last executing test programs: 23.98804881s ago: executing program 2 (id=2913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x153580, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) close(0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904010002ffffff000905b6aa"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000d80)=0x12, 0x4) r3 = dup(r1) futex(&(0x7f00000001c0)=0x2, 0x4, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x9, 0x1000, 0x2, r3}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x98, 0x0, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @thr={&(0x7f0000000380)="91f1361bdf4af8eb987774b1dee3a9b8caf7ea789fab03b00a3f70f7c803090e063254d6883b0dbf9ef7e08c04072be3aee2a601970000000000000951b7586be7f6d2e51a3573f220f8fef62538eac06aab4561c6e73e61138ee56aa10b2431f1d5b8a3cd81343baf08dbb4dd2f95bf2a2ccbbd5b86ba2262a015bac71aabe77f335bc5a6a8b553ad30780a4c0b15d091b31df738dd3102f74a130a30fe2af530d14667a96ad4e5c2749d9ada7110204fcf152bb31e7912f6c291b16162f6b5a6125b9e052f003c39106d2f795916"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 20.742869677s ago: executing program 2 (id=2920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x27, 0x80805, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x59, 0x1}}}}]}, 0x44}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000000c0)={0x4, 0x7, 0x2, {0xd, @raw_data="bfb911ab32a2f6e90758267d67f39b89e9dab09da0521cfee2094d4342ba932b593478c86b021c9b89b2cbc94b22bd7c948917f9c982d995a31648ac94f819e4dabbde7d3642f77fd47fd0dc4836fa3eefa0afcef6f3c5d722ec7709d4e760b5ca3e81a4aa0f8d6be259bf1d48c5282a3756f0a16cb9c79c1cf85f110673db09772a2644e0f60d4693868c8cb3ba1c98d5a2d3327b747481685d583de8c2cfdba7fd4dd2acc72ce4ebde0fa9d6e94278414c919042ad04c970edcdbd5400a27e86eedf81aa3f2204"}, 0x107}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 18.138181538s ago: executing program 2 (id=2927): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000600000008000a40000000000500020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff0008000f4000000004140000001000010000000000000000000084000a4b5b308cf9a10cc041ea8a1b91986a7798e7788f086621887b4ff0896fc14e107ba34f14bb2d7ce3885ecbc62bc1981fb46f12b33cef648d150ed13ab8f350a9c5dc13fa0217d89239d9601223620277bd1b498f140665902bb8053d28e42e9a0ec4145e059449c7"], 0x7c}}, 0x0) 17.792060531s ago: executing program 2 (id=2928): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a65637400001400028008010140000000010500"], 0x104}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r6, 0x0, 0x0, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10000}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000000)=0x1) socket$rxrpc(0x21, 0x2, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24}, {0x10000, 0x5000, 0xb, 0xfc, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0xff, 0x6e, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x88, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r10, @ANYBLOB="8014000004210000df6f01d8064a1f1d498f6d9d0ed3b8d09e3549e6169f140294f6b683c28ad5e2d437b2e13b2f116f8cae94cbb4e70fdbe5108c358f4a36b4d962af21dad324309eb32077454fb79fc65546f50e48ceff5e6b13b7c1733463d3d759709644c9cec5421f4322abf8fb6f880545b2756376a94e3af9d2af73493d81cdb1e6250e"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 15.666495428s ago: executing program 4 (id=2934): pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000002280)="80", 0x1}, {&(0x7f00000003c0)="cc03135bd3be9518", 0x8}], 0x2}, 0x0) recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1, &(0x7f00000002c0)=""/81, 0x51}, 0x2}], 0x1, 0x40012000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r4 = epoll_create(0x3) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r5, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000004180)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, 0xffffffffffffffff, 0x0, 0x1ba8847c99}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000001c0), 0x71) syz_open_dev$vim2m(0x0, 0x7, 0x2) membarrier(0x10, 0x0) 14.394305058s ago: executing program 2 (id=2935): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket$inet6_sctp(0xa, 0x4, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0)={0x7}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r7, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) 13.584443493s ago: executing program 4 (id=2936): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x280880, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x660180, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0x11, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x7a, 0x0, 0x8000, 0x2b, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3f9}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000140)=0x5, 0x4) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13.284425181s ago: executing program 3 (id=2937): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000fe8092d59736ee0f2c880000000000bb0000000000ebff000200130003"], 0x70}}, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) r2 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf0c8}}, 0x0, 0xa0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x95}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000052e000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x792, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x1000a387, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000001800)=""/199, 0xc7}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/193, 0xc1}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 13.188496267s ago: executing program 1 (id=2938): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4073de899b38"], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000540)={0x77359400}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd70e1fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 13.183215027s ago: executing program 3 (id=2939): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x7ff) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRES16=r6, @ANYRES16], 0x0) 12.851500001s ago: executing program 2 (id=2940): unshare(0x2c020400) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/resume', 0x80000, 0x80) lseek(r0, 0x0, 0x1) 12.640209315s ago: executing program 4 (id=2942): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=0x0], 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f33301"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x11, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) syz_usb_control_io$uac1(r2, &(0x7f0000000180)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="40108300000083022bcffa82b0586db06caeeddc90f6f4662e997cd7ed78d8b5337c95fb15c8c87eebc823cbf01f093b350ad8890f35165202709a2195b139ea5459b1c49595935037f10cd36d22de643d13b16e625f0ae3a1411e311bdd0cf4001c76eadadf23465659cf2fd7313f145993cff0512e9b10a3a79d0ba599fcaf1ad4141a8ca5105800"], &(0x7f0000000980)=ANY=[@ANYBLOB="00030b0000000b0344d3796b4914d7153b3526f61b167f96dfbe5c239eacdebe4892ef062646865fc30a01cedc3edd718419ecf57c40f04ac88e3b46744f6796d87c85a912e4e3931631e68e18591301290c57b1e4daf2f61c5a44ec53d02aed1d90eab40eabbfc9b904823fe5ac69"]}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x20, 0x9, 0xa, "a269dd536dc656059958"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000480)={0x20, 0x81, 0x3, "b43cb6"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "fbe8"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "125b"}, &(0x7f0000000580)=ANY=[@ANYBLOB="208402000000"], &(0x7f00000005c0)={0x20, 0x85, 0x3, "81efbb"}}) syz_usb_control_io$uac1(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d309efc", 0x24}], 0x1}}], 0x1, 0x0) r3 = dup(r1) r4 = socket(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xb, 0xfffffff9, 0x40, @remote, @private1, 0x7800, 0x7, 0xe, 0x400}}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0xfffd, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010101}}, 0x24) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000940)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) 10.014917551s ago: executing program 3 (id=2945): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a65637400001400028008010140000000010500"], 0x104}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r6, 0x0, 0x0, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10000}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000000)=0x1) socket$rxrpc(0x21, 0x2, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24}, {0x10000, 0x5000, 0xb, 0xfc, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0xff, 0x6e, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x88, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r10, @ANYBLOB="8014000004210000df6f01d8064a1f1d498f6d9d0ed3b8d09e3549e6169f140294f6b683c28ad5e2d437b2e13b2f116f8cae94cbb4e70fdbe5108c358f4a36b4d962af21dad324309eb32077454fb79fc65546f50e48ceff5e6b13b7c1733463d3d759709644c9cec5421f4322abf8fb6f880545b2756376a94e3af9d2af73493d81cdb1e6250e"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 9.475958179s ago: executing program 4 (id=2946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x20000000000009, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x3, 0x6, 0x0, 0x0, 0x1, 0x2}}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) io_setup(0x9, &(0x7f00000000c0)=0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x2000000, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000100)='9', 0x20000101}]) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fanotify_init(0x4, 0x1000) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0x9, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3, 0x3, {}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x3, 0x1}, 0x0, 0x1, {0x0}}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 9.172282799s ago: executing program 1 (id=2947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x5, "699ea935"}, @main=@item_4={0x3, 0x0, 0x8, "069011aa"}]}}, 0x0}, 0xfffffffffffffffc) 8.3550685s ago: executing program 0 (id=2948): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x106) 7.99702887s ago: executing program 0 (id=2949): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000080)={0x95b7, 0x6c}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0x0, r1, 0x4}, 0xc) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r0, &(0x7f0000000100)=ANY=[], 0xb0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r2, r0, 0x0) 7.715716038s ago: executing program 0 (id=2950): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0xbcd}, @in6={0xa, 0x4e20, 0x5, @empty, 0x5}, @in6={0xa, 0x4e22, 0xce76, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x9}], 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0)={0x7}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r7, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) 6.307069837s ago: executing program 3 (id=2951): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.865280661s ago: executing program 1 (id=2952): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000001840)=0x4, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f00000006c0)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.638673799s ago: executing program 0 (id=2953): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000800e0003006269746d61703a697000000005000400000000000900020073797a30000000000140ffffffff0c0001800800014080ffffff0500140002000000050005000200000005000100060000006744bf015f66af53c9bea42a79bb96d8d53867bd39b29997b2fa6c492ee927d6ed6f82677b63e3832c06000000cb1d214bbf0b18ac"], 0x6c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 4.498468959s ago: executing program 0 (id=2954): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f0000000f40)=[{0x6b, 0x2200, 0x3e, &(0x7f0000000140)="000000000094f6028e757a9e8c20251bb6cb8c2f8590946a7c35ac9497ab3006c4eebf425c3d43f1f43e3bc80801bdc5039fba63a058f07799dd0e33226e"}], 0x1}) (fail_nth: 5) 4.112632661s ago: executing program 3 (id=2955): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe, 0x0, 0x54}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x7, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000480)={0x0, 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}) r6 = socket(0x2b, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xfff2, 0xfff1}, {0xb, 0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0xa, 0x0, 0x8000000, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x2, 0x1, 0x9, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x18) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0xfe, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@multicast1, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @generic={0x7, 0xc, "0441b613a3ac91fb9606"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 3.727861285s ago: executing program 4 (id=2956): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0), 0x0) personality(0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0xfffffffc, 0x493, 0x34324258, 0x9, 0x1, [{0x8, 0x2}, {0xff, 0x76c88}, {0x76cb03cd}, {0x5, 0x7}, {0x7, 0x7e1}, {0x10000, 0xfffffffd}, {0x2, 0x400}, {0x1, 0x8}], 0x7, 0x7}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5], 0x2c}}, 0x40) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x5d0c, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x5ce0, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x2c48, 0x4, [@m_police={0x1268, 0x3, 0x0, 0x0, {{0xb}, {0x11a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x6, 0x6, 0x8, {0x5, 0x2, 0x8, 0x7fff, 0x7, 0x273}, {0x8, 0x0, 0x7, 0x13, 0x7, 0x8}, 0x5fa, 0x5, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x9, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x130, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x20000000, 0x5, 0x95}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0x821, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x47, 0x5, 0x3, 0x4}, 0xc341}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x2, 0x9}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x60, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x21, 0x6, "d6337fc71344d621b3f41a408848462f2be26f838c2124f3ed97095d70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x171c, 0x12, 0x0, 0x0, {{0xb}, {0x1648, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4ee5a755}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x101, 0x81, 0x70a2, {0x0, 0x0, 0x7, 0x5, 0xef, 0x8001}, {0x9, 0x2, 0x8, 0xf6, 0xfffc, 0x8001}, 0xae8, 0x2, 0x9c}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff4, 0x1, 0xcc, 0x6, 0x4e11, 0x7, 0x62d, 0x80000001, 0x3, 0x401, 0x5, 0x6, 0x1, 0x5, 0x7fff, 0x0, 0x97, 0x5, 0x3, 0x301ea6fc, 0x80000000, 0x200, 0x7, 0x10, 0x4, 0x3, 0x8, 0x9, 0x100, 0xc, 0x56, 0x8, 0x8, 0xa, 0x4eee6086, 0x1, 0x5, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x122e, 0x4, 0x1000, 0x2, 0x80000000, 0x9, 0x8001, 0x10001, 0x200, 0x1b, 0x8, 0x7, 0xc000000, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x2, 0x7, 0x101, 0x0, 0x10, 0x260, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6450, 0x1ff, 0xb2, 0x5, 0x0, 0x0, 0x380000, 0x8000, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0x7, 0x6, 0x40, 0x813, 0x1, 0x7ff, 0xb, 0x6, 0x9, 0x6, 0x8b, 0x6, 0x0, 0xa06, 0xc33, 0xfffffff9, 0x3, 0xb, 0x3, 0x6, 0x9, 0x0, 0x4, 0x25a, 0x3000000, 0x101, 0xfffffff8, 0x0, 0xfea, 0x20000000, 0x6, 0xd, 0x6, 0x8dd4, 0x7, 0xd, 0xffffffff, 0x163f856e, 0xd6, 0xbb68, 0x9, 0x101, 0x14000, 0x9, 0x7, 0x200, 0x5, 0x1, 0x3, 0x6, 0xdb, 0x71c, 0x7, 0x1000, 0x6, 0xb8, 0x54fa07ca, 0x5, 0x5, 0x4, 0xb, 0x8, 0x6, 0x9, 0x2, 0xa, 0x9f, 0x1000, 0x5, 0xba, 0x3b5, 0x1ff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x5, 0xb479, 0xfffffffd, 0x8, 0x3, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x101, 0x800, 0x2, 0x7fffffff, 0xbb5c, 0x4e, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x3d6, 0x4, 0x4, 0x2, 0x7, 0x3, 0x60000000, 0x1, 0x40, 0xa6, 0x7, 0x6, 0x6, 0x803, 0x0, 0x8, 0x0, 0x8, 0x90, 0x6, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x9, 0xa4fb, 0x7f, 0x7f0, 0xffffff80, 0x9, 0xa, 0x40000000, 0x19, 0x6, 0x6428, 0x6, 0x7, 0x1, 0x6, 0x9, 0x5, 0xc2a, 0x80000001, 0x2, 0x0, 0x6, 0x6, 0x7, 0x200, 0x2, 0x400, 0x3, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x373, 0x7f, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x0, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xbd, 0xbb11, 0x10000, 0xfffffffc, 0x7, 0x6, 0x8, 0x800000, 0x9, 0x3, 0x342, 0x3, 0x1, 0x80000000, 0xc, 0xfffffffa, 0x1000, 0x5, 0x7, 0xd, 0x7, 0x0, 0x101, 0xad, 0xffffffff, 0xd5, 0x1, 0x3, 0x10000000, 0x1000, 0xff, 0x8, 0x0, 0x3, 0x40000000, 0x1, 0x3ff, 0x9, 0x43c9, 0x2, 0x3f7, 0x9e52, 0x0, 0x40000000, 0xf2, 0x5, 0x7, 0x7, 0x4, 0x8, 0x9, 0x7, 0xbc1, 0x9, 0x3, 0x8, 0xfffffff7, 0x4e, 0x5, 0xfff, 0x5a6, 0x8, 0x0, 0x3b, 0xffff, 0x7f, 0x7ff, 0x1, 0x5b5b, 0x4, 0x100, 0x8, 0x4, 0x8b, 0x4a, 0x8, 0x7f, 0x1, 0x81, 0x6, 0xa43, 0x9f, 0x4, 0x7, 0xfffffffb, 0x4, 0x1c000000, 0x10000, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x8, 0x1, 0x10001, 0x8, 0x3, 0x7, 0x100, 0xd93, 0x0, 0x0, 0x5, 0x1, 0x5, 0xe448, 0x400, 0x8, 0x4, 0xe99, 0x5, 0x61, 0x38527528, 0x6, 0x40, 0x8, 0x1, 0x8, 0x1, 0xda9, 0x9, 0xfffffff7, 0x2, 0x5, 0x8, 0x7, 0x8, 0x7, 0xfffffc01, 0xd78e, 0x21, 0x8000, 0x2, 0x6, 0x4fa4, 0x200, 0x4, 0x4, 0x5, 0x81, 0x4, 0x824, 0x9, 0x4, 0x9, 0x0, 0x1, 0xf3f, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x9, 0x3, 0x1, 0x51, 0x6, 0x3, 0x76, 0x4, 0x1ff, 0xfffffffa, 0x8, 0x2, 0x60, 0x6, 0xff, 0x7dd, 0x0, 0x2, 0xe, 0x9, 0x3, 0x2, 0x73c5, 0x400, 0xe4, 0x8, 0xfffffffb, 0x2, 0x4, 0xfffffff9, 0x1, 0x6, 0x5, 0xe, 0x2c10, 0x5, 0xfffffff9, 0x1ff, 0xe03469b6, 0x9, 0x2, 0x9, 0x1, 0x2, 0x101, 0x2, 0x6, 0x60, 0x340, 0xfffffffc, 0x6, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb1ba, 0x4f84, 0x7, 0x0, 0x1, 0x3, 0x3, 0x9, 0xc6, 0xe, 0x3, 0x2, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0xad, 0x2, 0x40000, 0x0, 0x4, 0x4, 0x7, 0x3, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x1c000, 0xe3f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6963}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe4, 0x34, 0x1, {0x5, 0x1, 0x9, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x200, 0x7, 0x3, 0x200}, 0x0, 0x4, 0x87}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x71bb, 0x401, 0x9, 0xfffffffb, 0x1000, 0x0, 0x1, 0xbd, 0xbd, 0x5, 0x5, 0x577, 0x5, 0x3, 0x7, 0x7ff, 0x40, 0x8000, 0x879, 0x2, 0x8c89, 0x13c9, 0x1, 0x5eac, 0x8, 0x8, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x100, 0x1, 0x1, 0x74, 0xa6a8, 0x100, 0x80000001, 0x40, 0x4, 0x9, 0x6dd, 0x0, 0x0, 0x3, 0x21, 0xd842, 0x0, 0x8, 0x4df, 0x10001, 0x10001, 0x7, 0x9, 0x8e, 0xff, 0x2, 0x6, 0x2, 0x80000001, 0xb6e9, 0x1, 0x10000, 0x41, 0x200, 0x9, 0x3, 0xa0000, 0xa, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x2, 0x10, 0xe, 0x661f, 0x5, 0xf3, 0x3, 0xbf, 0x800, 0x7, 0x1, 0x3ff, 0x3967, 0x4, 0x0, 0xd8b, 0x8, 0x1, 0x9f0, 0xffffff18, 0x100, 0x40, 0x0, 0x7, 0xa, 0x81, 0x200, 0x6, 0x3, 0xffffffff, 0x1000, 0x6, 0x10, 0x9, 0xcd21, 0x81, 0x7ff, 0x8001, 0x6, 0xffff, 0x4, 0x4, 0xfffffffb, 0x4, 0x2, 0x9, 0xa, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8, 0xa21, 0x9, 0x6, 0x10000, 0x5, 0xcce, 0x4, 0x1c00000, 0x1000, 0x10001, 0x4, 0x7, 0x2, 0x80000000, 0x400, 0x400, 0xfffff5c3, 0x8, 0x0, 0x101, 0x4, 0x7, 0x80000001, 0xe, 0x5, 0x9, 0x40, 0x6, 0x9, 0xffffffff, 0x4, 0xfffff800, 0x0, 0xc1e4, 0x9, 0xa0, 0x7, 0xfff, 0x0, 0x10, 0x8, 0x4, 0x800, 0x821, 0x3, 0x40f539ee, 0x7f, 0x4, 0x0, 0x1, 0xb51, 0x2, 0x2, 0x1, 0x7, 0x1, 0x1, 0x434f, 0x4, 0x4, 0xf, 0x6, 0x4, 0xa, 0x1, 0x31ed, 0x4, 0x179, 0x9, 0x5, 0xa, 0x2a, 0x9, 0x6, 0x8, 0x5, 0x4, 0x9, 0x9, 0x2000, 0x5, 0x80000001, 0xa, 0x0, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x401, 0x6, 0x7fff, 0x9, 0x5, 0x2, 0xfffffff5, 0x8, 0x7, 0x7fff, 0x7, 0xfffff3d2, 0xb2c, 0x1a9, 0x4, 0x0, 0x687, 0x80, 0x80000001, 0xdbe8, 0x8, 0x7188f37f, 0x2, 0x400, 0x90, 0x2, 0x2b6, 