last executing test programs: 15m49.476839546s ago: executing program 0 (id=3788): r0 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$nbd(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000200ff058372b5008290cfc4337965941538be02000000000000000000007400a391793ba7f40000000004fdf700"/64], 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000004c80)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0xfffffffd, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0x100ffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xffffffc7, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x0, 0x866, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}) 15m47.076461092s ago: executing program 0 (id=3794): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sigaltstack(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2}, {}, {}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075d, 0xffffffff}}]}, 0x104}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6039a59f00202b00fe8000000000000000008000000000bbfe8000000000000000000000000000aa3a00020136f4620d00000000001890780400"/86], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sigaltstack(&(0x7f0000000300)={&(0x7f00000002c0)=""/61, 0x2, 0x3d}, &(0x7f0000000440)={&(0x7f00000003c0)=""/24, 0x0, 0x18}) (async) sigaltstack(&(0x7f0000000300)={&(0x7f00000002c0)=""/61, 0x2, 0x3d}, &(0x7f0000000440)={&(0x7f00000003c0)=""/24, 0x0, 0x18}) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd800000"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000540)={0x20, 0xd, 0x5, "de6df4e2b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) (async) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="55dad4c8040b", @broadcast}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@delneigh={0x44, 0x1a, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x99}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x781, 0x0, 0x80000}}, @NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000054}, 0x2400c094) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@delneigh={0x44, 0x1a, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x99}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x781, 0x0, 0x80000}}, @NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000054}, 0x2400c094) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000000)=""/35, 0x23}], 0x2) 15m43.838456985s ago: executing program 0 (id=3804): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc5, 0xe4, 0x62, 0x20, 0x525, 0xa4a0, 0x2be3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x20, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x4c, 0x0, 0x1, 0x59, 0x5d, 0x62, 0x0, [], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x81, 0xff, 0x5}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffc, 0x404800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x1, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000600)={{0x6, 0x1, 0x4, 0x6, '\x00', 0x3}, 0x1, [0xdf7, 0x3, 0x8001, 0x10001, 0x7, 0xb7c970c, 0xb8df, 0x9, 0x9, 0x1, 0x10, 0x371, 0x9, 0x8, 0x40, 0x3ff, 0xfffffff8, 0x101, 0x920, 0xd72, 0x7, 0xffffffff, 0x6, 0x8001, 0xb3a, 0x14, 0xfffffff8, 0x7, 0x5, 0x0, 0x9, 0x80000001, 0x7, 0xffffa4aa, 0x81, 0xabac, 0x400, 0x6, 0xf, 0x8, 0xfffffff7, 0x101, 0x7, 0x7b7e, 0x1, 0x9, 0x5, 0x1a, 0x8, 0x3ff, 0x4, 0xe9, 0xff, 0x800, 0xce, 0x2, 0x0, 0x1, 0x49a1, 0xd74, 0x1, 0x0, 0x4, 0xfffffc00, 0x8, 0xfffffff7, 0x6, 0x3, 0x1, 0x3, 0xfff, 0x7db, 0x5b3, 0x5, 0xfff, 0x4, 0xffffffff, 0x7, 0x8, 0x3ff, 0x6, 0x7f, 0x0, 0x7, 0x5, 0x5d9, 0x8000, 0x10, 0x3, 0x9, 0x9, 0x0, 0x8, 0x80000000, 0xe8f1, 0xa, 0x6, 0x1, 0xff, 0x8, 0x1ff, 0x5, 0x1, 0x9, 0x3, 0x0, 0x100, 0x10001, 0x0, 0x0, 0xefec, 0x4, 0x7, 0x6, 0xd, 0x8, 0x40000000, 0x8, 0x401, 0x5, 0x7fffffff, 0x8, 0xfffffff5, 0x2, 0x5, 0x6, 0x2, 0xfff]}) syz_usb_connect$cdc_ecm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x9, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x73, {{0x6, 0x24, 0x6, 0x0, 0x0, "8c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x80, 0x76d7, 0x5}, [@acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4, 0x280}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xe}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x61, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x2, 0x6}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xfd, 0x1, 0x1, 0x40, 0x4}, 0xd7, &(0x7f0000000500)={0x5, 0xf, 0xd7, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4d, "f369e0054c84ecdca9044d2ba319fe5b"}, @generic={0x5e, 0x10, 0xa, "ca3ae75951c88654925cc4af1154b135f4494f6f9d23bd30ba17cd145ebd8e030172271f584e663b8c6963c77ae37e6ff0a2e0a82b505c366a671cbdec84f895cd276a8b843e793c267f9aeb04c666e9c0bf8d19348599744c84f5"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x8, 0xff00, 0x0, [0xff00, 0xffffcf, 0x3fc0, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x9, 0x2}, @generic={0x3d, 0x10, 0x4, "ed44613f8f6f401b027e0f4da48e219b22375c92f17705f79430901264e6d86c97f66f19af9c4634ef1b29a17e806c55a052a9d539ebda19956e"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x43f}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "1e51cffbd9d1c163d5fc670800ae899a3db0d2a65758fb0d2732a83911a71ed99529a97caae56dd08824adde80ebff1ae99aeb2e179d020f90e1e2150d6bb5144690a739a631b038a839c2ceed4d127e46343de9"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}]}) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x9}) 15m40.601776687s ago: executing program 0 (id=3813): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x203) r3 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x300) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0xb001, 0x4, 0x420, 0x0, 0x234, 0x234, 0x340, 0x340, 0x340, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x9, 0x3ff, 0x101, 0x0, 0x0, "5de486d3077f6c5b5004eaecbb413ddd486eb90e6408f5c1b2c43ee2d8480b9863e0e307edf9329ab9b1c25620594f455dab44cf9c41675ce2996d71f2f7a2eb"}}}, {{@arp={@multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, 0xff, 0xff000000, 0x30, 0xf, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x5, 0x6, 0x6, 0x40d, 0xf01, 0x5592, 'bridge0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x302}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @loopback, @empty, 0x7}}}, {{@arp={@rand_addr=0x64010100, @remote, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local}, 0xe, 0x1, 0xfff8, 0x0, 0x0, 0x9, 'batadv_slave_0\x00', 'netpci0\x00', {}, {}, 0x0, 0x84}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x46c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) 15m38.738496615s ago: executing program 0 (id=3821): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "9f8131aefbcb4b28", "6c9c25bcf1c5935011773a86d29bd71c", "74bc1a15", "fd4b61156876f626"}, 0x28) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}}, 0xc00, 0x4226}, &(0x7f0000000400)=0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x10000}]}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0xadfa, 0x4, 0xfffffffc}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x4081}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0, 0xfffffffe}, 0x1, 0x1, 0xfffffffe}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x80) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000300)=""/114) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1, 0x4, 0xa) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15m38.482992748s ago: executing program 0 (id=3823): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000fbdbdf250b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x800, 0x3]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) r7 = timerfd_create(0x1, 0x80000) timerfd_settime(r7, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) 15m37.827023583s ago: executing program 32 (id=3823): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000fbdbdf250b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x800, 0x3]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020) r7 = timerfd_create(0x1, 0x80000) timerfd_settime(r7, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) 16.26995892s ago: executing program 3 (id=6824): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) munlockall() ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902"], 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x40000007ffc, 0x80000001, 0x800000010000, 0x3, 0x4002004c2, 0xffffffffffffffff, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffefd, 0x7fffffff, 0x20000000008, 0x6, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000004efced843fe14a020a13002f0b7d0614d883122999d4759dc96c22386a25bd70000000000007006800", @ANYRES32=r8, @ANYBLOB="00090000102006001c001a80110001006272696467655f736c6176650000000004000580"], 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 14.946713405s ago: executing program 3 (id=6826): syz_open_dev$usbmon(&(0x7f0000000340), 0x14c, 0x28041) ppoll(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0x2e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x1e01, 0xfffff9, 0x80000440], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xe0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x1004009, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80}}]}}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x161}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x48, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000180)={0x5, r8, 0x15, {0x6, 0x3}, 0x7f}, 0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) inotify_init() 12.38823397s ago: executing program 3 (id=6837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, 0x0, 0x4000) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) shutdown(r4, 0x1) r5 = openat$procfs(0xffffff9c, &(0x7f0000003a80)='/proc/partitions\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) (async) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) (async) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x10000}, [@tmpl={0x144, 0x5, [{{@in=@local, 0xffffffff, 0x3c}, 0x0, @in=@broadcast, 0x20000}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@remote, 0x3501, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x2, 0x0, 0x1, 0xff}]}]}, 0x1fc}}, 0x0) 11.350417674s ago: executing program 3 (id=6841): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f00000002c0)=""/104, &(0x7f0000000240)=0x68) (async) getsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f00000002c0)=""/104, &(0x7f0000000240)=0x68) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000005400e501000020ed7704db26574fe180c530f45e70926df157a51a7aa1f5df9d3467b13f94c4a6420b0f00cae8d3f5ad97456dcc1db0131d1faed835ed64c6991e5b3e052550c2", @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200031010203010902120001000000000904"], 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_lifetime={0x4, 0x3, 0x46710a30, 0x9, 0x2, 0x5}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0xfffffffb}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x5, 0xc}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x98}, 0x1, 0x7}, 0x14) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_lifetime={0x4, 0x3, 0x46710a30, 0x9, 0x2, 0x5}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0xfffffffb}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x5, 0xc}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x98}, 0x1, 0x7}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x143) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x143) pwrite64(r5, &(0x7f0000000880)='u', 0xf7d, 0x83) (async) pwrite64(r5, &(0x7f0000000880)='u', 0xf7d, 0x83) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) lseek(r6, 0x4, 0x3) sendmsg$inet6(r6, &(0x7f0000000840)={&(0x7f0000000280)={0xa, 0x4e23, 0x101, @mcast1, 0x100}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000540)="ddf66767bd770d2b0046551070b6a66c5897a087c080f1c39f9d0ad7667ff9b821a37e99841ef2913a9e0214fd89c6bffc18257ea291c571b9b1db1b673bae1b8874e98e4681806d028ff6b3", 0x4c}, {&(0x7f00000005c0)="2564973b9e30cd097c27ee428794942f98169ea0b367ea2ebf481daa353b0d4ae8e768bf290252ad87fa6976dc5a2ec13560ee791f75f16b286b2e46419e5fcde5bb2205a1baaaf0eb727cbf661d75ba79675f7bdadcafea95a20797afc54bcd081ea0bf80d705e8b27e9fce621de2386d14b27e28488f9e5d71f4edb8ac91a45243b50e75bff030477ad57dfadf04f18733ccc940ea95c8a5b740708ad70a899cf2e090fbf45f98c940b4917c86bfa662cb726571b33eda", 0xb8}, {&(0x7f0000000680)="976351579010730a231d6ebe93b4c0513b3f276f91d634cdcc81e0b82fb2dc0642acea1bcfcf33adbdc1a8abb50dfb27909678f066f010bbed5c1a71e75dd11ccdf29713a81d3bac0bafb6802b1d4c6813a5fa3199eb65a63d3fee7cf48550b38934c6d2aee4d57b74c7ccb4033a0599b8bc5a059bad15ae5ba564343fc46f3e609aecbc0a5b0c44cbbdd5c33faf7569b098c18aa1bc8aaa9f4abce62959d0514ae218b253b006feb78db8170bc9a7874bf8149b69b0c10f62e275e55967b3047edd7b2ff60f7e54de7fd39b52f56dad7c6dbf98d8496806f76cf551790b0f83cee0bb0352", 0xe5}], 0x4, &(0x7f00000007c0)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x80000000}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x8}}, @flowinfo={{0x10}}, @dstopts={{0x44, 0x29, 0x37, {0x0, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x0, [0x263]}}, @hao={0xc9, 0x10, @private2}, @generic={0x2, 0x4, "1adc4ec5"}]}}}], 0x74}, 0x800) (async) sendmsg$inet6(r6, &(0x7f0000000840)={&(0x7f0000000280)={0xa, 0x4e23, 0x101, @mcast1, 0x100}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000540)="ddf66767bd770d2b0046551070b6a66c5897a087c080f1c39f9d0ad7667ff9b821a37e99841ef2913a9e0214fd89c6bffc18257ea291c571b9b1db1b673bae1b8874e98e4681806d028ff6b3", 0x4c}, {&(0x7f00000005c0)="2564973b9e30cd097c27ee428794942f98169ea0b367ea2ebf481daa353b0d4ae8e768bf290252ad87fa6976dc5a2ec13560ee791f75f16b286b2e46419e5fcde5bb2205a1baaaf0eb727cbf661d75ba79675f7bdadcafea95a20797afc54bcd081ea0bf80d705e8b27e9fce621de2386d14b27e28488f9e5d71f4edb8ac91a45243b50e75bff030477ad57dfadf04f18733ccc940ea95c8a5b740708ad70a899cf2e090fbf45f98c940b4917c86bfa662cb726571b33eda", 0xb8}, {&(0x7f0000000680)="976351579010730a231d6ebe93b4c0513b3f276f91d634cdcc81e0b82fb2dc0642acea1bcfcf33adbdc1a8abb50dfb27909678f066f010bbed5c1a71e75dd11ccdf29713a81d3bac0bafb6802b1d4c6813a5fa3199eb65a63d3fee7cf48550b38934c6d2aee4d57b74c7ccb4033a0599b8bc5a059bad15ae5ba564343fc46f3e609aecbc0a5b0c44cbbdd5c33faf7569b098c18aa1bc8aaa9f4abce62959d0514ae218b253b006feb78db8170bc9a7874bf8149b69b0c10f62e275e55967b3047edd7b2ff60f7e54de7fd39b52f56dad7c6dbf98d8496806f76cf551790b0f83cee0bb0352", 0xe5}], 0x4, &(0x7f00000007c0)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x80000000}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x8}}, @flowinfo={{0x10}}, @dstopts={{0x44, 0x29, 0x37, {0x0, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x0, [0x263]}}, @hao={0xc9, 0x10, @private2}, @generic={0x2, 0x4, "1adc4ec5"}]}}}], 0x74}, 0x800) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="b500f5d161bcc41f1f840efe6cf09fc5", 0x10) openat$userio(0xffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$midi(r5, 0x0, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) 10.165905148s ago: executing program 3 (id=6844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x7, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009) r7 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r8 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x80, 0x0}}], 0x2, 0x0) r9 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f00000004c0)="fe5f7880bf9d0a97fb139b37ca923b8bf8a08134946b4a4495cc9685e529087d6226b72aa99888ea30932718c0486cc4b2e0e1451531b97faeed26d6d688d08a8d86f575cc2e974b802e0fd8de19afcb93ac0d08ce1562ffd0e6c00570a92f5d14", 0x61}], 0x1, 0x6080000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r7, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$rds(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000340)=""/38, 0x26}], 0x2, &(0x7f0000000780), 0x0, 0xc080}, 0x40004) r10 = socket(0x11, 0xa, 0x2f3) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00012cbd7000fcdbdf25420000000a000600bfebb2f78a3300000a0006006cf989353a3300000a000600ce95a6e15c9700000a00060050505050505000000a00060008021100000000000a00060008021100000000000a0006000802110000010000d18c36f3760fdcd5adfd9639eb7be236bb59faddc21aaa6b7b2b56a64389550400003278ae0dba296ed366a87d8053978c53aab50a498f57afd7ac61bb6348e159f4f395419c571dd276f72d412954f267407bb1c64f2a0b5beb01912d0c6f962521accbb0367b89bbb46120a9a28d22f2e3bc062c2297b550b4c3654f5bd0e8ec6b0bed"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 9.082375154s ago: executing program 4 (id=6846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 8.814156806s ago: executing program 2 (id=6848): fanotify_init(0x200, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8.5770247s ago: executing program 4 (id=6851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) r5 = userfaultfd(0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.9920921s ago: executing program 2 (id=6853): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt(0xffffffffffffffff, 0x6, 0x101, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x49) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r4, 0x0, 0x0, 0x2000c76d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xe7a}, 0x1c) 7.519250062s ago: executing program 5 (id=6854): socket(0x1d, 0x6, 0x3) socket$inet(0x2, 0x2, 0x7d) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) fcntl$addseals(r4, 0x409, 0x6) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0x10001, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x3, 0x6, 0x1], 0x200000, 0x200650}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.49333694s ago: executing program 1 (id=6855): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) r2 = inotify_init1(0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) ptrace$getenv(0x4201, r3, 0x5, &(0x7f0000000380)) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x178) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80047601, &(0x7f0000000340)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x0, 0x5d, 0x4d, 0x0, 0x9, 0xa, 0x8, 0xe4c, 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c00"], 0x160}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf93150", 0x5c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000400), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}], [{@pcr={'pcr', 0x3d, 0xa}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x8001, 0x4) 6.455074423s ago: executing program 4 (id=6856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd0000008019009fff00", [0x0, 0x2000000000001]}}) 6.268745793s ago: executing program 5 (id=6857): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xffff7ffc, 0x100006, 0xd, 0x3ac6, 0x5, "10120dfe0ef7f02000935b141ce0393d3ef600"}) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000000fe01", [0x8, 0xffffffff9673e35d]}}) 5.816594582s ago: executing program 4 (id=6858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x9, 0x8001, {{0x1c, 0x4, 0x3, 0x9, 0x70, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x7e, 0x0, 0x1, [0x8, 0x200, 0x3]}, @timestamp_prespec={0x44, 0xc, 0x63, 0x3, 0x1, [{@private=0xa010101, 0x657}]}, @cipso={0x86, 0x30, 0x1, [{0x7, 0xa, "d6a26ec902fcc507"}, {0x5, 0x10, "7c72f34e252252ba3ad87a18b391"}, {0x1, 0x10, "2d3ed38aae689ba5f0d6e27fb7dd"}]}, @generic={0x0, 0xb, "8ead0b3311711b548d"}]}}}}}) r2 = syz_clone(0x42850200, &(0x7f0000000900)="7f1283f3f7ac2bd3f9c3de4b7b2cfb8594664688c7d8a71d990eeb12dfd89bc7b4d038cc202d2ebc0658eabc62c2cdec2d1df3bc38be5f3cce1db023eac4d4677ad740ce5133e7f62d13a7058930ee9c559335b8e70fc3f348320cde16afe51beafc094dc9f8a58b58c26c25a89db0b80b2cc5042f8be29035e68aeb1b5fe2088f131e7cd3440ab6cee0051daf11b3b478d36d7812a421ece52ea22d808a9e6ccc55beaeda732fab9c4e6a669f9813fe81dc2aecb50271fa33b55c97964e5554ef151d65", 0xc4, &(0x7f0000000700), &(0x7f0000000a00), &(0x7f0000000a40)="483855258e76337c50972ec08c6239d21ed3a98591f4c1da6030965d60c3ceb0ced2e3e7435cef1fa4e0528c36fb4959a7100d4dd5c0e2ec92d22b67a12a39eb1e7a19736435d6ec50d6b456f403aad488e189f21c57d929382e9705819b16714a65bc04d3b48a4ada5bca09e8b670b1458dfbef086697e17fac76cdb09de3f67fe5d9a7b66412ae144ef261111feceff9f54bb9642b645222728b382c377409b0f73038540d633bccc687de4a9ce1ab62f5090022994a43b6b769431fe6a972bce9251e1d4932cf293d3e47a3ba444232580a237f6b1034b6a80c35d65012a37665e22c060f1c22874fa37b0e6d5829796223a7") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000b40)=0x0) syz_clone3(&(0x7f00000005c0)={0x208000, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x10}, &(0x7f0000000b80)=""/245, 0xf5, &(0x7f0000000480)=""/153, &(0x7f0000000240)=[0x0, r3, 0xffffffffffffffff, 0x0, r2, 0xffffffffffffffff, 0x0], 0x7}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000001000000000e560000007000000009ea5", @ANYRES32=0x0, @ANYBLOB="000300005650030008001f00ff07000008000500", @ANYRES32=r1, @ANYBLOB="050010000000000008002e000000000008001300", @ANYRES32=r4, @ANYBLOB="a400348014003500767863616e3100000000000000000000140035000000000000000000000000000000000014003500626f6e645f736c6176655f310000000014003500697036677265300000000000000000001400350067656e65766531000000000000000000140035007465616d5f736c6176655f30000000001400350076657468315f746f5f626f6e640000001400350076657468305f746f5f6272696467650008002800ec640000"], 0xf4}, 0x1, 0x0, 0x0, 0x44850}, 0x8044) unshare(0x26030000) r5 = msgget$private(0x0, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) unshare(0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000040)='v2\xeful\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/60, 0x3c}], 0x1, &(0x7f0000000840)=""/135, 0x87}, 0x80012000) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r8) msgsnd(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x4, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x5800) 5.805663991s ago: executing program 5 (id=6859): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') openat$audio(0xffffff9c, &(0x7f0000000000), 0x1000, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) 5.628245118s ago: executing program 2 (id=6860): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001440)={0x8, 0x0, {0x9, @struct={0x5, 0x80000005}, 0x0, 0x4, 0xffffffffffffffff, 0x95b, 0x1, 0x3be, 0x4, @struct={0xffff0a6e, 0x6}, 0x0, 0x0, [0x401, 0xe74, 0xf83, 0x72e, 0x100000001, 0xdc6e]}, {0x7ff, @usage=0xa52, 0x0, 0x7, 0x9, 0xb2, 0x6, 0xa000000000000, 0x103, @struct={0x81, 0x1}, 0x8, 0xd, [0xfffffffffffffff7, 0x9, 0x1b36, 0x9, 0xffffffffffffffff, 0x4]}, {0x3, @struct={0x7fffffff, 0xff}, 0x0, 0x1, 0xfffffffffffffcd9, 0x10001, 0x0, 0xe, 0x80, @struct={0x5, 0x6}, 0x1, 0x9, [0xbcf, 0x2, 0x4, 0x9, 0x6, 0x2]}, {0x9, 0x1, 0x6}}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000440)={{r0}, r2, 0x18, @inherit={0x58, &(0x7f0000001840)=ANY=[@ANYBLOB="01000000000000000200002b52090000000000000000000002000000000000002e00000000000000040000000000000ef64708b36357930927c100ea00000000000000000000000000000007000000000000000000008000000e0008000000000000008fc4a4bfa51367461732c44f89cb07cf5be4e606d830ac1056bec5652ee25bbde3e652b4b3336a19fadbc6c494301b14d092"]}, @devid=r3}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "41c0537f19690cd7945060f524cdb875af5413d65b5f6f342a71406b0f796cc1191e1ecd916f54350f5cbfd5896a119fd1d5137dcdbb6a497f35099c1dd374e82b44205929de6f5a3d34c6a4de4d7fc1ed8475df44d91b190113bb920c0bf5c89c13e219ab37ae309b0100dc743f0f72109379dedc37a8bfa1b3c9c71bf823d8a5b7cca690b1d8e57080dfc1add8e83dbe05186101ff8ff3be2931f2b34c53942890c18707702679f77ed8a45f24646f47cfd378c215093d708a8c53f656993df90974147953df95bf23c9cb2caa4a5e30f10a0fffc410151f15fbcffb19002c635a7539de507c89478209e870201702c9e56ef23457a96269196f5cdd404b76"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000180)='\xbf\x9a', &(0x7f00000004c0)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b3\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\v\x14/\x92(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\x9c\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9!