1770 [ 1283.924411][T20492] worker_thread+0x8a0/0xda0 [ 1283.931408][T20492] kthread+0x711/0x8a0 [ 1283.937877][T20492] ret_from_fork+0x510/0xa50 [ 1283.945129][T20492] ret_from_fork_asm+0x1a/0x30 [ 1283.952474][T20492] } [ 1283.955172][T20492] ... key at: [] tasklist_lock+0x18/0x40 [ 1283.963098][T20492] ... acquired at: [ 1283.967097][T20492] _raw_read_lock+0x36/0x50 [ 1283.971811][T20492] send_sigio+0x101/0x370 [ 1283.976350][T20492] dnotify_handle_event+0x169/0x440 [ 1283.981756][T20492] fsnotify+0x180b/0x1ab0 [ 1283.986286][T20492] path_openat+0x1aa1/0x3dd0 [ 1283.991084][T20492] do_filp_open+0x1fa/0x410 [ 1283.995778][T20492] do_sys_openat2+0x121/0x200 [ 1284.000656][T20492] __x64_sys_openat+0x138/0x170 [ 1284.005707][T20492] do_syscall_64+0xec/0xf80 [ 1284.010411][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.016497][T20492] [ 1284.018831][T20492] -> (&f_owner->lock){....}-{3:3} { [ 1284.024162][T20492] INITIAL USE at: [ 1284.028158][T20492] lock_acquire+0x107/0x340 [ 1284.034417][T20492] _raw_write_lock_irq+0x3d/0x50 [ 1284.041110][T20492] __f_setown+0x67/0x370 [ 1284.047189][T20492] generic_setlease+0xe1e/0x1280 [ 1284.053890][T20492] do_fcntl_add_lease+0x34d/0x460 [ 1284.060676][T20492] fcntl_setlease+0x123/0x180 [ 1284.067108][T20492] do_fcntl+0x867/0x1a50 [ 1284.073133][T20492] __se_sys_fcntl+0xc8/0x150 [ 1284.079927][T20492] do_syscall_64+0xec/0xf80 [ 1284.086188][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.093841][T20492] INITIAL READ USE at: [ 1284.098282][T20492] lock_acquire+0x107/0x340 [ 1284.104982][T20492] _raw_read_lock_irq+0x45/0x60 [ 1284.112031][T20492] do_fcntl+0x2f9/0x1a50 [ 1284.118478][T20492] __se_sys_fcntl+0xc8/0x150 [ 1284.125267][T20492] do_syscall_64+0xec/0xf80 [ 1284.131970][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.140145][T20492] } [ 1284.142752][T20492] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1284.151716][T20492] ... acquired at: [ 1284.155620][T20492] _raw_read_lock_irqsave+0x48/0x60 [ 1284.161024][T20492] send_sigio+0x38/0x370 [ 1284.165471][T20492] kill_fasync+0x24d/0x4d0 [ 1284.170103][T20492] lease_break_callback+0x26/0x30 [ 1284.175334][T20492] __break_lease+0x730/0x1620 [ 1284.180209][T20492] do_dentry_open+0x73a/0x1420 [ 1284.185187][T20492] vfs_open+0x3b/0x340 [ 1284.189472][T20492] path_openat+0x340e/0x3dd0 [ 1284.194398][T20492] do_filp_open+0x1fa/0x410 [ 1284.199218][T20492] do_sys_openat2+0x121/0x200 [ 1284.204107][T20492] __x64_sys_open+0x11e/0x150 [ 1284.209021][T20492] do_syscall_64+0xec/0xf80 [ 1284.213724][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.219816][T20492] [ 1284.222154][T20492] -> (&new->fa_lock){....}-{3:3} { [ 1284.227311][T20492] INITIAL USE at: [ 1284.231221][T20492] lock_acquire+0x107/0x340 [ 1284.237307][T20492] _raw_write_lock_irq+0x3d/0x50 [ 1284.243823][T20492] fasync_remove_entry+0xf1/0x1c0 [ 1284.250464][T20492] lease_modify+0x1ca/0x3c0 [ 1284.256558][T20492] locks_remove_file+0x4bf/0xea0 [ 1284.263084][T20492] __fput+0x3ab/0xa70 [ 1284.268658][T20492] task_work_run+0x1d4/0x260 [ 1284.274840][T20492] exit_to_user_mode_loop+0xef/0x4e0 [ 1284.281714][T20492] do_syscall_64+0x2b7/0xf80 [ 1284.287900][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.295396][T20492] INITIAL READ USE at: [ 1284.299742][T20492] lock_acquire+0x107/0x340 [ 1284.306257][T20492] _raw_read_lock_irqsave+0x48/0x60 [ 1284.314007][T20492] kill_fasync+0x199/0x4d0 [ 1284.320626][T20492] lease_break_callback+0x26/0x30 [ 1284.327671][T20492] __break_lease+0x730/0x1620 [ 1284.334459][T20492] do_dentry_open+0x73a/0x1420 [ 1284.341340][T20492] vfs_open+0x3b/0x340 [ 1284.347445][T20492] path_openat+0x340e/0x3dd0 [ 1284.354051][T20492] do_filp_open+0x1fa/0x410 [ 1284.360671][T20492] do_sys_openat2+0x121/0x200 [ 1284.367378][T20492] __x64_sys_open+0x11e/0x150 [ 1284.374082][T20492] do_syscall_64+0xec/0xf80 [ 1284.381219][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.389139][T20492] } [ 1284.391654][T20492] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1284.400358][T20492] ... acquired at: [ 1284.404181][T20492] _raw_read_lock_irqsave+0x48/0x60 [ 1284.409662][T20492] kill_fasync+0x199/0x4d0 [ 1284.414294][T20492] mousedev_notify_readers+0x6f1/0xc00 [ 1284.419960][T20492] mousedev_event+0x602/0x1320 [ 1284.424928][T20492] input_handle_events_default+0xd4/0x1a0 [ 1284.430841][T20492] input_pass_values+0x288/0x890 [ 1284.435984][T20492] input_event_dispose+0x330/0x6b0 [ 1284.441297][T20492] input_inject_event+0x1dd/0x340 [ 1284.446523][T20492] evdev_write+0x2fc/0x480 [ 1284.451141][T20492] vfs_write+0x27e/0xb30 [ 1284.455597][T20492] ksys_write+0x145/0x250 [ 1284.460136][T20492] do_syscall_64+0xec/0xf80 [ 1284.464857][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.470948][T20492] [ 1284.473395][T20492] [ 1284.473395][T20492] stack backtrace: [ 1284.479329][T20492] CPU: 1 UID: 0 PID: 20492 Comm: syz.0.