0x4b3d, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf11}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]]}, {0xa9, 0x6, "e4513679a2a987fd6afd93f9f7809739a798e4986a9d0d819ddafae5dc53af09b1e1886c21b22c6098cde951cf89def0e9d9956829a518b85ec649294a00d2af006ae2ef4036d37b9fb4c6c599d69ef091f1a8c51c68bc1e2dbf38a0e7de6b31836b283597c3511a43cad6c5ba3be7853d41ce908aed40ffe7143f389467f795a653166618ea2aaafd39994a9938f17191b1165e9efe7c261b41036e316280d7059cc7ddbc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x3090, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xf0, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0xa9, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cece69214efe0b7030a9679081f8f3c0f55b91dcbb582cdf68d0c84d7b970c7842211384835fe59a974c410e0f3"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x2e2c, 0x4, 0x0, 0x0, {{0xa}, {0x2e00, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa, [{0x40, 0x5, 0x1, 0x1, 0x7, 0xbf6105a}, {0xd, 0xffffffff, 0x2, 0x93, 0x9, 0x9}, {0xfffffffc, 0x1, 0x1, 0x63, 0x3, 0xc}, {0x4, 0x10000, 0x5, 0x1, 0x7, 0x80}, {0xffffff81, 0xb08, 0xf, 0x0, 0xe, 0x3}, {0x4, 0x4, 0x5, 0x6, 0x4, 0x1000}, {0xbb79, 0x8, 0x6, 0xb568bb60, 0x6, 0x7f}]}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd133, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400, 0x7}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x4fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x8, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x5, 0xa11, 0x5, 0x0, 0x800}, 0x8, 0x77, [{0x101, 0x8001, 0x7fffffff, 0x9, 0x0, 0x2}, {0x40, 0x4, 0x2, 0x1, 0x638d, 0x2}, {0x3, 0x2, 0x3, 0x0, 0x6, 0xb}, {0x6, 0x3, 0x10df400, 0x7, 0x2}, {0x7, 0x7, 0x1, 0x8, 0x4, 0x4}]}, [{0x8, 0x8a, 0x1, 0x0, 0x80c6000, 0x1}, {0x8000, 0x2, 0x10000, 0x1, 0x2, 0x8}, {0x2a6, 0x6, 0x850d, 0x888, 0x7f, 0x8}, {0x8, 0x2, 0x2, 0x8, 0x6, 0x1}, {0x100, 0xbb2d, 0x8, 0x2, 0x0, 0x9}, {0xd, 0x1, 0xc, 0xfffffffc, 0x1, 0x401}, {0x2, 0x6, 0x8f, 0x6, 0x47}, {0x8, 0x2, 0xffff, 0x6, 0x2, 0xf}, {0x7, 0x8, 0xb9f, 0xf, 0x3, 0xe}, {0xffff8001, 0x5, 0xf, 0x1ff, 0x5, 0x10000}, {0x86, 0x7, 0xd, 0x1, 0x0, 0x3}, {0x5, 0x1ff, 0x40, 0x5, 0xffffffa0}, {0x5, 0x4, 0xe3, 0xffff7224, 0x3, 0x800}, {0x101, 0xfffffff9, 0xe1f8, 0x4, 0x867, 0xd}, {0x6, 0x7, 0x35f, 0x9, 0x3, 0x39a}, {0x7, 0xb, 0x9, 0x7, 0x9, 0x6}, {0x8e, 0x401, 0x7fffffff, 0xffffffff, 0x2, 0x5}, {0x5, 0x5, 0x4e4e, 0xfffffff7}, {0x0, 0xd, 0xff, 0x1, 0x8, 0x7}, {0x3, 0xc2, 0xd, 0x7f, 0x8a08, 0x2}, {0x2, 0x6, 0x4, 0x0, 0x1, 0x80000001}, {0x2, 0xb, 0x5, 0x3, 0x8, 0x2}, {0x6, 0x2, 0x120, 0x9, 0x16cc7403, 0x3}, {0x1, 0x7, 0x6, 0x6a78, 0x8, 0xfffffbff}, {0x1, 0x0, 0x8, 0x1ff, 0x0, 0x46}, {0x0, 0x3, 0x27d98bac, 0xfff, 0x8, 0xd}, {0xe, 0xeb69, 0x2, 0xffff0375, 0x1000, 0x10000}, {0x101, 0x7f000, 0xa, 0x6, 0xa, 0xbeb}, {0x24000000, 0x0, 0x4, 0x400, 0x5, 0x2}, {0x8000, 0x100, 0x9, 0x0, 0x2, 0xffffffff}, {0x3f, 0x3, 0x4af, 0x7, 0xff, 0x5}, {0xffffff7f, 0xffff7fff, 0xb3f4, 0xb5, 0xe, 0xcbb7}, {0x7, 0xb, 0xfffffff7, 0x2, 0xf27, 0x4}, {0x1, 0x97, 0x480, 0x9a, 0x8000, 0x6}, {0x3, 0x7, 0x2, 0xffff, 0x115, 0x1}, {0x86e5, 0x8, 0x7, 0x4, 0x7e73, 0x8}, {0x9, 0x5bcf, 0x8, 0x80000000, 0xee, 0x2c1}, {0x3, 0x1800000, 0x2, 0x2, 0x2, 0x4}, {0x6, 0x81, 0xf, 0x4, 0x81, 0xffffffff}, {0x0, 0x9, 0x9, 0x1, 0xd9b, 0x1}, {0x8, 0xce, 0x5, 0x1, 0x7}, {0x4edf, 0xfd9f, 0x101, 0xf84, 0x81}, {0x10000, 0x80000000, 0x80, 0x1, 0x1000, 0x9}, {0x7, 0x8, 0xd24, 0x3f5, 0x2, 0x4427}, {0x1, 0x0, 0x20, 0xfffffff9, 0x6, 0x1}, {0xb5f, 0xf2c, 0xe6b, 0x9, 0x4, 0x80}, {0x3, 0x14, 0x6c, 0x80000001, 0x5, 0x4}, {0x1, 0x3, 0x101, 0xfffffffc, 0x8, 0xfffffff8}, {0x3, 0x4, 0x35, 0x8, 0x6, 0xfffffffb}, {0x1, 0x1, 0xfffffffa, 0x180, 0x7fffffff, 0x7}, {0x9, 0x2, 0xffffb29d, 0x0, 0xf, 0x100}, {0x8, 0x647, 0x1115b69e, 0x8, 0x7fffffff, 0xbb}, {0x488d, 0x9, 0x5, 0xff, 0x2, 0x2}, {0x2, 0xfffffff9, 0x8, 0xc5f, 0xb, 0x3}, {0x0, 0xd1, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0xc8b, 0x0, 0x6, 0x9, 0x3}, {0x9, 0xae4, 0x8, 0x7, 0x3, 0x7fff}, {0x5, 0x0, 0x7ff, 0x400, 0x9, 0x5}, {0x2, 0x5, 0x1, 0x0, 0x7fff, 0x9}, {0x2, 0x9, 0x2, 0x1a, 0x3, 0xfffffffe}, {0xfffffffd, 0x4, 0x4, 0x10000, 0x3, 0xe1}, {0x1, 0xb, 0x1, 0x8001, 0x2, 0x81}, {0x5, 0x10001, 0xd, 0x5, 0x8, 0x3}, {0x6, 0xffffff75, 0xc, 0xd, 0x5, 0x1}, {0xd24, 0x2, 0x9, 0x1, 0x3, 0x9}, {0x2, 0x4, 0x10000, 0x40, 0xfff, 0xc}, {0x9, 0x3, 0xbeb, 0x5, 0x2, 0x3}, {0xfffffffc, 0x15, 0xfffffffd, 0x80000001, 0x1, 0x20}, {0x800, 0xff, 0x400, 0xfffffff7, 0x6, 0x6}, {0x9, 0x8, 0x2069, 0x3, 0x6, 0x7}, {0x8, 0x1, 0x10000, 0x5, 0x5, 0x5}, {0x7, 0x8, 0x4, 0x8001, 0x2, 0xf}, {0x81, 0xfcd, 0x3, 0x3, 0x203b, 0x2}, {0x10000, 0x1, 0x6, 0x7, 0x101, 0x8}, {0x0, 0x5, 0xfffffffd, 0x2, 0x9, 0xfbf}, {0x4, 0x2, 0x9, 0x2, 0x80, 0x40}, {0x9, 0x7, 0x8000, 0x5, 0x8, 0x6}, {0x1, 0x80000000, 0xffff, 0x7fff, 0x0, 0x4}, {0xe, 0x7f, 0x6, 0xbed3, 0x63a, 0x1}, {0x4, 0x9, 0x90, 0x100, 0x4, 0xe82}, {0x80000001, 0x5, 0x1, 0x8, 0x78, 0x2}, {0x10, 0xe9, 0x6, 0x10000, 0x9, 0x7}, {0x2, 0x9, 0x1, 0x2f1, 0x6, 0x8}, {0xd63, 0x2, 0x8, 0xcaf, 0x85b5, 0x80000001}, {0x3, 0x401, 0x8, 0x10000, 0xcf}, {0x6, 0x7, 0xb, 0xfff, 0x4, 0x5}, {0xa6f, 0x3ff, 0x5, 0x911, 0x1, 0x1}, {0x1, 0x9, 0x9, 0xf1, 0x0, 0x10000}, {0x4, 0x4, 0x8, 0xff, 0x4}, {0x1, 0x4, 0x7, 0x80000000, 0x7, 0xb}, {0x1, 0x5, 0x4, 0x1ff, 0xa, 0x538a}, {0x7f, 0x7, 0x8, 0xaa, 0x2, 0x7}, {0xfff, 0xdc1, 0x5, 0xc, 0x7, 0x7}, {0x100, 0x3e, 0xd, 0x0, 0x6910c30c, 0x7}, {0x2, 0x2, 0xfffffffb, 0xfeb7, 0x579, 0x8}, {0x9, 0x9, 0x5, 0x6, 0x0, 0x7}, {0x10000, 0x10001, 0xffffffff, 0xd7b, 0x3, 0x5f3}, {0xff, 0x8886, 0x3, 0x5, 0x5, 0x3}, {0x6, 0x7f, 0x80000001, 0x7f0, 0xfff, 0x4bf}, {0x2, 0x5, 0x5, 0x4, 0x5, 0x3403}, {0xe3, 0xf7, 0x4, 0x7, 0x63b, 0xc}, {0x7, 0x6ec7e5d9, 0x3, 0x2, 0x3, 0x6}, {0x7, 0x7, 0x8, 0x4, 0xffffffff, 0x3b6}, {0x1, 0x9, 0xfffffffb, 0x7, 0x7f, 0x79}, {0x0, 0x4, 0x1, 0x9, 0x70, 0x7}, {0xaa, 0x6, 0x6091, 0x7f, 0x3, 0x3}, {0x8, 0x0, 0x3ff, 0x4, 0x0, 0x7e}, {0xc, 0x3, 0x9, 0x10, 0x3ff, 0x5}, {0x2, 0xffff, 0xd, 0x101, 0x9, 0x80000000}, {0x5c, 0x9, 0x40, 0xf, 0x6, 0x81}, {0x3309, 0xc6e9, 0x9, 0xfffffffa, 0x7, 0xbc}, {0xe, 0x81, 0x7, 0x7, 0x3, 0x9}, {0x4, 0x8, 0x80000000, 0x6, 0x7, 0x7ff}, {0x5, 0x7, 0x4, 0xafb1, 0xc20d, 0x40}, {0x5, 0x94, 0x3, 0x400, 0x0, 0x5}, {0x56390, 0x1, 0x5, 0x38, 0x7, 0x7}, {0x8000, 0x6, 0x9, 0x4, 0x7, 0x80000001}, {0x7f, 0x8, 0xf8, 0x4dd6, 0x8, 0x5}, {0x2, 0x0, 0x3, 0x448ea325, 0x37c, 0xee}, {0x4b, 0x9, 0x5, 0x8001, 0x7, 0x80000001}, {0xffffff4e, 0x32, 0x7, 0x4, 0x3, 0x6}, {0x0, 0x75, 0x4, 0x4, 0x1ff, 0x10000000}, {0x3ca91c8a, 0xffffffff, 0x10000, 0x7fffffff, 0x4}, {0x7, 0x57, 0x5, 0x6, 0x7, 0xb33d}, {0x4, 0x101, 0xfff, 0x2, 0x4, 0x13}, {0x0, 0x8000, 0x0, 0x1ff, 0x4, 0x99}, {0x3, 0x9, 0xf61b, 0x7ff, 0x40, 0x4a89}, {0x1, 0x5, 0x9, 0xfff, 0xdb3, 0x93a6}], [{0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x6}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x6f8f8a2ccadbcaf1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x9fa91f92013e47c9}, {0x3, 0x57dcad52c17df449}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x44aef0e82e38681e}, {0x4}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x8, 0x2, 0x7, 0xdab8}, 0xf, 0x1}, [{0x6, 0x8, 0x6, 0x7, 0x1, 0x101}, {0x0, 0xe, 0x0, 0x2, 0x2, 0x6}, {0x1, 0x7, 0xe0c, 0xe, 0x10, 0xa}, {0x2, 0x6, 0x2fdb35e5, 0x1, 0x3, 0x3}, {0xffffedb5, 0x34, 0x9, 0x800, 0x3, 0x2800}, {0x2, 0x6, 0x7, 0x9, 0x9, 0x1}, {0x5, 0x3, 0x94c, 0x1, 0x5, 0x5}, {0x1cd, 0xc3e, 0x1, 0x3cb, 0x8, 0x46c1e40d}, {0x1, 0x2, 0x9, 0x800, 0x3, 0x3}, {0xffff, 0x7, 0xfffffffd, 0x4, 0x7b8b, 0x1}, {0xfffffffd, 0x800, 0xc7, 0x0, 0x2d7, 0x8}, {0x80000001, 0xb, 0x80000001, 0x5, 0x4, 0x3}, {0x8, 0x9, 0xfffffffc, 0x7, 0x3, 0x4034}, {0x80000001, 0x1, 0x6, 0x80000000, 0x20, 0xfffffffc}, {0x3, 0x9, 0x5, 0x13, 0x1, 0x536}, {0x4, 0x74, 0x8, 0x7, 0x5, 0x7}, {0xf5, 0x6, 0x8000, 0x5, 0x1}, {0xfffffffb, 0x4, 0x3, 0x4, 0x0, 0x4}, {0xfffffff8, 0x8, 0x2, 0x3, 0xffff558e, 0x6}, {0xc, 0x1, 0x3, 0x6, 0x8, 0x5}, {0x7fffffff, 0x5, 0x8, 0xb, 0x5, 0x202}, {0x2, 0x1, 0x0, 0x9, 0x6, 0xffffffff}, {0x0, 0xb, 0x1, 0xe472, 0x800, 0x5}, {0x9, 0x2, 0x3, 0x1, 0x7, 0x4}, {0xa786, 0x13, 0x1b5, 0x84e, 0x9, 0xfffffff5}, {0x6, 0x1, 0x2, 0x1000, 0x40, 0x5}, {0x8000, 0x20, 0x4, 0xf3, 0x1, 0x10000}, {0x0, 0x3, 0x9, 0x6, 0x6, 0x5}, {0x9, 0x3, 0x200, 0xa9, 0x1ff, 0x3}, {0x10, 0x4, 0x1, 0x0, 0x8, 0x100}, {0x2, 0xfffffffe, 0x9, 0x6, 0x6, 0xfffeffff}, {0xfff, 0x81, 0x9, 0x6, 0x200, 0x401}, {0x8, 0xa03f, 0xe, 0x6, 0x9, 0x564}, {0x9, 0xffffffff, 0x7, 0x2, 0x6c8, 0x4}, {0x0, 0xfffffffc, 0xa9e, 0x1, 0x3, 0x8}, {0x3, 0xd, 0x6, 0xffff0000, 0xfe, 0x1ff}, {0x4a, 0x6, 0x3, 0x34, 0x80, 0x2}, {0xf36, 0x401, 0x7a, 0x9, 0x80000001, 0x5}, {0x2, 0x400, 0x130, 0x400000, 0x8001, 0x3}, {0x7, 0x3, 0x8001, 0x5e34, 0x80000000, 0x9}, {0x1, 0x10000, 0x7, 0x4, 0xf49, 0x8001}, {0x7ff, 0x6, 0x7, 0xccc1, 0x0, 0x766e2184}, {0x3, 0x75d, 0x1, 0x7, 0x40, 0x4}, {0x4, 0x81, 0x3, 0x7f, 0x4, 0x800}, {0x5, 0x80000000, 0x7fff, 0x2, 0x2, 0x6}, {0x3, 0x2, 0x8000000, 0x3ff, 0x7, 0x2}, {0x7, 0x569, 0x5, 0x81, 0x7ff, 0x400}, {0x5, 0x4, 0x1ff, 0xfffffff0, 0x0, 0x4}, {0xff, 0x7, 0xfffffffb, 0xffff, 0x7f0c, 0x81}, {0x0, 0xffff8001, 0x6, 0x2, 0x1}, {0x1, 0x7, 0x6, 0x7fffffff, 0xb3b, 0x4}, {0x3, 0x8, 0x3, 0x80, 0x10, 0xb}, {0x7, 0x7, 0x2, 0xc, 0x77f, 0x1}, {0x0, 0x8, 0x0, 0x7, 0x2}, {0x1, 0xffffffff, 0x6, 0x24e, 0x3, 0x4}, {0x1d, 0x6, 0x9, 0x10000, 0x9, 0x5}, {0x3, 0x9, 0xf, 0x5, 0xc4, 0xffffffff}, {0x1, 0xb, 0x0, 0x1, 0x1c, 0x1000}, {0xcf, 0x2, 0x90da, 0x2, 0x5172, 0x8000}, {0x7, 0x4, 0x0, 0x6, 0x6, 0xffff}, {0x8, 0xf, 0x2, 0xfffffffd, 0xa6}, {0xf, 0x4, 0x1, 0x8, 0x10000, 0x40}, {0x0, 0x7ff, 0x5, 0x3, 0x5, 0xa}, {0xc, 0xf17af067, 0x2, 0x5, 0xe, 0x10001}, {0x3, 0x9, 0xffffffff, 0x1c55, 0x4, 0x9}, {0x4, 0xffffff00, 0x0, 0x8, 0xd3, 0xc}, {0x7, 0x9, 0x8, 0x8000, 0xffffff0f, 0x9}, {0x70b0, 0x0, 0x3, 0x4, 0xacd}, {0xa2, 0x2, 0x3, 0x1ff, 0x59c0, 0x5}, {0x0, 0x4, 0x2, 0x6, 0x10001, 0x3}, {0x2, 0x2, 0x2acf, 0x0, 0xf2, 0x7}, {0x7, 0x80000000, 0x6, 0x0, 0x10000, 0x2}, {0x3ff, 0x5, 0x8, 0x2, 0xf507}, {0x2, 0x7, 0xfffff000, 0xffffff7f, 0x8a, 0x5}, {0x9, 0x0, 0x8000, 0x81, 0x2, 0xfffffff6}, {0x1ff, 0xfffffff9, 0x82, 0x2, 0x7, 0x7}, {0xa, 0x8, 0x89e, 0xffffffff, 0x7, 0x5}, {0xfdc2, 0x1e, 0x6, 0xd46a, 0xd, 0x39d}, {0x2, 0x36c9, 0x80, 0x9, 0xfff, 0x1a538e3a}, {0x4, 0x1, 0xa, 0x4, 0xb4e, 0x2}, {0x9, 0x10, 0x6, 0xa12, 0x6, 0x3}, {0xa2, 0x2, 0x81, 0x10000, 0x4, 0x9}, {0x1ec, 0xdf1, 0xc, 0x4, 0x8000, 0x5}, {0x4, 0x8, 0x536, 0xd, 0x9, 0x4}, {0x9, 0xb, 0x7, 0x3, 0x4, 0x2}, {0x3, 0x800, 0x9, 0x9, 0x0, 0xf02}, {0x7, 0x3ff, 0x8, 0x2, 0x0, 0x1}, {0xc1, 0xa, 0x7, 0x3, 0x2, 0x1000}, {0x3, 0x3, 0x7, 0x6, 0x7, 0x800}, {0x2, 0x3034, 0x8, 0x10001, 0x9, 0xbdb}, {0x8, 0x1, 0x3, 0x3, 0xb04f, 0x9}, {0x9, 0x5, 0x0, 0x7, 0x3, 0x6}, {0x100, 0x10000, 0x10001, 0x6, 0x401, 0x80000001}, {0x3ab, 0x2, 0x8b8e, 0x6, 0x3, 0x5}, {0x9, 0xb, 0x0, 0x0, 0x3, 0x7}, {0xf, 0x3, 0x401, 0x4, 0x4, 0x1}, {0x7, 0x9, 0x2dc7, 0x7, 0x2, 0x4}, {0x358, 0x8, 0xffffffff, 0x40000, 0x1, 0xc}, {0x0, 0x6, 0x6, 0x5, 0xa}, {0x0, 0x80000001, 0x7, 0x3, 0x3, 0x80000000}, {0x6, 0x3, 0x402f, 0x4, 0xff, 0x5}, {0x114, 0x1, 0x4, 0x9, 0x1c8b, 0x3}, {0xa, 0x2, 0x101, 0x1, 0x81, 0x25}, {0x3, 0x5, 0x8000, 0x3, 0x40, 0x3}, {0x1, 0x8, 0x2, 0x9, 0x7cf, 0x3}, {0x9, 0xeb, 0x8, 0x84, 0x6, 0x7}, {0x10, 0x2, 0xecff, 0x45, 0x0, 0x2}, {0xe7, 0x3, 0x7, 0xe340, 0x8000, 0x7}, {0x5, 0x4, 0x400, 0x0, 0x0, 0x5}, {0x3, 0x5, 0x9, 0xfff, 0x3, 0x507826a6}, {0x6, 0xffffffc0, 0x100, 0x2, 0x0, 0x1ff}, {0x8, 0x6, 0x1, 0x40, 0x4, 0x7d734ac1}, {0x9, 0x9, 0x81, 0x8, 0x8}, {0x2, 0x0, 0xfff, 0x4, 0xe9, 0xfffffffd}, {0x0, 0xf, 0x3, 0x4, 0x5, 0x400}, {0x4, 0x80000000, 0xfffffbff, 0x759, 0xed1}, {0xc, 0x5, 0x5, 0x1, 0x80000000, 0x8}, {0x8, 0x4, 0x40, 0x5, 0x1ff, 0xe48}, {0x5731, 0x9, 0x8, 0x1000, 0x7d, 0xad70}, {0xc00, 0x24, 0x8, 0x9, 0x3a2, 0x6}, {0x0, 0x0, 0x5, 0x7, 0x1, 0xd}, {0x4, 0x401, 0x80000000, 0x664, 0xc, 0x9}, {0x99, 0x40, 0x100, 0xd53, 0xb, 0x7}, {0x4, 0x73, 0xeb1, 0x5, 0x6, 0x5}, {0x9, 0x9, 0x4, 0xff, 0x9, 0x62}, {0x24, 0x8, 0x3, 0x4, 0x5, 0xffff8246}, {0xfffffff8, 0xb63, 0xffffff7f, 0x8, 0x81}, {0x5e, 0x0, 0x1, 0x81, 0x80, 0x401}], [{0x3}, {0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x7, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x7}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5}, {0x2, 0xbc4963be5a496dd2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x3}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x5d0c}}, 0x0) io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x7e, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x29, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xdd, 0x7, 0x11}}}}}]}}]}}, 0x0) 2.509483823s ago: executing program 0 (id=2957): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, '\x00\x00M'}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x24, &(0x7f0000000200), 0x4) syz_usb_ep_read(r2, 0x5, 0x4c, &(0x7f0000000200)=""/76) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x4, 0x4b, {0x4b, 0x10, "fb28e981b1137584f86a0a98682e9b7556da841e0f8eaa771a0e926dcd32f580ea8cb7ae0d2527604e467e83a67ed7453b895c1e31a8277c73143cbd6cf4b34330e5a72ac4ed48d364"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000300)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x1, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x8, 0x3, 0x7, 0x3}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x1, 0x85, "ff897153", "7803a752"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x61, 0x0, 0x4, 0x7, 0x7, 0x87c1}}}, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)={0x20, 0x30, 0xcf, "2982805080cc9f271ea364cc111d433b73af08f4fade49efe3f320cdf31f1fdc33ca0ce8c30da5474159ac1a560f9d6a2b631fd73ca736f44109298f1fbb1b32ef20f11144d68f49815c980d0d412da0db8621927b46ac7c8fbdab4b19e4510cf6abf573df8ab78fb2083ee627a064860696bb6c88f37e0b3519e1df71547a0410e4a66616ee66289042e3040420556265cd75824c315917ae208ee5492b63c6ee3d5b4b56228fa4608ad217dddfa304f45d3dafad6933af6b90148b5fa95d3c19519df8636cfea07e66d7ac4f1cbf"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x160, 0x20, [0x78]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x3313}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x9a}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "0cc8"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="e4410c1e1d53"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "5d8e"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x87}}) syz_usb_control_io(r1, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000440)={&(0x7f00000001c0)=[{0x4, 0x1011, 0x0, 0x0}, {0x4, 0x4b1f, 0x0, 0x0}], 0x2}) 2.471915836s ago: executing program 1 (id=2958): socket$kcm(0x10, 0x2, 0x0) socket(0x2c, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x106) 2.232351233s ago: executing program 1 (id=2959): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0}]) r1 = io_uring_setup(0x4dc3, &(0x7f0000000200)={0x0, 0x9153, 0x100, 0x2, 0x20}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="001900000ab9a9c1aa6f7c82e43a59a60afecc76409da1473dbc94081d56", @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000040003803c0001801400020073797a5f74756e000000000000000000140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x54}}, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='id_legacy\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) close(r6) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/mcfilter\x00') lseek(r8, 0x5a, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x7, &(0x7f0000000080)={0x6, "527a1468df08000000758bd16868e0bf22c7b844c1b1f10186904fff98d2870c38"}}) 1.331605523s ago: executing program 3 (id=2960): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x1, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0xec794abb75d52be5) r7 = syz_io_uring_setup(0xeeb, &(0x7f0000000480)={0x0, 0x8002, 0x10100, 0x0, 0x3c8}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r2, 0x73b, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000000)=""/6, 0x6}], 0x4, 0x0, 0x1}) io_uring_enter(r7, 0x567, 0xa9ea, 0x5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x201f00) r11 = socket(0x23, 0x6, 0x2007a30) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) r12 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x318, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfc, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0xc6, 0x1, 0x3, 0x1, 0x3, 0xba, {0x9, 0x21, 0x3, 0xa, 0x1, {0x22, 0xf94}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0xe4, 0x25}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7f, 0xe, 0x9b}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x0, 0x9, 0x9, 0x8, 0xf8}, 0x3b, &(0x7f0000000300)={0x5, 0xf, 0x3b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x2, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfc1b}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xe53, 0xf11, 0x2000, [0xff3fc0, 0x3f00, 0xff0000, 0xff]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x443}}, {0x3c, &(0x7f0000000700)=@string={0x3c, 0x3, "0e7061aa71f0269c068daa9f32ad1a0e3ee088217374d2064bc2e696a818ab6b80b4a893c659f32de67e2c273245a2b0c081a3c24ba83239242b"}}, {0x45, &(0x7f0000000740)=@string={0x45, 0x3, "f9de4591bc7ae6c77d78598b7ea49a3169fc3539101179902e7c35a277aed2b9dfa6e198e4bae8e5450f92e667ff112c868a0e2a8bcac6d107d2e86975ccc4e6b5132a"}}]}) syz_usb_control_io$hid(r12, &(0x7f00000009c0)={0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000940)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xc, "b0da"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x855}}}}, &(0x7f0000000b80)={0x18, &(0x7f0000000a00)={0x0, 0xd, 0x4f, "984e61459dc814081a47456ef5f81eeb1bd43054a79b3decb83ab1d1bafd01ed2acc10ab13404e091a8941c2b2c0d2362ca7b2a54315763809a79a48b21268373da217eddafbd41e7f29ca91498421"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xdc}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b00)={0x20, 0x1, 0x29, "f7c5cde0b1ae092fdedfef5a3b0ef8e86ad47382bed646d0ef7014172eacd59ffa76e6f0290cc1128e"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, 0x0, 0x0) 61.871825ms ago: executing program 4 (id=2961): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) ppoll(&(0x7f0000000040)=[{r1, 0x907c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefff"], 0xc8) sendmsg$sock(r0, 0x0, 0x4000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffd, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x2}, 0x18) close_range(r3, 0xffffffffffffffff, 0x2000000) 0s ago: executing program 1 (id=2962): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0xbcd}, @in6={0xa, 0x4e20, 0x5, @empty, 0x5}, @in6={0xa, 0x4e22, 0xce76, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x9}], 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0)={0x7}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r7, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) kernel console output (not intermixed with test programs): ovec+0x74/0xa0 [ 1132.870103][T16451] ___sys_sendmsg+0x21f/0x2a0 [ 1132.870132][T16451] ? __pfx____sys_sendmsg+0x10/0x10 [ 1132.870196][T16451] ? __fget_files+0x2a/0x420 [ 1132.870222][T16451] ? __fget_files+0x3a0/0x420 [ 1132.870261][T16451] __x64_sys_sendmsg+0x19b/0x260 [ 1132.870291][T16451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1132.870326][T16451] ? __pfx_ksys_write+0x10/0x10 [ 1132.870360][T16451] do_syscall_64+0xec/0xf80 [ 1132.870382][T16451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.870404][T16451] ? trace_irq_disable+0x37/0x100 [ 1132.870432][T16451] ? clear_bhb_loop+0x60/0xb0 [ 1132.870459][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.870481][T16451] RIP: 0033:0x7fd51a98f749 [ 1132.870500][T16451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.870521][T16451] RSP: 002b:00007fd51b848038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1132.870544][T16451] RAX: ffffffffffffffda RBX: 00007fd51abe5fa0 RCX: 00007fd51a98f749 [ 1132.870561][T16451] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1132.870576][T16451] RBP: 00007fd51b848090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.870592][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.870606][T16451] R13: 00007fd51abe6038 R14: 00007fd51abe5fa0 R15: 00007fd51ad0fa28 [ 1132.870641][T16451] [ 1133.838732][ T5917] uclogic 0003:5543:004D.0032: failed retrieving Huion firmware version: -71 [ 1133.847732][ T5917] uclogic 0003:5543:004D.0032: failed probing parameters: -71 [ 1133.858374][ T5916] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1133.878632][ T5917] uclogic 0003:5543:004D.0032: probe with driver uclogic failed with error -71 [ 1133.915652][ T5917] usb 4-1: USB disconnect, device number 21 [ 1134.028411][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 1134.061021][ T5916] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1134.079366][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.099935][ T5916] usb 3-1: config 0 descriptor?? [ 1134.118383][ T5902] usb 1-1: USB disconnect, device number 36 [ 1134.144599][ T5916] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1134.205608][T16459] FAULT_INJECTION: forcing a failure. [ 1134.205608][T16459] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.219524][T16459] CPU: 0 UID: 0 PID: 16459 Comm: syz.0.