\xfa\x88\xb0V\xa7\x93\x1c\x9d\xce\xb7@`#\xd6\n\xbf\xba\xeeV{\xe7\xdd\xa2\xbdd\x04\x0ft\xc7G\xf2K\xf6\x1b%/$\x9b\xe3@\xd9 \xb2\xf5x\xe3g\x8dh\xfe\x81/\xe6\xb5\x12\x03\xed\xeas\x1ca\x14\xd1\xb1\xf3\xf5c\xd3\x0e\x82k\xe2h\x95\x99\xf7\xd6\xcdh=\x8cz\x8d\xc9\x0f\x93\x02YS\xf9\xcb\xaf\x86\nx%kR\xfe\x1eQ\xa5L\xec\x00o\xbb\xcb\xa2\x81\x15\xa6\xef\xc0\x01ShM\xcb\xbfE\xcd\x9b\xbc\xd83\x87\xa7\xceq\x00\x00\x00\x00\xdd\'J\x92/\xf6\x14FD\r\xf4\xdf\xdd\x86\xe5,\xa8N\x8f\v\xca\xf8\xec\x890\xd6\x97V)\xea', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$nl_generic(r7, 0x0, 0xc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x80) r10 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x7d, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x68, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010102, @empty}}}}) 4.929227908s ago: executing program 1 (id=6861): fanotify_init(0x200, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0xffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000140), &(0x7f0000000080)) 4.928097423s ago: executing program 5 (id=6871): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) r2 = inotify_init1(0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) ptrace$getenv(0x4201, r3, 0x5, &(0x7f0000000380)) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x178) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80047601, &(0x7f0000000340)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x0, 0x5d, 0x4d, 0x0, 0x9, 0xa, 0x8, 0xe4c, 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c00"], 0x160}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf93150", 0x5c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000400), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}], [{@pcr={'pcr', 0x3d, 0xa}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x8001, 0x4) 4.637534883s ago: executing program 2 (id=6862): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000c010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) getsockname$unix(r2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x61, 0x4, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x80000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) r4 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x8400) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000340)={&(0x7f0000000300)=[{0xffff, 0x10, 0x0, 0x0}, {0x6, 0x800, 0x0, 0x0}], 0x2}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f00000002c0)={'\x00', 0x4, 0x8000, 0x0, 0x9, 0x7ffffffffffffffd, r7}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@local, 0x10005}, 0xe5, 0x800000000400002, 0x6, 0x20000000}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x4, 0x0, 0x40, 0x4bbe}]}) r8 = socket$netlink(0x10, 0x3, 0x5) writev(r8, &(0x7f0000000500)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}, {&(0x7f0000000440)="fec3bed59761a2cc0918968f76de7ee455be978953fc903c2dc5bbf0f42d766db64d48bb944bf2f47b452f8fd4189413428398a312c7a333637de4aadde43f3cb501e162f131eefa50305ce871dc7fadb5ed2568aa4d6ae2d387f5ca8973031501919fd6f2fae53bb134b97bcc47f0c1ea3e779a5117e7890d44eac0132e14a3851792b48a7ce0dca78db449df45a89b1068a5dc302c2e36ea811df62325f9fc4e", 0xa1}], 0x2) 4.415430403s ago: executing program 4 (id=6863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000300", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.005997409s ago: executing program 3 (id=6864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x83, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000400100000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100020000000000000000000000004000"], 0xb8}}, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000005c0)={{0x1, @addr=0x1}, "522ec2c4dfdea0e049be106158e4f5aa2e9a2a24b978bb029b829364f1d8fecd", 0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x0, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) r6 = dup(r4) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0xa, 0x0, "1b0700000000000000fff4dd40073407b95d1faec8f20000000014efff000002", 0x3234564e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00G\x00'/28], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.005841482s ago: executing program 4 (id=6865): r0 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02) r1 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f7, 0x10100, 0x1}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x3, &(0x7f0000000340), 0x0, 0x4}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, &(0x7f0000000440)) io_uring_enter(r1, 0x48ed, 0x1000000, 0x2, 0x0, 0x0) 3.005012385s ago: executing program 5 (id=6875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0xe, 0xffff}, {0xffe0, 0x5}}}, 0x24}}, 0x0) 2.576535733s ago: executing program 5 (id=6866): syz_open_dev$usbmon(&(0x7f0000000340), 0x14c, 0x28041) ppoll(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$netlink(0x10, 0x3, 0x2e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x1e01, 0xfffff9, 0x80000440], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xe0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x1004009, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80}}]}}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x161}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x48, 0x0, 0x0) r7 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000180)={0x5, r7, 0x15, {0x6, 0x3}, 0x7f}, 0x1) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) inotify_init() 1.559698137s ago: executing program 1 (id=6867): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x4000, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xe7a}, 0x1c) 1.16207587s ago: executing program 1 (id=6868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900c9ff00", [0x0, 0x2000000000001]}}) 1.137671353s ago: executing program 2 (id=6869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x33}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x65}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x40001) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x976, 0x56}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xa8b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3d4}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0xc084}, 0x40) cachestat(r0, &(0x7f00000002c0)={0x2, 0x7}, &(0x7f0000000300), 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000003c0)={r5, 0x8, {0x0, 0x0, 0x0, 0x517d82e5, 0x2, 0x0, 0x9, 0x10, 0x8, "bcd9fc212715733470291c75f017449ed9ac558efac5083b94624d3f8cd9ea290285a255a6607c944f04784d63f6918e40937f48cc6ec409a08a09a5e71d89a0", "a0002bcf4a0c9c95d6f7f7bdd263973a431b8e8868e8b3d12caa0b5115dec64a046d665148abf0055e3ec7117731ae5ed135983b96c5f941df3ec635f2f3f83f", "a32fd988ddb7915bc0eabe1021127aadf7d35f1ef314de4b3bb5ac3fcedfe543", [0xb9, 0x1000]}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000580)={@empty, 0x0}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x8000, 0x10, 0x8, 0x4, {{0x23, 0x4, 0x3, 0x25, 0x8c, 0x67, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0xc, 0xb1, 0x0, 0x1, [0xfffffffd, 0xee7b]}, @timestamp={0x44, 0x1c, 0xb, 0x0, 0x7, [0xcb7, 0x644, 0xc0, 0x3, 0xffff0000, 0x4aad]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x24, 0xb3, 0x3, 0xf, [{@multicast2, 0xff}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@loopback, 0x200}, {@broadcast, 0xffffffff}]}, @rr={0x7, 0xb, 0xac, [@multicast2, @broadcast]}, @end, @lsrr={0x83, 0x1b, 0xb0, [@loopback, @rand_addr=0x64010101, @empty, @remote, @broadcast, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048040) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000880)={0x89, @private=0xa010101, 0x4e24, 0x1, 'sed\x00', 0x1, 0x5, 0x5}, 0x2c) setuid(0x0) fstat(r4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)=@updpolicy={0x20c, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, {{@in=@multicast2, @in6=@local, 0x4e21, 0xfff9, 0x4e22, 0xe, 0x2, 0x80, 0x0, 0x84, 0x0, r11}, {0x1ca4, 0x8000000000000000, 0x10000000000, 0x77, 0x9, 0x8, 0x4, 0x6}, {0x0, 0x0, 0x3, 0x5}, 0x8, 0x6e6bb1, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x2, 0xf1, 0xb, 0x1, 0x81}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x33}, 0xa, @in=@broadcast, 0x34ff, 0x0, 0x0, 0x3, 0x40, 0x3, 0x6}, {{@in=@remote, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3501, 0x1, 0x0, 0x40, 0xfba, 0x90}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4d3, 0x6c}, 0x2, @in=@multicast2, 0x3504, 0x0, 0x1, 0x4, 0x1, 0xde4, 0x9}, {{@in6=@empty, 0x4d4, 0x2b}, 0xa, @in=@empty, 0x34ff, 0x3, 0x1, 0x4, 0xfffffff9, 0x8, 0x3}]}, @offload={0xc}, @proto={0x5, 0x19, 0x3c}]}, 0x20c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) openat$tun(0xffffff9c, &(0x7f0000000c40), 0x200080, 0x0) r12 = openat$binder_debug(0xffffff9c, &(0x7f0000000c80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r12, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x9c, r13, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfc}, {0x6, 0x11, 0xcc77}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2d}, {0x6, 0x11, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$dir(0xffffff9c, &(0x7f0000000e80)='./file0\x00', 0x103000, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000ec0)={0x0, 0x0, 0xb8, 0x98, ""/152}, &(0x7f0000000f80)=0xb8, 0x1) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001000), r3) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r14, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c1}, 0x400c000) setsockopt$SO_J1939_SEND_PRIO(r12, 0x6b, 0x3, &(0x7f0000001100)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001140)={0x0, 0x6}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000011c0)={r15, 0x2}, &(0x7f0000001200)=0x8) 527.259965ms ago: executing program 2 (id=6870): clock_adjtime(0x17, &(0x7f0000000000)={0x100000000, 0x9b, 0x8, 0x0, 0x7, 0xa6e4, 0xfffffffffffffff7, 0x3, 0x7, 0x6, 0x4, 0x2, 0x62, 0xc, 0x8, 0x7, 0x5, 0x401, 0x8000000000000000, 0x0, 0xd9, 0x4, 0x6, 0x934, 0x8000000000000000, 0x7}) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 240.351401ms ago: executing program 1 (id=6872): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0xffff7ffc, 0x100006, 0xd, 0x3ac6, 0x5, "10120dfe0ef7f02000935b141ce0393d3ef600"}) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000000000002", [0x8, 0xffffffff9673e35d]}}) 0s ago: executing program 1 (id=6873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x8901, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$random(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev2(r4, &(0x7f0000000340)=[{&(0x7f00000000c0)="8939c60504de77bbd081ac68b503d2d16ea59f79143d4df40e1e0634d3965d2e1da850d1b2c266a1237666009be0b0cb8f7417dc", 0x34}, {&(0x7f00000001c0)="eee89ceaa3cb91ec889706a88b", 0xd}], 0x2, 0xe, 0x0, 0x0) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r5 = socket(0x400000000010, 0x3, 0x0) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002780)=@deltfilter={0x4474, 0x2d, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff3, 0xe}, {0xf, 0x6}, {0xffff, 0x13}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_FW_POLICE={0x1c, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff00000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x43a8, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x6}}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xc}}, @TCA_FW_POLICE={0x434, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1, 0x0, 0x9, 0x0, 0x7, 0x5, 0x2, 0x1000, 0xa, 0x5, 0x0, 0x5, 0x0, 0x6, 0x4, 0x81, 0x6, 0x100, 0x0, 0x9, 0x3, 0x40, 0x7, 0x10001, 0x0, 0x7d1d, 0x2, 0x7, 0x80000000, 0x6, 0x7ff, 0x5, 0x2, 0x8, 0xd, 0xe821, 0x3, 0x5c9, 0xe3e, 0x9bd5, 0x4, 0xf, 0x3ff, 0x50b, 0x5, 0xffffffff, 0x3, 0x8, 0xcf, 0x4, 0x6, 0x0, 0xfff, 0xf8000000, 0xffff, 0xc4, 0x7, 0x23, 0x9, 0xcd, 0x9, 0x0, 0x0, 0x6, 0x4, 0x9, 0x3, 0x8, 0xf0f, 0x7, 0x9, 0x3, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3, 0x0, 0xffffffff, 0xea233af, 0x8d0, 0x8, 0x0, 0x101, 0x1, 0x7, 0xe, 0x5, 0x3, 0x4, 0xad, 0x4, 0x3, 0xf81, 0x0, 0x1, 0x3, 0x1000, 0xf3, 0x4, 0x8, 0x6, 0x2, 0x4, 0x3, 0x7, 0x0, 0xa, 0xbcaa, 0xffffffff, 0xfffff800, 0x401, 0x5, 0xfffffff6, 0x5, 0x1, 0xff, 0x1ae, 0x3ff8, 0x6, 0x7, 0x9, 0xfff, 0x3, 0x7, 0x3, 0x4, 0x9, 0x400, 0x8, 0x9, 0x5, 0x0, 0x0, 0x3e3, 0xfffffdd5, 0x3, 0x3, 0x1ff, 0x5, 0x1000, 0x0, 0x10000, 0x6, 0xe68, 0x9, 0x0, 0x5, 0x4, 0x5, 0x2, 0x4502, 0xc, 0x5, 0x0, 0xa, 0xc, 0x2, 0x8, 0x7, 0x4, 0x2, 0x9, 0x28, 0x2644, 0x9, 0x1, 0x1, 0x1ff, 0x2415, 0xffffffff, 0x3341, 0xc, 0x101, 0x6, 0x9, 0x39a805c3, 0x8, 0x0, 0x5, 0x9, 0x0, 0x9, 0x0, 0x3, 0x46eb, 0x5aa, 0x61, 0x3, 0x2, 0x653, 0x2, 0x93, 0x3, 0x9, 0x8000, 0xfff, 0x2, 0x1, 0x6, 0xbd63, 0x0, 0x10000, 0x7ff, 0xfd, 0xa, 0x7, 0x8, 0x9, 0x6, 0xc, 0x5, 0x1, 0x6, 0x0, 0x0, 0x101, 0x4d48bf23, 0x7, 0x6, 0x7, 0x4, 0xffffffff, 0x8, 0x10, 0x2, 0x2, 0x9, 0x5, 0xffff, 0x7fff, 0x31, 0xbe, 0x5, 0x2, 0x5, 0x7fff, 0x9c5c, 0xfffffffb, 0x7fff, 0x1, 0x5, 0x81, 0xfffffff8, 0x5, 0xffffffef, 0x4, 0x0, 0x6, 0x80, 0x8, 0xffffffff, 0x8, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xb}}, @TCA_FW_ACT={0x3f58, 0x4, [@m_mpls={0x10c, 0x11, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x7, 0xffffffffffffffff, 0x9, 0x1ff}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0xb4, 0x6, "f520d2ad1ea9ca2eab61f508d7bb6f84bf8d0ca267d9ffb300f03d679cd0335979bcd3df3dfc431467731eafd1917f036b298c01129f524b0ff3e766cd77458cb9b85df12fed06073757c09088aacb22f6f67013c07e4f7a190b0f4299479d4eb11c0c1620b20c03c1ad1de4703889db7adbb58729af375e07fcba98961cd61b1978da5d6a78b6987c79681477735734a92cf11cfc58868af8fb031c80bb1cd3abc1261a2a17ea1a9cec02055fcd7401"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x3bf8, 0x15, 0x0, 0x0, {{0xa}, {0x3ae4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xfac, 0xc9, 0x10000000, 0x1, 0x10}, 0x3, 0x4, [{0x200, 0x10000, 0x1, 0x40, 0xc7c, 0x8}, {0x1, 0x2cd, 0x8, 0x8, 0x7fff, 0x4}, {0xd, 0x8570, 0x7ff, 0x9, 0x6e4d, 0x80000000}]}, [{0x4, 0xfffffff9, 0x4, 0x10, 0xae2f, 0x7}, {0x1ff, 0x6, 0x0, 0x7ff, 0x46, 0x6}, {0xa2, 0xc, 0x7, 0xff, 0x7, 0x6}, {0x309, 0x2, 0x3, 0x9, 0xfffffff8, 0x606}, {0x6, 0x7, 0x8c, 0xfff, 0x8}, {0xc, 0x3a4, 0x2, 0x4, 0x6, 0x4}, {0x8, 0x1, 0xa1, 0x9, 0x9, 0x9}, {0xc46, 0xc2, 0x5, 0x6, 0x61, 0x2}, {0x2, 0x8, 0x3, 0x9, 0x8001, 0x7fffffff}, {0x0, 0xa, 0x4, 0x8, 0x1, 0x7}, {0x6, 0x4, 0x0, 0xfff, 0x6, 0x22}, {0x9, 0x9, 0x4, 0x3, 0xb2, 0x7}, {0x2, 0xd3, 0x7, 0x55c, 0x8, 0x8}, {0x8001, 0x9, 0x2, 0x5, 0x1, 0xe1}, {0x1, 0x7, 0x3, 0x8, 0x7, 0x9}, {0x2, 0x100, 0x8, 0x7, 0xbd, 0x5}, {0x7, 0x4, 0x401, 0x9, 0x7, 0x6}, {0x2, 0x3, 0x1000, 0xae, 0x542b, 0x2}, {0x8, 0x2, 0x5, 0xfff, 0x9, 0x136f08d}, {0x8, 0xff, 0x23, 0x49b8, 0x800000, 0x5f93}, {0x3ff00, 0x0, 0x3, 0x5, 0x1, 0x3}, {0x4, 0x6, 0x0, 0x9, 0x1000, 0x7}, {0xfffffff8, 0x4, 0x0, 0x0, 0x6, 0x80000001}, {0x3, 0x4, 0x2a, 0x0, 0x6c3, 0x7}, {0x2, 0xe, 0x7fffffff, 0x6, 0x3, 0x4}, {0x2, 0x6, 0xd8, 0x5, 0x9, 0x2}, {0x7, 0x0, 0xfd, 0xfcc7, 0x4, 0xff}, {0x10000, 0x1000, 0x8e, 0x9, 0x80000000, 0xd}, {0x8, 0x6, 0x1, 0x0, 0x8, 0x6}, {0xffffffc0, 0x3, 0x1000, 0x1, 0x5, 0x3ff}, {0x5, 0xae43, 0x8, 0x0, 0xfffffff9, 0x747}, {0x40, 0x0, 0x8f, 0x200, 0x200, 0xd431}, {0x72f, 0x1, 0x682, 0x37, 0x5, 0x8}, {0x9, 0x7, 0x9, 0xa, 0xc9, 0xfffffffe}, {0x9, 0x0, 0x9, 0x1}, {0x4, 0x3, 0xff, 0x1, 0x23}, {0x5, 0x8001, 0xfffeffff, 0x2, 0xa, 0x9}, {0x9, 0x7, 0x4, 0x9, 0x7, 0x1}, {0x9, 0x837, 0x7, 0x5, 0xebca, 0x5}, {0x9, 0x7, 0x6, 0xd7}, {0x1, 0x0, 0x3, 0x8, 0x2, 0x800}, {0x7d, 0x200, 0xd, 0x7, 0x52f, 0xd3df}, {0xffffa63f, 0x7, 0xbdae, 0x1, 0x5, 0x2}, {0x3, 0x82, 0xfffffeff, 0x9, 0x8, 0x5}, {0x7fff, 0x2, 0x0, 0x8, 0x7, 0x4}, {0x5, 0x5, 0x113, 0x2, 0x3, 0x8}, {0x3, 0x7, 0x6, 0x10001, 0x7ff, 0x8}, {0x6, 0x0, 0x5, 0xfffffc01, 0x3, 0xb}, {0x7, 0x9, 0x3, 0x1, 0xfe, 0x3}, {0x5, 0x40, 0x9, 0x1, 0x400, 0x8}, {0x7f, 0xf9, 0x8, 0x8, 0x8, 0x300}, {0x1, 0x7, 0x4, 0x8, 0xdfa, 0xa}, {0x5, 0x1, 0x0, 0x1b38000, 0x0, 0x80}, {0x6, 0x4, 0x0, 0x3, 0x4, 0x1000}, {0x2, 0x3, 0x5, 0x49a, 0xa}, {0xfffffffa, 0xb, 0xfffffffd, 0x7, 0xde, 0x2}, {0x6, 0x7ff, 0x8001, 0xdf, 0x5, 0x2}, {0xfffffffc, 0x8, 0x9, 0x2, 0x0, 0x7ff}, {0x4, 0x2, 0x81, 0x5, 0x3, 0x658a7262}, {0x5, 0x1, 0x8, 0x1ff, 0x2, 0x9}, {0x8177d800, 0x7, 0x7, 0x0, 0x2, 0x8}, {0x1, 0xfffffffa, 0x734, 0x81, 0x10001, 0xb9}, {0x8, 0x4b3, 0x0, 0x4, 0x7fff, 0x2}, {0x2, 0xb34, 0x62b739f3, 0x4, 0x38, 0xfff}, {0x2, 0x6, 0xca, 0x9, 0x45, 0x4}, {0x6, 0x18ec, 0xfffffffb, 0x200, 0x6, 0x7fffffff}, {0x2cd4, 0x7fff, 0xfffffffe, 0x3, 0xd3}, {0x200, 0x100, 0x0, 0x3a, 0x7fffffff, 0xfffffff8}, {0xfcc, 0x7ab, 0x87, 0x10, 0x3, 0x9e}, {0x1dc, 0xe3, 0x0, 0x2, 0xfffffff9, 0xcc88}, {0x101, 0x3, 0x10000, 0x81, 0x1, 0x7}, {0x9, 0x7, 0x4, 0x3, 0x9, 0x428}, {0x1, 0x40000, 0x1000, 0x8, 0x9, 0x5}, {0x6, 0x788, 0x7, 0x81, 0x1, 0xc45}, {0xd4bc, 0x1, 0x2, 0x5d66, 0x8, 0x1000}, {0xe, 0x4800000, 0xffff, 0xb1e, 0xfffffffb, 0xfffffffc}, {0x2, 0x3, 0xfffffffb, 0x0, 0xe, 0xc57}, {0x3, 0x0, 0x2, 0x3, 0x7fff, 0x7}, {0xfffffff3, 0x5, 0x7, 0x2, 0x9, 0x98e}, {0x326, 0x4, 0x3, 0xa, 0x4, 0x7}, {0x7, 0x7fff, 0xc98, 0x80000000, 0x3ff, 0x49c}, {0x80, 0x9, 0xf7b2, 0x7, 0x2, 0x3}, {0x0, 0x7, 0x8, 0x6, 0xfffffffa, 0x400}, {0x501b, 0x2, 0x2, 0x80, 0x40, 0x3}, {0x6, 0x68, 0x5c, 0xffffffff, 0x4, 0x2}, {0x7, 0x7, 0xed53, 0xfffffffe, 0x3, 0x400}, {0x8000, 0x0, 0xfffffb23, 0x1, 0x5, 0x5}, {0x2, 0x3, 0x1b, 0x4, 0xf}, {0x2, 0xffff, 0x552e9e38, 0xc, 0x5c98, 0x9}, {0x2b3, 0x7, 0x5, 0x8, 0x3, 0xfffffffc}, {0xd2d, 0x3, 0x800, 0x7, 0x5, 0x1}, {0x14, 0x10, 0x5, 0xaa, 0x0, 0x65}, {0x7, 0x2, 0x5, 0x9, 0x7ff, 0xfffffff8}, {0x6, 0x2, 0x0, 0x6, 0x2, 0x5}, {0xa6cf, 0x6, 0x8, 0x1, 0x1ff, 0x4}, {0x1, 0x6, 0x4, 0x9, 0x74, 0x5ee}, {0x25, 0x0, 0x3e35, 0x6, 0x3, 0xf4}, {0x9, 0x7, 0x7, 0xe, 0x7, 0x5}, {0xe, 0xe00000, 0x3, 0x5, 0xc1a0, 0x9}, {0xfffff801, 0x5, 0x6, 0x2, 0x1, 0x2}, {0x1c, 0x6, 0x62e, 0xb94, 0xfffffffd, 0x6}, {0x7097, 0x1, 0x4, 0x2, 0x80000001, 0x14}, {0x1, 0x5, 0xfffffff8, 0x2, 0x2, 0x6}, {0xb712, 0x6, 0x1, 0x0, 0x5, 0x7ff}, {0x61d6, 0xfffffffe, 0x3, 0x8, 0x5, 0xfffffffa}, {0x9, 0x7, 0x1ff, 0x6, 0x1, 0x9}, {0xd0, 0x7, 0xe03, 0x2, 0x2, 0x9}, {0xc1, 0x7, 0x6, 0x5, 0x4, 0x21}, {0x3, 0x6c16, 0xc38, 0xb, 0x2, 0x4}, {0xfffffff5, 0x1, 0x100, 0x1000, 0xc, 0x41cbbbb0}, {0xf, 0x4, 0x5, 0x8, 0x1000, 0x10}, {0x6, 0xfffffffe, 0x10, 0x7, 0x7, 0x3}, {0x6, 0x9, 0x7, 0x9, 0xffffffff, 0x7fffffff}, {0x7fffffff, 0x7fffffff, 0x0, 0x5, 0x6, 0x2}, {0x5, 0xf3, 0x1, 0x3ff}, {0x0, 0xd, 0x5c, 0x2, 0x9a74, 0xfffffff1}, {0x1ff, 0x2, 0x5, 0x6, 0x0, 0x7b90053b}, {0x9, 0x7ff, 0x809, 0x5, 0x2}, {0x4, 0x9ca4, 0x9, 0xe, 0xf, 0xa000000}, {0xc, 0xf, 0x1000, 0xe, 0x80000001, 0x2}, {0x6, 0x800, 0x9, 0x7, 0x9, 0x10}, {0x6, 0x3, 0x2, 0x6, 0xfffff7a4, 0x6}, {0x80000001, 0xbbae, 0x3, 0x101, 0x8001, 0x7}, {0x5, 0x1, 0x4, 0xe, 0x0, 0x3}, {0x9, 0x7, 0x2, 0x7, 0x400, 0xb1c}, {0x1ff, 0x7ff, 0x3ff, 0x5, 0x6, 0xc3c}, {0x800, 0x0, 0x5, 0x1, 0x318, 0x3}, {0x6, 0x7, 0x3, 0x800, 0xfffffffc, 0x10001}], [{0x2, 0x1}, {0x2, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x2}, {0x4}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x9e4cc5edf2c65489, 0x1}, {0x1}, {0x1, 0x77d6744a10bb616}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0xd8ce5d71ffe46e3d}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x8, 0x60a, 0x6, 0x7, 0xffffffff}, 0x1, 0x7d, [{0x800, 0x0, 0x1, 0x1, 0x7199, 0x80000001}, {0x1000, 0xffff0001, 0xa, 0x6, 0x9, 0x9}, {0x800, 0x4, 0x5, 