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.479363][T20492] Tainted: [L]=SOFTLOCKUP [ 1284.479371][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1284.479384][T20492] Call Trace: [ 1284.479395][T20492] [ 1284.479405][T20492] dump_stack_lvl+0xe8/0x150 [ 1284.479435][T20492] __lock_acquire+0x2a95/0x2cf0 [ 1284.479465][T20492] ? kill_fasync+0x199/0x4d0 [ 1284.479495][T20492] lock_acquire+0x107/0x340 [ 1284.479513][T20492] ? kill_fasync+0x199/0x4d0 [ 1284.479545][T20492] _raw_read_lock_irqsave+0x48/0x60 [ 1284.479577][T20492] ? kill_fasync+0x199/0x4d0 [ 1284.479604][T20492] kill_fasync+0x199/0x4d0 [ 1284.479631][T20492] ? kill_fasync+0x53/0x4d0 [ 1284.479659][T20492] mousedev_notify_readers+0x6f1/0xc00 [ 1284.479694][T20492] ? mousedev_notify_readers+0x2c/0xc00 [ 1284.479724][T20492] mousedev_event+0x602/0x1320 [ 1284.479755][T20492] input_handle_events_default+0xd4/0x1a0 [ 1284.479777][T20492] ? input_pass_values+0x8d/0x890 [ 1284.479805][T20492] input_pass_values+0x288/0x890 [ 1284.479837][T20492] ? input_handle_event+0x70c/0xf30 [ 1284.479863][T20492] input_event_dispose+0x330/0x6b0 [ 1284.479889][T20492] input_inject_event+0x1dd/0x340 [ 1284.479914][T20492] ? input_inject_event+0xb6/0x340 [ 1284.479939][T20492] evdev_write+0x2fc/0x480 [ 1284.479960][T20492] ? __pfx_evdev_write+0x10/0x10 [ 1284.479978][T20492] ? bpf_lsm_file_permission+0x9/0x20 [ 1284.479999][T20492] ? security_file_permission+0x75/0x290 [ 1284.480018][T20492] ? rw_verify_area+0x255/0x4d0 [ 1284.480048][T20492] ? __pfx_evdev_write+0x10/0x10 [ 1284.480067][T20492] vfs_write+0x27e/0xb30 [ 1284.480088][T20492] ? __pfx_vfs_write+0x10/0x10 [ 1284.480105][T20492] ? __fget_files+0x2a/0x420 [ 1284.480130][T20492] ? __fget_files+0x2a/0x420 [ 1284.480159][T20492] ? __fget_files+0x3a0/0x420 [ 1284.480182][T20492] ? __fget_files+0x2a/0x420 [ 1284.480209][T20492] ksys_write+0x145/0x250 [ 1284.480227][T20492] ? __pfx_ksys_write+0x10/0x10 [ 1284.480255][T20492] do_syscall_64+0xec/0xf80 [ 1284.480275][T20492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.480294][T20492] ? trace_irq_disable+0x37/0x100 [ 1284.480320][T20492] ? clear_bhb_loop+0x60/0xb0 [ 1284.480340][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.480360][T20492] RIP: 0033:0x7f5fd938f749 [ 1284.480378][T20492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.480395][T20492] RSP: 002b:00007f5fda189038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1284.480417][T20492] RAX: ffffffffffffffda RBX: 00007f5fd95e6180 RCX: 00007f5fd938f749 [ 1284.480432][T20492] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008 [ 1284.480444][T20492] RBP: 00007f5fd9413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1284.480457][T20492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.480468][T20492] R13: 00007f5fd95e6218 R14: 00007f5fd95e6180 R15: 00007f5fd970fa28 [ 1284.480492][T20492] [ 1284.777960][T19050] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1284.784188][T19050] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1284.851910][T15745] Bluetooth: hci0: command 0x0406 tx timeout [ 1284.887277][T17812] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1285.120715][T17812] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1285.129897][T17812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.140162][T17812] usb 3-1: Product: syz [ 1285.144750][T17812] usb 3-1: Manufacturer: syz [ 1285.156208][T17812] usb 3-1: SerialNumber: syz [ 1285.442839][T20496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.452788][T20496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.225279][T17812] rtl8150 3-1:1.0: couldn't reset the device [ 1286.231654][T17812] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1286.488658][T17812] usb 3-1: USB disconnect, device number 99 [ 1286.917658][T15713] Bluetooth: hci1: command 0x0406 tx timeout [ 1286.917655][T19050] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1286.917685][T19050] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1288.997648][T19050] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1288.997660][T15713] Bluetooth: hci3: command 0x0406 tx timeout [ 1288.997682][T19050] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1291.077602][T19050] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1291.078130][T15713] Bluetooth: hci2: command 0x0c1a tx timeout [ 1291.084349][T19050] Bluetooth: hci2: Error when powering off device on rfkill (-110)