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.219561][T16459] Tainted: [L]=SOFTLOCKUP [ 1134.219570][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.219585][T16459] Call Trace: [ 1134.219595][T16459] [ 1134.219605][T16459] dump_stack_lvl+0xe8/0x150 [ 1134.219648][T16459] should_fail_ex+0x414/0x560 [ 1134.219690][T16459] should_failslab+0xa8/0x100 [ 1134.219720][T16459] kmem_cache_alloc_noprof+0x88/0x710 [ 1134.219755][T16459] ? __netlink_lookup+0xbd/0x8a0 [ 1134.219787][T16459] ? skb_clone+0x212/0x3a0 [ 1134.219821][T16459] skb_clone+0x212/0x3a0 [ 1134.219853][T16459] __netlink_deliver_tap+0x404/0x850 [ 1134.219895][T16459] ? netlink_deliver_tap+0x2e/0x1b0 [ 1134.219927][T16459] netlink_deliver_tap+0x19c/0x1b0 [ 1134.219958][T16459] netlink_unicast+0x7fa/0x9e0 [ 1134.219992][T16459] ? __pfx_netlink_unicast+0x10/0x10 [ 1134.220017][T16459] ? __alloc_skb+0x198/0x3a0 [ 1134.220045][T16459] ? netlink_sendmsg+0x642/0xb30 [ 1134.220073][T16459] ? skb_put+0x11b/0x210 [ 1134.220101][T16459] netlink_sendmsg+0x805/0xb30 [ 1134.220141][T16459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.220175][T16459] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1134.220207][T16459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.220229][T16459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.220260][T16459] __sock_sendmsg+0x21c/0x270 [ 1134.220296][T16459] ____sys_sendmsg+0x505/0x820 [ 1134.220329][T16459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.220367][T16459] ? import_iovec+0x74/0xa0 [ 1134.220398][T16459] ___sys_sendmsg+0x21f/0x2a0 [ 1134.220429][T16459] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.220493][T16459] ? __fget_files+0x2a/0x420 [ 1134.220522][T16459] ? __fget_files+0x3a0/0x420 [ 1134.220561][T16459] __x64_sys_sendmsg+0x19b/0x260 [ 1134.220591][T16459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.220630][T16459] ? __pfx_ksys_write+0x10/0x10 [ 1134.220671][T16459] do_syscall_64+0xec/0xf80 [ 1134.220696][T16459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.220718][T16459] ? trace_irq_disable+0x37/0x100 [ 1134.220747][T16459] ? clear_bhb_loop+0x60/0xb0 [ 1134.220775][T16459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.220797][T16459] RIP: 0033:0x7f601bd8f749 [ 1134.220818][T16459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.220837][T16459] RSP: 002b:00007f601cbeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.220862][T16459] RAX: ffffffffffffffda RBX: 00007f601bfe5fa0 RCX: 00007f601bd8f749 [ 1134.220879][T16459] RDX: 0000000004000804 RSI: 0000200000000400 RDI: 0000000000000003 [ 1134.220894][T16459] RBP: 00007f601cbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.220909][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.220923][T16459] R13: 00007f601bfe6038 R14: 00007f601bfe5fa0 R15: 00007f601c10fa28 [ 1134.220964][T16459] [ 1134.684007][T16460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1135.048925][ T5823] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1135.358385][ T5823] usb 2-1: device descriptor read/64, error -71 [ 1135.628353][ T5823] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1135.719069][ T5916] gspca_sonixj: reg_w1 err -71 [ 1135.738420][ T5916] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1135.778556][ T5823] usb 2-1: device descriptor read/64, error -71 [ 1135.835561][ T5916] usb 3-1: USB disconnect, device number 15 [ 1135.888423][ T795] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1135.896424][ T5823] usb usb2-port1: attempt power cycle [ 1136.101585][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 36510, setting to 64 [ 1136.117265][ T795] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1136.132527][ T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.141492][ T795] usb 4-1: Product: syz [ 1136.145863][ T795] usb 4-1: Manufacturer: syz [ 1136.152083][ T795] usb 4-1: SerialNumber: syz [ 1136.160126][ T795] usb 4-1: config 0 descriptor?? [ 1136.202923][T16469] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1136.234677][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1136.266174][ T795] hub 4-1:0.0: bad descriptor, ignoring hub [ 1136.288467][ T5823] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1136.301139][ T795] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1136.388369][ T5823] usb 2-1: device descriptor read/8, error -71 [ 1136.396604][ T795] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 1136.613508][T16482] input: syz0 as /devices/virtual/input/input48 [ 1136.668524][ T5823] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1136.964430][ T5823] usb 2-1: device descriptor read/8, error -71 [ 1136.971092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.971324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.971543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.971753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.189396][ T5823] usb usb2-port1: unable to enumerate USB device [ 1137.208428][ T5941] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1137.390317][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 1137.400567][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1137.413383][ T5941] usb 3-1: config 0 has no interface number 0 [ 1137.432191][ T5941] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.457692][ T5941] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.531294][ T5941] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1137.548403][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.577642][ T5941] usb 3-1: config 0 descriptor?? [ 1137.760165][ T5823] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1137.962374][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 1138.004516][ T5823] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1138.016024][ T5941] holtek_mouse 0003:04D9:A081.0033: item fetching failed at offset 5/8 [ 1138.036467][ T5941] holtek_mouse 0003:04D9:A081.0033: hid parse failed: -22 [ 1138.049022][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.077751][ T5941] holtek_mouse 0003:04D9:A081.0033: probe with driver holtek_mouse failed with error -22 [ 1138.105333][ T5823] usb 1-1: config 0 descriptor?? [ 1138.171525][ T5823] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1138.518416][ T5916] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1138.708453][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1138.719108][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1138.733009][ T5916] usb 2-1: config 0 has no interface number 0 [ 1138.777168][ T5916] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.788629][ T5916] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.799196][ T5916] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1138.808619][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.933550][T16500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.943783][T16500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.953838][ T5916] usb 2-1: config 0 descriptor?? [ 1138.968816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.977282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.378770][ T5902] usb 4-1: USB disconnect, device number 22 [ 1139.484650][ T5916] holtek_mouse 0003:04D9:A081.0034: item fetching failed at offset 5/8 [ 1139.496716][ T5916] holtek_mouse 0003:04D9:A081.0034: hid parse failed: -22 [ 1139.511146][ T5916] holtek_mouse 0003:04D9:A081.0034: probe with driver holtek_mouse failed with error -22 [ 1140.236007][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.245286][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.820406][ T5823] gspca_sonixj: reg_w1 err -71 [ 1140.825424][ T5823] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1140.843716][ T5823] usb 1-1: USB disconnect, device number 37 [ 1140.924062][ T5916] usb 3-1: USB disconnect, device number 16 [ 1141.400631][T16515] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1142.002641][ T5823] usb 2-1: USB disconnect, device number 31 [ 1142.166519][T16529] binder: 16525:16529 ioctl 40044591 0 returned -22 [ 1142.247397][T16526] binder: 16525:16526 ioctl c0306201 200000000040 returned -14 [ 1142.728553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.737155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.745718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.754044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.763843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.078566][T16538] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2729'. [ 1143.582367][T16550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.593283][T16550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.298745][ T5823] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1144.471902][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 36510, setting to 64 [ 1144.630494][ T5823] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1144.639737][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.658107][ T5823] usb 1-1: Product: syz [ 1144.667090][ T5823] usb 1-1: Manufacturer: syz [ 1144.702607][ T5823] usb 1-1: SerialNumber: syz [ 1144.749429][ T5823] usb 1-1: config 0 descriptor?? [ 1144.768187][T16557] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1144.791671][ T5823] hub 1-1:0.0: bad descriptor, ignoring hub [ 1144.799404][ T5823] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1144.822207][ T5823] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 1144.961040][ T5941] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1145.158489][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 1145.214987][ T5941] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1145.231962][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.360260][ T5941] usb 2-1: config 0 descriptor?? [ 1145.396271][ T5941] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1145.588353][ T5823] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1145.738518][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 1145.746606][ T5823] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.759412][ T5823] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1145.787162][ T5823] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1145.811475][ T5823] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1145.842295][ T5823] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1145.860986][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.877713][ T5823] usb 3-1: Product: syz [ 1145.887805][ T5823] usb 3-1: Manufacturer: syz [ 1145.897927][ T5823] usb 3-1: SerialNumber: syz [ 1145.945151][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1145.977588][ T5823] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input50 [ 1146.158343][ T5823] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1146.176797][ T5823] (id 0x00) [ 1146.369033][ T5823] rc_core: IR keymap rc-imon-pad not found [ 1146.380631][ T5823] Registered IR keymap rc-empty [ 1146.386084][ T5823] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1146.401077][ T5823] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1146.513219][ T5823] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1146.582026][ T5823] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input51 [ 1146.653599][ T5823] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:17> initialized [ 1146.732445][ T5916] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1146.778918][ T5823] usb 3-1: USB disconnect, device number 17 [ 1146.988333][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 1146.997300][ T5916] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 1147.015651][ T5916] usb 4-1: config 0 has no interface number 0 [ 1147.035155][ T5916] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1147.059726][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1147.082486][ T5916] usb 4-1: Product: syz [ 1147.090698][ T5916] usb 4-1: Manufacturer: syz [ 1147.115142][ T5916] usb 4-1: config 0 descriptor?? [ 1147.388738][ T5916] usb 4-1: USB disconnect, device number 23 [ 1147.598724][ T5916] usb 1-1: USB disconnect, device number 38 [ 1147.641715][T16583] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 1147.667671][T16583] netlink: 'syz.0.2741': attribute type 2 has an invalid length. [ 1147.701737][T16583] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 1147.751680][T16583] netlink: 'syz.0.2741': attribute type 3 has an invalid length. [ 1147.768965][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'. [ 1148.032572][ T5941] gspca_sonixj: reg_w1 err -71 [ 1148.042922][ T5941] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1148.052577][ T5941] usb 2-1: USB disconnect, device number 32 [ 1148.488429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.496791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.505182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.513526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.102584][T16599] FAULT_INJECTION: forcing a failure. [ 1149.102584][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.115843][T16599] CPU: 0 UID: 0 PID: 16599 Comm: syz.2.2746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.115877][T16599] Tainted: [L]=SOFTLOCKUP [ 1149.115886][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1149.115900][T16599] Call Trace: [ 1149.115908][T16599] [ 1149.115917][T16599] dump_stack_lvl+0xe8/0x150 [ 1149.115952][T16599] should_fail_ex+0x414/0x560 [ 1149.115993][T16599] should_failslab+0xa8/0x100 [ 1149.116023][T16599] __kmalloc_cache_node_noprof+0x88/0x700 [ 1149.116049][T16599] ? __get_vm_area_node+0x13f/0x300 [ 1149.116081][T16599] ? xt_find_target+0x1f3/0x240 [ 1149.116107][T16599] __get_vm_area_node+0x13f/0x300 [ 1149.116138][T16599] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1149.116180][T16599] __vmalloc_node_range_noprof+0x371/0x16a0 [ 1149.116203][T16599] ? __do_replace+0xb4/0xaa0 [ 1149.116230][T16599] ? __pfx_xt_check_target+0x10/0x10 [ 1149.116257][T16599] ? pcpu_alloc_noprof+0xf95/0x1750 [ 1149.116315][T16599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1149.116347][T16599] ? __do_replace+0xb4/0xaa0 [ 1149.116374][T16599] vzalloc_noprof+0xb2/0xf0 [ 1149.116395][T16599] ? __do_replace+0xb4/0xaa0 [ 1149.116424][T16599] __do_replace+0xb4/0xaa0 [ 1149.116453][T16599] ? __pfx_translate_table+0x10/0x10 [ 1149.116486][T16599] ? __pfx___do_replace+0x10/0x10 [ 1149.116523][T16599] ? _copy_from_user+0x94/0xb0 [ 1149.116555][T16599] do_arpt_set_ctl+0xa2a/0xf10 [ 1149.116589][T16599] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1149.116616][T16599] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1149.116645][T16599] ? rcu_is_watching+0x15/0xb0 [ 1149.116673][T16599] ? trace_contention_end+0x39/0x100 [ 1149.116719][T16599] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1149.116755][T16599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1149.116779][T16599] ? aa_sk_perm+0x7ee/0x920 [ 1149.116812][T16599] ? __pfx_aa_sk_perm+0x10/0x10 [ 1149.116845][T16599] nf_setsockopt+0x26f/0x290 [ 1149.116874][T16599] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1149.116911][T16599] do_sock_setsockopt+0x17c/0x1b0 [ 1149.116943][T16599] __x64_sys_setsockopt+0x13f/0x1b0 [ 1149.116974][T16599] do_syscall_64+0xec/0xf80 [ 1149.116997][T16599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.117020][T16599] ? clear_bhb_loop+0x60/0xb0 [ 1149.117047][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.117069][T16599] RIP: 0033:0x7fd51a98f749 [ 1149.117089][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.117110][T16599] RSP: 002b:00007fd51b848038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1149.117134][T16599] RAX: ffffffffffffffda RBX: 00007fd51abe5fa0 RCX: 00007fd51a98f749 [ 1149.117151][T16599] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1149.117171][T16599] RBP: 00007fd51b848090 R08: 0000000000000418 R09: 0000000000000000 [ 1149.117186][T16599] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1149.117201][T16599] R13: 00007fd51abe6038 R14: 00007fd51abe5fa0 R15: 00007fd51ad0fa28 [ 1149.117236][T16599] [ 1149.117584][T16599] syz.2.2746: vmalloc error: size 64, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1149.503894][T16599] CPU: 1 UID: 0 PID: 16599 Comm: syz.2.2746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.503930][T16599] Tainted: [L]=SOFTLOCKUP [ 1149.503940][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1149.503958][T16599] Call Trace: [ 1149.503966][T16599] [ 1149.503974][T16599] dump_stack_lvl+0xe8/0x150 [ 1149.503998][T16599] warn_alloc+0x214/0x310 [ 1149.504020][T16599] ? __pfx_warn_alloc+0x10/0x10 [ 1149.504037][T16599] ? __get_vm_area_node+0x13f/0x300 [ 1149.504066][T16599] ? __get_vm_area_node+0x2b5/0x300 [ 1149.504087][T16599] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1149.504111][T16599] __vmalloc_node_range_noprof+0x396/0x16a0 [ 1149.504133][T16599] ? __pfx_xt_check_target+0x10/0x10 [ 1149.504152][T16599] ? pcpu_alloc_noprof+0xf95/0x1750 [ 1149.504193][T16599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1149.504215][T16599] ? __do_replace+0xb4/0xaa0 [ 1149.504234][T16599] vzalloc_noprof+0xb2/0xf0 [ 1149.504249][T16599] ? __do_replace+0xb4/0xaa0 [ 1149.504269][T16599] __do_replace+0xb4/0xaa0 [ 1149.504290][T16599] ? __pfx_translate_table+0x10/0x10 [ 1149.504313][T16599] ? __pfx___do_replace+0x10/0x10 [ 1149.504338][T16599] ? _copy_from_user+0x94/0xb0 [ 1149.504361][T16599] do_arpt_set_ctl+0xa2a/0xf10 [ 1149.504385][T16599] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1149.504406][T16599] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1149.504426][T16599] ? rcu_is_watching+0x15/0xb0 [ 1149.504446][T16599] ? trace_contention_end+0x39/0x100 [ 1149.504477][T16599] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1149.504498][T16599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1149.504515][T16599] ? aa_sk_perm+0x7ee/0x920 [ 1149.504537][T16599] ? __pfx_aa_sk_perm+0x10/0x10 [ 1149.504560][T16599] nf_setsockopt+0x26f/0x290 [ 1149.504577][T16599] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1149.504603][T16599] do_sock_setsockopt+0x17c/0x1b0 [ 1149.504626][T16599] __x64_sys_setsockopt+0x13f/0x1b0 [ 1149.504648][T16599] do_syscall_64+0xec/0xf80 [ 1149.504665][T16599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.504681][T16599] ? clear_bhb_loop+0x60/0xb0 [ 1149.504700][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.504716][T16599] RIP: 0033:0x7fd51a98f749 [ 