0x400, 0x4, 0x2}, {0x6, 0x5, 0x2, 0x4, 0xa, 0x8f}, {0xffffffff, 0x30, 0xffff09c4, 0xffffffff, 0x4, 0x10}, {0x7709, 0xa, 0x5, 0x1, 0x7fff, 0x9}, {0x1, 0x247b, 0x3, 0x3c, 0x1d08, 0x31bbcd25}]}, [{0x9, 0x4934, 0x1, 0x1, 0x4, 0x2}, {0x200, 0xc03, 0x4, 0xfffffffe, 0x6, 0x1}, {0x5, 0x3, 0x7, 0x8, 0x4, 0x8000}, {0xc9f3, 0x6, 0x9, 0x0, 0x25fa3ff4, 0x1000}, {0x80, 0xfffffff8, 0x1, 0x800, 0x2, 0x5}, {0x1, 0x8000, 0x6, 0x9, 0x6, 0x4}, {0x3, 0x8, 0x6, 0x2, 0x8}, {0x2, 0x4, 0x1, 0x1, 0x1, 0x6e12}, {0xfffffff9, 0x0, 0xfffffff9, 0x337, 0x2, 0xa57}, {0x7f, 0x9, 0x5, 0x100, 0x5, 0x7cf1}, {0x6, 0x6, 0x8, 0x3, 0x3, 0x3}, {0x10f57248, 0x7, 0xffffff7f, 0x2, 0x6, 0x1}, {0x5, 0x3ff, 0x8, 0x0, 0x976, 0x3}, {0x4, 0x5, 0x4, 0x5, 0x8000, 0x1}, {0x7ff, 0x4, 0x8, 0xa, 0x2, 0x5}, {0x200, 0x2, 0xf, 0x6, 0x6, 0xab8}, {0x7fffffff, 0x3, 0xc1e, 0x0, 0xfffffff7, 0x927e}, {0x7, 0x7f3, 0x585a, 0x2, 0x8}, {0x3, 0x4, 0x6, 0x9, 0x2, 0x4d9}, {0x1000, 0x8, 0x6, 0x8, 0x3, 0x1}, {0x6, 0x0, 0x6, 0x0, 0xf6}, {0xc, 0x6, 0x1, 0x2, 0x1, 0xfffff800}, {0x6, 0xcf1, 0xfffffffa, 0x7ff, 0x8, 0x100}, {0x5, 0x3, 0x4, 0x4, 0x8d6, 0xbfe9}, {0xffff5486, 0xffffffff, 0x4, 0x3, 0x800, 0x5}, {0xfeaa, 0x9, 0x7fff, 0x1a, 0xb48, 0x9}, {0x1, 0xfffffff7, 0xaf, 0xdd, 0x7, 0x400}, {0x0, 0x6, 0x75a2, 0x7, 0x2b9}, {0xf, 0x100, 0x9c, 0x8, 0x3, 0x6}, {0x6, 0x800, 0x2, 0x2, 0xc9, 0xc}, {0x7, 0x676, 0x5, 0xfffffffb, 0x1ff, 0x1}, {0x0, 0x5b84, 0x9, 0x5, 0x4, 0x7fffffff}, {0x7, 0xfffffffb, 0x41b, 0x3, 0x4, 0x10000}, {0x6, 0xdf8, 0x5, 0x7aaec09a, 0x6b, 0x4}, {0xfffffff9, 0x6, 0x8, 0xfffffe00, 0x0, 0x3}, {0x1, 0x5d, 0x539, 0xfff, 0xe1e, 0x3}, {0x401, 0x3ff, 0x8, 0x81, 0x2, 0x2}, {0x1, 0x7f, 0x5, 0x8000, 0x4, 0xffffffba}, {0x80, 0x3, 0x6, 0x6, 0x7, 0x4144}, {0xfffffffd, 0xb4, 0x9, 0x6, 0x9, 0x9}, {0xc1c, 0x7, 0x5d36, 0x401, 0x8, 0x1}, {0x8, 0x6231, 0x79f, 0x8, 0xfffffc00, 0x5}, {0x3, 0x7, 0x40, 0x75, 0x7, 0x400}, {0xe36, 0x6, 0x0, 0xfffffffd, 0x28e8, 0xfffffffe}, {0xbe, 0x81, 0x8, 0x3, 0x4, 0x45}, {0x4, 0x89, 0x6, 0x8, 0x4, 0x7}, {0xe50f, 0xff, 0x8, 0x8, 0x3, 0xd}, {0x400, 0x442, 0x2, 0x9, 0xc60, 0xd8}, {0x80, 0xec1e, 0xd, 0xffffffff}, {0x9, 0x9, 0x7, 0x1, 0x7, 0x200}, {0x5, 0x10200, 0x5, 0xefba, 0x0, 0x1}, {0x50, 0xb, 0x5, 0x101, 0x9, 0x94}, {0x9, 0x2, 0x3, 0xfff, 0xe9, 0x1}, {0xfffffff3, 0xea5, 0x8, 0xc5, 0x9, 0x1}, {0x2, 0x401, 0x7, 0x8001, 0x3ff, 0x35}, {0xffff, 0x4, 0x3ff, 0xff, 0x99, 0x6}, {0x10, 0xfffffffb, 0x858, 0x5, 0x4, 0x2}, {0x8, 0x0, 0x3, 0x6, 0x4, 0x10001}, {0x634, 0x3, 0x8, 0xfffffff7, 0x6, 0x2}, {0x0, 0x1, 0x7, 0xa18, 0x8, 0x6}, {0x5, 0x1, 0x81, 0x40, 0x9, 0x9}, {0x7fffffff, 0x1000, 0x100, 0xbb6, 0x2, 0xb}, {0x100, 0x1, 0xed5b, 0x5, 0x101, 0xd6}, {0x3, 0x7fff, 0x9fe1, 0x6, 0x2, 0x790}, {0x80000000, 0x4, 0x4, 0x7, 0x3, 0x8}, {0x3ff, 0x100, 0x800, 0x10001, 0x8, 0x1}, {0x7, 0x7, 0x3, 0x5, 0x2, 0x8}, {0x5, 0xfffffffb, 0xd, 0xffffffd0, 0x9, 0x5}, {0xa, 0x80, 0x4, 0xa, 0x8, 0x5905}, {0xfa6, 0x1, 0x0, 0x4, 0x5, 0xe4}, {0x947, 0x6, 0x6, 0x8, 0xb527, 0x101}, {0x9, 0x4c4, 0xec, 0x6, 0x2, 0x3}, {0x7, 0x7, 0x4c, 0x1, 0x2, 0x8}, {0x2, 0x0, 0xffffffff, 0x7, 0x50, 0xa09}, {0x3, 0x5, 0x0, 0xffff, 0x7, 0xba}, {0x3da0, 0x6, 0xd, 0x4, 0x80000, 0xbf3f}, {0x9, 0xfff, 0x562d, 0xce, 0xfffffffe}, {0x0, 0x8, 0x4, 0x8, 0x19}, {0x10, 0x101, 0x200, 0x2, 0x231, 0xfffffffa}, {0x8c, 0x2, 0x8, 0x8, 0xb42, 0xb}, {0x9, 0x7, 0x7, 0xa0f, 0x9d9, 0xc7}, {0x8, 0x3, 0x7fffffff, 0x9, 0xb, 0x8}, {0x0, 0x7ff, 0x7, 0x5, 0x8}, {0x7, 0xff, 0x3, 0x2, 0x1, 0x7fff0}, {0x4, 0xfd1, 0x2, 0x4, 0xff, 0x7}, {0x5b74, 0xd6d2, 0x3ff, 0xf, 0x5dc, 0x10000}, {0x8000, 0x5b, 0x3, 0x69, 0x9, 0x7}, {0x5, 0x2, 0x0, 0x80, 0x8ec, 0x7fff}, {0x80, 0x0, 0x9, 0x6, 0x4, 0x4}, {0xb, 0x0, 0xf, 0x3, 0x6, 0x8}, {0x4, 0x8, 0x3, 0x3, 0xa8a, 0x5}, {0x80000, 0x6, 0x0, 0x7, 0x7, 0x4}, {0x5, 0x2, 0x3, 0x3, 0x3, 0x7}, {0x2, 0x4, 0xca1, 0x8, 0x5, 0x3}, {0x0, 0x9, 0x6, 0x3, 0x3, 0x6}, {0x8e6, 0x1, 0x8, 0x7, 0xfffffff8, 0x1}, {0x2, 0x8, 0x6, 0x40, 0x8, 0x8}, {0x8, 0xffffffff, 0x3, 0x1, 0xfff, 0xc125}, {0x0, 0x3, 0x200, 0xfff, 0xc, 0x2}, {0x8f, 0x955, 0x3cc6, 0xfffffffe, 0x3, 0x401}, {0x9, 0x7e, 0x65a, 0xd, 0x8, 0xfff}, {0x0, 0x0, 0x2f, 0x5, 0x7, 0x3}, {0xffffffff, 0x8, 0x8, 0xe, 0x80, 0x7}, {0x101, 0x655b, 0x10, 0x9, 0xa, 0x2}, {0x9, 0x9, 0x2, 0xf, 0x0, 0x3}, {0x8, 0x1, 0xe, 0xf8, 0x5, 0x5}, {0x7, 0x800, 0x6, 0x6, 0x4, 0x10000}, {0x0, 0xfffffff8, 0x5, 0xb, 0x7, 0x2}, {0xd9e0, 0x0, 0x2, 0x10001, 0xe07, 0x1}, {0x4e, 0x73, 0x3, 0x7, 0x668, 0x7}, {0x4, 0x976, 0xd41, 0x2, 0x3, 0x5}, {0x8, 0x8c, 0xca0, 0x2, 0xc, 0xffffffff}, {0xe, 0x1ff, 0x1, 0x0, 0x3, 0x80000}, {0x2, 0x3, 0x1a, 0x3ff, 0x3, 0xd}, {0xb, 0x9, 0x82, 0x81, 0x4, 0x10001}, {0xf9b, 0x3, 0x1dd89ac9, 0x92a, 0xffffff01, 0x6}, {0x0, 0x3, 0x5, 0x0, 0x3ff, 0xb}, {0x7, 0x1, 0x1, 0x3, 0x9, 0xd}, {0x6, 0x0, 0x4, 0x5, 0x4}, {0x6, 0x5, 0x7, 0xff, 0x3, 0x1a000}, {0x2, 0x2, 0x5, 0x10000, 0xfffffffb, 0x80cc}, {0xfffffffb, 0x7, 0x7fff, 0xffffffff, 0x6, 0xff}, {0x7, 0x80, 0x8, 0xef, 0xfffff1bb, 0x1a16}, {0x40, 0x7, 0xd, 0xfffff800, 0x1ff, 0x7}, {0xd, 0x8, 0x2, 0x46c0, 0xffffffff, 0x9}, {0x7fffffff, 0xffffffff, 0x8, 0x0, 0x4, 0x9}, {0x6, 0x5, 0x42c7, 0x7, 0xe, 0x9}, {0x8, 0x200, 0x3, 0x6, 0x457}], [{0x2}, {0x3}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x7fc83acf55c9bdba}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x52478455d0288537}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x7, 0x1}, {}, {0x3}, {}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2b64539538e73416}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x7}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3}, {}, {0x2}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x6}, {0x6, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0xd8bdd4f677818293}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x128, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x0, 0x4, 0x10000000, 0x53c8, 0xdc97}, 0x8, 0x9, [{0x5, 0x0, 0x4, 0xdb9, 0x4, 0x107f}, {0x3bfa, 0x3, 0x2, 0x0, 0xffffffff, 0xfffffff7}]}, [{0x7, 0xfffffff8, 0x7, 0x80, 0x9, 0x3}, {0x6, 0x8, 0x5b, 0x7f, 0xffffb7f8, 0x2}, {0x7, 0x7fff, 0x1, 0x1122, 0xbad, 0x2}, {0x6, 0xfffffff8, 0x2, 0xfffffffb, 0x1}, {0x55e, 0xb05c, 0x0, 0x3, 0x1fe, 0x7fffffff}, {0x10, 0x8000000, 0x7, 0x7, 0x1, 0x4}, {0x6b6, 0x1, 0x1, 0x62f, 0x8354, 0x3}, {0xffffe4f9, 0x5, 0x2, 0x3, 0x59bf}, {0x0, 0xffffffff, 0x5, 0xa, 0x101, 0x10000}, {0x7, 0x1ff, 0x4, 0x5d7639e1, 0xa, 0x9}, {0x9, 0x80000001, 0x2, 0x5, 0x8000, 0x2}, {0xcb8, 0x1, 0x4, 0x5e, 0x5, 0x9}, {0x0, 0x6a1, 0x4, 0x72, 0xec71, 0xb}, {0x7, 0xbb, 0x9, 0x533, 0xae90, 0x5}, {0x7, 0xffff, 0x0, 0x2, 0x4, 0x7}, {0x100, 0x6028, 0x1, 0x22b1, 0x4, 0x8}, {0x40, 0xece0, 0x6, 0x9, 0x8, 0xa8f5}, {0x5, 0x3, 0x0, 0x3, 0x244f, 0x4}, {0x8, 0x3, 0x8, 0x1, 0x1, 0x2}, {0x7, 0xfffffff9, 0x81, 0x5, 0x4, 0xfffff6cf}, {0x5, 0x3, 0x78, 0x6, 0x7, 0x6}, {0x7f, 0x6, 0x5, 0xffffbdbe, 0x6, 0x5}, {0x8, 0x3, 0x6, 0x76ca, 0x5, 0x8e}, {0x400, 0x7, 0x5, 0x180f8cb8, 0x4, 0x2}, {0xffffffff, 0x2, 0x8001, 0x8, 0x1b, 0x7ef9a72b}, {0x1, 0x71, 0x80, 0x800, 0x8, 0x7}, {0x7fff, 0x4, 0x1, 0xfff, 0x10001, 0x6}, {0xa3a, 0x48, 0x8, 0x7, 0xd1, 0x40}, {0xe6e, 0x1d, 0xfffffff7, 0xffffff81, 0x400, 0xfffffff9}, {0x5, 0xfff, 0x0, 0x800, 0xfffffff8, 0x6}, {0x40, 0x2, 0x3, 0x2, 0x5, 0x1ff}, {0x5fd4f724, 0x29b, 0x9, 0x7ad, 0xaa9, 0x7}, {0x1000, 0x9315, 0x5, 0x3, 0x7, 0x8}, {0x6, 0x2, 0x2aa4, 0x8, 0x5, 0x3}, {0x2, 0x0, 0x9, 0x31cc, 0xffffff01, 0x8}, {0x800, 0x4, 0x2, 0x8, 0x4, 0xeecc}, {0x0, 0x7, 0xfffffff2, 0x7, 0x7, 0xc}, {0x8, 0x4, 0x0, 0x8, 0x7, 0x8}, {0xb, 0x2, 0x1, 0x200, 0x2, 0x8}, {0xd8bf, 0x6, 0x1, 0x8, 0x1}, {0x8, 0xd, 0x5, 0x5, 0xfffffe00, 0x2ff3}, {0x2, 0xff, 0x8, 0x2, 0x1}, {0x1, 0xfffffffe, 0x4, 0x9, 0x4, 0x6}, {0xff, 0x8, 0x20, 0x4, 0xffffffff, 0x40}, {0x294, 0x8000, 0x5, 0x3, 0x1, 0x9}, {0x101, 0x3, 0xa861, 0x2, 0x7, 0x59}, {0x1ff, 0x0, 0x1, 0x0, 0x10000, 0x7ff}, {0x0, 0x0, 0x6, 0x7, 0x1, 0x2}, {0x6, 0x2, 0x3ec4, 0xc000, 0x4, 0x8}, {0xd, 0x7fff, 0x9, 0x6, 0x2, 0x80}, {0x2, 0x8, 0x5, 0x8, 0x1, 0x1}, {0xf3, 0x7, 0x8, 0x400, 0x3, 0x7}, {0x6, 0xfff, 0x9, 0x4, 0x5, 0x6}, {0x20, 0x4, 0x5, 0xffffff7f, 0xc204, 0x1000}, {0x8000, 0x100, 0xfffffff7, 0xd, 0x3, 0xfffffff8}, {0x3, 0x1, 0x5, 0x0, 0x0, 0xc3b4}, {0x3a, 0xa, 0x80000001, 0xd, 0x7, 0x5}, {0x2, 0xff, 0x0, 0x3c00, 0x6, 0x9}, {0x7, 0x9, 0x7, 0xe8, 0x100, 0xc}, {0x4, 0xa271, 0x9, 0x8, 0xa0, 0x6}, {0x7, 0x4, 0x0, 0xd, 0x80, 0x9}, {0x8, 0x1c8d9c75, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x80000000, 0x6, 0x6, 0x5, 0x400}, {0x3, 0x8, 0x4e, 0x8, 0x5}, {0xd, 0xfffffffa, 0x2, 0xfffffffa, 0x7f, 0x3ff}, {0x9, 0x7, 0x1, 0xfffffffc, 0x6, 0xf}, {0x9, 0x8, 0x7, 0x1, 0x8, 0x2}, {0xce6, 0xfffffff8, 0x7, 0x5, 0xb7c9, 0xd45}, {0xffff7fff, 0x8, 0x135, 0x4a, 0x7, 0xd}, {0x6, 0x0, 0x101, 0x226, 0x3, 0x5}, {0x306c0000, 0x9, 0x0, 0x2, 0x4a7, 0xcc9c}, {0xff, 0x1, 0x4, 0x7, 0x1, 0x4}, {0x4, 0xd490, 0x3, 0x80000001, 0xeda5, 0xffffffff}, {0x71c5, 0x8000, 0x6, 0x2, 0x2, 0x4}, {0x1, 0xffff70e9, 0xff, 0xfffffffc, 0x9, 0x1}, {0x7, 0x3, 0x8, 0x0, 0x200, 0x2}, {0x6, 0x6, 0xd, 0x9, 0x2f8, 0x7}, {0xffffffff, 0xd8, 0x1ff, 0x1, 0x3, 0xffff}, {0xffffffff, 0x5c, 0x7, 0x10000, 0x3ff, 0x8b7}, {0x7ff, 0xb, 0x7f, 0x3, 0x8, 0x9}, {0x10, 0x80000000, 0x10, 0x8, 0x1000, 0x1}, {0x200, 0x6, 0x3, 0xf, 0x1ff, 0x3}, {0x80, 0x695d, 0xc7b5, 0x3, 0x400, 0xfffffd49}, {0x200, 0x8, 0x5, 0x200, 0x6, 0x1}, {0x69f, 0x8, 0x5, 0xa, 0x5, 0x9d9b}, {0x7, 0x7, 0xfffff801, 0xcb, 0x0, 0x81}, {0x1a, 0xfe, 0xe, 0x9, 0x2, 0x7}, {0x80000000, 0x0, 0x3, 0x8, 0x0, 0x1}, {0xfffffffd, 0x5, 0x8, 0x6, 0x1ff, 0xd}, {0x10001, 0x2, 0x9, 0x5, 0x2, 0x3}, {0x7, 0xf91, 0x3, 0x6, 0x9, 0x9}, {0x1a, 0x10000, 0x0, 0x9, 0x4, 0x9}, {0x9fdd0f36, 0x1, 0x0, 0x2, 0x2, 0xae0d}, {0x3, 0x0, 0xff, 0x10, 0x8, 0x1}, {0x14, 0x7fffffff, 0x3, 0x77f80ca, 0xd6, 0x101}, {0x1, 0x6, 0x1, 0x7, 0x4000, 0x8913}, {0x5, 0x9, 0x2, 0x0, 0x1, 0x8}, {0x0, 0x0, 0xff, 0x40, 0x4, 0x9}, {0x8, 0x8, 0x5, 0xfffffffe, 0x5, 0x4}, {0x9, 0x6, 0x1, 0x1, 0xd, 0x10}, {0x5, 0x2, 0x55, 0x1, 0x7, 0x8000}, {0x9, 0x3, 0x0, 0x2, 0x3, 0xffff}, {0x4, 0x8, 0x4, 0x283, 0x2, 0xff}, {0x9, 0x5, 0xff, 0x6, 0x3, 0x9}, {0x6, 0xfffffffa, 0x100, 0x0, 0x5, 0x2a7}, {0x5, 0xcdb, 0x2000000, 0xffff8000, 0x6, 0x9}, {0x10001, 0x7ac, 0x3c26, 0x6, 0x6, 0xe00000}, {0x20, 0x409cd36a, 0x4, 0x7fff, 0x4, 0x42b}, {0x2, 0x7, 0x4, 0x2, 0x101, 0x3}, {0x8, 0x0, 0x5, 0x0, 0x6, 0x2}, {0x7, 0x2, 0x0, 0x1, 0xfffffffe, 0x28000}, {0x5, 0x2, 0x0, 0x7, 0x0, 0x6}, {0xd, 0xc4, 0x5, 0x10, 0x0, 0x10}, {0x8, 0x2, 0xf26, 0x9, 0x0, 0x800}, {0x5, 0xfffffffb, 0x4, 0x695}, {0x5, 0x5, 0x6, 0xd7c4, 0x1ff, 0x9}, {0xffffffff, 0x4, 0x4b800000, 0x5, 0x400, 0x9000000}, {0x7, 0x3de, 0x4, 0x1, 0x10000, 0x9}, {0x2, 0x8, 0x1000, 0xfffff211, 0x3, 0x5}, {0xff, 0x9, 0x10, 0x5a0f358e, 0x9, 0xd9b}, {0x4, 0x8, 0x9, 0x2819, 0x218, 0x9}, {0x8, 0x0, 0xb, 0x0, 0x8001, 0x8001}, {0x200, 0x1ff, 0x1, 0xa, 0x0, 0x3}, {0x8, 0x8, 0x35, 0x10, 0x9}, {0xffffff76, 0x7, 0x5, 0x810, 0x1c7d, 0x4}, {0x6, 0x1, 0x1cf2, 0x3, 0xfffffff9, 0x7}, {0x1, 0xc, 0x3ff, 0x1000, 0x2, 0x9}, {0x2, 0x9, 0x1, 0x5, 0xdc, 0x532e}], [{0x4}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0xb185a92d89e41a23}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x1, 0xe57114dff76d5047}, {0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x3}, {0x6}, {0x6, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x6}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x3}, {0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3, 0xd, 0x3, 0x825c, 0x8000}, 0x2, 0xb, [{0xffffc4b0, 0x8, 0x0, 0x4f1c, 0x10001, 0x3}]}, [{0x30000, 0x5, 0xffffffff, 0x7, 0x100, 0x2}, {0x8, 0x10, 0x3, 0x9, 0x1, 0x8}, {0x4, 0x7851, 0x9, 0xc3d, 0x400, 0x8}, {0x42b, 0xfffffffb, 0x8, 0x4, 0x8, 0x5}, {0x5b, 0xd, 0x91be, 0x7, 0x0, 0x1}, {0x4, 0x7, 0xe4b4, 0x80, 0x80000000, 0x8}, {0x200, 0x4, 0x7, 0x4, 0x3, 0x7ff}, {0x4, 0x3, 0xfff, 0x2, 0x5, 0x4}, {0xc, 0x89, 0x8, 0x9, 0x4, 0xe8e5}, {0x0, 0x5, 0xa3, 0x7, 0x0, 0x3}, {0x457, 0x0, 0xffffff50, 0x0, 0x7fff, 0x8}, {0x7ff, 0xffffffc0, 0x108, 0x1000, 0x9, 0x10}, {0x0, 0x10000, 0x0, 0x2, 0x2, 0xb}, {0xd, 0xff, 0x4, 0x5, 0x400, 0x7}, {0x6, 0x7b, 0x400, 0x9, 0x400, 0x8}, {0x7fffffff, 0x3, 0x3, 0x1, 0x80, 0x769b7e1e}, {0xa307, 0x26f3, 0x9, 0x200, 0x5, 0x1}, {0x80, 0x40, 0xffffffff, 0x6, 0xfffffffb}, {0x6, 0x2, 0x0, 0x6, 0x10, 0xf}, {0xb, 0x84, 0x5, 0x9, 0x188, 0xfffffffe}, {0x5, 0x3ff, 0x9, 0xfffffffe, 0x401, 0x5}, {0x5, 0xffffff7f, 0x0, 0x401, 0x0, 0xf0a}, {0x1, 0xffffffff, 0x7fffffff, 0x100, 0x7fff, 0x3}, {0x3, 0x8, 0x351e, 0x5, 0x7fffffff, 0x8001}, {0xf976, 0x5, 0xfec, 0x4, 0x4, 0x80000000}, {0x3, 0x5, 0xffffffff, 0xa, 0xd2a, 0x5}, {0x2, 0x8, 0x3, 0x3, 0xfffffff8, 0x1}, {0x7, 0x3, 0x2, 0x6, 0x6, 0x1ff}, {0x5, 0x1, 0xf8, 0x8, 0x8e6, 0x8}, {0x7fffffff, 0x101, 0x4, 0x9, 0x65, 0xc57}, {0x1, 0xe658, 0x7, 0xfffffffc, 0x80000000, 0x6}, {0x9, 0xc, 0xf1c, 0x6, 0x4, 0x1}, {0x0, 0x8, 0x400, 0x5, 0x7, 0xe}, {0x7157, 0x6, 0x8, 0xfffff78d, 0x8, 0x2}, {0x3, 0x21, 0x563, 0x2a, 0x4, 0x9}, {0xe9, 0xeb, 0x5, 0x8000, 0x0, 0x8}, {0x80000001, 0x40, 0xd, 0x6, 0x7, 0x1}, {0xfff, 0x6, 0x4, 0x8, 0xc, 0x8}, {0x101, 0x3, 0x7, 0x8, 0x0, 0x800}, {0x2, 0x9, 0x1000, 0x80, 0x9, 0x40}, {0x51c, 0x7ff, 0x7, 0x3, 0x1, 0x9}, {0xe8ed, 0x5, 0xe, 0xfc92, 0x40, 0x4}, {0x2, 0x6, 0x1000, 0x4, 0x0, 0x3}, {0x0, 0xa, 0xfffffff9, 0x3, 0x7f, 0x8474}, {0x5, 0x4, 0x0, 0x0, 0xf53, 0x40}, {0x0, 0x10000, 0x5, 0xdb30, 0x6c1, 0x4}, {0x8, 0x3, 0xffff7fff, 0x2, 0x1, 0x8}, {0xfffffff8, 0x0, 0x4, 0x10001, 0x80, 0xd5}, {0x0, 0x0, 0x6, 0x7fff, 0x7, 0x3}, {0xa, 0x0, 0x6, 0x1, 0x8, 0x1}, {0x7, 0x100, 0x4, 0xd0, 0xcf4, 0x7}, {0x44234edc, 0x4, 0x5, 0x6, 0x9, 0x401}, {0x5a10, 0x6, 0x7, 0x8, 0x5335, 0x7}, {0x6, 0x5, 0x1ff, 0x4d, 0x3, 0x2}, {0xf, 0x7, 0x6, 0x2, 0x33c2, 0x1}, {0x2, 0x5, 0x1, 0xfffffffa, 0x100, 0x6}, {0x1, 0x101, 0xfffffc00, 0x1, 0x3, 0xb8c}, {0x8, 0x8, 0x7, 0x80, 0x2, 0xff}, {0x45, 0xffffff89, 0x3, 0x3, 0x5, 0x8}, {0x9, 0x4533de86, 0x9, 0x1, 0x10000, 0xf2e}, {0x100, 0x5, 0x9, 0x9, 0x9, 0x3}, {0x4f, 0x2, 0x401, 0x9, 0x9, 0xcb}, {0x6, 0x94, 0x5, 0x7, 0xf, 0x9}, {0x4, 0x2, 0x5, 0x9, 0x22, 0xb}, {0x7, 0x4, 0x6, 0x400, 0x0, 0xffff8001}, {0x5, 0x9, 0x1, 0x9, 0x5, 0xf}, {0x1, 0xffffffff, 0x2, 0x1, 0x3}, {0x5, 0x5, 0x8, 0x1, 0xff, 0xffffffff}, {0x7, 0x53, 0x29, 0x4, 0x3, 0x4}, {0x7, 0x8, 0x2d, 0x10001, 0x7, 0x3}, {0x1, 0xfffffffb, 0x7, 0x3, 0x6, 0x9}, {0x0, 0x1, 0x9, 0x0, 0x3b, 0x7fff}, {0x4, 0x80, 0x8, 0x800, 0x2, 0x10001}, {0x2, 0x0, 0x4, 0x9, 0x2, 0x9}, {0x5, 0x6, 0x7, 0x1ed, 0x6, 0x5}, {0x2, 0x40, 0xaa, 0x9, 0xc, 0x4}, {0x1d, 0x6, 0xd70a, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2732, 0x57, 0xfffffffc, 0x80}, {0xfffffffc, 0x2, 0x2, 0x3, 0x2, 0x8}, {0x8, 0x3, 0xe65b, 0x8, 0x10000, 0x2}, {0x37, 0x9, 0x7, 0x7fffffff, 0x0, 0x37d}, {0x64, 0x2, 0xc4, 0x2, 0x8, 0xfffffffe}, {0x5, 0xd023, 0x7fff, 0x4, 0x2, 0xa}, {0x3, 0x83, 0xb, 0x699c, 0x6, 0xffffffff}, {0x7f, 0xbcd, 0x6, 0x8, 0x8001, 0x7100}, {0xc, 0x6, 0x8, 0x3, 0x7fff, 0x3}, {0x8, 0x9, 0x4, 0x4, 0x9, 0x3}, {0x80000000, 0x0, 0x6, 0x6, 0x2, 0x2}, {0x80dc, 0x7ff, 0x8001, 0xfffffffe, 0x9, 0x3}, {0x0, 0x4, 0x3, 0xff, 0x9, 0x7}, {0x3f8, 0x3, 0x4, 0x0, 0x10, 0x2}, {0x3, 0xfffffff4, 0x5, 0x4, 0x9, 0xb0b}, {0x4, 0x8b3f, 0x9, 0x9, 0x0, 0x225}, {0x5, 0x4, 0x101, 0x7fffffff, 0x0, 0x5bc5}, {0x2, 0xf, 0x4, 0x3, 0x3, 0x6}, {0x9, 0x4, 0x5, 0x4, 0xcecf, 0x70}, {0x1, 0x6, 0x401, 0x9, 0x5, 0xffff8000}, {0x9, 0x2, 0x0, 0x9e, 0x6, 0x1}, {0x80, 0x347779ef, 0x5e, 0xfffffffa, 0x4, 0x6}, {0x3, 0x2, 0x7ff, 0x3, 0x4, 0xfffffff9}, {0x4, 0x2, 0x1, 0x1000, 0x5, 0x8}, {0x5, 0x4, 0xffffffff, 0x6, 0x1, 0x7b9}, {0xfffffff7, 0x7, 0x4, 0x2, 0x6, 0xfffffe00}, {0x2, 0x1dfa, 0x2, 0x8, 0x6, 0x5}, {0x0, 0xffffff52, 0x1, 0x7, 0x0, 0xfffffffc}, {0x4, 0x2, 0x10001, 0x9, 0x7, 0xff}, {0x7, 0x8, 0x0, 0x3, 0x0, 0x29178800}, {0x0, 0x4, 0xfffffffa, 0x2, 0x213, 0x9}, {0x20000000, 0x4, 0x7f, 0x7, 0x8, 0x5}, {0x1, 0x9, 0x8001, 0x1b, 0xffffffff, 0x3}, {0xc00, 0x9, 0x80000000, 0x3, 0x9, 0x10001}, {0x7fff, 0x2, 0x0, 0x3, 0x6, 0x1ff}, {0x5, 0x100, 0x40, 0x8, 0x9, 0x4}, {0x249, 0x5, 0x5, 0xafa, 0x63, 0x8}, {0x1, 0xfff, 0x2, 0x5, 0x6, 0x3f}, {0x7fff, 0x6, 0x7, 0x45c, 0x8, 0x6}, {0xffffffff, 0xb, 0x9, 0xbe, 0x4, 0x5}, {0xe, 0xfffffff8, 0x5, 0x223c, 0x40, 0x4}, {0x9, 0x6, 0x9, 0x2, 0x5, 0x1b}, {0x7ff, 0x9, 0x48db, 0xfffffe00, 0x710d, 0x3}, {0xec34, 0x5, 0x580, 0x7, 0xffffffff, 0x1}, {0x2, 0x9, 0x9, 0x7, 0x1ff, 0xfffffffc}, {0x1000, 0x6, 0x5, 0xf, 0x8, 0xa721}, {0xa0c, 0x7fffffff, 0x10001, 0x6, 0x1, 0x1}, {0x1, 0x7, 0x8, 0xb7f, 0x8000, 0x4}, {0xfffffffd, 0x2, 0xfffffffb, 0xbe15, 0x5, 0x3}, {0x8, 0xf0, 0xa, 0x10, 0x2, 0xffffffff}, {0x10001, 0x80000001, 0x7, 0xf, 0x4, 0x8}], [{0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x7}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x4}, {0x5}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x3b884d53f0147dd6}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x295b1241294c034c}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5}, {0x5}, {}, {0x3, 0x1}, {0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1}]}}]}, {0xea, 0x6, "af2cc5f8ddd2d328a3a23b3bde6905466c38580e16bc3dac1273243f3f4801b06a5321973fdbec276ea28eba5cd5ad6c050fcd13f314c29c7bc8d094c6017dcf9bae7550b0949bc9792789baf3c9d2786b82365ccaa069c1223151c470373ec9060675c6f17c950c1952f6fd76f08240e75c23685af133f9d51fb045d9df80af7727a565126c53798dfdcde286c718745fd51f59d4f140ff054b0e0d46132944637a4381a23617729458354882b49e7a1955c52b97320fb30f88c84c50b27eab0c8efcdf2f599fea910f63c543c9dc864eee057a889a25e9f8e98f5fb0650f0bb7134848e08c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x9c, 0x13, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x3, 0x5}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x96ca, 0x10000000, 0x2, 0x6}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2de800, 0x0, 0xffffffffffffffff, 0x401, 0x10001}, 0x2}}]}, {0xd, 0x6, "56b251ea135370125f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0xb0, 0x10, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xf8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xa, 0x0, 0xffffffffffffffff, 0x8, 0x2056}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x46}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc00, 0x6, 0x0, 0x8eb, 0x8}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6001}]}, {0x2a, 0x6, "a5083c57f2e56294c34b9e614ed2023e1a3db30fdf540c4190e7971a7af85ac88eec56196882"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x104, 0x7, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x6, 0xff, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x6, 0x2, 0x1, 0x10}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x800, 0xffffffffffffffff, 0x2, 0xcc6}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x7, 0x8, 0x8}, 0x81}}]}, {0x64, 0x6, "8ea20d75aa6453ef67eb266a66d1d041cd8965dff4cbc6989c3b44b42f68eddecbd704adab5798503d7f12428d5ee49a6a440dc25e212db2305e2fdab5de13be9cd96e8bfd6613e784d801b896964f30fc2d6118ff7ce9085bd9b8a965d7462f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x55}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x35}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0xfffffffb, 0xb988}}]}}, @TCA_CHAIN={0x8, 0xb, 0x72a}]}, 0x4474}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x44, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, 'fw\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x9, 0x4, 0x7, 0x400}, {0x1, 0x2, 0x0, 0x7, 0x8, 0x72bf8a97}, 0xe9, 0xf, 0x19dd}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) socket(0x1c, 0x80000, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8) kernel console output (not intermixed with test programs): rt 1(bridge_slave_0) entered disabled state [ 2043.451490][ T3475] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 2044.413647][T29275] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2044.781826][T29275] usb 4-1: Using ep0 maxpacket: 16 [ 2044.844621][T29275] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2044.860514][T29275] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2044.967527][T29275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.014224][T29275] usb 4-1: config 0 descriptor?? [ 2045.049700][T29275] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input120 [ 2045.062606][T30371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6425'. [ 2045.708723][ T5183] bcm5974 4-1:0.0: could not read from device [ 2045.724818][T29275] bcm5974 4-1:0.0: could not read from device [ 2045.763329][ T5183] bcm5974 4-1:0.0: could not read from device [ 2045.776916][T29275] input: failed to attach handler mousedev to device input120, error: -5 [ 2045.820371][ T5183] bcm5974 4-1:0.0: could not read from device [ 2045.847608][ T5183] bcm5974 4-1:0.0: could not read from device [ 2045.855945][ T3475] geneve0 (unregistering): left promiscuous mode [ 2045.867975][T29275] usb 4-1: USB disconnect, device number 93 [ 2045.898091][T29347] bcm5974 4-1:0.0: could not read from device [ 2045.906537][ T3475] team0: Port device geneve0 removed [ 2046.085852][ T3475] bond1 (unregistering): Released all slaves [ 2046.422841][ T3475] bond2 (unregistering): Released all slaves [ 2046.647717][ T3475] bond3 (unregistering): (slave veth3): Releasing active interface [ 2046.657874][ T3475] bond3 (unregistering): (slave veth5): Releasing active interface [ 2046.668003][ T3475] bond3 (unregistering): Released all slaves [ 2046.869243][ T3475] bond4 (unregistering): Released all slaves [ 2047.065228][ T3475] bond5 (unregistering): Released all slaves [ 2047.261225][ T3475] bond6 (unregistering): Released all slaves [ 2047.276133][ T3475] bond7 (unregistering): Released all slaves [ 2047.291428][ T3475] bond8 (unregistering): Released all slaves [ 2047.518689][ T3475] bond9 (unregistering): Released all slaves [ 2047.714365][ T3475] bond0 (unregistering): Released all slaves [ 2048.015013][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6426'. [ 2048.039377][T30379] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2048.232252][T29275] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2048.410441][T29275] usb 4-1: Using ep0 maxpacket: 8 [ 2048.426038][T29275] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2048.451760][T29275] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2048.484156][T29275] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2048.502603][T29275] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2048.535768][T29275] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2048.676040][T29275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.706463][T17210] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2048.734013][T29275] usb 4-1: Product: syz [ 2048.760440][T29275] usb 4-1: Manufacturer: syz [ 2048.776036][T29275] usb 4-1: SerialNumber: syz [ 2048.859929][T29275] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2048.875083][T17210] usb 2-1: device descriptor read/64, error -71 [ 2048.881511][T17886] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2048.902572][T29275] usbtest 4-1:1.0: Linux user mode ISO test driver [ 2048.909125][T29275] usbtest 4-1:1.0: high-speed {control bulk-out iso-in} tests (+alt) [ 2049.059649][T30381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.071787][T17886] usb 5-1: Using ep0 maxpacket: 16 [ 2049.112366][T30381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.149351][T17886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2049.162640][T17210] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2049.175606][T17886] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2049.187608][T17886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.222798][T17886] usb 5-1: config 0 descriptor?? [ 2049.238203][T17886] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input121 [ 2049.293693][T17210] usb 2-1: device descriptor read/64, error -71 [ 2049.308680][ T3475] : left promiscuous mode [ 2049.330532][T27694] usb 4-1: USB disconnect, device number 94 [ 2049.351756][T29275] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2049.402285][T17210] usb usb2-port1: attempt power cycle [ 2049.504568][T29275] usb 6-1: device descriptor read/64, error -71 [ 2049.864055][T29275] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2049.883901][ T5183] bcm5974 5-1:0.0: could not read from device [ 2049.909683][T17886] bcm5974 5-1:0.0: could not read from device [ 2049.917348][ T5183] bcm5974 5-1:0.0: could not read from device [ 2049.931977][T17210] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2050.051744][T29275] usb 6-1: device descriptor read/64, error -71 [ 2050.176233][T17210] usb 2-1: device descriptor read/8, error -71 [ 2050.282000][T29275] usb usb6-port1: attempt power cycle [ 2050.328090][ T5183] bcm5974 5-1:0.0: could not read from device [ 2050.349118][T17886] input: failed to attach handler mousedev to device input121, error: -5 [ 2050.368966][ T5183] bcm5974 5-1:0.0: could not read from device [ 2050.400877][T17886] usb 5-1: USB disconnect, device number 62 [ 2050.421698][T17210] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2050.430104][ T5183] bcm5974 5-1:0.0: could not read from device [ 2050.472448][T17210] usb 2-1: device descriptor read/8, error -71 [ 2050.582121][T17210] usb usb2-port1: unable to enumerate USB device [ 2050.615816][ T3475] batadv0: left promiscuous mode [ 2050.622065][T29275] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2050.676543][ T3475] hsr_slave_0: left promiscuous mode [ 2050.720799][T29275] usb 6-1: device descriptor read/8, error -71 [ 2050.733419][ T3475] hsr_slave_1: left promiscuous mode [ 2050.743669][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2050.763492][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2050.779155][ T3475] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2050.786703][ T3475] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2050.991885][T29275] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2051.029739][T29275] usb 6-1: device descriptor read/8, error -71 [ 2051.143368][T29275] usb usb6-port1: unable to enumerate USB device [ 2051.183983][T30412] xt_bpf: check failed: parse error [ 2051.471819][T19541] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2051.643682][T19541] usb 4-1: Using ep0 maxpacket: 8 [ 2051.677881][T19541] usb 4-1: config 9 has an invalid interface number: 170 but max is 0 [ 2051.697801][T19541] usb 4-1: config 9 has no interface number 0 [ 2051.746609][T19541] usb 4-1: config 9 interface 170 has no altsetting 0 [ 2051.855357][T19541] usb 4-1: New USB device found, idVendor=19d2, idProduct=1105, bcdDevice=71.4e [ 2051.943294][T19541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.959479][T19541] usb 4-1: Product: syz [ 2051.986414][T19541] usb 4-1: Manufacturer: syz [ 2051.997507][T19541] usb 4-1: SerialNumber: syz [ 2053.368064][ T3475] team_slave_1 (unregistering): left promiscuous mode [ 2053.379825][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 2053.482318][ T3475] team_slave_0 (unregistering): left promiscuous mode [ 2053.493860][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 2053.757433][T19541] option 4-1:9.170: GSM modem (1-port) converter detected [ 2053.804326][T19541] usb 4-1: USB disconnect, device number 95 [ 2053.837396][T19541] option 4-1:9.170: device disconnected [ 2054.564783][T30435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6436'. [ 2054.835334][T19541] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2055.062843][T19541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2055.091998][T19541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2055.132096][T19541] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2055.335203][ T3475] IPVS: stop unused estimator thread 0... [ 2055.342555][T19541] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2055.352034][T29275] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 2055.352840][T19541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.380318][T19541] usb 5-1: config 0 descriptor?? [ 2055.386864][T30436] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2055.584878][T29275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2055.603694][T29275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2055.676471][T29275] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2055.711695][T29275] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2055.761784][T29275] usb 4-1: Manufacturer: syz [ 2055.867580][T29275] usb 4-1: config 0 descriptor?? [ 2055.917700][T19541] usbhid 5-1:0.0: can't add hid device: -71 [ 2055.954867][T19541] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2056.188299][T19541] usb 5-1: USB disconnect, device number 63 [ 2056.417988][T29275] cougar 0003:060B:700A.0059: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2056.797446][T30442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6440'. [ 2058.042318][T17886] usb 4-1: reset full-speed USB device number 96 using dummy_hcd [ 2058.864457][T30486] program syz.1.6448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2059.390518][T30492] binder: 30491:30492 ioctl c0306201 80000a00 returned -14 [ 2059.419857][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 2059.433213][ T5939] usb 4-1: USB disconnect, device number 96 [ 2059.734768][T30496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6452'. [ 2059.925164][T30501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6453'. [ 2060.006601][T30501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6453'. [ 2060.100501][T30502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6451'. [ 2060.521835][ T5939] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2060.715259][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 2060.745658][T30511] sctp: [Deprecated]: syz.4.6455 (pid 30511) Use of int in maxseg socket option. [ 2060.745658][T30511] Use struct sctp_assoc_value instead [ 2060.762759][ T5939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2060.802758][ T5939] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2060.927578][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.961695][ T5939] usb 3-1: Product: syz [ 2060.965944][ T5939] usb 3-1: Manufacturer: syz [ 2061.003003][ T5939] usb 3-1: SerialNumber: syz [ 2061.073639][ T5939] usb 3-1: config 0 descriptor?? [ 2061.084745][ T5939] cdc_ether 3-1:0.0: probe with driver cdc_ether failed with error -22 [ 2061.310284][T30501] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2061.334996][T30501] syzkaller1: linktype set to 823 [ 2061.543771][ T5939] usb 3-1: unsupported MDLM descriptors [ 2061.740753][ T5939] usb 3-1: USB disconnect, device number 77 [ 2063.497152][T30542] sctp: [Deprecated]: syz.2.6469 (pid 30542) Use of int in maxseg socket option. [ 2063.497152][T30542] Use struct sctp_assoc_value instead [ 2063.559043][T30544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6460'. [ 2065.923524][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2065.923538][ T30] audit: type=1326 audit(1767807060.996:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.016256][ T30] audit: type=1326 audit(1767807061.086:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.067918][ T30] audit: type=1326 audit(1767807061.136:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.110499][ T30] audit: type=1326 audit(1767807061.136:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.144504][ T30] audit: type=1326 audit(1767807061.136:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.169110][ T30] audit: type=1326 audit(1767807061.136:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.194084][ T30] audit: type=1326 audit(1767807061.166:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.232548][ T30] audit: type=1326 audit(1767807061.176:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.258871][ T30] audit: type=1326 audit(1767807061.176:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.317054][ T30] audit: type=1326 audit(1767807061.176:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30566 comm="syz.4.6464" exe="/root/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 2066.401809][T27735] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2066.651706][T27735] usb 5-1: Using ep0 maxpacket: 16 [ 2066.661136][T27735] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2066.731838][T27735] usb 5-1: config 1 has an invalid interface number: 182 but max is 0 [ 2066.741114][T27735] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2066.761341][T30584] netlink: 'syz.1.6470': attribute type 9 has an invalid length. [ 2066.796609][T27735] usb 5-1: config 1 has no interface number 0 [ 2066.805233][T27735] usb 5-1: config 1 interface 182 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2066.818534][T27735] usb 5-1: config 1 interface 182 has no altsetting 0 [ 2067.096731][T27735] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice= 8.ce [ 2067.126777][T27735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.213886][T27735] usb 5-1: Product: syz [ 2067.224412][T27735] usb 5-1: Manufacturer: ë¨â ·ì¡†æ¥¶á£Šï„§æ…žîª¿ãµ´é·“㔥ê®ìœƒä¬ˆä¬’æ‚–êœ¡è´ [ 2067.253943][T27735] usb 5-1: SerialNumber: syz [ 2067.426893][T30596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6468'. [ 2067.559426][T27735] usb 5-1: bad CDC descriptors [ 2067.567976][T27735] cp210x 5-1:1.182: cp210x converter detected [ 2067.814482][T27735] cp210x 5-1:1.182: failed to get vendor val 0x370b size 1: -71 [ 2067.822888][T27735] cp210x 5-1:1.182: querying part number failed [ 2067.839404][T27735] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2067.851503][T27735] usb 5-1: USB disconnect, device number 64 [ 2068.089096][T27735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2068.113042][T27735] cp210x 5-1:1.182: device disconnected [ 2068.911747][T27735] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2069.199268][T27735] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2069.218282][T27735] usb 5-1: config 0 has no interface number 0 [ 2069.229646][T27735] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2069.264002][T27735] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2069.275409][T27735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.466590][T27735] usb 5-1: Product: syz [ 2069.521793][T27735] usb 5-1: Manufacturer: syz [ 2069.529331][T27735] usb 5-1: SerialNumber: syz [ 2069.540058][T27735] usb 5-1: config 0 descriptor?? [ 2069.560418][T27735] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2069.572459][T30611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6476'. [ 2069.652565][T30613] sctp: [Deprecated]: syz.3.6475 (pid 30613) Use of int in maxseg socket option. [ 2069.652565][T30613] Use struct sctp_assoc_value instead [ 2069.771336][ C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 2070.018438][T30600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2070.063697][T30600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2070.123050][T30600] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2070.165597][ T5939] usb 5-1: USB disconnect, device number 65 [ 2070.175623][ T5939] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2071.129024][T30625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6480'. [ 2071.140224][T30625] bridge_slave_1: left allmulticast mode [ 2071.146442][T30625] bridge_slave_1: left promiscuous mode [ 2071.153641][T30625] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.178695][T30625] bridge_slave_0: left allmulticast mode [ 2071.184860][T30625] bridge_slave_0: left promiscuous mode [ 2071.195882][T30625] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.294635][ T5939] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2071.486091][ T5939] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2071.501675][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.509756][ T5939] usb 3-1: Product: syz [ 2071.531694][ T5939] usb 3-1: Manufacturer: syz [ 2071.541692][ T5939] usb 3-1: SerialNumber: syz [ 2071.552849][ T5939] usb 3-1: config 0 descriptor?? [ 2071.602373][T27694] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2071.676146][T30640] xt_bpf: check failed: parse error [ 2071.833583][T27694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.850287][T27694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.871378][T27694] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2071.881659][T27694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.908161][T27694] usb 6-1: config 0 descriptor?? [ 2071.962490][T30623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.976269][T30623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.991825][T27735] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2072.034837][T30623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.055825][ T5939] mos7840 3-1:0.0: required endpoints missing [ 2072.062579][T17210] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2072.082635][T22223] Bluetooth: hci3: command tx timeout [ 2072.091232][T30623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2072.157523][T27694] usbhid 6-1:0.0: can't add hid device: -71 [ 2072.179611][T27735] usb 5-1: Using ep0 maxpacket: 8 [ 2072.185024][T27694] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2072.207298][T27735] usb 5-1: config 9 has an invalid interface number: 170 but max is 0 [ 2072.212115][T17210] usb 2-1: Using ep0 maxpacket: 16 [ 2072.217609][T27735] usb 5-1: config 9 has no interface number 0 [ 2072.232872][T27694] usb 6-1: USB disconnect, device number 126 [ 2072.239189][T27735] usb 5-1: config 9 interface 170 has no altsetting 0 [ 2072.248432][T17210] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2072.298340][T17210] usb 2-1: config 0 has no interface number 0 [ 2072.316105][T17210] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2072.337201][ T5939] usb 3-1: USB disconnect, device number 78 [ 2072.360014][T17210] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2072.405157][T17210] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2072.425802][T17210] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2072.436550][T27735] usb 5-1: New USB device found, idVendor=19d2, idProduct=1105, bcdDevice=71.4e [ 2072.451787][T17210] usb 2-1: Product: syz [ 2072.456166][T27735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.456273][T17210] usb 2-1: SerialNumber: syz [ 2072.643496][T27735] usb 5-1: Product: syz [ 2072.647826][T27735] usb 5-1: Manufacturer: syz [ 2072.652742][T27735] usb 5-1: SerialNumber: syz [ 2072.752982][T17210] usb 2-1: config 0 descriptor?? [ 2072.770451][T17210] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 2072.839145][T17210] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input122 [ 2073.332215][T30665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2073.341319][T30665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2074.147596][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2074.148870][T27694] usb 2-1: USB disconnect, device number 112 [ 2074.155296][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2074.305296][T27694] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2074.449156][T27735] option 5-1:9.170: GSM modem (1-port) converter detected [ 2074.467646][T27735] usb 5-1: USB disconnect, device number 66 [ 2074.493651][T27735] option 5-1:9.170: device disconnected [ 2074.844248][T30670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6487'. [ 2074.871877][T30670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6487'. [ 2075.261681][T27694] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2075.450469][T30688] netlink: 'syz.2.6492': attribute type 1 has an invalid length. [ 2075.491672][T27694] usb 4-1: Using ep0 maxpacket: 32 [ 2075.573810][T27694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.631374][T30688] veth3: entered promiscuous mode [ 2075.638938][T27694] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2075.694718][T27694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.709801][T27694] usb 4-1: Product: syz [ 2075.718207][T27694] usb 4-1: Manufacturer: syz [ 2075.735893][T27694] usb 4-1: SerialNumber: syz [ 2075.755368][T27694] usb 4-1: config 0 descriptor?? [ 2075.764740][T27694] cdc_ether 4-1:0.0: probe with driver cdc_ether failed with error -22 [ 2075.801853][T27694] usb 4-1: unsupported MDLM descriptors [ 2076.019797][T30669] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2076.026130][T30669] syzkaller1: linktype set to 823 [ 2076.033683][T27694] usb 4-1: USB disconnect, device number 97 [ 2077.221894][T30698] bridge2: entered allmulticast mode [ 2077.447426][T27694] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2077.672078][T27694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.684558][T27694] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2077.724290][T27694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.887817][T27694] usb 5-1: config 0 descriptor?? [ 2078.339632][T27694] cypress 0003:04B4:DE61.005A: unknown main item tag 0x0 [ 2078.358274][T27694] cypress 0003:04B4:DE61.005A: unknown main item tag 0x0 [ 2078.371774][T27694] cypress 0003:04B4:DE61.005A: unknown main item tag 0x0 [ 2078.380131][T27694] cypress 0003:04B4:DE61.005A: unknown main item tag 0x0 [ 2078.524198][T27694] cypress 0003:04B4:DE61.005A: unknown main item tag 0x0 [ 2078.531453][T27694] cypress 0003:04B4:DE61.005A: unknown main item tag 0x0 [ 2078.542057][T27694] cypress 0003:04B4:DE61.005A: item fetching failed at offset 6/7 [ 2078.560249][T27694] cypress 0003:04B4:DE61.005A: parse failed [ 2078.652537][T27694] cypress 0003:04B4:DE61.005A: probe with driver cypress failed with error -22 [ 2078.728003][T27694] usb 5-1: USB disconnect, device number 67 [ 2078.911705][T19541] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 2079.081859][T19541] usb 3-1: Invalid ep0 maxpacket: 32 [ 2079.211765][T19541] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 2079.362161][T19541] usb 3-1: Invalid ep0 maxpacket: 32 [ 2079.382244][T19541] usb usb3-port1: attempt power cycle [ 2079.387959][T17210] IPVS: starting estimator thread 0... [ 2079.481714][T30731] IPVS: using max 39 ests per chain, 93600 per kthread [ 2079.643362][T17210] hid-generic 0000:0003:0001.005B: unknown main item tag 0x0 [ 2079.656278][T17210] hid-generic 0000:0003:0001.005B: unknown main item tag 0x0 [ 2079.677466][T17210] hid-generic 0000:0003:0001.005B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 2079.751726][T19541] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 2079.785834][T19541] usb 3-1: Invalid ep0 maxpacket: 32 [ 2079.923678][T19541] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 2079.959080][T19541] usb 3-1: Invalid ep0 maxpacket: 32 [ 2079.968590][T19541] usb usb3-port1: unable to enumerate USB device [ 2080.530904][T19541] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2080.703065][T27694] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2080.722697][T19541] usb 4-1: Using ep0 maxpacket: 16 [ 2080.755618][T19541] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2080.767920][T19541] usb 4-1: config 7 has an invalid interface number: 48 but max is 0 [ 2080.776237][T19541] usb 4-1: config 7 has an invalid descriptor of length 172, skipping remainder of the config [ 2080.786842][T19541] usb 4-1: config 7 has no interface number 