1149.504730][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.504744][T16599] RSP: 002b:00007fd51b848038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1149.504762][T16599] RAX: ffffffffffffffda RBX: 00007fd51abe5fa0 RCX: 00007fd51a98f749 [ 1149.504774][T16599] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1149.504783][T16599] RBP: 00007fd51b848090 R08: 0000000000000418 R09: 0000000000000000 [ 1149.504794][T16599] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1149.504804][T16599] R13: 00007fd51abe6038 R14: 00007fd51abe5fa0 R15: 00007fd51ad0fa28 [ 1149.504828][T16599] [ 1149.504847][T16599] Mem-Info: [ 1149.814163][T16599] active_anon:57076 inactive_anon:0 isolated_anon:0 [ 1149.814163][T16599] active_file:21445 inactive_file:40333 isolated_file:0 [ 1149.814163][T16599] unevictable:768 dirty:253 writeback:0 [ 1149.814163][T16599] slab_reclaimable:6355 slab_unreclaimable:100346 [ 1149.814163][T16599] mapped:36803 shmem:51904 pagetables:1543 [ 1149.814163][T16599] sec_pagetables:0 bounce:0 [ 1149.814163][T16599] kernel_misc_reclaimable:0 [ 1149.814163][T16599] free:1251371 free_pcp:16181 free_cma:0 [ 1149.861163][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1149.982139][T16599] Node 0 active_anon:228572kB inactive_anon:0kB active_file:85780kB inactive_file:161128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139944kB dirty:1024kB writeback:0kB shmem:206116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12768kB pagetables:6080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1150.068425][T16599] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1150.225533][T16599] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.338348][T16599] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 1150.345292][T16599] Node 0 DMA32 free:1122828kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:220272kB inactive_anon:0kB active_file:85780kB inactive_file:161128kB unevictable:1536kB writepending:1024kB zspages:0kB present:3129332kB managed:2559512kB mlocked:0kB bounce:0kB free_pcp:37088kB local_pcp:16144kB free_cma:0kB [ 1150.428763][T16599] lowmem_reserve[]: 0 0 1 1 1 [ 1150.433589][T16599] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1150.522620][T16599] lowmem_reserve[]: 0 0 0 0 0 [ 1150.545292][T16599] Node 1 Normal free:3872252kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31496kB local_pcp:7360kB free_cma:0kB [ 1150.658297][T16599] lowmem_reserve[]: 0 0 0 0 0 [ 1150.678413][T16599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1150.728328][T16599] Node 0 DMA32: 4172*4kB (UME) 3096*8kB (UME) 1959*16kB (UME) 855*32kB (UME) 259*64kB (UME) 124*128kB (UME) 68*256kB (UME) 60*512kB (UME) 28*1024kB (UME) 6*2048kB (ME) 220*4096kB (UM) = 1122816kB [ 1150.795059][T16616] FAULT_INJECTION: forcing a failure. [ 1150.795059][T16616] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.808042][T16616] CPU: 0 UID: 0 PID: 16616 Comm: syz.4.2751 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.808068][T16616] Tainted: [L]=SOFTLOCKUP [ 1150.808074][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1150.808084][T16616] Call Trace: [ 1150.808093][T16616] [ 1150.808100][T16616] dump_stack_lvl+0xe8/0x150 [ 1150.808125][T16616] should_fail_ex+0x414/0x560 [ 1150.808154][T16616] should_failslab+0xa8/0x100 [ 1150.808175][T16616] kmem_cache_alloc_noprof+0x88/0x710 [ 1150.808202][T16616] ? skb_clone+0x212/0x3a0 [ 1150.808261][T16616] skb_clone+0x212/0x3a0 [ 1150.808287][T16616] ? dev_queue_xmit_nit+0x268/0xad0 [ 1150.808313][T16616] dev_queue_xmit_nit+0x29a/0xad0 [ 1150.808331][T16616] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1150.808357][T16616] dev_hard_start_xmit+0x1c1/0x800 [ 1150.808389][T16616] __dev_queue_xmit+0x149d/0x31c0 [ 1150.808410][T16616] ? ___sys_sendmsg+0x21f/0x2a0 [ 1150.808434][T16616] ? __dev_queue_xmit+0x289/0x31c0 [ 1150.808466][T16616] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1150.808492][T16616] ? __copy_skb_header+0xa7/0x550 [ 1150.808512][T16616] ? __asan_memcpy+0x40/0x70 [ 1150.808537][T16616] ? __skb_clone+0x63/0x7a0 [ 1150.808560][T16616] ? __skb_clone+0x483/0x7a0 [ 1150.808584][T16616] ? skb_clone+0x246/0x3a0 [ 1150.808606][T16616] __netlink_deliver_tap+0x5ad/0x850 [ 1150.808636][T16616] ? netlink_deliver_tap+0x2e/0x1b0 [ 1150.808658][T16616] netlink_deliver_tap+0x19c/0x1b0 [ 1150.808679][T16616] netlink_unicast+0x7fa/0x9e0 [ 1150.808703][T16616] ? __pfx_netlink_unicast+0x10/0x10 [ 1150.808720][T16616] ? __alloc_skb+0x198/0x3a0 [ 1150.808736][T16616] ? netlink_sendmsg+0x642/0xb30 [ 1150.808768][T16616] ? skb_put+0x11b/0x210 [ 1150.808796][T16616] netlink_sendmsg+0x805/0xb30 [ 1150.808840][T16616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.808870][T16616] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1150.808902][T16616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1150.808924][T16616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.808955][T16616] __sock_sendmsg+0x21c/0x270 [ 1150.808992][T16616] ____sys_sendmsg+0x505/0x820 [ 1150.809025][T16616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1150.809059][T16616] ? import_iovec+0x74/0xa0 [ 1150.809089][T16616] ___sys_sendmsg+0x21f/0x2a0 [ 1150.809117][T16616] ? __pfx____sys_sendmsg+0x10/0x10 [ 1150.809181][T16616] ? __fget_files+0x2a/0x420 [ 1150.809208][T16616] ? __fget_files+0x3a0/0x420 [ 1150.809248][T16616] __x64_sys_sendmsg+0x19b/0x260 [ 1150.809279][T16616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1150.809317][T16616] ? __pfx_ksys_write+0x10/0x10 [ 1150.809352][T16616] do_syscall_64+0xec/0xf80 [ 1150.809377][T16616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.809398][T16616] ? trace_irq_disable+0x37/0x100 [ 1150.809428][T16616] ? clear_bhb_loop+0x60/0xb0 [ 1150.809454][T16616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.809476][T16616] RIP: 0033:0x7fe06d18f749 [ 1150.809496][T16616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.809516][T16616] RSP: 002b:00007fe06e075038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.809541][T16616] RAX: ffffffffffffffda RBX: 00007fe06d3e5fa0 RCX: 00007fe06d18f749 [ 1150.809558][T16616] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1150.809573][T16616] RBP: 00007fe06e075090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.809588][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.809602][T16616] R13: 00007fe06d3e6038 R14: 00007fe06d3e5fa0 R15: 00007fe06d50fa28 [ 1150.809638][T16616] [ 1150.820627][T16599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1151.226618][T16599] Node 1 Normal: 193*4kB (UE) 55*8kB (UME) 34*16kB (UME) 97*32kB (UME) 28*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 3*2048kB (UE) 941*4096kB (M) = 3872252kB [ 1151.328333][T16599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1151.359970][T16599] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1151.388419][T16599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1151.418406][T16599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1151.450018][T16599] 110817 total pagecache pages [ 1151.454878][T16599] 0 pages in swap cache [ 1151.476675][T16599] Free swap = 124996kB [ 1151.498370][T16599] Total swap = 124996kB [ 1151.507115][T16599] 2097051 pages RAM [ 1151.576677][T16623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.586265][T16623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.707012][T16599] 0 pages HighMem/MovableOnly [ 1151.844250][T16599] 425083 pages reserved [ 1151.865554][T16599] 0 pages cma reserved [ 1152.782477][T16634] FAULT_INJECTION: forcing a failure. [ 1152.782477][T16634] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.807991][T16634] CPU: 0 UID: 0 PID: 16634 Comm: syz.2.2755 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.808030][T16634] Tainted: [L]=SOFTLOCKUP [ 1152.808039][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1152.808052][T16634] Call Trace: [ 1152.808062][T16634] [ 1152.808072][T16634] dump_stack_lvl+0xe8/0x150 [ 1152.808107][T16634] should_fail_ex+0x414/0x560 [ 1152.808148][T16634] should_failslab+0xa8/0x100 [ 1152.808178][T16634] __kmalloc_noprof+0xdf/0x800 [ 1152.808200][T16634] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1152.808229][T16634] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1152.808258][T16634] genl_family_rcv_msg_doit+0xb8/0x300 [ 1152.808285][T16634] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1152.808314][T16634] ? apparmor_capable+0x137/0x1a0 [ 1152.808350][T16634] ? bpf_lsm_capable+0x9/0x20 [ 1152.808375][T16634] ? security_capable+0x7e/0x2e0 [ 1152.808406][T16634] genl_rcv_msg+0x60e/0x790 [ 1152.808433][T16634] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1152.808452][T16634] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1152.808476][T16634] ? __pfx_nl80211_new_key+0x10/0x10 [ 1152.808500][T16634] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1152.808526][T16634] ? __asan_memcpy+0x40/0x70 [ 1152.808557][T16634] ? __pfx_ref_tracker_free+0x10/0x10 [ 1152.808579][T16634] ? __skb_clone+0x63/0x7a0 [ 1152.808613][T16634] netlink_rcv_skb+0x208/0x470 [ 1152.808652][T16634] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1152.808675][T16634] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1152.808698][T16634] ? genl_rcv+0x19/0x40 [ 1152.808745][T16634] ? down_read+0x274/0x2e0 [ 1152.808769][T16634] ? genl_rcv+0xd/0x40 [ 1152.808802][T16634] genl_rcv+0x28/0x40 [ 1152.808833][T16634] netlink_unicast+0x82f/0x9e0 [ 1152.808865][T16634] ? __pfx_netlink_unicast+0x10/0x10 [ 1152.808889][T16634] ? __alloc_skb+0x198/0x3a0 [ 1152.808913][T16634] ? netlink_sendmsg+0x642/0xb30 [ 1152.808938][T16634] ? skb_put+0x11b/0x210 [ 1152.808965][T16634] netlink_sendmsg+0x805/0xb30 [ 1152.809003][T16634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1152.809036][T16634] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1152.809067][T16634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1152.809086][T16634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1152.809122][T16634] __sock_sendmsg+0x21c/0x270 [ 1152.809158][T16634] ____sys_sendmsg+0x505/0x820 [ 1152.809191][T16634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1152.809229][T16634] ? import_iovec+0x74/0xa0 [ 1152.809260][T16634] ___sys_sendmsg+0x21f/0x2a0 [ 1152.809289][T16634] ? __pfx____sys_sendmsg+0x10/0x10 [ 1152.809353][T16634] ? __fget_files+0x2a/0x420 [ 1152.809379][T16634] ? __fget_files+0x3a0/0x420 [ 1152.809415][T16634] __x64_sys_sendmsg+0x19b/0x260 [ 1152.809444][T16634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1152.809482][T16634] ? __pfx_ksys_write+0x10/0x10 [ 1152.809516][T16634] do_syscall_64+0xec/0xf80 [ 1152.809540][T16634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.809562][T16634] ? clear_bhb_loop+0x60/0xb0 [ 1152.809589][T16634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.809611][T16634] RIP: 0033:0x7fd51a98f749 [ 1152.809632][T16634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.809659][T16634] RSP: 002b:00007fd51b848038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1152.809683][T16634] RAX: ffffffffffffffda RBX: 00007fd51abe5fa0 RCX: 00007fd51a98f749 [ 1152.809700][T16634] RDX: 0000000000000080 RSI: 0000200000001e40 RDI: 0000000000000004 [ 1152.809715][T16634] RBP: 00007fd51b848090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.809729][T16634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.809742][T16634] R13: 00007fd51abe6038 R14: 00007fd51abe5fa0 R15: 00007fd51ad0fa28 [ 1152.809778][T16634] [ 1153.728388][ T5823] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1153.798333][ T5916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1153.888312][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 1153.897405][ T5823] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1153.907246][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.920603][ T5823] usb 3-1: config 0 descriptor?? [ 1153.928626][ T5916] usb 2-1: device descriptor read/64, error -71 [ 1153.934031][ T5823] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1154.178615][ T5916] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1154.308352][ T5916] usb 2-1: device descriptor read/64, error -71 [ 1154.431599][ T5916] usb usb2-port1: attempt power cycle [ 1154.768322][ T5916] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1154.788972][ T5916] usb 2-1: device descriptor read/8, error -71 [ 1154.922358][T16650] FAULT_INJECTION: forcing a failure. [ 1154.922358][T16650] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.936137][T16650] CPU: 1 UID: 0 PID: 16650 Comm: syz.0.2762 Tainted: G L syzkaller #0 PREEMPT(full) [ 1154.936255][T16650] Tainted: [L]=SOFTLOCKUP [ 1154.936267][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1154.936282][T16650] Call Trace: [ 1154.936294][T16650] [ 1154.936304][T16650] dump_stack_lvl+0xe8/0x150 [ 1154.936338][T16650] should_fail_ex+0x414/0x560 [ 1154.936377][T16650] should_failslab+0xa8/0x100 [ 1154.936398][T16650] __kmalloc_cache_noprof+0x84/0x700 [ 1154.936455][T16650] ? __pfx_stack_trace_save+0x10/0x10 [ 1154.936487][T16650] ? rtnl_newlink+0xfb/0x1c90 [ 1154.936519][T16650] rtnl_newlink+0xfb/0x1c90 [ 1154.936537][T16650] ? kasan_save_track+0x4f/0x80 [ 1154.936552][T16650] ? kasan_save_track+0x3e/0x80 [ 1154.936566][T16650] ? kasan_save_free_info+0x46/0x50 [ 1154.936610][T16650] ? __kasan_slab_free+0x5c/0x80 [ 1154.936633][T16650] ? kmem_cache_free+0x197/0x620 [ 1154.936653][T16650] ? nlmon_xmit+0xb0/0x100 [ 1154.936679][T16650] ? dev_hard_start_xmit+0x2cd/0x800 [ 1154.936706][T16650] ? __dev_queue_xmit+0x149d/0x31c0 [ 1154.936730][T16650] ? __netlink_deliver_tap+0x5ad/0x850 [ 1154.936755][T16650] ? netlink_deliver_tap+0x19c/0x1b0 [ 1154.936780][T16650] ? netlink_unicast+0x7fa/0x9e0 [ 1154.936800][T16650] ? netlink_sendmsg+0x805/0xb30 [ 1154.936829][T16650] ? __pfx_rtnl_newlink+0x10/0x10 [ 1154.936850][T16650] ? do_syscall_64+0xec/0xf80 [ 1154.936872][T16650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.936929][T16650] ? kasan_quarantine_put+0xbb/0x1f0 [ 1154.936952][T16650] ? lockdep_hardirqs_on+0x7b/0x110 [ 1154.936979][T16650] ? kmem_cache_free+0x197/0x620 [ 1154.937000][T16650] ? nlmon_xmit+0xb0/0x100 [ 1154.937037][T16650] ? __lock_acquire+0x6b6/0x2cf0 [ 1154.937071][T16650] ? __local_bh_enable_ip+0xd0/0x130 [ 1154.937095][T16650] ? lockdep_hardirqs_on+0x7b/0x110 [ 1154.937115][T16650] ? __dev_queue_xmit+0x289/0x31c0 [ 1154.937144][T16650] ? __local_bh_enable_ip+0xd0/0x130 [ 1154.937165][T16650] ? __dev_queue_xmit+0x289/0x31c0 [ 1154.937203][T16650] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1154.937241][T16650] ? __pfx_rtnl_newlink+0x10/0x10 [ 1154.937264][T16650] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1154.937291][T16650] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1154.937320][T16650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1154.937362][T16650] ? ref_tracker_free+0x63a/0x7d0 [ 1154.937385][T16650] ? __asan_memcpy+0x40/0x70 [ 1154.937415][T16650] ? __pfx_ref_tracker_free+0x10/0x10 [ 1154.937443][T16650] ? __skb_clone+0x63/0x7a0 [ 1154.937478][T16650] netlink_rcv_skb+0x208/0x470 [ 1154.937508][T16650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1154.937535][T16650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1154.937573][T16650] ? netlink_deliver_tap+0x2e/0x1b0 [ 1154.937609][T16650] netlink_unicast+0x82f/0x9e0 [ 1154.937643][T16650] ? __pfx_netlink_unicast+0x10/0x10 [ 1154.937667][T16650] ? __alloc_skb+0x198/0x3a0 [ 1154.937690][T16650] ? netlink_sendmsg+0x642/0xb30 [ 1154.937716][T16650] ? skb_put+0x11b/0x210 [ 1154.937742][T16650] netlink_sendmsg+0x805/0xb30 [ 1154.937780][T16650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1154.937813][T16650] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1154.937857][T16650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1154.937873][T16650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1154.937894][T16650] __sock_sendmsg+0x21c/0x270 [ 1154.937945][T16650] ____sys_sendmsg+0x505/0x820 [ 1154.937977][T16650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1154.938012][T16650] ? import_iovec+0x74/0xa0 [ 1154.938043][T16650] ___sys_sendmsg+0x21f/0x2a0 [ 1154.938072][T16650] ? __pfx____sys_sendmsg+0x10/0x10 [ 1154.938133][T16650] ? __fget_files+0x2a/0x420 [ 1154.938164][T16650] ? __fget_files+0x3a0/0x420 [ 1154.938190][T16650] __x64_sys_sendmsg+0x19b/0x260 [ 1154.938233][T16650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1154.938267][T16650] ? __pfx_ksys_write+0x10/0x10 [ 1154.938299][T16650] do_syscall_64+0xec/0xf80 [ 1154.938321][T16650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.938342][T16650] ? trace_irq_disable+0x37/0x100 [ 1154.938370][T16650] ? clear_bhb_loop+0x60/0xb0 [ 1154.938396][T16650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.938418][T16650] RIP: 0033:0x7f601bd8f749 [ 1154.938446][T16650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.938465][T16650] RSP: 002b:00007f601cbeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.938489][T16650] RAX: ffffffffffffffda RBX: 00007f601bfe5fa0 RCX: 00007f601bd8f749 [ 1154.938507][T16650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1154.938522][T16650] RBP: 00007f601cbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.938537][T16650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.938551][T16650] R13: 00007f601bfe6038 R14: 00007f601bfe5fa0 R15: 00007f601c10fa28 [ 1154.938585][T16650] [ 1155.472850][T16652] FAULT_INJECTION: forcing a failure. [ 1155.472850][T16652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.488359][ T5916] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1155.488374][T16652] CPU: 0 UID: 0 PID: 16652 Comm: syz.0.2763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.488415][T16652] Tainted: [L]=SOFTLOCKUP [ 1155.488478][T16652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1155.488524][T16652] Call Trace: [ 1155.488562][T16652] [ 1155.488587][T16652] dump_stack_lvl+0xe8/0x150 [ 1155.488686][T16652] should_fail_ex+0x414/0x560 [ 1155.488791][T16652] _copy_from_user+0x2d/0xb0 [ 1155.488859][T16652] kstrtouint_from_user+0xc4/0x170 [ 1155.488923][T16652] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1155.489028][T16652] proc_fail_nth_write+0x88/0x200 [ 1155.489095][T16652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1155.489170][T16652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1155.489235][T16652] vfs_write+0x27e/0xb30 [ 1155.489317][T16652] ? __pfx_vfs_write+0x10/0x10 [ 1155.489372][T16652] ? __fget_files+0x2a/0x420 [ 1155.489474][T16652] ? __fget_files+0x3a0/0x420 [ 1155.489531][T16652] ? __fget_files+0x2a/0x420 [ 1155.489618][T16652] ksys_write+0x145/0x250 [ 1155.489673][T16652] ? __pfx_ksys_write+0x10/0x10 [ 1155.489758][T16652] do_syscall_64+0xec/0xf80 [ 1155.489820][T16652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.489875][T16652] ? trace_irq_disable+0x37/0x100 [ 1155.489969][T16652] ? clear_bhb_loop+0x60/0xb0 [ 1155.490048][T16652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.490112][T16652] RIP: 0033:0x7f601bd8e1ff [ 1155.490170][T16652] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1155.490222][T16652] RSP: 002b:00007f601cbeb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1155.490285][T16652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f601bd8e1ff [ 1155.490328][T16652] RDX: 0000000000000001 RSI: 00007f601cbeb0a0 RDI: 0000000000000005 [ 1155.490362][T16652] RBP: 00007f601cbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.490412][T16652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1155.490447][T16652] R13: 00007f601bfe6038 R14: 00007f601bfe5fa0 R15: 00007f601c10fa28 [ 1155.490525][T16652] [ 1155.728983][ T5916] usb 2-1: device descriptor read/8, error -71 [ 1155.858735][ T5916] usb