0 [ 2080.793706][T19541] usb 4-1: config 7 interface 48 has no altsetting 0 [ 2080.826512][T19541] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 2080.840515][T19541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.858384][T19541] usb 4-1: Product: syz [ 2080.862936][T27735] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2080.874625][T27694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2080.884045][T27694] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2080.911244][T19541] usb 4-1: Manufacturer: syz [ 2080.916121][T19541] usb 4-1: SerialNumber: syz [ 2080.921344][T27694] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2080.953963][T27694] usb 6-1: config 1 interface 0 has no altsetting 1 [ 2080.982397][T27694] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 2080.993688][T27694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.009787][T27694] usb 6-1: Product: syz [ 2081.016263][T27694] usb 6-1: Manufacturer: syz [ 2081.021995][T27735] usb 2-1: Using ep0 maxpacket: 16 [ 2081.029816][T27735] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 2081.041417][T27694] usb 6-1: SerialNumber: syz [ 2081.049420][T27735] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2081.059477][T27735] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2081.063991][T27694] smsusb:smsusb_probe: board id=8, interface number 0 [ 2081.082189][T27735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.106373][T27735] usb 2-1: config 0 descriptor?? [ 2081.156193][T19541] cdc_phonet 4-1:7.48: probe with driver cdc_phonet failed with error -22 [ 2081.171319][T19541] usb 4-1: USB disconnect, device number 98 [ 2081.384953][T27694] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 2081.414270][T27694] smsusb 6-1:1.0: probe with driver smsusb failed with error -71 [ 2081.634259][T27694] usb 6-1: USB disconnect, device number 127 [ 2081.645539][T27735] nzxt-smart2 0003:1E71:2009.005C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2082.038268][T30772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2082.291920][T30772] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6511'. [ 2082.832733][T17210] usb 2-1: USB disconnect, device number 113 [ 2083.671700][T17210] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2083.712878][T30797] syzkaller0: entered promiscuous mode [ 2083.724919][T30797] syzkaller0: entered allmulticast mode [ 2083.802008][T17210] usb 6-1: device descriptor read/64, error -71 [ 2084.051854][T17210] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2084.212020][T17210] usb 6-1: device descriptor read/64, error -71 [ 2084.332108][T17210] usb usb6-port1: attempt power cycle [ 2084.701704][T17210] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2084.767717][T30814] binder: BINDER_SET_CONTEXT_MGR already set [ 2084.776661][T30814] binder: 30813:30814 ioctl 4018620d 80004a80 returned -16 [ 2084.791469][T17210] usb 6-1: device descriptor read/8, error -71 [ 2085.121880][T17210] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2085.129861][T17886] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2085.159594][T17210] usb 6-1: device descriptor read/8, error -71 [ 2085.199143][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6524'. [ 2085.273503][T17210] usb usb6-port1: unable to enumerate USB device [ 2085.311702][T17886] usb 5-1: Using ep0 maxpacket: 16 [ 2085.323542][T17886] usb 5-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 2085.339845][T17886] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2085.347652][T27735] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2085.356755][T17886] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2085.376348][T17886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2085.402319][T17886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.410615][T17886] usb 5-1: Product: syz [ 2085.416315][T17886] usb 5-1: Manufacturer: syz [ 2085.421195][T17886] usb 5-1: SerialNumber: syz [ 2085.482526][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6527'. [ 2085.501808][T27735] usb 3-1: Using ep0 maxpacket: 16 [ 2085.510703][T27735] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2085.523815][T27735] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2085.537681][T27735] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2085.547916][T27735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.557343][T27735] usb 3-1: Product: syz [ 2085.562001][T27735] usb 3-1: Manufacturer: syz [ 2085.566643][T27735] usb 3-1: SerialNumber: syz [ 2085.640447][T17886] cdc_ncm 5-1:1.0: skipping garbage [ 2085.649316][T17886] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2085.656365][T17886] cdc_ncm 5-1:1.0: bind() failure [ 2085.673702][T17886] usb 5-1: USB disconnect, device number 68 [ 2085.712444][T27694] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2085.731761][T19541] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2085.782341][T27735] usb 3-1: 0:2 : does not exist [ 2085.798813][T27735] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2085.822949][T27735] usb 3-1: USB disconnect, device number 83 [ 2085.863466][T29349] udevd[29349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2085.866582][T27694] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2085.896376][T27694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.905263][T19541] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.915939][T19541] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2085.928615][T27694] usb 4-1: config 0 descriptor?? [ 2085.935533][T19541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.949721][T27694] cp210x 4-1:0.0: cp210x converter detected [ 2085.960987][T19541] usb 2-1: config 0 descriptor?? [ 2085.976528][T19541] pwc: Askey VC010 type 2 USB webcam detected. [ 2086.177308][T30828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.189194][T30828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.369004][T27694] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2086.402284][T19541] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2086.409757][T27694] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2086.517779][T19541] pwc: recv_control_msg error -32 req 02 val 2700 [ 2086.547000][T19541] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2086.606114][T19541] pwc: recv_control_msg error -32 req 04 val 1000 [ 2086.683085][T19541] pwc: recv_control_msg error -32 req 04 val 1300 [ 2086.704755][T19541] pwc: recv_control_msg error -32 req 04 val 1400 [ 2086.735489][T19541] pwc: recv_control_msg error -32 req 02 val 2000 [ 2086.747687][T19541] pwc: recv_control_msg error -32 req 02 val 2100 [ 2086.759926][T19541] pwc: recv_control_msg error -32 req 04 val 1500 [ 2086.792954][T19541] pwc: recv_control_msg error -32 req 02 val 2500 [ 2086.810457][T19541] pwc: recv_control_msg error -32 req 02 val 2400 [ 2087.012806][T27735] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2087.064442][T19541] pwc: recv_control_msg error -71 req 02 val 2900 [ 2087.084847][T19541] pwc: recv_control_msg error -71 req 02 val 2800 [ 2087.097330][T19541] pwc: recv_control_msg error -71 req 04 val 1100 [ 2087.101368][T17210] usb 4-1: USB disconnect, device number 99 [ 2087.117536][T19541] pwc: recv_control_msg error -71 req 04 val 1200 [ 2087.149695][T17210] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2087.190061][T19541] pwc: Registered as video103. [ 2087.213072][T19541] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input124 [ 2087.223003][T17210] cp210x 4-1:0.0: device disconnected [ 2087.261651][T27735] usb 6-1: Using ep0 maxpacket: 8 [ 2087.323698][T27735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2087.334894][T19541] usb 2-1: USB disconnect, device number 114 [ 2087.389998][T27735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2087.437596][T27735] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2087.461645][T27735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.483348][T27735] usb 6-1: Product: syz [ 2087.487572][T27735] usb 6-1: Manufacturer: syz [ 2087.526804][T27735] usb 6-1: SerialNumber: syz [ 2087.557843][T27735] usb 6-1: config 0 descriptor?? [ 2087.867220][T27735] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 2088.018120][T27735] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 2088.063113][T27735] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 2088.329130][T27735] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2088.531863][T17210] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2088.681781][T17210] usb 2-1: Using ep0 maxpacket: 32 [ 2088.693603][T17210] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 2088.711804][T17210] usb 2-1: config 0 has no interface number 0 [ 2088.722808][T17210] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2088.885032][T17210] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2088.912699][T17210] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 2088.922901][T17210] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2088.944507][T17210] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2088.953792][T17210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.963916][T17210] usb 2-1: Product: syz [ 2088.968142][T17210] usb 2-1: Manufacturer: syz [ 2088.972898][T17210] usb 2-1: SerialNumber: syz [ 2088.983538][T17210] usb 2-1: config 0 descriptor?? [ 2088.992483][T30860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2089.049199][T17210] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input125 [ 2089.074468][ T5183] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 2089.272569][T17210] usb 6-1: USB disconnect, device number 6 [ 2089.317449][T30860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.363550][T30860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.679278][T17886] usb 2-1: USB disconnect, device number 115 [ 2090.445138][T30891] binder: BINDER_SET_CONTEXT_MGR already set [ 2090.451358][T30891] binder: 30889:30891 ioctl 4018620d 800000c0 returned -16 [ 2090.661745][T17210] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2090.816491][T30898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6543'. [ 2090.828513][T30898] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6543'. [ 2090.867684][T30898] fuse: Bad value for 'fd' [ 2090.905711][T17210] usb 2-1: Using ep0 maxpacket: 32 [ 2090.937707][T17210] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2090.947260][T17210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.955646][T17210] usb 2-1: Product: syz [ 2090.974581][T17210] usb 2-1: Manufacturer: syz [ 2090.979260][T17210] usb 2-1: SerialNumber: syz [ 2091.068654][T17210] usb 2-1: config 0 descriptor?? [ 2091.145502][T17210] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2091.693670][T17210] gspca_ov534_9: reg_w failed -110 [ 2092.361742][T17210] gspca_ov534_9: Unknown sensor 0000 [ 2092.361832][T17210] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 2092.413062][T17210] usb 2-1: USB disconnect, device number 116 [ 2093.241751][T27735] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2093.619868][T27735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2093.671778][T27735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2093.686686][T27735] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2093.711017][T27735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.789845][T27735] usb 5-1: config 0 descriptor?? [ 2093.855971][T30941] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6554'. [ 2093.866439][T30941] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6554'. [ 2094.225644][T30941] fuse: Bad value for 'fd' [ 2094.362688][T27735] steelseries 0003:1038:12B6.005D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 2094.844570][T27735] steelseries 0003:1038:12B6.005D: hid_hw_raw_request() failed with -71 [ 2094.920807][T27735] usb 5-1: USB disconnect, device number 69 [ 2095.091106][T30949] netlink: zone id is out of range [ 2095.336510][T17886] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2095.511884][T17886] usb 4-1: Using ep0 maxpacket: 8 [ 2095.724746][T17886] usb 4-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice= e.dd [ 2095.769139][T17886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.872535][T30968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6560'. [ 2095.882222][T30968] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6560'. [ 2095.899718][T30968] fuse: Bad value for 'fd' [ 2095.936533][T17886] usb 4-1: config 0 descriptor?? [ 2096.204888][T27735] usb 4-1: USB disconnect, device number 100 [ 2097.304551][T30987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6563'. [ 2098.586093][T31012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6569'. [ 2098.597163][T31012] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6569'. [ 2098.624903][T31012] fuse: Bad value for 'fd' [ 2098.681305][T31015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6572'. [ 2099.001720][T27735] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2099.246102][T27735] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2099.391780][T27735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.431469][T27735] usb 5-1: config 0 descriptor?? [ 2099.729568][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2099.729588][ T30] audit: type=1326 audit(1767807094.796:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2099.799477][ T30] audit: type=1326 audit(1767807094.846:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2099.906979][ T30] audit: type=1326 audit(1767807094.846:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.025243][T19541] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2100.052448][T27735] usb 5-1: Cannot set MAC address [ 2100.073118][ T30] audit: type=1326 audit(1767807094.846:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.098468][T27735] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2100.137636][T27735] usb 5-1: USB disconnect, device number 70 [ 2100.153944][ T30] audit: type=1326 audit(1767807094.846:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.271983][ T30] audit: type=1326 audit(1767807094.846:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.373746][ T30] audit: type=1326 audit(1767807094.846:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.460691][ T30] audit: type=1326 audit(1767807094.846:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.530067][ T30] audit: type=1326 audit(1767807094.846:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.581907][ T30] audit: type=1326 audit(1767807094.846:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31022 comm="syz.3.6573" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87539 code=0x7ffc0000 [ 2100.611935][T31037] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6576'. [ 2100.641536][T31037] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6576'. [ 2100.741003][T31045] KVM: debugfs: duplicate directory 31045-5 [ 2100.779436][T31037] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6576'. [ 2100.879495][T31053] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6577'. [ 2100.888857][T31053] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6577'. [ 2100.908506][T31053] fuse: Bad value for 'fd' [ 2100.928661][T31047] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6576'. [ 2100.994328][T31055] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2101.017577][T31047] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6576'. [ 2101.673086][T31064] fuse: Bad value for 'user_id' [ 2101.678205][T31064] fuse: Bad value for 'user_id' [ 2102.821799][T19541] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 2102.999786][T19541] usb 6-1: config 0 has an invalid interface number: 195 but max is 0 [ 2103.008354][T19541] usb 6-1: config 0 has no interface number 0 [ 2103.019261][T19541] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 2103.030390][T19541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.068143][T19541] usb 6-1: Product: syz [ 2103.074802][T19541] usb 6-1: Manufacturer: syz [ 2103.082996][T19541] usb 6-1: SerialNumber: syz [ 2103.098714][T19541] usb 6-1: config 0 descriptor?? [ 2103.117811][T19541] asix 6-1:0.195: probe with driver asix failed with error -22 [ 2103.319395][T31095] sctp: [Deprecated]: syz.4.6592 (pid 31095) Use of int in max_burst socket option. [ 2103.319395][T31095] Use struct sctp_assoc_value instead [ 2103.345980][T16523] usb 6-1: USB disconnect, device number 7 [ 2104.246622][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.255559][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.471003][T31121] netlink: 'syz.5.6599': attribute type 3 has an invalid length. [ 2104.521064][T31121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6599'. [ 2104.991699][T18221] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2105.073992][T31124] FAULT_INJECTION: forcing a failure. [ 2105.073992][T31124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2105.122233][T31124] CPU: 0 UID: 0 PID: 31124 Comm: syz.1.6600 Tainted: G L syzkaller #0 PREEMPT(full) [ 2105.122270][T31124] Tainted: [L]=SOFTLOCKUP [ 2105.122279][T31124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2105.122294][T31124] Call Trace: [ 2105.122303][T31124] [ 2105.122313][T31124] dump_stack_lvl+0xe8/0x150 [ 2105.122350][T31124] should_fail_ex+0x414/0x560 [ 2105.122390][T31124] _copy_from_user+0x2d/0xb0 [ 2105.122417][T31124] get_compat_msghdr+0xad/0x4a0 [ 2105.122454][T31124] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2105.122485][T31124] ? kstrtouint+0x6e/0xe0 [ 2105.122525][T31124] ___sys_sendmsg+0x193/0x2a0 [ 2105.122555][T31124] ? __pfx____sys_sendmsg+0x10/0x10 [ 2105.122579][T31124] ? get_pid_task+0x20/0x1f0 [ 2105.122607][T31124] ? get_pid_task+0x20/0x1f0 [ 2105.122633][T31124] ? get_pid_task+0x20/0x1f0 [ 2105.122691][T31124] ? __fget_files+0x2a/0x420 [ 2105.122718][T31124] ? __fget_files+0x3a0/0x420 [ 2105.122755][T31124] __sys_sendmsg+0x164/0x220 [ 2105.122783][T31124] ? __pfx___sys_sendmsg+0x10/0x10 [ 2105.122819][T31124] ? __pfx_ksys_write+0x10/0x10 [ 2105.122853][T31124] __do_fast_syscall_32+0x1dc/0x570 [ 2105.122879][T31124] ? lockdep_hardirqs_on+0x7b/0x110 [ 2105.122900][T31124] ? do_fast_syscall_32+0x34/0x80 [ 2105.122923][T31124] ? irqentry_exit+0x10f/0x670 [ 2105.122950][T31124] do_fast_syscall_32+0x34/0x80 [ 2105.122975][T31124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2105.123002][T31124] RIP: 0023:0xf7fe1539 [ 2105.123023][T31124] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2105.123043][T31124] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2105.123068][T31124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 2105.123084][T31124] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2105.123098][T31124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2105.123111][T31124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2105.123125][T31124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2105.123156][T31124] [ 2105.569465][T18221] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2105.602900][T18221] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2105.701926][T18221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2105.711394][T18221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2105.722852][T18221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2105.736942][T18221] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2105.746491][T18221] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2105.756272][T18221] usb 6-1: Product: syz [ 2105.760635][T18221] usb 6-1: Manufacturer: syz [ 2105.815312][T18221] cdc_wdm 6-1:1.0: skipping garbage [ 2105.820604][T18221] cdc_wdm 6-1:1.0: skipping garbage [ 2105.869727][T18221] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2105.894150][T18221] cdc_wdm 6-1:1.0: Unknown control protocol [ 2106.161690][T18221] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2106.341843][T18221] usb 5-1: Using ep0 maxpacket: 16 [ 2106.349980][T18221] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2106.359871][T18221] usb 5-1: config 8 has an invalid descriptor of length 117, skipping remainder of the config [ 2106.394336][T18221] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 19 [ 2106.419333][T18221] usb 5-1: New USB device found, idVendor=0729, idProduct=1284, bcdDevice=fe.b7 [ 2106.449895][T18221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.461933][T18221] usb 5-1: Product: syz [ 2106.466384][T18221] usb 5-1: Manufacturer: syz [ 2106.471300][T18221] usb 5-1: SerialNumber: syz [ 2106.601973][T17886] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2106.767846][T17886] usb 4-1: device descriptor read/64, error -71 [ 2106.971515][T18221] usb 5-1: USB disconnect, device number 71 [ 2107.051517][T17886] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2107.231752][T30643] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2107.351752][T17886] usb 4-1: device descriptor read/64, error -71 [ 2107.460988][ C0] wdm_int_callback: 12 callbacks suppressed [ 2107.461012][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.471840][T30643] usb 3-1: Using ep0 maxpacket: 16 [ 2107.473574][ C0] wdm_int_callback: 12 callbacks suppressed [ 2107.473621][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.491515][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.498173][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.504524][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.511185][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.517512][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.524251][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.530845][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.537492][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.543884][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.550609][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.556975][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.563625][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.570081][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.576717][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.583057][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.589696][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.596141][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2107.602789][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2107.620447][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2107.651091][T17886] usb usb4-port1: attempt power cycle [ 2107.658134][ T5939] usb 6-1: USB disconnect, device number 8 [ 2107.689295][T30643] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.755857][T30643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2107.794390][T30643] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2107.850215][T31161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6610'. [ 2107.909816][T30643] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2107.928374][T31159] netlink: 'syz.4.6609': attribute type 1 has an invalid length. [ 2107.936385][T30643] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2107.972488][T30643] usb 3-1: Manufacturer: syz [ 2107.994451][T17886] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2108.030502][T17886] usb 4-1: device descriptor read/8, error -71 [ 2108.067481][T30643] usb 3-1: config 0 descriptor?? [ 2108.300115][T31171] macsec1: entered promiscuous mode [ 2108.305549][T17886] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2108.388070][T17886] usb 4-1: device descriptor read/8, error -71 [ 2108.400462][T31171] macvlan0: entered promiscuous mode [ 2108.565385][T17886] usb usb4-port1: unable to enumerate USB device [ 2108.663319][T31171] macvlan0: left promiscuous mode [ 2108.911681][T30643] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2109.081729][T30643] usb 5-1: device descriptor read/64, error -71 [ 2109.330647][T30643] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2109.481698][T30643] usb 5-1: device descriptor read/64, error -71 [ 2109.631708][T30643] usb usb5-port1: attempt power cycle [ 2109.991732][T30643] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2110.261747][T17886] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2110.274518][T30643] usb 5-1: device descriptor read/8, error -71 [ 2110.381125][T31194] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2110.387721][T31194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2110.408517][T31194] vhci_hcd vhci_hcd.0: Device attached [ 2110.418972][T31197] vhci_hcd: connection closed [ 2110.419217][ T5051] vhci_hcd vhci_hcd.5: stop threads [ 2110.431739][T17886] usb 2-1: Using ep0 maxpacket: 32 [ 2110.443218][T17886] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 2110.452328][T17886] usb 2-1: config 0 has no interface number 0 [ 2110.458974][T17886] usb 2-1: config 0 interface 2 has no altsetting 0 [ 2110.465907][ T5051] vhci_hcd vhci_hcd.5: release socket [ 2110.472660][ T5051] vhci_hcd vhci_hcd.5: disconnect device [ 2110.496201][T17886] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 2110.516110][T17886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.529742][ T5939] usb 3-1: USB disconnect, device number 84 [ 2110.542278][T30643] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2110.567681][T17886] usb 2-1: Product: syz [ 2110.573994][T30643] usb 5-1: device descriptor read/8, error -71 [ 2110.594946][T17886] usb 2-1: Manufacturer: syz [ 2110.611320][T17886] usb 2-1: SerialNumber: syz [ 2110.640574][T17886] usb 2-1: config 0 descriptor?? [ 2110.693308][T30643] usb usb5-port1: unable to enumerate USB device [ 2110.883011][T17886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2111.142600][T17886] usb 2-1: USB disconnect, device number 117 [ 2111.217824][T31209] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2111.635903][T30643] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 2111.974685][T30643] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2111.991671][T30643] usb 4-1: config 0 has no interface number 0 [ 2112.001005][T30643] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=91.76 [ 2112.071792][T30643] usb 4-1: New USB device strings: Mfr=170, Product=2, SerialNumber=3 [ 2112.080119][T30643] usb 4-1: Product: syz [ 2112.155580][T30643] usb 4-1: Manufacturer: syz [ 2112.160267][T30643] usb 4-1: SerialNumber: syz [ 2112.174187][T30643] usb 4-1: config 0 descriptor?? [ 2112.247391][T31219] input: syz0 as /devices/virtual/input/input126 [ 2112.415068][T31228] netlink: 'syz.2.6626': attribute type 12 has an invalid length. [ 2112.441731][T31228] netlink: 'syz.2.6626': attribute type 29 has an invalid length. [ 2112.559147][T31228] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6626'. [ 2112.602471][T31228] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6626'. [ 2112.624354][T30643] peak_usb 4-1:0.51 can0: unable to request usb[type=0 value=1] err=-71 [ 2112.643176][T30643] peak_usb 4-1:0.51: unable to read PCAN-USB X6 firmware info (err -71) [ 2112.797327][T30643] peak_usb 4-1:0.51: probe with driver peak_usb failed with error -71 [ 2112.827266][T30643] usb 4-1: USB disconnect, device number 106 [ 2113.101752][T17886] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2113.471958][ T5939] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2113.543259][T17886] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2113.561731][T17886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.562115][T30643] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2113.569813][T17886] usb 6-1: Product: syz [ 2113.569834][T17886] usb 6-1: Manufacturer: syz [ 2113.569851][T17886] usb 6-1: SerialNumber: syz [ 2113.631975][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 2113.733405][ T5939] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2113.752236][T30643] usb 3-1: Using ep0 maxpacket: 32 [ 2113.760115][T30643] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 2113.779692][T30643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.802480][T30643] usb 3-1: config 0 descriptor?? [ 2113.809458][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.834073][T17886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2113.873941][ T5939] usb 4-1: config 0 descriptor?? [ 2113.889092][T17886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2114.022126][T31240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.032706][T31240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.043331][T31240] tipc: Started in network mode [ 2114.048299][T31240] tipc: Node identity , cluster identity 4711 [ 2114.108517][ T5939] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2114.119191][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2114.143018][ T5939] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2114.158615][ T5939] usb 4-1: media controller created [ 2114.182848][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2114.262893][T31240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.283868][T31240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.300258][ T5939] DVB: Unable to find symbol dib7000p_attach() [ 2114.328115][ T5939] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2114.354444][T31242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.366040][T31242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.408936][T31238] tipc: Enabling of bearer rejected, failed to enable media [ 2114.484429][ T5939] rc_core: IR keymap rc-dib0700-rc5 not found [ 2114.504526][ T5939] Registered IR keymap rc-empty [ 2114.512209][ T5939] dvb-usb: could not initialize remote control. [ 2114.526857][ T5939] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2114.547851][T30643] usbhid 3-1:0.0: can't add hid device: -71 [ 2114.554179][T30643] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2114.571225][T30643] usb 3-1: USB disconnect, device number 85 [ 2114.625550][ T5939] usb 4-1: USB disconnect, device number 107 [ 2114.720296][ T5939] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2114.813394][T17886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2114.873434][T17886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2114.906149][T17886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2114.947271][T17886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2114.992912][T17886] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2115.042115][T17886] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2115.080144][T17886] usb 6-1: USB disconnect, device number 9 [ 2115.196891][T31273] syzkaller0: entered promiscuous mode [ 2115.213587][T31273] syzkaller0: entered allmulticast mode [ 2115.673238][T31292] macsec1: entered promiscuous mode [ 2115.678579][T31292] macvlan0: entered promiscuous mode [ 2115.799124][T31292] macvlan0: left promiscuous mode [ 2116.210976][ T5939] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2116.421667][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 2116.658652][ T5939] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 2116.676972][ T5939] usb 2-1: config 0 has no interface number 0 [ 2116.959724][ T5939] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2116.977480][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.008662][ T5939] usb 2-1: Product: syz [ 2117.015011][ T5939] usb 2-1: Manufacturer: syz [ 2117.021310][ T5939] usb 2-1: SerialNumber: syz [ 2117.071978][ T5939] usb 2-1: config 0 descriptor?? [ 2117.297432][ T5939] radio-si470x 2-1:0.35: this is not a si470x device. [ 2117.385812][ T5939] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 2117.431982][ T5939] usb 2-1: USB disconnect, device number 118 [ 2118.771877][ T5939] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 2119.013461][ T5939] usb 4-1: device descriptor read/64, error -71 [ 2119.271806][ T5939] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 2119.864883][T31346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6656'. [ 2119.874335][ T5939] usb 4-1: device descriptor read/64, error -71 [ 2119.880796][T31346] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6656'. [ 2119.954660][T31346] fuse: Bad value for 'fd' [ 2120.002502][ T5939] usb usb4-port1: attempt power cycle [ 2120.352528][T28756] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 2120.411755][ T5939] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 2120.432342][ T5939] usb 4-1: device descriptor read/8, error -71 [ 2120.565720][T28756] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2120.634125][T28756] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2120.672992][ T5939] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 2120.683650][T28756] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2120.712347][ T5939] usb 4-1: device descriptor read/8, error -71 [ 2120.723188][T28756] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2120.744491][T28756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.767635][T28756] usb 5-1: Product: syz [ 2120.781774][T28756] usb 5-1: Manufacturer: syz [ 2120.789503][T28756] usb 5-1: SerialNumber: syz [ 2120.821664][T17886] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2120.842110][ T5939] usb usb4-port1: unable to enumerate USB device [ 2120.981676][T17886] usb 2-1: Using ep0 maxpacket: 16 [ 2121.014360][T17886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.038521][T17886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2121.062101][T17886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2121.082230][T17886] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2121.123963][T17886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.144405][T17886] usb 2-1: config 0 descriptor?? [ 2121.160336][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2121.160356][ T30] audit: type=1326 audit(1767807116.226:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31349 comm="syz.4.6658" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f21539 code=0x0 [ 2121.201397][T31355] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2121.213232][T31355] syzkaller1: linktype set to 823 [ 2121.592498][T17886] HID 045e:07da: Invalid code 65791 type 1 [ 2121.613052][T17886] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.005E/input/input129 [ 2121.650164][T17886] microsoft 0003:045E:07DA.005E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2122.238543][T30643] usb 2-1: USB disconnect, device number 119 [ 2123.424942][T28756] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 2123.455258][T28756] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 2123.477318][T28756] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 2123.507579][T28756] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 2123.584656][T28756] usb 5-1: USB disconnect, device number 76 [ 2123.658321][T29350] udevd[29350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2126.801810][T17053] Bluetooth: hci3: command 0x0406 tx timeout [ 2165.685044][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.691423][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2195.964539][T19541] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2196.111753][T19541] usb 6-1: device descriptor read/64, error -71 [ 2196.621675][T19541] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2196.775602][T19541] usb 6-1: device descriptor read/64, error -71 [ 2196.944979][T19541] usb usb6-port1: attempt power cycle [ 2197.311667][T19541] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2197.361680][T19541] usb 6-1: device descriptor read/8, error -71 [ 2197.598195][T31426] veth0_to_team: entered promiscuous mode [ 2197.721824][T19541] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2198.193075][T19541] usb 6-1: device descriptor read/8, error -71 [ 2198.327423][T19541] usb usb6-port1: unable to enumerate USB device [ 2201.964037][T31463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6679'. [ 2201.974854][T31463] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6679'. [ 2202.359519][T31463] fuse: Bad value for 'fd' [ 2204.465920][T31503] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2204.496225][T31503] syzkaller1: linktype set to 823 [ 2206.654450][T31515] netlink: 5040 bytes leftover after parsing attributes in process `syz.5.6689'. [ 2209.269051][T31560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6696'. [ 2209.278638][T31560] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6696'. [ 2209.395408][T31560] fuse: Bad value for 'fd' [ 2211.614339][ T30] audit: type=1326 audit(1767807206.676:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2211.903297][ T30] audit: type=1326 audit(1767807206.706:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2212.258378][ T30] audit: type=1326 audit(1767807206.716:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2212.304765][ T30] audit: type=1326 audit(1767807206.776:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2212.511852][ T5939] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2212.647819][ T30] audit: type=1326 audit(1767807206.926:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2212.727066][ T30] audit: type=1326 audit(1767807206.926:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2212.768239][ T30] audit: type=1326 audit(1767807206.926:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2213.132567][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.156821][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.170782][ T30] audit: type=1326 audit(1767807206.926:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2213.193479][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2213.212332][ T30] audit: type=1326 audit(1767807206.946:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2213.245204][ T5939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2213.463690][ T30] audit: type=1326 audit(1767807206.946:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31584 comm="syz.2.6701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2213.625153][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.927907][ T5939] usb 3-1: config 0 descriptor?? [ 2214.844530][T31612] loop5: detected capacity change from 0 to 7 [ 2214.900246][T31612] Dev loop5: unable to read RDB block 7 [ 2214.937430][T31612] loop5: AHDI p1 p2 [ 2214.952681][T31612] loop5: partition table partially beyond EOD, truncated [ 2214.979982][T31612] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2216.274693][T31631] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6712'. [ 2216.285077][T31631] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6712'. [ 2216.297495][T31631] fuse: Bad value for 'fd' [ 2216.673382][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 2216.818235][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2216.953762][ T5939] usb 3-1: USB disconnect, device number 86 [ 2219.002232][T28756] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2219.185581][T28756] usb 2-1: Using ep0 maxpacket: 32 [ 2219.230430][T28756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.306510][T28756] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2219.331707][T28756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.339844][T28756] usb 2-1: Product: syz [ 2219.345836][T28756] usb 2-1: Manufacturer: syz [ 2219.350512][T28756] usb 2-1: SerialNumber: syz [ 2219.368122][T31656] program syz.4.6717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2219.385180][T28756] usb 2-1: config 0 descriptor?? [ 2219.409036][T28756] cdc_ether 2-1:0.0: probe with driver cdc_ether failed with error -22 [ 2219.418117][T28756] usb 2-1: unsupported MDLM descriptors [ 2220.251825][T28756] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2220.406828][T28756] usb 6-1: Using ep0 maxpacket: 16 [ 2220.414351][T28756] usb 6-1: config 0 has an invalid interface number: 178 but max is 2 [ 2220.423215][T28756] usb 6-1: config 0 has an invalid interface number: 71 but max is 2 [ 2220.438308][T28756] usb 6-1: config 0 has an invalid interface number: 145 but max is 2 [ 2220.453574][T28756] usb 6-1: config 0 has no interface number 0 [ 2220.467675][T28756] usb 6-1: config 0 has no interface number 1 [ 2220.490314][T28756] usb 6-1: config 0 has no interface number 2 [ 2220.643186][T28756] usb 6-1: config 0 interface 71 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2220.668926][T28756] usb 6-1: config 0 interface 71 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 479 [ 2220.680014][T28756] usb 6-1: config 0 interface 71 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2220.764816][T28756] usb 6-1: config 0 interface 71 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2220.775746][T28756] usb 6-1: config 0 interface 71 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1023 [ 2220.796479][T28756] usb 6-1: config 0 interface 71 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2220.821660][T28756] usb 6-1: config 0 interface 71 altsetting 1 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2220.848261][T28756] usb 6-1: config 0 interface 71 altsetting 1 endpoint 0x86 has an invalid bInterval 25, changing to 8 [ 2220.871635][T28756] usb 6-1: config 0 interface 71 altsetting 1 endpoint 0x86 has invalid maxpacket 34104, setting to 1024 [ 2220.891800][T18221] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2220.915795][T28756] usb 6-1: config 0 interface 71 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 2220.938085][T28756] usb 6-1: config 0 interface 71 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 2220.964604][T28756] usb 6-1: config 0 interface 145 altsetting 227 bulk endpoint 0xA has invalid maxpacket 64 [ 2221.062420][T18221] usb 5-1: Using ep0 maxpacket: 16 [ 2221.096116][T28756] usb 6-1: config 0 interface 145 altsetting 227 has a duplicate endpoint with address 0x4, skipping [ 2221.108766][T28756] usb 6-1: config 0 interface 145 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 2221.120506][T28756] usb 6-1: config 0 interface 178 has no altsetting 0 [ 2221.127949][T28756] usb 6-1: config 0 interface 71 has no altsetting 0 [ 2221.135274][T28756] usb 6-1: config 0 interface 145 has no altsetting 0 [ 2221.143268][T18221] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2221.157907][T28756] usb 6-1: New USB device found, idVendor=0403, idProduct=e0f2, bcdDevice=6e.e0 [ 2221.167580][T18221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.196832][T28756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.206760][T31682] loop8: detected capacity change from 0 to 8 [ 2221.213958][T18221] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2221.233386][T31682] Dev loop8: unable to read RDB block 8 [ 2221.291884][T31682] loop8: unable to read partition table [ 2221.298302][T31682] loop8: partition table beyond EOD, truncated [ 2221.326266][T28756] usb 6-1: Product: syz [ 2221.334998][T28756] usb 6-1: Manufacturer: syz [ 2221.335970][T31682] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2221.360084][T18221] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2221.380273][T28756] usb 