usb2-port1: unable to enumerate USB device [ 1156.896257][ T5823] gspca_sonixj: reg_w1 err -71 [ 1156.985886][ T5823] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1157.002181][ T5823] usb 3-1: USB disconnect, device number 18 [ 1161.120878][ T795] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1161.279082][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 1161.377971][ T795] usb 2-1: config 0 has no interfaces? [ 1161.398491][ T5916] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1161.423187][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.432669][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.449263][T16703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2776'. [ 1161.502730][ T795] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1161.528335][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.603426][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1161.683018][ T5916] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1161.694294][ T5916] usb 3-1: config 0 has no interface number 0 [ 1161.703778][ T795] usb 2-1: config 0 descriptor?? [ 1161.739953][ T5916] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1161.751108][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1161.759530][ T5916] usb 3-1: Product: syz [ 1161.763892][ T5916] usb 3-1: Manufacturer: syz [ 1161.772209][ T5916] usb 3-1: config 0 descriptor?? [ 1162.076099][ T5916] usb 3-1: USB disconnect, device number 19 [ 1164.031177][ T5916] usb 2-1: USB disconnect, device number 37 [ 1164.061208][T16706] random: crng reseeded on system resumption [ 1164.107096][T16706] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1164.375883][T16717] Unrecognized hibernate image header format! [ 1164.393270][T16717] PM: hibernation: Image mismatch: architecture specific data [ 1164.514361][ T5916] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1164.615224][T16721] trusted_key: encrypted_key: insufficient parameters specified [ 1164.719102][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1164.727069][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1164.751122][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.783474][ T5916] usb 2-1: config 0 descriptor?? [ 1164.803401][ T5916] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1164.958345][ T5823] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1165.108378][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 1165.122552][ T5823] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1165.136028][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.167498][ T5823] usb 4-1: config 0 descriptor?? [ 1165.244902][ T5823] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1165.890014][ T5917] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1166.058442][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 1166.067550][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.110290][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.134434][ T5917] usb 1-1: New USB device found, idVendor=056a, idProduct=7d84, bcdDevice= 0.0a [ 1166.159744][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.187795][ T5917] usb 1-1: config 0 descriptor?? [ 1166.468714][ T5823] gspca_sonixj: reg_w1 err -71 [ 1166.494890][ T5823] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1166.520933][ T5823] usb 4-1: USB disconnect, device number 24 [ 1166.622920][ T5917] wacom 0003:056A:7D84.0035: unknown main item tag 0x0 [ 1166.630309][ T5917] wacom 0003:056A:7D84.0035: unknown main item tag 0x0 [ 1166.646932][ T5917] wacom 0003:056A:7D84.0035: Unknown device_type for 'HID 056a:7d84'. Ignoring. [ 1166.825669][ T795] usb 1-1: USB disconnect, device number 39 [ 1167.320466][T16742] FAULT_INJECTION: forcing a failure. [ 1167.320466][T16742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.407968][T16742] CPU: 0 UID: 0 PID: 16742 Comm: syz.4.2788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.408022][T16742] Tainted: [L]=SOFTLOCKUP [ 1167.408032][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.408046][T16742] Call Trace: [ 1167.408056][T16742] [ 1167.408067][T16742] dump_stack_lvl+0xe8/0x150 [ 1167.408099][T16742] should_fail_ex+0x414/0x560 [ 1167.408137][T16742] _copy_from_user+0x2d/0xb0 [ 1167.408158][T16742] ___sys_recvmsg+0x12e/0x510 [ 1167.408206][T16742] ? __pfx____sys_recvmsg+0x10/0x10 [ 1167.408248][T16742] ? __fget_files+0x2a/0x420 [ 1167.408291][T16742] ? __fget_files+0x3a0/0x420 [ 1167.408328][T16742] do_recvmmsg+0x307/0x770 [ 1167.408364][T16742] ? __pfx_do_recvmmsg+0x10/0x10 [ 1167.408404][T16742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1167.408446][T16742] __x64_sys_recvmmsg+0x190/0x240 [ 1167.408477][T16742] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1167.408515][T16742] do_syscall_64+0xec/0xf80 [ 1167.408561][T16742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.408583][T16742] ? trace_irq_disable+0x37/0x100 [ 1167.408611][T16742] ? clear_bhb_loop+0x60/0xb0 [ 1167.408640][T16742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.408656][T16742] RIP: 0033:0x7fe06d18f749 [ 1167.408670][T16742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.408701][T16742] RSP: 002b:00007fe06e075038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1167.408726][T16742] RAX: ffffffffffffffda RBX: 00007fe06d3e5fa0 RCX: 00007fe06d18f749 [ 1167.408744][T16742] RDX: 0000000000000001 RSI: 0000200000004ac0 RDI: 0000000000000004 [ 1167.408758][T16742] RBP: 00007fe06e075090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.408771][T16742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.408784][T16742] R13: 00007fe06d3e6038 R14: 00007fe06d3e5fa0 R15: 00007fe06d50fa28 [ 1167.408816][T16742] [ 1167.813728][ T5916] gspca_sonixj: reg_w1 err -71 [ 1167.827375][ T5916] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1167.899811][ T5916] usb 2-1: USB disconnect, device number 38 [ 1168.368468][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.377591][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.128601][ T5917] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1169.138033][T16771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2794'. [ 1169.370208][ T5917] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1169.380890][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.393762][ T5917] usb 1-1: Product: syz [ 1169.401422][ T5917] usb 1-1: Manufacturer: syz [ 1169.471042][ T5917] usb 1-1: SerialNumber: syz [ 1169.488527][ T795] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1169.527535][ T5917] usb 1-1: config 0 descriptor?? [ 1169.537384][ T5917] hub 1-1:0.0: bad descriptor, ignoring hub [ 1169.560904][ T5917] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1169.888388][ T5917] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1169.968367][ T795] usb 2-1: device descriptor read/64, error -71 [ 1169.996664][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1170.049738][ T5917] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1170.086217][T16764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.095508][T16764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.124621][ T5917] usb 1-1: media controller created [ 1170.137544][T16764] dib0700: tx buffer length is larger than 4. Not supported. [ 1170.211314][ T795] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1170.242113][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1170.388617][ T795] usb 2-1: device descriptor read/64, error -71 [ 1170.404211][ T5917] DVB: Unable to find symbol dib7000p_attach() [ 1170.473237][ T5917] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1170.519638][ T795] usb usb2-port1: attempt power cycle [ 1170.567615][ T5916] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1170.731266][ T5916] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1170.751750][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.760360][ T5917] rc_core: IR keymap rc-dib0700-rc5 not found [ 1170.783524][ T5917] Registered IR keymap rc-empty [ 1170.806139][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2799'. [ 1170.823273][ T5917] dvb-usb: could not initialize remote control. [ 1170.834835][ T5916] usb 3-1: config 0 descriptor?? [ 1170.861176][ T5917] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1170.918465][ T795] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1170.938502][ T5917] usb 1-1: USB disconnect, device number 40 [ 1170.949211][ T795] usb 2-1: device descriptor read/8, error -71 [ 1171.181530][ T5917] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1171.189307][ T795] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1171.285681][ T795] usb 2-1: device descriptor read/8, error -71 [ 1171.420264][T16795] trusted_key: encrypted_key: insufficient parameters specified [ 1171.458163][ T795] usb usb2-port1: unable to enumerate USB device [ 1171.557143][ T5916] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1171.620510][ T5916] [drm:udl_init] *ERROR* Selecting channel failed [ 1171.744228][ T5916] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1171.775446][ T5916] [drm] Initialized udl on minor 2 [ 1171.808321][ T5916] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1171.866127][ T5916] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1172.013343][ T5917] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1172.023896][ T5916] usb 3-1: USB disconnect, device number 20 [ 1172.159635][ T5917] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1172.364176][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2803'. [ 1173.168322][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1173.378336][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 1173.393426][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1173.495143][ T5916] usb 3-1: config 0 has no interface number 0 [ 1173.577721][ T5916] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.632446][ T5916] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.648316][ T5916] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1173.666139][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.809530][ T5916] usb 3-1: config 0 descriptor?? [ 1174.275536][ T5916] holtek_mouse 0003:04D9:A081.0036: item fetching failed at offset 5/8 [ 1174.339018][ T5916] holtek_mouse 0003:04D9:A081.0036: hid parse failed: -22 [ 1174.406704][ T5916] holtek_mouse 0003:04D9:A081.0036: probe with driver holtek_mouse failed with error -22 [ 1174.456448][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 1174.895128][T16840] FAULT_INJECTION: forcing a failure. [ 1174.895128][T16840] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.952558][T16840] CPU: 0 UID: 0 PID: 16840 Comm: syz.1.2808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.952584][T16840] Tainted: [L]=SOFTLOCKUP [ 1174.952591][T16840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1174.952601][T16840] Call Trace: [ 1174.952608][T16840] [ 1174.952615][T16840] dump_stack_lvl+0xe8/0x150 [ 1174.952644][T16840] should_fail_ex+0x414/0x560 [ 1174.952672][T16840] should_failslab+0xa8/0x100 [ 1174.952693][T16840] kmem_cache_alloc_noprof+0x88/0x710 [ 1174.952717][T16840] ? __netlink_lookup+0xbd/0x8a0 [ 1174.952739][T16840] ? skb_clone+0x212/0x3a0 [ 1174.952763][T16840] skb_clone+0x212/0x3a0 [ 1174.952785][T16840] __netlink_deliver_tap+0x404/0x850 [ 1174.952814][T16840] ? netlink_deliver_tap+0x2e/0x1b0 [ 1174.952835][T16840] netlink_deliver_tap+0x19c/0x1b0 [ 1174.952856][T16840] netlink_unicast+0x7fa/0x9e0 [ 1174.952880][T16840] ? __pfx_netlink_unicast+0x10/0x10 [ 1174.952897][T16840] ? __alloc_skb+0x198/0x3a0 [ 1174.952914][T16840] ? netlink_sendmsg+0x642/0xb30 [ 1174.952933][T16840] ? skb_put+0x11b/0x210 [ 1174.952952][T16840] netlink_sendmsg+0x805/0xb30 [ 1174.952979][T16840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1174.953003][T16840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1174.953025][T16840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1174.953040][T16840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1174.953061][T16840] __sock_sendmsg+0x21c/0x270 [ 1174.953087][T16840] ____sys_sendmsg+0x52d/0x820 [ 1174.953110][T16840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1174.953136][T16840] ? import_iovec+0x74/0xa0 [ 1174.953158][T16840] ___sys_sendmsg+0x21f/0x2a0 [ 1174.953178][T16840] ? __pfx____sys_sendmsg+0x10/0x10 [ 1174.953201][T16840] ? kstrtouint+0x6e/0xe0 [ 1174.953243][T16840] ? __fget_files+0x2a/0x420 [ 1174.953262][T16840] ? __fget_files+0x3a0/0x420 [ 1174.953289][T16840] __sys_sendmmsg+0x227/0x430 [ 1174.953312][T16840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1174.953329][T16840] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1174.953366][T16840] ? ksys_write+0x22a/0x250 [ 1174.953390][T16840] ? __pfx_ksys_write+0x10/0x10 [ 1174.953410][T16840] __x64_sys_sendmmsg+0xa0/0xc0 [ 1174.953431][T16840] do_syscall_64+0xec/0xf80 [ 1174.953447][T16840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.953462][T16840] ? trace_irq_disable+0x37/0x100 [ 1174.953483][T16840] ? clear_bhb_loop+0x60/0xb0 [ 1174.953503][T16840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.953518][T16840] RIP: 0033:0x7f893958f749 [ 1174.953533][T16840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.953547][T16840] RSP: 002b:00007f893a4c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1174.953565][T16840] RAX: ffffffffffffffda RBX: 00007f89397e5fa0 RCX: 00007f893958f749 [ 1174.953577][T16840] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 1174.953588][T16840] RBP: 00007f893a4c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.953598][T16840] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 1174.953608][T16840] R13: 00007f89397e6038 R14: 00007f89397e5fa0 R15: 00007f893990fa28 [ 1174.953634][T16840] [ 1175.873469][ T5823] usb 3-1: USB disconnect, device number 21 [ 1175.976642][T16856] syzkaller1: entered promiscuous mode [ 1175.982468][T16856] syzkaller1: entered allmulticast mode [ 1176.031749][T16857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.183033][T16857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.384377][T16867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2814'. [ 1177.047539][ T795] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1177.150364][ T5916] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1177.292123][ T795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.308340][ T5916] usb 3-1: device descriptor read/64, error -71 [ 1177.308355][ T795] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.353656][ T795] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1177.384614][ T795] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1177.395214][ T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.471983][ T795] usb 4-1: Product: syz [ 1177.543920][ T795] usb 4-1: Manufacturer: syz [ 1177.548711][ T795] usb 4-1: SerialNumber: syz [ 1177.568370][ T5916] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1177.589037][ T795] cdc_mbim 4-1:1.0: skipping garbage [ 1177.718351][ T5916] usb 3-1: device descriptor read/64, error -71 [ 1177.839588][ T5916] usb usb3-port1: attempt power cycle [ 1178.207066][ T5916] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1178.250434][ T5916] usb 3-1: device descriptor read/8, error -71 [ 1178.375605][T16873] netlink: 'syz.3.2815': attribute type 3 has an invalid length. [ 1178.490105][ T5916] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1178.546869][ T5916] usb 3-1: device descriptor read/8, error -71 [ 1178.660181][ T5916] usb usb3-port1: unable to enumerate USB device [ 1179.816705][ T795] cdc_mbim 4-1:1.0: SET_NTB_FORMAT failed [ 1179.838841][ T795] cdc_mbim 4-1:1.0: bind() failure [ 1179.869585][ T795] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1179.888486][ T795] cdc_ncm 4-1:1.1: bind() failure [ 1179.951317][ T795] usb 4-1: USB disconnect, device number 25 [ 1180.043373][T16883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2820'. [ 1181.045741][ T30] audit: type=1326 audit(1767742319.150:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1181.232268][ T30] audit: type=1326 audit(1767742319.150:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1181.385584][ T30] audit: type=1326 audit(1767742319.150:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1181.498044][ T30] audit: type=1326 audit(1767742319.150:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1181.697082][ T30] audit: type=1326 audit(1767742319.150:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1181.767592][ T30] audit: type=1326 audit(1767742319.150:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1181.895172][ T30] audit: type=1326 audit(1767742319.150:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1181.978881][ T30] audit: type=1326 audit(1767742319.150:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1182.004417][ T30] audit: type=1326 audit(1767742319.150:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1182.032766][ T30] audit: type=1326 audit(1767742319.150:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d18f749 code=0x7fc00000 [ 1182.188850][T16916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.199481][T16916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.512279][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.519068][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.735959][T16925] FAULT_INJECTION: forcing a failure. [ 1182.735959][T16925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.785081][T16925] CPU: 1 UID: 0 PID: 16925 Comm: syz.0.2828 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.785120][T16925] Tainted: [L]=SOFTLOCKUP [ 1182.785129][T16925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.785143][T16925] Call Trace: [ 1182.785156][T16925] [ 1182.785167][T16925] dump_stack_lvl+0xe8/0x150 [ 1182.785203][T16925] should_fail_ex+0x414/0x560 [ 1182.785244][T16925] _copy_from_user+0x2d/0xb0 [ 1182.785275][T16925] udp_lib_setsockopt+0x1ef/0x970 [ 1182.785315][T16925] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 1182.785354][T16925] ? aa_sock_opt_perm+0xff/0x1a0 [ 1182.785386][T16925] udp_setsockopt+0x77/0xc0 [ 1182.785419][T16925] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 1182.785453][T16925] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1182.785488][T16925] do_sock_setsockopt+0x17c/0x1b0 [ 1182.785520][T16925] __x64_sys_setsockopt+0x13f/0x1b0 [ 1182.785550][T16925] do_syscall_64+0xec/0xf80 [ 1182.785574][T16925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.785597][T16925] ? trace_irq_disable+0x37/0x100 [ 1182.785627][T16925] ? clear_bhb_loop+0x60/0xb0 [ 1182.785663][T16925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.785686][T16925] RIP: 0033:0x7f601bd8f749 [ 1182.785707][T16925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.785728][T16925] RSP: 002b:00007f601cbeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1182.785753][T16925] RAX: ffffffffffffffda RBX: 00007f601bfe5fa0 RCX: 00007f601bd8f749 [ 1182.785771][T16925] RDX: 0000000000000034 RSI: 0000000000000011 RDI: 0000000000000003 [ 1182.785786][T16925] RBP: 00007f601cbeb090 R08: 0000000000000004 R09: 0000000000000000 [ 1182.785801][T16925] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1182.785816][T16925] R13: 00007f601bfe6038 R14: 00007f601bfe5fa0 R15: 00007f601c10fa28 [ 1182.785852][T16925] [ 1183.375826][T16935] FAULT_INJECTION: forcing a failure. [ 1183.375826][T16935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.453706][T16935] CPU: 0 UID: 0 PID: 16935 Comm: syz.3.2831 Tainted: G L syzkaller #0 PREEMPT(full) [ 1183.453747][T16935] Tainted: [L]=SOFTLOCKUP [ 1183.453754][T16935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.453764][T16935] Call Trace: [ 1183.453771][T16935] [ 1183.453778][T16935] dump_stack_lvl+0xe8/0x150 [ 1183.453803][T16935] should_fail_ex+0x414/0x560 [ 1183.453862][T16935] _copy_from_user+0x2d/0xb0 [ 1183.453892][T16935] do_fcntl+0x5c1/0x1a50 [ 1183.453929][T16935] ? __fget_files+0x2a/0x420 [ 1183.453957][T16935] ? __pfx_do_fcntl+0x10/0x10 [ 1183.453997][T16935] ? __fget_files+0x2a/0x420 [ 1183.454027][T16935] ? __fget_files+0x2a/0x420 [ 1183.454061][T16935] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1183.454089][T16935] __se_sys_fcntl+0xc8/0x150 [ 1183.454124][T16935] do_syscall_64+0xec/0xf80 [ 1183.454148][T16935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.454170][T16935] ? trace_irq_disable+0x37/0x100 [ 1183.454199][T16935] ? clear_bhb_loop+0x60/0xb0 [ 1183.454227][T16935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.454249][T16935] RIP: 0033:0x7f6766b8f749 [ 1183.454269][T16935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.454290][T16935] RSP: 002b:00007f6767953038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1183.454314][T16935] RAX: ffffffffffffffda RBX: 00007f6766de6090 RCX: 00007f6766b8f749 [ 1183.454331][T16935] RDX: 0000200000000200 RSI: 0000000000000005 RDI: 0000000000000005 [ 1183.454346][T16935] RBP: 00007f6767953090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.454361][T16935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.454375][T16935] R13: 00007f6766de6128 R14: 00007f6766de6090 R15: 00007f6766f0fa28 [ 1183.454409][T16935] [ 1184.068366][ T5916] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1184.169173][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2835'. [ 1184.178758][T16944] tipc: Enabling of bearer rejected, failed to enable media [ 1184.278331][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 1184.287064][ T5916] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1184.302038][ T5916] usb 1-1: config 179 has no interface number 0 [ 1184.317597][ T5916] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1184.349709][ T5916] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1184.383972][ T5916] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1184.423100][ T5916] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1184.448778][ T5916] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1184.473623][ T5916] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1184.497002][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.531344][T16937] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1184.628554][ T5917] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1184.641615][ T5902] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1184.775063][ T5916] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input57 [ 1184.848567][ T5902] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1184.877169][ T5902] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.903468][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1184.911218][ T5917] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1185.037176][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1185.044570][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.053884][ T5902] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1185.067018][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.115795][ T5917] usb 2-1: config 0 descriptor?? [ 1185.169659][ T5902] usb 4-1: config 0 descriptor?? [ 1185.658849][ T5902] hid-steam 0003:28DE:1102.0037: unknown main item tag 0x0 [ 1185.666243][ T5902] hid-steam 0003:28DE:1102.0037: unknown main item tag 0x0 [ 1185.701023][ T5902] hid-steam 0003:28DE:1102.0037: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1185.751736][ T5917] isku 0003:1E7D:3264.0038: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.1-1/input0 [ 1185.839034][ T5902] hid-steam 0003:28DE:1102.0037: Steam Controller 'XXXXXXXXXX' connected [ 1185.968192][ T5902] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0037/input/input58 [ 1186.067327][ T5917] usb 2-1: USB disconnect, device number 43 [ 1186.129352][ T5902] hid-steam 0003:28DE:1102.0039: unknown main item tag 0x0 [ 1186.171189][ T5902] hid-steam 0003:28DE:1102.0039: unknown main item tag 0x0 [ 1186.216665][T16965] FAULT_INJECTION: forcing a failure. [ 1186.216665][T16965] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.229723][T16965] CPU: 1 UID: 0 PID: 16965 Comm: syz.4.2839 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.229765][T16965] Tainted: [L]=SOFTLOCKUP [ 1186.229773][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1186.229787][T16965] Call Trace: [ 1186.229797][T16965] [ 1186.229807][T16965] dump_stack_lvl+0xe8/0x150 [ 1186.229842][T16965] should_fail_ex+0x414/0x560 [ 1186.229882][T16965] should_failslab+0xa8/0x100 [ 1186.229911][T16965] kmem_cache_alloc_noprof+0x88/0x710 [ 1186.229947][T16965] ? inet_frag_find+0x8fc/0x1eb0 [ 1186.229982][T16965] inet_frag_find+0x8fc/0x1eb0 [ 1186.230010][T16965] ? kasan_save_track+0x4f/0x80 [ 1186.230030][T16965] ? kasan_save_track+0x3e/0x80 [ 1186.230050][T16965] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 1186.230101][T16965] ? __pfx_inet_frag_find+0x10/0x10 [ 1186.230144][T16965] ip_defrag+0x319/0x1eb0 [ 1186.230187][T16965] ? ip_defrag+0xe4/0x1eb0 [ 1186.230218][T16965] ? __asan_memcpy+0x40/0x70 [ 1186.230253][T16965] ? __skb_clone+0x63/0x7a0 [ 1186.230286][T16965] ? __pfx_ip_defrag+0x10/0x10 [ 1186.230345][T16965] ip_check_defrag+0x35a/0x540 [ 1186.230377][T16965] ? unwind_next_frame+0xa5/0x23d0 [ 1186.230410][T16965] ? __pfx_ip_check_defrag+0x10/0x10 [ 1186.230448][T16965] ? skb_pull_rcsum+0x232/0x3f0 [ 1186.230477][T16965] packet_rcv_fanout+0x14d/0x720 [ 1186.230522][T16965] __netif_receive_skb_core+0x6c6/0x2f90 [ 1186.230562][T16965] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1186.230590][T16965] ? kernel_text_address+0xa5/0xe0 [ 1186.230622][T16965] ? __kernel_text_address+0xd/0x40 [ 1186.230653][T16965] ? unwind_get_return_address+0x4d/0x90 [ 1186.230679][T16965] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1186.230716][T16965] ? arch_stack_walk+0xfc/0x150 [ 1186.230751][T16965] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1186.230788][T16965] ? stack_trace_save+0x9c/0xe0 [ 1186.230821][T16965] ? __pfx_stack_trace_save+0x10/0x10 [ 1186.230856][T16965] ? stack_depot_save_flags+0x33/0x810 [ 1186.230902][T16965] ? netif_receive_skb+0x105/0x750 [ 1186.230933][T16965] ? lock_acquire+0x107/0x340 [ 1186.230955][T16965] ? netif_receive_skb+0x105/0x750 [ 1186.230992][T16965] __netif_receive_skb+0x72/0x380 [ 1186.231020][T16965] ? netif_receive_skb+0x105/0x750 [ 1186.231052][T16965] netif_receive_skb+0x1bb/0x750 [ 1186.231086][T16965] ? __lock_acquire+0x6b6/0x2cf0 [ 1186.231109][T16965] ? __pfx_netif_receive_skb+0x10/0x10 [ 1186.231149][T16965] ? tun_rx_batched+0x160/0x730 [ 1186.231179][T16965] tun_rx_batched+0x1b9/0x730 [ 1186.231214][T16965] ? __pfx_tun_rx_batched+0x10/0x10 [ 1186.231241][T16965] ? tun_get_user+0x266d/0x3dc0 [ 1186.231269][T16965] ? tun_get_user+0x266d/0x3dc0 [ 1186.231300][T16965] ? tun_get_user+0x2331/0x3dc0 [ 1186.231326][T16965] ? __local_bh_enable_ip+0xd0/0x130 [ 1186.231359][T16965] ? tun_get_user+0x266d/0x3dc0 [ 1186.231384][T16965] tun_get_user+0x2aa3/0x3dc0 [ 1186.231409][T16965] ? tun_get_user+0x6fc/0x3dc0 [ 1186.231440][T16965] ? aa_file_perm+0x44c/0x1530 [ 1186.231465][T16965] ? __pfx_tun_get_user+0x10/0x10 [ 1186.231489][T16965] ? __lock_acquire+0x6b6/0x2cf0 [ 1186.231508][T16965] ? kstrtoull+0x12f/0x1d0 [ 1186.231541][T16965] ? ref_tracker_alloc+0x318/0x460 [ 1186.231557][T16965] ? get_pid_task+0x20/0x1f0 [ 1186.231581][T16965] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1186.231602][T16965] ? tun_get+0x1c/0x2f0 [ 1186.231622][T16965] ? tun_get+0x1c/0x2f0 [ 1186.231647][T16965] ? tun_get+0x1c/0x2f0 [ 1186.231667][T16965] ? tun_get+0x1c/0x2f0 [ 1186.231692][T16965] tun_chr_write_iter+0x113/0x200 [ 1186.231716][T16965] vfs_write+0x5c9/0xb30 [ 1186.231736][T16965] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1186.231758][T16965] ? __pfx_vfs_write+0x10/0x10 [ 1186.231783][T16965] ? __fget_files+0x2a/0x420 [ 1186.231812][T16965] ksys_write+0x145/0x250 [ 1186.231832][T16965] ? __pfx_ksys_write+0x10/0x10 [ 1186.231858][T16965] do_syscall_64+0xec/0xf80 [ 1186.231877][T16965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.231897][T16965] ? trace_irq_disable+0x37/0x100 [ 1186.231922][T16965] ? clear_bhb_loop+0x60/0xb0 [ 1186.231943][T16965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.231961][T16965] RIP: 0033:0x7fe06d18e1ff [ 1186.231978][T16965] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1186.231994][T16965] RSP: 002b:00007fe06e075000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1186.232014][T16965] RAX: ffffffffffffffda RBX: 00007fe06d3e5fa0 RCX: 00007fe06d18e1ff [ 1186.232027][T16965] RDX: 000000000000002e RSI: 00002000000005c0 RDI: 00000000000000c8 [ 1186.232039][T16965] RBP: 00007fe06e075090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.232050][T16965] R10: 000000000000002e R11: 0000000000000293 R12: 0000000000000001 [ 1186.232061][T16965] R13: 00007fe06d3e6038 R14: 00007fe06d3e5fa0 R15: 00007fe06d50fa28 [ 1186.232089][T16965] [ 1186.774881][T16960] fido_id[16960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1186.930559][ T5902] hid-steam 0003:28DE:1102.0039: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 1187.040789][ T5917] usb 1-1: USB disconnect, device number 41 [ 1187.048388][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1187.056766][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1187.108374][ T5916] usb 4-1: reset full-speed USB device number 26 using dummy_hcd [ 1187.296835][T16972] team_slave_0: entered promiscuous mode [ 1187.303095][T16972] team_slave_1: entered promiscuous mode [ 1187.309694][T16972] macsec1: entered promiscuous mode [ 1187.315256][T16972] team0: entered promiscuous mode [ 1187.325873][T16972] team0: Device macsec1 is already an upper device of the team interface [ 1187.397220][T16972] team0: left promiscuous mode [ 1187.405599][T16972] team_slave_0: left promiscuous mode [ 1187.411513][T16972] team_slave_1: left promiscuous mode [ 1187.527522][T16979] xt_l2tp: invalid flags combination: 4 [ 1188.288492][ T5902] usb 4-1: USB disconnect, device number 26 [ 1188.612308][ T5902] hid-steam 0003:28DE:1102.0037: Steam Controller 'XXXXXXXXXX' disconnected [ 1189.095271][T17000] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2847'. [ 1189.498527][ T5902] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1189.681451][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 1189.697531][ T5902] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1189.798598][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2850'. [ 1189.838691][ T5902] usb 4-1: config 0 has no interface number 0 [ 1189.937841][ T5902] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.955213][ T5902] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.978326][ T5902] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1190.331661][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.378961][ T5916] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1190.486510][ T5902] usb 4-1: config 0 descriptor?? [ 1190.614607][ T5916] usb 3-1: device descriptor read/64, error -71 [ 1190.893647][ T5916] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1191.089533][ T5916] usb 3-1: device descriptor read/64, error -71 [ 1191.209465][ T5916] usb usb3-port1: attempt power cycle [ 1191.385082][ T5902] holtek_mouse 0003:04D9:A081.003A: item fetching failed at offset 5/8 [ 1191.412639][ T5902] holtek_mouse 0003:04D9:A081.003A: hid parse failed: -22 [ 1191.432950][ T5902] holtek_mouse 0003:04D9:A081.003A: probe with driver holtek_mouse failed with error -22 [ 1191.638522][ T5916] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1191.655634][T17019] Failed to get privilege flags for destination (handle=0x2:0x8) [ 1191.682737][ T5916] usb 3-1: device descriptor read/8, error -71 [ 1192.282805][T17023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.398406][ T5916] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1192.479515][ T5916] usb 3-1: device descriptor read/8, error -71 [ 1192.589455][ T5916] usb usb3-port1: unable to enumerate USB device [ 1193.046302][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.066774][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.417462][ T5902] usb 4-1: USB disconnect, device number 27 [ 1193.828540][ T795] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1193.915265][ T5902] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1194.000219][ T795] usb 1-1: Using ep0 maxpacket: 16 [ 1194.026361][ T795] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1194.045278][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.066159][ T795] usb 1-1: config 0 descriptor?? [ 1194.080278][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1194.093641][ T5902] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1194.167179][ T795] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1194.173997][ T5902] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1194.219129][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.289455][T17052] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1194.306490][T17052] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1194.345523][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 1194.387714][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1194.583272][ T5823] usb 4-1: USB disconnect, device number 28 [ 1194.817795][T17052] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2858'. [ 1195.158153][ T5823] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1195.368341][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 1195.383889][ T795] gspca_sonixj: reg_w1 err -71 [ 1195.399987][ T5823] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1195.409730][ T795] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1195.420387][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.432928][ T795] usb 1-1: USB disconnect, device number 42 [ 1195.502684][ T5823] usb 4-1: config 0 descriptor?? [ 1195.533957][ T5823] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1195.855484][T17078] FAULT_INJECTION: forcing a failure. [ 1195.855484][T17078] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.871781][T17078] CPU: 1 UID: 0 PID: 17078 Comm: syz.2.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.871816][T17078] Tainted: [L]=SOFTLOCKUP [ 1195.871825][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1195.871840][T17078] Call Trace: [ 1195.871850][T17078] [ 1195.871861][T17078] dump_stack_lvl+0xe8/0x150 [ 1195.871896][T17078] should_fail_ex+0x414/0x560 [ 1195.871937][T17078] should_failslab+0xa8/0x100 [ 1195.871958][T17078] kmem_cache_alloc_noprof+0x88/0x710 [ 1195.872002][T17078] ? __netlink_lookup+0xbd/0x8a0 [ 1195.872033][T17078] ? skb_clone+0x212/0x3a0 [ 1195.872064][T17078] skb_clone+0x212/0x3a0 [ 1195.872097][T17078] __netlink_deliver_tap+0x404/0x850 [ 1195.872126][T17078] ? netlink_deliver_tap+0x2e/0x1b0 [ 1195.872166][T17078] netlink_deliver_tap+0x19c/0x1b0 [ 1195.872197][T17078] netlink_unicast+0x7fa/0x9e0 [ 1195.872229][T17078] ? __pfx_netlink_unicast+0x10/0x10 [ 1195.872255][T17078] ? __alloc_skb+0x198/0x3a0 [ 1195.872271][T17078] ? netlink_sendmsg+0x642/0xb30 [ 1195.872291][T17078] ? skb_put+0x11b/0x210 [ 1195.872330][T17078] netlink_sendmsg+0x805/0xb30 [ 1195.872369][T17078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.872400][T17078] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1195.872435][T17078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1195.872450][T17078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.872493][T17078] __sock_sendmsg+0x21c/0x270 [ 1195.872529][T17078] ____sys_sendmsg+0x505/0x820 [ 1195.872560][T17078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.872591][T17078] ? import_iovec+0x74/0xa0 [ 1195.872613][T17078] ___sys_sendmsg+0x21f/0x2a0 [ 1195.872660][T17078] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.872721][T17078] ? __fget_files+0x2a/0x420 [ 1195.872746][T17078] ? __fget_files+0x3a0/0x420 [ 1195.872778][T17078] __x64_sys_sendmsg+0x19b/0x260 [ 1195.872824][T17078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1195.872860][T17078] ? __pfx_ksys_write+0x10/0x10 [ 1195.872894][T17078] do_syscall_64+0xec/0xf80 [ 1195.872911][T17078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.872927][T17078] ? trace_irq_disable+0x37/0x100 [ 1195.872967][T17078] ? clear_bhb_loop+0x60/0xb0 [ 1195.872994][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.873016][T17078] RIP: 0033:0x7fd51a98f749 [ 1195.873037][T17078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1195.873057][T17078] RSP: 002b:00007fd51b848038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.873075][T17078] RAX: ffffffffffffffda RBX: 00007fd51abe5fa0 RCX: 00007fd51a98f749 [ 1195.873087][T17078] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1195.873098][T17078] RBP: 00007fd51b848090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.873127][T17078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.873140][T17078] R13: 00007fd51abe6038 R14: 00007fd51abe5fa0 R15: 00007fd51ad0fa28 [ 1195.873175][T17078] [ 1195.873252][T17078] netlink: 'syz.2.2867': attribute type 16 has an invalid length. [ 1196.194684][T17078] netlink: 'syz.2.2867': attribute type 17 has an invalid length. [ 1196.339256][T17078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1196.556542][ T5823] usb 4-1: USB disconnect, device number 29 [ 1196.788703][ T5941] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1196.919022][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059b69400: rx timeout, send abort [ 1196.978394][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 1197.027050][ T5941] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1197.036995][ T5941] usb 1-1: config 0 has no interface number 0 [ 1197.046164][ T5941] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.088809][ T5941] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.102856][ T5941] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1197.117610][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.180733][ T5941] usb 1-1: config 0 descriptor?? [ 1197.429806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059b69400: abort rx timeout. Force session deactivation [ 1197.629388][ T5941] holtek_mouse 0003:04D9:A081.003B: item fetching failed at offset 5/8 [ 1197.645707][ T5941] holtek_mouse 0003:04D9:A081.003B: hid parse failed: -22 [ 1197.658490][ T5941] holtek_mouse 0003:04D9:A081.003B: probe with driver holtek_mouse failed with error -22 [ 1198.571682][T17110] FAULT_INJECTION: forcing a failure. [ 1198.571682][T17110] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.598159][T17108] pimreg: entered allmulticast mode [ 1198.608111][T17110] CPU: 0 UID: 0 PID: 17110 Comm: syz.4.2875 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.608149][T17110] Tainted: [L]=SOFTLOCKUP [ 1198.608157][T17110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1198.608172][T17110] Call Trace: [ 1198.608181][T17110] [ 1198.608195][T17110] dump_stack_lvl+0xe8/0x150 [ 1198.608229][T17110] should_fail_ex+0x414/0x560 [ 1198.608271][T17110] should_failslab+0xa8/0x100 [ 1198.608300][T17110] kmem_cache_alloc_noprof+0x88/0x710 [ 1198.608333][T17110] ? __netlink_lookup+0xbd/0x8a0 [ 1198.608364][T17110] ? skb_clone+0x212/0x3a0 [ 1198.608408][T17110] skb_clone+0x212/0x3a0 [ 1198.608440][T17110] __netlink_deliver_tap+0x404/0x850 [ 1198.608481][T17110] ? netlink_deliver_tap+0x2e/0x1b0 [ 1198.608511][T17110] netlink_deliver_tap+0x19c/0x1b0 [ 1198.608541][T17110] netlink_unicast+0x7fa/0x9e0 [ 1198.608576][T17110] ? __pfx_netlink_unicast+0x10/0x10 [ 1198.608601][T17110] ? __alloc_skb+0x198/0x3a0 [ 1198.608624][T17110] ? netlink_sendmsg+0x642/0xb30 [ 1198.608651][T17110] ? skb_put+0x11b/0x210 [ 1198.608679][T17110] netlink_sendmsg+0x805/0xb30 [ 1198.608716][T17110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.608748][T17110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1198.608778][T17110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1198.608799][T17110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.608830][T17110] __sock_sendmsg+0x21c/0x270 [ 1198.608866][T17110] ____sys_sendmsg+0x505/0x820 [ 1198.608900][T17110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.608936][T17110] ? import_iovec+0x74/0xa0 [ 1198.608968][T17110] ___sys_sendmsg+0x21f/0x2a0 [ 1198.608998][T17110] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.609062][T17110] ? __fget_files+0x2a/0x420 [ 1198.609089][T17110] ? __fget_files+0x3a0/0x420 [ 1198.609128][T17110] __x64_sys_sendmsg+0x19b/0x260 [ 1198.609159][T17110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1198.609197][T17110] ? __pfx_ksys_write+0x10/0x10 [ 1198.609232][T17110] do_syscall_64+0xec/0xf80 [ 1198.609255][T17110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.609277][T17110] ? trace_irq_disable+0x37/0x100 [ 1198.609307][T17110] ? clear_bhb_loop+0x60/0xb0 [ 1198.609333][T17110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.609356][T17110] RIP: 0033:0x7fe06d18f749 [ 1198.609376][T17110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.609402][T17110] RSP: 002b:00007fe06e075038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.609426][T17110] RAX: ffffffffffffffda RBX: 00007fe06d3e5fa0 RCX: 00007fe06d18f749 [ 1198.609444][T17110] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1198.609459][T17110] RBP: 00007fe06e075090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.609473][T17110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.609488][T17110] R13: 00007fe06d3e6038 R14: 00007fe06d3e5fa0 R15: 00007fe06d50fa28 [ 1198.609524][T17110] [ 1199.530844][T17116] geneve2: entered allmulticast mode [ 1199.659684][T17119] IPv6: NLM_F_CREATE should be specified when creating new route [ 1199.802320][ T5823] usb 1-1: USB disconnect, device number 43 [ 1200.100468][ T5941] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1200.188306][T17132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1200.395905][ T5941] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1200.409647][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.598439][ T5941] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1200.618605][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.665244][ T5941] usb 4-1: Product: syz [ 1200.675865][ T5941] usb 4-1: Manufacturer: syz [ 1200.694955][ T5941] usb 4-1: SerialNumber: syz [ 1200.733130][ T5941] usb 4-1: config 0 descriptor?? [ 1200.811226][ T5941] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 1200.817607][ T5941] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 1201.721646][T17137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1202.226461][T17142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2883'. [ 1202.494929][ T5823] usb 4-1: USB disconnect, device number 30 [ 1202.865133][T17146] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1202.878165][T17146] FAULT_INJECTION: forcing a failure. [ 1202.878165][T17146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.891817][T17146] CPU: 1 UID: 0 PID: 17146 Comm: syz.4.2884 Tainted: G L syzkaller #0 PREEMPT(full) [ 1202.891854][T17146] Tainted: [L]=SOFTLOCKUP [ 1202.891864][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1202.891878][T17146] Call Trace: [ 1202.891888][T17146] [ 1202.891899][T17146] dump_stack_lvl+0xe8/0x150 [ 1202.891933][T17146] should_fail_ex+0x414/0x560 [ 1202.891998][T17146] strncpy_from_user+0x36/0x2c0 [ 1202.892038][T17146] mptcp_setsockopt+0x12f6/0x3590 [ 1202.892076][T17146] ? aa_sk_perm+0x7ee/0x920 [ 1202.892103][T17146] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1202.892136][T17146] ? __pfx_aa_sk_perm+0x10/0x10 [ 1202.892166][T17146] ? __fget_files+0x2a/0x420 [ 1202.892193][T17146] ? aa_sock_opt_perm+0xff/0x1a0 [ 1202.892233][T17146] ? sock_common_setsockopt+0x36/0xc0 [ 1202.892269][T17146] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1202.892312][T17146] do_sock_setsockopt+0x17c/0x1b0 [ 1202.892343][T17146] __x64_sys_setsockopt+0x13f/0x1b0 [ 1202.892375][T17146] do_syscall_64+0xec/0xf80 [ 1202.892398][T17146] ? rcu_is_watching+0x15/0xb0 [ 1202.892424][T17146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.892447][T17146] ? clear_bhb_loop+0x60/0xb0 [ 1202.892474][T17146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.892497][T17146] RIP: 0033:0x7fe06d18f749 [ 1202.892518][T17146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1202.892538][T17146] RSP: 002b:00007fe06e033038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1202.892562][T17146] RAX: ffffffffffffffda RBX: 00007fe06d3e6180 RCX: 00007fe06d18f749 [ 1202.892580][T17146] RDX: 000000000000000d RSI: 0000000000000006 RDI: 000000000000000b [ 1202.892594][T17146] RBP: 00007fe06e033090 R08: 0000000000000009 R09: 0000000000000000 [ 1202.892609][T17146] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1202.892624][T17146] R13: 00007fe06d3e6218 R14: 00007fe06d3e6180 R15: 00007fe06d50fa28 [ 1202.892659][T17146] [ 1203.407542][T17153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1204.154381][ T5823] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1204.390917][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.402292][ T5823] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.471628][ T5823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1204.481313][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.495713][ T5823] usb 2-1: Product: syz [ 1204.517401][ T5823] usb 2-1: Manufacturer: syz [ 1204.541196][ T5823] usb 2-1: SerialNumber: syz [ 1204.923543][ T5823] cdc_ncm 2-1:1.0: bind() failure [ 1205.111220][ T5823] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1205.132513][ T5823] cdc_ncm 2-1:1.1: bind() failure [ 1205.252049][ T5823] usb 2-1: USB disconnect, device number 44 [ 1205.854363][ T5823] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1206.020304][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 1206.038167][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.107026][T17181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2894'. [ 1206.137077][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.186098][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1206.203247][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.261173][ T5823] usb 2-1: config 0 descriptor?? [ 1206.398322][ T5823] hub 2-1:0.0: USB hub found [ 1206.551584][ T5823] hub 2-1:0.0: 1 port detected [ 1206.910815][T17188] netlink: 'syz.2.2895': attribute type 10 has an invalid length. [ 1206.936711][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2895'. [ 1206.956247][T17188] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1206.978399][T17188] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1206.988432][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1206.988452][ T30] audit: type=1326 audit(1767742345.230:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893958f749 code=0x7ffc0000 [ 1207.007438][T17188] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1207.093230][ T30] audit: type=1326 audit(1767742345.240:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893958f749 code=0x7ffc0000 [ 1207.147407][ T30] audit: type=1326 audit(1767742345.290:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f893958f749 code=0x7ffc0000 [ 1207.171522][ T30] audit: type=1326 audit(1767742345.290:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893958f749 code=0x7ffc0000 [ 1207.206024][ T30] audit: type=1326 audit(1767742345.290:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f893958f749 code=0x7ffc0000 [ 1207.252169][T17169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.260987][ T30] audit: type=1326 audit(1767742345.290:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f893952b829 code=0x7ffc0000 [ 1207.284932][ T30] audit: type=1326 audit(1767742345.290:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893958f749 code=0x7ffc0000 [ 1207.309502][ T30] audit: type=1326 audit(1767742345.290:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893958f34b code=0x7ffc0000 [ 1207.333194][T17169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.373394][ T30] audit: type=1326 audit(1767742345.290:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893958f34b code=0x7ffc0000 [ 1207.428502][ T30] audit: type=1326 audit(1767742345.290:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.1.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89395c2005 code=0x7ffc0000 [ 1207.530928][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 1207.540465][T17193] netem: invalid attributes len -7 [ 1207.545730][T17193] netem: change failed [ 1207.623236][ T5823] hub 2-1:0.0: activate --> -90 [ 1207.876023][T17194] macvtap1: entered promiscuous mode [ 1207.882289][T17194] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1207.892594][T17194] macvtap1: entered allmulticast mode [ 1207.913236][T17194] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1208.086099][ T5823] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1208.086199][ T5916] usb 2-1: USB disconnect, device number 45 [ 1209.641350][T17203] netlink: 'syz.4.2898': attribute type 3 has an invalid length. [ 1209.655373][T17203] netlink: 46 bytes leftover after parsing attributes in process `syz.4.2898'. [ 1209.691321][T17203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.719649][T17203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.943272][T17219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.295243][T17229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1213.136204][T17244] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1214.066851][T17256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'. [ 1214.168543][ T5823] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1214.358812][ T5823] usb 2-1: config 4 has an invalid interface number: 156 but max is 0 [ 1214.367145][ T5823] usb 2-1: config 4 has no interface number 0 [ 1214.384061][ T5823] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 1214.587192][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.619052][ T5823] usb 2-1: Product: syz [ 1214.633715][ T5823] usb 2-1: Manufacturer: syz [ 1214.651917][ T5823] usb 2-1: SerialNumber: syz [ 1214.692422][ T5823] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1214.714594][ T5823] usb 2-1: setting power ON [ 1214.732293][ T5823] dvb-usb: bulk message failed: -22 (2/0) [ 1214.754695][ T5823] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1214.790221][ T5823] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1214.815953][ T5823] dvb_usb_cxusb 2-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 1214.943279][ T5916] usb 2-1: USB disconnect, device number 46 [ 1215.758300][ T5823] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1216.568310][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 1216.611787][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.635684][ T5823] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1216.678274][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.710370][ T5823] usb 3-1: config 0 descriptor?? [ 1216.729912][ T5823] hub 3-1:0.0: bad descriptor, ignoring hub [ 1216.747364][ T5823] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1216.782278][ T5823] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1217.259838][ T5823] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 1217.276620][ T5823] usb 3-1: device reset changed ep0 maxpacket size! [ 1217.305051][ T5823] usb 3-1: USB disconnect, device number 30 [ 1217.638377][ T5823] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1217.800419][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 1217.860801][T17282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.870087][ T5823] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1217.964752][ T5823] usb 3-1: config 0 has no interface number 0 [ 1217.979518][T17282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.990780][ T5823] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1218.016075][ T5823] usb 3-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 256 [ 1218.054210][ T5823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.090347][ T5823] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1218.099564][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1218.107755][ T5823] usb 3-1: SerialNumber: syz [ 1218.120725][ T5823] usb 3-1: config 0 descriptor?? [ 1218.151786][ T5823] hso 3-1:0.1: Failed to find BULK OUT ep [ 1218.176495][ T5823] usb 3-1: USB disconnect, device number 31 [ 1218.388180][T17285] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1218.733147][T17299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.922095][ T5916] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1219.252116][ T5916] usb 1-1: config 0 has no interfaces? [ 1219.265239][ T5916] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1219.311949][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1219.331325][ T5916] usb 1-1: Product: syz [ 1219.345977][ T5916] usb 1-1: Manufacturer: syz [ 1219.357774][ T5916] usb 1-1: SerialNumber: syz [ 1219.392189][ T5916] usb 1-1: config 0 descriptor?? [ 1220.194430][T17309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1221.020977][T17325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1221.357818][T17329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2928'. [ 1221.549295][T17329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.651196][T17329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.823832][T17329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.833669][T17329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.504005][ T5902] usb 1-1: USB disconnect, device number 44 [ 1222.848678][ T5902] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1222.948617][ T5823] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1222.989772][ T5902] usb 4-1: device descriptor read/64, error -71 [ 1223.131747][ T5823] usb 2-1: config 0 has no interfaces? [ 1223.144467][ T5823] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1223.164973][ T5916] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1223.186314][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1223.236745][ T5823] usb 2-1: Product: syz [ 1223.251912][ T5823] usb 2-1: Manufacturer: syz [ 1223.266131][ T5823] usb 2-1: SerialNumber: syz [ 1223.281358][ T5902] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1223.296998][ T5823] usb 2-1: config 0 descriptor?? [ 1223.353405][ T5916] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1223.518537][ T5902] usb 4-1: device descriptor read/64, error -71 [ 1223.708330][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.728533][ T5916] usb 1-1: Product: syz [ 1223.736587][ T5916] usb 1-1: Manufacturer: syz [ 1223.745418][ T5916] usb 1-1: SerialNumber: syz [ 1223.808753][ T5902] usb usb4-port1: attempt power cycle [ 1224.173028][ T5916] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1224.188551][ T5902] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1224.268451][ T5916] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1224.279996][ T5902] usb 4-1: device descriptor read/8, error -71 [ 1224.548306][ T5902] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1224.579135][ T5902] usb 4-1: device descriptor read/8, error -71 [ 1224.726444][ T5902] usb usb4-port1: unable to enumerate USB device [ 1225.189449][T17358] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1225.389820][ T5916] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1225.425736][ T5916] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1225.452533][ T5916] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1225.466129][ T5916] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1225.754898][ T5823] usb 2-1: USB disconnect, device number 47 [ 1225.904316][T17370] kvm: user requested TSC rate below hardware speed [ 1226.172839][ T5823] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1226.208848][T15073] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1226.339082][T15073] usb 4-1: device descriptor read/64, error -71 [ 1226.346280][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 1226.361117][ T5823] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1226.383096][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.403959][ T5823] usb 2-1: config 0 descriptor?? [ 1226.418299][T17379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.432103][ T5823] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1226.446807][T17381] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1226.460052][T17381] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1226.479775][T17381] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1226.481570][T17379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.510309][T17381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1226.512770][ T795] usb 1-1: USB disconnect, device number 45 [ 1226.524984][T17381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1226.578416][T15073] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1226.609186][T17379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.625261][T17379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.711391][T17384] netlink: 'syz.0.2943': attribute type 13 has an invalid length. [ 1226.738362][T15073] usb 4-1: device descriptor read/64, error -71 [ 1226.848644][T15073] usb usb4-port1: attempt power cycle [ 1227.098051][T10006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.146782][T17382] chnl_net:caif_netlink_parms(): no params data found [ 1227.197476][T15073] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1227.219187][T10006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.230276][T15073] usb 4-1: device descriptor read/8, error -71 [ 1227.324864][T10006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.404206][T17382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.413876][T17382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.421770][T17382] bridge_slave_0: entered allmulticast mode [ 1227.430347][T17382] bridge_slave_0: entered promiscuous mode [ 1227.455727][T10006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.469605][T15073] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1227.480638][T17382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.518832][T15073] usb 4-1: device descriptor read/8, error -71 [ 1227.529097][T17382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.543166][T17382] bridge_slave_1: entered allmulticast mode [ 1227.552991][T17382] bridge_slave_1: entered promiscuous mode [ 1227.614746][T17382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.628758][T15073] usb usb4-port1: unable to enumerate USB device [ 1227.642603][T17382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.784618][T17382] team0: Port device team_slave_0 added [ 1227.857011][T17382] team0: Port device team_slave_1 added [ 1228.545544][T10006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.569774][ T5836] Bluetooth: hci5: command tx timeout [ 1228.586694][T10006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.618390][T10006] bond0 (unregistering): Released all slaves [ 1228.802905][T17382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.810388][T17382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.858328][T17382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.877555][T10006] @„;: left promiscuous mode [ 