6-1: SerialNumber: syz [ 2221.401759][T18221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.420154][T18221] usb 5-1: Product: syz [ 2221.430339][T18221] usb 5-1: Manufacturer: syz [ 2221.440535][T18221] usb 5-1: SerialNumber: syz [ 2221.456436][T28756] usb 6-1: config 0 descriptor?? [ 2221.521496][T28756] ftdi_sio 6-1:0.178: FTDI USB Serial Device converter detected [ 2221.565932][T28756] ftdi_sio ttyUSB0: unknown device type: 0x6ee0 [ 2221.729560][T28756] ftdi_sio 6-1:0.71: FTDI USB Serial Device converter detected [ 2221.739742][T28756] ftdi_sio ttyUSB1: unknown device type: 0x6ee0 [ 2221.772758][T28756] ftdi_sio 6-1:0.145: FTDI USB Serial Device converter detected [ 2221.792565][T28756] ftdi_sio ttyUSB2: unknown device type: 0x6ee0 [ 2221.807426][T28756] usb 6-1: USB disconnect, device number 14 [ 2221.815988][T28756] ftdi_sio 6-1:0.178: device disconnected [ 2221.942291][T28756] ftdi_sio 6-1:0.71: device disconnected [ 2221.948565][T31681] netlink: 'syz.4.6723': attribute type 3 has an invalid length. [ 2221.966040][T31681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2221.971107][T28756] ftdi_sio 6-1:0.145: device disconnected [ 2221.977478][T31681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.010670][T18221] usb 5-1: 0:2 : does not exist [ 2222.216771][T18221] usb 5-1: USB disconnect, device number 77 [ 2222.344875][T31696] udevd[31696]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2222.693459][T28756] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2222.806957][T30643] usb 2-1: USB disconnect, device number 120 [ 2222.843457][T31704] loop5: detected capacity change from 0 to 7 [ 2222.902152][T31704] Dev loop5: unable to read RDB block 7 [ 2223.081739][T31704] loop5: AHDI p1 p2 [ 2223.090936][T31704] loop5: partition table partially beyond EOD, truncated [ 2223.134639][T31704] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2223.141763][T28756] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2223.151991][T28756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.160036][T28756] usb 4-1: Product: syz [ 2223.191007][T28756] usb 4-1: Manufacturer: syz [ 2223.230276][T28756] usb 4-1: SerialNumber: syz [ 2223.249351][T28756] usb 4-1: config 0 descriptor?? [ 2223.537413][T28756] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2225.066398][T31728] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6733'. [ 2225.460388][T17097] usb 4-1: USB disconnect, device number 112 [ 2226.251158][T31736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6735'. [ 2226.710705][T31757] FAULT_INJECTION: forcing a failure. [ 2226.710705][T31757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2226.911905][T31757] CPU: 0 UID: 0 PID: 31757 Comm: syz.3.6743 Tainted: G L syzkaller #0 PREEMPT(full) [ 2226.911940][T31757] Tainted: [L]=SOFTLOCKUP [ 2226.911949][T31757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2226.911962][T31757] Call Trace: [ 2226.911971][T31757] [ 2226.911982][T31757] dump_stack_lvl+0xe8/0x150 [ 2226.912019][T31757] should_fail_ex+0x414/0x560 [ 2226.912060][T31757] _copy_from_user+0x2d/0xb0 [ 2226.912088][T31757] __sys_sendto+0x25c/0x520 [ 2226.912117][T31757] ? __pfx___sys_sendto+0x10/0x10 [ 2226.912139][T31757] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2226.912177][T31757] ? __fget_files+0x3a0/0x420 [ 2226.912217][T31757] ? ksys_write+0x22a/0x250 [ 2226.912241][T31757] ? __pfx_ksys_write+0x10/0x10 [ 2226.912268][T31757] __ia32_sys_sendto+0xdd/0x100 [ 2226.912296][T31757] __do_fast_syscall_32+0x1dc/0x570 [ 2226.912321][T31757] ? lockdep_hardirqs_on+0x7b/0x110 [ 2226.912339][T31757] ? do_fast_syscall_32+0x34/0x80 [ 2226.912362][T31757] ? irqentry_exit+0x10f/0x670 [ 2226.912389][T31757] do_fast_syscall_32+0x34/0x80 [ 2226.912414][T31757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2226.912442][T31757] RIP: 0023:0xf7f87539 [ 2226.912462][T31757] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2226.912483][T31757] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2226.912512][T31757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2226.912527][T31757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 2226.912540][T31757] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2226.912553][T31757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2226.912566][T31757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2226.912605][T31757] [ 2227.125786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.133220][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.913049][T17097] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2228.086114][T17097] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2228.119205][T17097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.144578][T17097] usb 4-1: Product: syz [ 2228.184290][T17097] usb 4-1: Manufacturer: syz [ 2228.214716][T17097] usb 4-1: SerialNumber: syz [ 2228.229118][T17097] usb 4-1: config 0 descriptor?? [ 2228.486961][T17097] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2229.360385][T31777] loop8: detected capacity change from 0 to 8 [ 2229.370998][T31777] Dev loop8: unable to read RDB block 8 [ 2229.378629][T31777] loop8: unable to read partition table [ 2229.394666][T31777] loop8: partition table beyond EOD, truncated [ 2229.414734][T31777] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2230.131631][T31796] syzkaller1: tun_chr_ioctl cmd 35123 [ 2230.146552][T31796] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2230.160316][T31796] syzkaller1: linktype set to 801 [ 2230.363973][T31801] FAULT_INJECTION: forcing a failure. [ 2230.363973][T31801] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.413365][T31801] CPU: 1 UID: 0 PID: 31801 Comm: syz.2.6755 Tainted: G L syzkaller #0 PREEMPT(full) [ 2230.413406][T31801] Tainted: [L]=SOFTLOCKUP [ 2230.413415][T31801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2230.413430][T31801] Call Trace: [ 2230.413439][T31801] [ 2230.413449][T31801] dump_stack_lvl+0xe8/0x150 [ 2230.413483][T31801] should_fail_ex+0x414/0x560 [ 2230.413523][T31801] should_failslab+0xa8/0x100 [ 2230.413553][T31801] __kmalloc_noprof+0xdf/0x800 [ 2230.413576][T31801] ? rds_message_alloc+0x47/0x1f0 [ 2230.413605][T31801] ? rds_sendmsg+0x7ac/0x1f00 [ 2230.413642][T31801] rds_message_alloc+0x47/0x1f0 [ 2230.413672][T31801] rds_sendmsg+0xb11/0x1f00 [ 2230.413716][T31801] ? aa_sk_perm+0x15f/0x920 [ 2230.413745][T31801] ? __pfx_rds_sendmsg+0x10/0x10 [ 2230.413773][T31801] ? aa_sk_perm+0x7ee/0x920 [ 2230.413803][T31801] ? __pfx_aa_sk_perm+0x10/0x10 [ 2230.413826][T31801] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2230.413864][T31801] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2230.413893][T31801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2230.413914][T31801] ? __pfx_rds_sendmsg+0x10/0x10 [ 2230.413946][T31801] __sock_sendmsg+0x21c/0x270 [ 2230.413982][T31801] __sys_sendto+0x3bd/0x520 [ 2230.414009][T31801] ? __pfx___sys_sendto+0x10/0x10 [ 2230.414030][T31801] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2230.414068][T31801] ? __fget_files+0x3a0/0x420 [ 2230.414108][T31801] ? ksys_write+0x22a/0x250 [ 2230.414132][T31801] ? __pfx_ksys_write+0x10/0x10 [ 2230.414158][T31801] __ia32_sys_sendto+0xdd/0x100 [ 2230.414186][T31801] __do_fast_syscall_32+0x1dc/0x570 [ 2230.414210][T31801] ? lockdep_hardirqs_on+0x7b/0x110 [ 2230.414231][T31801] ? do_fast_syscall_32+0x34/0x80 [ 2230.414255][T31801] ? irqentry_exit+0x10f/0x670 [ 2230.414282][T31801] do_fast_syscall_32+0x34/0x80 [ 2230.414307][T31801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2230.414341][T31801] RIP: 0023:0xf7f11539 [ 2230.414361][T31801] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2230.414381][T31801] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2230.414405][T31801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2230.414420][T31801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 2230.414435][T31801] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2230.414449][T31801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2230.414463][T31801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2230.414495][T31801] [ 2230.983640][T17210] usb 4-1: USB disconnect, device number 113 [ 2231.116827][T31813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6757'. [ 2231.597578][T31824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6760'. [ 2231.644563][T31824] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6760'. [ 2231.769315][T31828] fuse: Bad value for 'fd' [ 2232.403162][T31846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6766'. [ 2232.415619][T31846] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6766'. [ 2232.424921][T31846] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6766'. [ 2232.451802][T17210] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2232.632526][T17210] usb 2-1: Using ep0 maxpacket: 32 [ 2232.650561][T17210] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2232.668366][T17210] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2232.731679][T17886] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2232.863934][T17210] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2232.883396][T17210] usb 2-1: config 1 has no interface number 0 [ 2232.889884][T17210] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2232.902389][T17210] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2232.915939][T17210] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2232.925489][T17210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.060296][T17210] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2233.082124][T17886] usb 5-1: Using ep0 maxpacket: 32 [ 2233.093614][T31849] FAULT_INJECTION: forcing a failure. [ 2233.093614][T31849] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.117873][T17886] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2233.146877][T17886] usb 5-1: config 0 has no interface number 0 [ 2233.197851][T17886] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2233.219039][T31849] CPU: 1 UID: 0 PID: 31849 Comm: syz.5.6767 Tainted: G L syzkaller #0 PREEMPT(full) [ 2233.219077][T31849] Tainted: [L]=SOFTLOCKUP [ 2233.219085][T31849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2233.219108][T31849] Call Trace: [ 2233.219118][T31849] [ 2233.219129][T31849] dump_stack_lvl+0xe8/0x150 [ 2233.219167][T31849] should_fail_ex+0x414/0x560 [ 2233.219210][T31849] should_failslab+0xa8/0x100 [ 2233.219239][T31849] kmem_cache_alloc_noprof+0x88/0x710 [ 2233.219269][T31849] ? __rds_conn_create+0x7ca/0x2060 [ 2233.219294][T31849] __rds_conn_create+0x7ca/0x2060 [ 2233.219314][T31849] ? __rds_conn_create+0x2e3/0x2060 [ 2233.219351][T31849] ? __pfx___rds_conn_create+0x10/0x10 [ 2233.219377][T31849] ? __raw_spin_lock_init+0x45/0x100 [ 2233.219405][T31849] rds_conn_create_outgoing+0x43/0x60 [ 2233.219430][T31849] rds_sendmsg+0x1001/0x1f00 [ 2233.219469][T31849] ? aa_sk_perm+0x15f/0x920 [ 2233.219493][T31849] ? __pfx_rds_sendmsg+0x10/0x10 [ 2233.219517][T31849] ? aa_sk_perm+0x7ee/0x920 [ 2233.219542][T31849] ? __pfx_aa_sk_perm+0x10/0x10 [ 2233.219561][T31849] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2233.219591][T31849] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2233.219620][T31849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2233.219637][T31849] ? __pfx_rds_sendmsg+0x10/0x10 [ 2233.219662][T31849] __sock_sendmsg+0x21c/0x270 [ 2233.219695][T31849] __sys_sendto+0x3bd/0x520 [ 2233.219719][T31849] ? __pfx___sys_sendto+0x10/0x10 [ 2233.219736][T31849] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2233.219770][T31849] ? __fget_files+0x3a0/0x420 [ 2233.219801][T31849] ? ksys_write+0x22a/0x250 [ 2233.219819][T31849] ? __pfx_ksys_write+0x10/0x10 [ 2233.219841][T31849] __ia32_sys_sendto+0xdd/0x100 [ 2233.219864][T31849] __do_fast_syscall_32+0x1dc/0x570 [ 2233.219887][T31849] ? lockdep_hardirqs_on+0x7b/0x110 [ 2233.219905][T31849] ? do_fast_syscall_32+0x34/0x80 [ 2233.219924][T31849] ? irqentry_exit+0x10f/0x670 [ 2233.219944][T31849] do_fast_syscall_32+0x34/0x80 [ 2233.219965][T31849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2233.219987][T31849] RIP: 0023:0xf70ad539 [ 2233.220003][T31849] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2233.220021][T31849] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2233.220043][T31849] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2233.220055][T31849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 2233.220066][T31849] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2233.220077][T31849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2233.220088][T31849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2233.220118][T31849] [ 2233.225068][T17886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.542421][T17886] usb 5-1: Product: syz [ 2233.546835][T17886] usb 5-1: Manufacturer: syz [ 2233.552489][T17886] usb 5-1: SerialNumber: syz [ 2233.572752][T17886] usb 5-1: config 0 descriptor?? [ 2233.593072][T17886] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2233.875644][T17886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2234.007300][T17886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2235.217561][T31855] loop8: detected capacity change from 0 to 8 [ 2235.225604][T31855] Dev loop8: unable to read RDB block 8 [ 2235.231426][T31855] loop8: unable to read partition table [ 2235.243790][T31855] loop8: partition table beyond EOD, truncated [ 2235.256472][T31855] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2235.358148][T17210] snd_usb_pod 2-1:1.1: set_interface failed [ 2235.382795][T17210] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2235.408563][T17210] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 2235.436592][T17210] usb 2-1: USB disconnect, device number 121 [ 2235.633486][T28756] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2235.860907][T28756] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2235.871414][T28756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.898509][T28756] usb 4-1: Product: syz [ 2235.928175][T28756] usb 4-1: Manufacturer: syz [ 2235.939294][T28756] usb 4-1: SerialNumber: syz [ 2235.966016][T28756] usb 4-1: config 0 descriptor?? [ 2236.192967][T28756] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2236.429956][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2236.438296][T28756] usb 5-1: USB disconnect, device number 78 [ 2236.465832][T28756] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2236.491141][T28756] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2236.524442][T28756] quatech2 5-1:0.51: device disconnected [ 2236.807956][T31889] loop5: detected capacity change from 0 to 7 [ 2236.816609][T31889] Dev loop5: unable to read RDB block 7 [ 2236.822557][T31889] loop5: AHDI p1 p2 [ 2236.826664][T31889] loop5: partition table partially beyond EOD, truncated [ 2236.835148][T31889] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2237.130066][T31899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6781'. [ 2237.167593][T31898] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 2237.194159][T31900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6780'. [ 2237.204326][T31900] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6780'. [ 2237.259108][T31900] fuse: Bad value for 'fd' [ 2238.510770][T28756] usb 4-1: USB disconnect, device number 114 [ 2239.058278][T31921] FAULT_INJECTION: forcing a failure. [ 2239.058278][T31921] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.178392][T31921] CPU: 0 UID: 0 PID: 31921 Comm: syz.3.6788 Tainted: G L syzkaller #0 PREEMPT(full) [ 2239.178430][T31921] Tainted: [L]=SOFTLOCKUP [ 2239.178439][T31921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2239.178454][T31921] Call Trace: [ 2239.178463][T31921] [ 2239.178474][T31921] dump_stack_lvl+0xe8/0x150 [ 2239.178510][T31921] should_fail_ex+0x414/0x560 [ 2239.178553][T31921] should_failslab+0xa8/0x100 [ 2239.178581][T31921] __kmalloc_noprof+0xdf/0x800 [ 2239.178604][T31921] ? io_cache_alloc_new+0x40/0x100 [ 2239.178633][T31921] io_cache_alloc_new+0x40/0x100 [ 2239.178658][T31921] io_arm_apoll+0x474/0x8f0 [ 2239.178706][T31921] ? __pfx_io_arm_apoll+0x10/0x10 [ 2239.178742][T31921] ? io_file_get_normal+0xe9/0x2d0 [ 2239.178771][T31921] ? io_arm_poll_handler+0x1d5/0x2a0 [ 2239.178810][T31921] io_queue_async+0x175/0x240 [ 2239.178846][T31921] io_submit_sqes+0x10ba/0x2140 [ 2239.178907][T31921] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 2239.178957][T31921] ? ksys_write+0x1cb/0x250 [ 2239.178983][T31921] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2239.179011][T31921] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2239.179037][T31921] ? __pfx_vfs_write+0x10/0x10 [ 2239.179062][T31921] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2239.179091][T31921] ? __fget_files+0x3a0/0x420 [ 2239.179127][T31921] ? fput+0xa0/0xd0 [ 2239.179157][T31921] ? ksys_write+0x22a/0x250 [ 2239.179181][T31921] ? __pfx_ksys_write+0x10/0x10 [ 2239.179209][T31921] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2239.179242][T31921] __do_fast_syscall_32+0x1dc/0x570 [ 2239.179268][T31921] ? lockdep_hardirqs_on+0x7b/0x110 [ 2239.179289][T31921] ? do_fast_syscall_32+0x34/0x80 [ 2239.179314][T31921] ? irqentry_exit+0x10f/0x670 [ 2239.179341][T31921] do_fast_syscall_32+0x34/0x80 [ 2239.179367][T31921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2239.179396][T31921] RIP: 0023:0xf7f87539 [ 2239.179416][T31921] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2239.179436][T31921] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2239.179460][T31921] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047ba [ 2239.179477][T31921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2239.179490][T31921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2239.179504][T31921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2239.179518][T31921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2239.179551][T31921] [ 2239.961681][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2239.961706][ T30] audit: type=1326 audit(1767807234.996:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.059019][ T30] audit: type=1326 audit(1767807235.046:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.215713][ T30] audit: type=1326 audit(1767807235.046:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.412579][ T30] audit: type=1326 audit(1767807235.046:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.415502][T31933] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6792'. [ 2240.489928][ T30] audit: type=1326 audit(1767807235.046:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.553535][T30643] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2240.661820][ T30] audit: type=1326 audit(1767807235.156:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.743746][ T30] audit: type=1326 audit(1767807235.156:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.793552][T30643] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 123, changing to 10 [ 2240.833980][T30643] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2240.872585][T30643] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 2240.884454][ T30] audit: type=1326 audit(1767807235.156:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2240.926521][T30643] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2240.945466][T30643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.982106][ T30] audit: type=1326 audit(1767807235.256:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2241.010432][T30643] usb 4-1: Product: syz [ 2241.019000][T30643] usb 4-1: Manufacturer: С [ 2241.029118][T30643] usb 4-1: SerialNumber: syz [ 2241.059525][ T30] audit: type=1326 audit(1767807235.256:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.6789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2241.093951][T31941] loop5: detected capacity change from 0 to 7 [ 2241.125304][T31941] Dev loop5: unable to read RDB block 7 [ 2241.131334][T31941] loop5: AHDI p1 p2 [ 2241.151746][T31941] loop5: partition table partially beyond EOD, truncated [ 2241.192201][T31941] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2241.253412][T31930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.279503][T31930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2241.331711][T19541] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2241.355371][T31930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2241.396510][T31930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2241.515290][T19541] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.528896][T19541] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2241.549747][T19541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2241.561817][T19541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2241.572905][T19541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2241.627755][T19541] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 2241.639574][T19541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.649004][T19541] usb 5-1: Product: syz [ 2241.659904][T19541] usb 5-1: Manufacturer: syz [ 2241.664857][T19541] usb 5-1: SerialNumber: syz [ 2241.676443][T31930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.681140][T19541] usb 5-1: config 0 descriptor?? [ 2241.718467][T31949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6796'. [ 2241.727822][T31949] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6796'. [ 