1228.903787][T17382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.911469][T17382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.938440][T17382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.043207][T10006] tipc: Disabling bearer [ 1229.054054][T10006] tipc: Left network mode [ 1229.156010][T17407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2945'. [ 1229.180585][ T5823] gspca_sonixj: reg_w1 err -71 [ 1229.185638][ T5823] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1229.264072][ T5823] usb 2-1: USB disconnect, device number 48 [ 1229.310365][T10006] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 1229.321267][T10006] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 1229.393945][T17382] hsr_slave_0: entered promiscuous mode [ 1229.412476][T17382] hsr_slave_1: entered promiscuous mode [ 1229.465899][T17382] debugfs: 'hsr0' already exists in 'hsr' [ 1229.481252][T17382] Cannot create hsr debugfs directory [ 1229.503548][T17408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.515600][T17408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.530140][T17408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.537806][T17408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.378422][ T5902] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1230.392418][T10006] hsr_slave_0: left promiscuous mode [ 1230.558943][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 1230.597020][ T5902] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1230.617042][T10006] veth0: left promiscuous mode [ 1230.657788][ T5836] Bluetooth: hci5: command tx timeout [ 1230.671265][ T5902] usb 2-1: config 0 has no interface number 0 [ 1230.703501][T10006] veth1_macvtap: left promiscuous mode [ 1230.759059][T10006] veth0_macvtap: left promiscuous mode [ 1230.770109][ T5902] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.793315][T10006] veth1_vlan: left promiscuous mode [ 1230.829414][ T5902] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.861083][T10006] veth0_vlan: left promiscuous mode [ 1230.898347][ T5902] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1230.960572][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.023383][ T5902] usb 2-1: config 0 descriptor?? [ 1231.121921][T17428] ALSA: mixer_oss: invalid OSS volume '' [ 1231.553932][ T5902] holtek_mouse 0003:04D9:A081.003C: item fetching failed at offset 5/8 [ 1231.607853][ T5902] holtek_mouse 0003:04D9:A081.003C: hid parse failed: -22 [ 1231.639581][ T5902] holtek_mouse 0003:04D9:A081.003C: probe with driver holtek_mouse failed with error -22 [ 1231.683605][T17435] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1231.814433][T10006] pimreg (unregistering): left allmulticast mode [ 1231.939180][T10006] team0 (unregistering): Port device batadv1 removed [ 1232.732360][ T5836] Bluetooth: hci5: command tx timeout [ 1233.073893][ T5902] usb 2-1: USB disconnect, device number 49 [ 1233.329859][ T5823] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1233.515550][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.525707][ T5823] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1233.545728][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.558538][ T5902] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1233.577435][ T5823] usb 4-1: config 0 descriptor?? [ 1233.697650][T10006] team0 (unregistering): Port device team_slave_1 removed [ 1233.742514][ T5902] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1233.759076][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.780223][T10006] team0 (unregistering): Port device team_slave_0 removed [ 1233.808752][ T5902] usb 2-1: Product: syz [ 1233.818280][ T5902] usb 2-1: Manufacturer: syz [ 1233.822966][ T5902] usb 2-1: SerialNumber: syz [ 1234.062570][ T5823] wacom 0003:056A:0094.003D: unknown main item tag 0x0 [ 1234.075296][ T5823] wacom 0003:056A:0094.003D: unknown main item tag 0x0 [ 1234.082802][ T5823] wacom 0003:056A:0094.003D: unknown main item tag 0x0 [ 1234.092678][ T5823] wacom 0003:056A:0094.003D: unknown main item tag 0x0 [ 1234.100581][ T5823] wacom 0003:056A:0094.003D: unknown main item tag 0x0 [ 1234.108385][ T5823] wacom 0003:056A:0094.003D: unknown main item tag 0x0 [ 1234.115636][ T5823] wacom 0003:056A:0094.003D: unknown main item tag 0x0 [ 1234.125096][ T5823] wacom 0003:056A:0094.003D: Using device in hidraw-only mode [ 1234.153403][ T5823] wacom 0003:056A:0094.003D: hidraw0: USB HID v0.04 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 1234.295995][ T5902] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1234.313457][ T5823] usb 4-1: USB disconnect, device number 39 [ 1234.318897][ T5902] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1234.769309][ T5823] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1234.811124][ T5836] Bluetooth: hci5: command tx timeout [ 1234.948363][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 1234.965501][ T5823] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1234.986514][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.039174][ T5823] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1235.046336][ T5823] pvrusb2: ********** [ 1235.074006][ T5823] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1235.116628][ T5823] pvrusb2: Important functionality might not be entirely working. [ 1235.142800][ T5823] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1235.192383][ T5823] pvrusb2: ********** [ 1235.226849][ T2344] pvrusb2: Invalid write control endpoint [ 1235.350139][T15073] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1235.371903][ T5902] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1235.401603][ T5902] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1235.426172][T17452] FAULT_INJECTION: forcing a failure. [ 1235.426172][T17452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.460333][ T2344] pvrusb2: Invalid write control endpoint [ 1235.470833][ T5902] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1235.476403][T17452] CPU: 0 UID: 0 PID: 17452 Comm: syz.0.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.476509][T17452] Tainted: [L]=SOFTLOCKUP [ 1235.476541][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1235.476574][T17452] Call Trace: [ 1235.476604][T17452] [ 1235.476621][T17452] dump_stack_lvl+0xe8/0x150 [ 1235.476744][T17452] should_fail_ex+0x414/0x560 [ 1235.476857][T17452] _copy_from_user+0x2d/0xb0 [ 1235.476931][T17452] memdup_user+0x5e/0xd0 [ 1235.477000][T17452] i2cdev_ioctl+0x604/0x820 [ 1235.477064][T17452] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1235.477130][T17452] ? __fget_files+0x3a0/0x420 [ 1235.477202][T17452] ? __fget_files+0x2a/0x420 [ 1235.477282][T17452] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1235.477345][T17452] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1235.477407][T17452] __se_sys_ioctl+0xfc/0x170 [ 1235.477546][T17452] do_syscall_64+0xec/0xf80 [ 1235.477608][T17452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.477663][T17452] ? trace_irq_disable+0x37/0x100 [ 1235.477724][T17452] ? clear_bhb_loop+0x60/0xb0 [ 1235.477782][T17452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.477843][T17452] RIP: 0033:0x7f601bd8f749 [ 1235.477889][T17452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.477941][T17452] RSP: 002b:00007f601cbeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.478001][T17452] RAX: ffffffffffffffda RBX: 00007f601bfe5fa0 RCX: 00007f601bd8f749 [ 1235.478045][T17452] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000004 [ 1235.478086][T17452] RBP: 00007f601cbeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.478131][T17452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.478179][T17452] R13: 00007f601bfe6038 R14: 00007f601bfe5fa0 R15: 00007f601c10fa28 [ 1235.478293][T17452] [ 1235.494229][ T5823] usb 1-1: USB disconnect, device number 46 [ 1235.509755][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1235.509786][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1235.509798][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1235.509811][ T2344] pvrusb2: Device being rendered inoperable [ 1235.601717][T15073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.721178][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1235.739880][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1235.771554][ T5902] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1235.836375][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1235.853121][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1235.908354][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1235.919427][T15073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1235.937868][T17473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.959684][T17473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.972263][T17467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2956'. [ 1236.002810][T15073] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1236.013248][T15073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.035252][T15073] usb 4-1: config 0 descriptor?? [ 1236.489073][ T5917] usb 2-1: USB disconnect, device number 50 [ 1236.659082][T15073] logitech 0003:046D:CA04.003E: item fetching failed at offset 2/5 [ 1236.712998][T15073] logitech 0003:046D:CA04.003E: parse failed [ 1236.749013][T15073] logitech 0003:046D:CA04.003E: probe with driver logitech failed with error -22 [ 1236.787221][T10006] IPVS: stop unused estimator thread 0... [ 1236.893644][ T5902] usb 4-1: USB disconnect, device number 40 [ 1237.198524][T15073] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1237.268451][ T5917] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1237.347398][T17382] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1237.371108][T17382] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1237.400181][T15073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.403469][T17382] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1237.452791][ T5917] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1237.464437][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.471699][T15073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.476948][ T5917] usb 2-1: Product: syz [ 1237.504457][T17382] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1237.517892][ T5917] usb 2-1: Manufacturer: syz [ 1237.536891][ T5917] usb 2-1: SerialNumber: syz [ 1237.555865][T15073] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1237.583837][T15073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.603462][ T5917] usb 2-1: config 0 descriptor?? [ 1237.603968][T15073] usb 1-1: config 0 descriptor?? [ 1237.642699][ T5917] hub 2-1:0.0: bad descriptor, ignoring hub [ 1237.675165][ T5917] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1237.965871][ T5917] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1238.236066][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.252725][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.263785][T15073] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 1238.274766][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1238.297312][T17486] dib0700: tx buffer length is larger than 4. Not supported. [ 1238.321736][T15073] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1238.351984][ T5917] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1238.401854][ T5917] usb 2-1: media controller created [ 1238.456963][T15073] cp2112 0003:10C4:EA90.003F: Part Number: 0x00 Device Version: 0x4D [ 1238.542441][T17382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.579436][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1238.664086][T17382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.733238][ T8371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.740682][ T8371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.790450][ T8371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.797999][ T8371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.891857][T17481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.938737][T17481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.955810][ T5917] DVB: Unable to find symbol dib7000p_attach() [ 1238.999666][ T5917] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1239.237055][T17382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.239079][T17481] ------------[ cut here ]------------ [ 1239.250147][T17481] usb 2-1: BOGUS control dir, pipe 80003380 doesn't match bRequestType c0 [ 1239.258799][T17481] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.0.2957/17481 [ 1239.269441][T17481] Modules linked in: [ 1239.273642][T17481] CPU: 0 UID: 0 PID: 17481 Comm: syz.0.2957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.285586][T17481] Tainted: [L]=SOFTLOCKUP [ 1239.290084][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1239.301158][T17481] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1239.307000][T17481] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1239.327273][T17481] RSP: 0018:ffffc9000d2cf940 EFLAGS: 00010246 [ 1239.333814][T17481] RAX: 0000000000000000 RBX: ffff8880202a0700 RCX: 0000000080003380 [ 1239.342572][T17481] RDX: ffff8880331188a0 RSI: ffffffff8c140a20 RDI: ffffffff8f8ee5d0 [ 1239.351262][T17481] RBP: 1ffff110068f2244 R08: 00000000000000c0 R09: 0000000000000000 [ 1239.352492][ T5917] rc_core: IR keymap rc-dib0700-rc5 not found [ 1239.359621][T17481] R10: ffffc9000d2cfa40 R11: fffff52001a59f54 R12: ffff888058ad4100 [ 1239.359646][T17481] R13: ffff888034791220 R14: 0000000080003380 R15: ffff8880331188a0 [ 1239.359668][T17481] FS: 00007f601cbeb6c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 1239.359691][T17481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1239.359709][T17481] CR2: 0000001b31616ff8 CR3: 0000000057fbc000 CR4: 00000000003526f0 [ 1239.359732][T17481] Call Trace: [ 1239.409487][T17481] [ 1239.412457][T17481] ? __init_swait_queue_head+0xa9/0x150 [ 1239.418044][T17481] usb_start_wait_urb+0x115/0x4f0 [ 1239.423315][T17481] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1239.429006][T17481] usb_control_msg+0x232/0x3e0 [ 1239.433843][T17481] dib0700_i2c_xfer+0xba7/0xf70 [ 1239.438808][T17481] __i2c_transfer+0x79a/0x1f00 [ 1239.443621][T17481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1239.449649][T17481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1239.455539][T17481] ? i2c_transfer+0xc8/0x2d0 [ 1239.460212][T17481] i2c_transfer+0x1cc/0x2d0 [ 1239.464854][T17481] i2cdev_ioctl_rdwr+0x460/0x740 [ 1239.469956][T17481] i2cdev_ioctl+0x64b/0x820 [ 1239.474525][T17481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1239.479654][T17481] ? __fget_files+0x3a0/0x420 [ 1239.484403][T17481] ? __fget_files+0x2a/0x420 [ 1239.489090][T17481] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1239.494093][T17481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1239.499197][T17481] __se_sys_ioctl+0xfc/0x170 [ 1239.503861][T17481] do_syscall_64+0xec/0xf80 [ 1239.508533][T17481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.514665][T17481] ? trace_irq_disable+0x37/0x100 [ 1239.519774][T17481] ? clear_bhb_loop+0x60/0xb0 [ 1239.524498][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.530470][T17481] RIP: 0033:0x7f601bd8f749 [ 1239.534939][T17481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.554690][T17481] RSP: 002b:00007f601cbeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.563175][T17481] RAX: ffffffffffffffda RBX: 00007f601bfe5fa0 RCX: 00007f601bd8f749 [ 1239.571233][T17481] RDX: 0000200000000440 RSI: 0000000000000707 RDI: 0000000000000007 [ 1239.579339][T17481] RBP: 00007f601be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1239.587449][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.595530][T17481] R13: 00007f601bfe6038 R14: 00007f601bfe5fa0 R15: 00007f601c10fa28 [ 1239.603579][T17481] [ 1239.606722][T17481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1239.614017][T17481] CPU: 0 UID: 0 PID: 17481 Comm: syz.0.2957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.624965][T17481] Tainted: [L]=SOFTLOCKUP [ 1239.629300][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1239.639365][T17481] Call Trace: [ 1239.642657][T17481] [ 1239.645599][T17481] vpanic+0x1e0/0x670 [ 1239.649612][T17481] panic+0xb9/0xc0 [ 1239.653359][T17481] ? __pfx_panic+0x10/0x10 [ 1239.657803][T17481] __warn+0x317/0x4b0 [ 1239.661803][T17481] ? usb_submit_urb+0x105c/0x18d0 [ 1239.666842][T17481] ? usb_submit_urb+0x105c/0x18d0 [ 1239.671883][T17481] __report_bug+0x288/0x500 [ 1239.676408][T17481] ? usb_submit_urb+0x105c/0x18d0 [ 1239.681491][T17481] ? __pfx___report_bug+0x10/0x10 [ 1239.686537][T17481] ? lockdep_hardirqs_on+0x7b/0x110 [ 1239.691761][T17481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1239.697630][T17481] report_bug_entry+0x19a/0x290 [ 1239.702511][T17481] ? usb_submit_urb+0x111c/0x18d0 [ 1239.707548][T17481] ? usb_submit_urb+0x1121/0x18d0 [ 1239.712625][T17481] handle_bug+0xca/0x200 [ 1239.716920][T17481] exc_invalid_op+0x1a/0x50 [ 1239.721439][T17481] asm_exc_invalid_op+0x1a/0x20 [ 1239.726295][T17481] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1239.732028][T17481] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1239.751650][T17481] RSP: 0018:ffffc9000d2cf940 EFLAGS: 00010246 [ 1239.757821][T17481] RAX: 0000000000000000 RBX: ffff8880202a0700 RCX: 0000000080003380 [ 1239.765818][T17481] RDX: ffff8880331188a0 RSI: ffffffff8c140a20 RDI: ffffffff8f8ee5d0 [ 1239.773812][T17481] RBP: 1ffff110068f2244 R08: 00000000000000c0 R09: 0000000000000000 [ 1239.781812][T17481] R10: ffffc9000d2cfa40 R11: fffff52001a59f54 R12: ffff888058ad4100 [ 1239.789831][T17481] R13: ffff888034791220 R14: 0000000080003380 R15: ffff8880331188a0 [ 1239.797834][T17481] ? __init_swait_queue_head+0xa9/0x150 [ 1239.803408][T17481] usb_start_wait_urb+0x115/0x4f0 [ 1239.808450][T17481] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1239.814020][T17481] usb_control_msg+0x232/0x3e0 [ 1239.818896][T17481] dib0700_i2c_xfer+0xba7/0xf70 [ 1239.823775][T17481] __i2c_transfer+0x79a/0x1f00 [ 1239.828587][T17481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1239.834416][T17481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1239.840265][T17481] ? i2c_transfer+0xc8/0x2d0 [ 1239.844867][T17481] i2c_transfer+0x1cc/0x2d0 [ 1239.849381][T17481] i2cdev_ioctl_rdwr+0x460/0x740 [ 1239.854344][T17481] i2cdev_ioctl+0x64b/0x820 [ 1239.858861][T17481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1239.863898][T17481] ? __fget_files+0x3a0/0x420 [ 1239.868638][T17481] ? __fget_files+0x2a/0x420 [ 1239.873239][T17481] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1239.878203][T17481] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1239.883258][T17481] __se_sys_ioctl+0xfc/0x170 [ 1239.887868][T17481] do_syscall_64+0xec/0xf80 [ 1239.892420][T17481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.898594][T17481] ? trace_irq_disable+0x37/0x100 [ 1239.903664][T17481] ? clear_bhb_loop+0x60/0xb0 [ 1239.908386][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.914308][T17481] RIP: 0033:0x7f601bd8f749 [ 1239.918736][T17481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.938361][T17481] RSP: 002b:00007f601cbeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.946900][T17481] RAX: ffffffffffffffda RBX: 00007f601bfe5fa0 RCX: 00007f601bd8f749 [ 1239.954896][T17481] RDX: 0000200000000440 RSI: 0000000000000707 RDI: 0000000000000007 [ 1239.962883][T17481] RBP: 00007f601be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1239.970874][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.979035][T17481] R13: 00007f601bfe6038 R14: 00007f601bfe5fa0 R15: 00007f601c10fa28 [ 1239.987057][T17481] [ 1239.990306][T17481] Kernel Offset: disabled [ 1239.994664][T17481] Rebooting in 86400 seconds..