2241.741486][T31949] fuse: Bad value for 'fd' [ 2241.775047][T31930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2241.832658][T30643] cdc_ncm 4-1:1.0: bind() failure [ 2241.855413][T30643] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2241.873871][T30643] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2241.901266][T30643] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 2241.930412][T30643] usb 4-1: USB disconnect, device number 115 [ 2241.980191][T19541] usb 5-1: ucan: probing device on interface #0 [ 2241.991175][T19541] usb 5-1: ucan: invalid endpoint configuration [ 2242.000563][T19541] usb 5-1: ucan: probe failed; try to update the device firmware [ 2242.082020][T19541] usb 5-1: USB disconnect, device number 79 [ 2242.869478][T31960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6798'. [ 2243.984449][T31978] FAULT_INJECTION: forcing a failure. [ 2243.984449][T31978] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.015645][T31978] CPU: 1 UID: 0 PID: 31978 Comm: syz.3.6805 Tainted: G L syzkaller #0 PREEMPT(full) [ 2244.015701][T31978] Tainted: [L]=SOFTLOCKUP [ 2244.015710][T31978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2244.015723][T31978] Call Trace: [ 2244.015733][T31978] [ 2244.015743][T31978] dump_stack_lvl+0xe8/0x150 [ 2244.015780][T31978] should_fail_ex+0x414/0x560 [ 2244.015810][T31978] should_failslab+0xa8/0x100 [ 2244.015831][T31978] __kmalloc_noprof+0xdf/0x800 [ 2244.015847][T31978] ? io_cache_alloc_new+0x40/0x100 [ 2244.015868][T31978] io_cache_alloc_new+0x40/0x100 [ 2244.015885][T31978] __io_prep_rw+0x23f/0xe00 [ 2244.015911][T31978] ? __pfx___io_prep_rw+0x10/0x10 [ 2244.015929][T31978] ? percpu_ref_get_many+0x21/0x1e0 [ 2244.015947][T31978] ? percpu_ref_get_many+0x21/0x1e0 [ 2244.015971][T31978] io_prep_rwv+0x91/0x3e0 [ 2244.015992][T31978] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 2244.016013][T31978] ? __pfx_io_prep_rwv+0x10/0x10 [ 2244.016044][T31978] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 2244.016068][T31978] io_submit_sqes+0xad3/0x2140 [ 2244.016110][T31978] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 2244.016144][T31978] ? ksys_write+0x1cb/0x250 [ 2244.016162][T31978] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2244.016188][T31978] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2244.016206][T31978] ? __pfx_vfs_write+0x10/0x10 [ 2244.016223][T31978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2244.016243][T31978] ? __fget_files+0x3a0/0x420 [ 2244.016268][T31978] ? fput+0xa0/0xd0 [ 2244.016290][T31978] ? ksys_write+0x22a/0x250 [ 2244.016306][T31978] ? __pfx_ksys_write+0x10/0x10 [ 2244.016325][T31978] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2244.016354][T31978] __do_fast_syscall_32+0x1dc/0x570 [ 2244.016489][T31978] ? lockdep_hardirqs_on+0x7b/0x110 [ 2244.016506][T31978] ? do_fast_syscall_32+0x34/0x80 [ 2244.016524][T31978] ? irqentry_exit+0x10f/0x670 [ 2244.016543][T31978] do_fast_syscall_32+0x34/0x80 [ 2244.016561][T31978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2244.016582][T31978] RIP: 0023:0xf7f87539 [ 2244.016597][T31978] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2244.016611][T31978] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2244.016628][T31978] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047ba [ 2244.016640][T31978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2244.016650][T31978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2244.016661][T31978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2244.016671][T31978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2244.016694][T31978] [ 2245.428566][T32007] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6810'. [ 2245.438155][T32007] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6810'. [ 2245.893583][T32017] netlink: 'syz.3.6814': attribute type 4 has an invalid length. [ 2245.911654][T32017] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6814'. [ 2246.230166][T32017] delete_channel: no stack [ 2246.358995][T32022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6815'. [ 2246.378657][T32022] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6815'. [ 2246.447345][T32022] fuse: Bad value for 'fd' [ 2246.921611][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2246.921632][ T30] audit: type=1326 audit(1767807241.926:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32024 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2247.281664][ T30] audit: type=1326 audit(1767807241.926:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32024 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2247.326755][ T30] audit: type=1326 audit(1767807241.926:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32024 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2247.524746][ T30] audit: type=1326 audit(1767807242.076:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32024 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2247.678158][ T30] audit: type=1326 audit(1767807242.076:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32024 comm="syz.1.6816" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2247.978794][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6818'. [ 2248.047345][T32035] netlink: 277 bytes leftover after parsing attributes in process `syz.5.6818'. [ 2248.067925][T32035] netlink: 277 bytes leftover after parsing attributes in process `syz.5.6818'. [ 2248.173942][T32037] FAULT_INJECTION: forcing a failure. [ 2248.173942][T32037] name failslab, interval 1, probability 0, space 0, times 0 [ 2248.308556][T32037] CPU: 1 UID: 0 PID: 32037 Comm: syz.4.6819 Tainted: G L syzkaller #0 PREEMPT(full) [ 2248.308592][T32037] Tainted: [L]=SOFTLOCKUP [ 2248.308601][T32037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2248.308615][T32037] Call Trace: [ 2248.308625][T32037] [ 2248.308634][T32037] dump_stack_lvl+0xe8/0x150 [ 2248.308668][T32037] should_fail_ex+0x414/0x560 [ 2248.308718][T32037] should_failslab+0xa8/0x100 [ 2248.308747][T32037] __kmalloc_noprof+0xdf/0x800 [ 2248.308770][T32037] ? io_cache_alloc_new+0x40/0x100 [ 2248.308798][T32037] io_cache_alloc_new+0x40/0x100 [ 2248.308825][T32037] io_arm_apoll+0x474/0x8f0 [ 2248.308861][T32037] ? __pfx_io_arm_apoll+0x10/0x10 [ 2248.308895][T32037] ? io_file_get_normal+0xe9/0x2d0 [ 2248.308923][T32037] ? io_arm_poll_handler+0x1d5/0x2a0 [ 2248.308959][T32037] io_queue_async+0x175/0x240 [ 2248.308993][T32037] io_submit_sqes+0x10ba/0x2140 [ 2248.309051][T32037] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 2248.309097][T32037] ? ksys_write+0x1cb/0x250 [ 2248.309123][T32037] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2248.309150][T32037] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2248.309176][T32037] ? __pfx_vfs_write+0x10/0x10 [ 2248.309199][T32037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2248.309228][T32037] ? __fget_files+0x3a0/0x420 [ 2248.309260][T32037] ? fput+0xa0/0xd0 [ 2248.309287][T32037] ? ksys_write+0x22a/0x250 [ 2248.309310][T32037] ? __pfx_ksys_write+0x10/0x10 [ 2248.309337][T32037] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 2248.309370][T32037] __do_fast_syscall_32+0x1dc/0x570 [ 2248.309395][T32037] ? lockdep_hardirqs_on+0x7b/0x110 [ 2248.309416][T32037] ? do_fast_syscall_32+0x34/0x80 [ 2248.309441][T32037] ? irqentry_exit+0x10f/0x670 [ 2248.309468][T32037] do_fast_syscall_32+0x34/0x80 [ 2248.309493][T32037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2248.309520][T32037] RIP: 0023:0xf7f21539 [ 2248.309540][T32037] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2248.309559][T32037] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 2248.309583][T32037] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047ba [ 2248.309598][T32037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2248.309612][T32037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2248.309625][T32037] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2248.309639][T32037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2248.309696][T32037] [ 2248.575032][T17210] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2248.859410][T17210] usb 6-1: Using ep0 maxpacket: 32 [ 2248.901443][T17210] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2248.957482][T17210] usb 6-1: config 0 has no interface number 0 [ 2249.150222][T17210] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2249.185944][T17210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.194981][T17210] usb 6-1: Product: syz [ 2249.199261][T17210] usb 6-1: Manufacturer: syz [ 2249.204289][T17210] usb 6-1: SerialNumber: syz [ 2249.221808][T17210] usb 6-1: config 0 descriptor?? [ 2249.240563][T17210] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2249.273827][T32046] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6822'. [ 2249.492381][T17210] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2249.546269][T17210] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2250.633317][T32057] loop5: detected capacity change from 0 to 7 [ 2250.646859][T31695] Dev loop5: unable to read RDB block 7 [ 2250.652815][T31695] loop5: AHDI p1 p2 [ 2250.660264][T31695] loop5: partition table partially beyond EOD, truncated [ 2250.670400][T31695] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2250.683072][T32057] Dev loop5: unable to read RDB block 7 [ 2250.701783][T32057] loop5: AHDI p1 p2 [ 2250.723754][T32057] loop5: partition table partially beyond EOD, truncated [ 2250.753126][T32057] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2251.340740][T32065] dlm: no locking on control device [ 2251.470205][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2251.470796][T17097] usb 6-1: USB disconnect, device number 15 [ 2251.475700][T17097] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2251.479375][T17097] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2251.509898][T17097] quatech2 6-1:0.51: device disconnected [ 2251.881621][ T30] audit: type=1326 audit(1767807246.936:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.101633][ T30] audit: type=1326 audit(1767807246.946:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.128824][ T30] audit: type=1326 audit(1767807246.946:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.180557][ T30] audit: type=1326 audit(1767807246.946:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.192093][T17210] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2252.231859][ T30] audit: type=1326 audit(1767807246.946:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.398407][ T30] audit: type=1326 audit(1767807246.946:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.407722][T17210] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.538040][ T30] audit: type=1326 audit(1767807246.946:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.595301][ T30] audit: type=1326 audit(1767807246.946:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.662205][T17210] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2252.760361][ T30] audit: type=1326 audit(1767807246.946:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.802924][ T30] audit: type=1326 audit(1767807246.946:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.825581][T17210] usb 6-1: config 1 interface 2 has no altsetting 0 [ 2252.833594][ T30] audit: type=1326 audit(1767807246.946:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32069 comm="syz.5.6831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2252.842363][T17210] usb 6-1: New USB device found, idVendor=1d6b, idProduct=e901, bcdDevice= 0.31 [ 2252.917186][T17210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.981958][T17210] usb 6-1: Product: syz [ 2253.001932][T17210] usb 6-1: Manufacturer: syz [ 2253.006623][T17210] usb 6-1: SerialNumber: syz [ 2253.051685][T17097] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2253.216414][T17097] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2253.231885][T17097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.241356][T17097] usb 2-1: Product: syz [ 2253.248916][T17097] usb 2-1: Manufacturer: syz [ 2253.259094][T17097] usb 2-1: SerialNumber: syz [ 2253.274985][T32070] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6831'. [ 2253.299947][T17097] usb 2-1: config 0 descriptor?? [ 2253.318548][T32070] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6831'. [ 2253.388986][T32070] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6831'. [ 2253.408960][T28756] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 2253.431109][T17210] usb 6-1: selecting invalid altsetting 0 [ 2253.530667][T17097] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2253.580314][T17210] usb 6-1: USB disconnect, device number 16 [ 2253.591109][T28756] usb 3-1: device descriptor read/64, error -71 [ 2253.654819][T31695] udevd[31695]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2253.841708][T28756] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 2253.981627][T28756] usb 3-1: device descriptor read/64, error -71 [ 2254.102084][T28756] usb usb3-port1: attempt power cycle [ 2254.169411][T32098] loop5: detected capacity change from 0 to 7 [ 2254.181789][T31695] Dev loop5: unable to read RDB block 7 [ 2254.187515][T31695] loop5: AHDI p1 p2 [ 2254.194052][T31695] loop5: partition table partially beyond EOD, truncated [ 2254.202582][T31695] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2254.212712][T32098] Dev loop5: unable to read RDB block 7 [ 2254.218396][T32098] loop5: AHDI p1 p2 [ 2254.225350][T32098] loop5: partition table partially beyond EOD, truncated [ 2254.233529][T32098] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2254.481906][T28756] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 2254.482526][T17097] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2254.526178][T32106] netlink: 'syz.5.6843': attribute type 4 has an invalid length. [ 2254.534501][T19541] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2254.542368][T32106] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6843'. [ 2254.552380][T28756] usb 3-1: device descriptor read/8, error -71 [ 2254.610334][T32107] delete_channel: no stack [ 2254.710817][T17097] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 2254.720678][T19541] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2254.749620][T19541] usb 5-1: config 0 has no interface number 0 [ 2254.756312][T17097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.784270][T17097] usb 4-1: Product: syz [ 2254.788896][T19541] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2254.792548][T28756] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 2254.816165][T17097] usb 4-1: Manufacturer: syz [ 2254.821079][T17097] usb 4-1: SerialNumber: syz [ 2254.831605][T19541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.852392][T28756] usb 3-1: device descriptor read/8, error -71 [ 2254.852874][T17097] usb 4-1: config 0 descriptor?? [ 2254.864413][T19541] usb 5-1: Product: syz [ 2254.868617][T19541] usb 5-1: Manufacturer: syz [ 2254.924203][T17097] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2254.932562][T19541] usb 5-1: SerialNumber: syz [ 2254.939326][T17097] usb 4-1: Detected FT4232HP [ 2254.948766][T19541] usb 5-1: config 0 descriptor?? [ 2254.962195][T28756] usb usb3-port1: unable to enumerate USB device [ 2255.171168][T19541] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2255.228062][T19541] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2255.239500][T17097] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2255.249987][T19541] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2255.264452][T19541] usb 5-1: media controller created [ 2255.270106][T17097] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2255.309634][T17097] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2255.394971][T19541] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2255.408703][T17097] usb 4-1: USB disconnect, device number 116 [ 2255.458496][T17097] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2255.494210][T17097] ftdi_sio 4-1:0.0: device disconnected [ 2255.512813][T19541] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2255.647467][T19541] usb 5-1: USB disconnect, device number 80 [ 2255.788678][T17097] usb 2-1: USB disconnect, device number 122 [ 2256.497360][T32122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6847'. [ 2256.514139][T32122] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 2256.562096][T32117] xt_CT: No such helper "syz0" [ 2257.887515][T32136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2258.407407][T32146] can: request_module (can-proto-3) failed. [ 2259.068487][T32159] loop5: detected capacity change from 0 to 7 [ 2259.088931][T32159] Dev loop5: unable to read RDB block 7 [ 2259.096498][T32159] loop5: AHDI p1 p2 [ 2259.103443][T32159] loop5: partition table partially beyond EOD, truncated [ 2259.173566][T32159] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2259.246022][ T5198] Dev loop5: unable to read RDB block 7 [ 2259.257280][ T5198] loop5: AHDI p1 p2 [ 2259.271901][ T5198] loop5: partition table partially beyond EOD, truncated [ 2259.292590][T32162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6855'. [ 2259.302878][T32162] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6855'. [ 2259.419978][T32162] fuse: Bad value for 'fd' [ 2259.429629][ T5198] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2261.023011][T32185] netlink: 'syz.1.6861': attribute type 4 has an invalid length. [ 2261.030958][T32185] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6861'. [ 2261.074163][T32189] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6871'. [ 2261.115426][T32187] delete_channel: no stack [ 2261.171195][T32189] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6871'. [ 2261.262747][T32186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6862'. [ 2261.293598][T32189] fuse: Bad value for 'fd' [ 2261.669194][T17886] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2261.851854][T17886] usb 3-1: device descriptor read/64, error -71 [ 2262.141636][T17886] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2262.317172][T17886] usb 3-1: device descriptor read/64, error -71 [ 2262.442062][T17886] usb usb3-port1: attempt power cycle [ 2262.619189][T32198] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6875'. [ 2262.801734][T17886] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2262.964258][T17886] usb 3-1: device descriptor read/8, error -71 [ 2263.017136][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6864'. [ 2263.081322][T32203] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6864'. [ 2263.090590][T32203] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6864'. [ 2263.201997][T17886] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2263.232598][T17886] usb 3-1: device descriptor read/8, error -71 [ 2263.362329][T17886] usb usb3-port1: unable to enumerate USB device [ 2263.492435][T28756] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2263.651605][T28756] usb 4-1: Using ep0 maxpacket: 32 [ 2263.670921][T28756] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2263.679358][T28756] usb 4-1: config 0 has no interface number 0 [ 2263.694061][T28756] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2263.711589][T28756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.741674][T28756] usb 4-1: Product: syz [ 2263.746189][T28756] usb 4-1: Manufacturer: syz [ 2263.761892][T28756] usb 4-1: SerialNumber: syz [ 2263.830558][T28756] usb 4-1: config 0 descriptor?? [ 2263.870993][T28756] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2264.166288][T28756] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2264.328623][T28756] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2264.446495][T32213] loop5: detected capacity change from 0 to 7 [ 2264.496830][T31406] Dev loop5: unable to read RDB block 7 [ 2264.514071][T31406] loop5: AHDI p1 p2 [ 2264.518086][T31406] loop5: partition table partially beyond EOD, truncated [ 2264.565766][T31406] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2264.602142][T32213] Dev loop5: unable to read RDB block 7 [ 2264.608044][T32213] loop5: AHDI p1 p2 [ 2264.612186][T32213] loop5: partition table partially beyond EOD, truncated [ 2264.643099][T32213] loop5: p1 start 1700754803 is beyond EOD, truncated [ 2265.574822][T17210] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2265.825549][T17210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.861771][T17210] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 2265.898151][T32224] [ 2265.900698][T32224] ===================================================== [ 2265.904389][T17210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.907852][T32224] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2265.907892][T32224] syzkaller #0 Tainted: G L [ 2265.907906][T32224] ----------------------------------------------------- [ 2265.907917][T32224] syz.1.6873/32224 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2265.944695][T32224] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 2265.953606][T32224] [ 2265.953606][T32224] and this task is already holding: [ 2265.961008][T32224] ffff88802f0a16a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 2265.969802][T32224] which would create a new lock dependency: [ 2265.975740][T32224] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2265.983584][T32224] [ 2265.983584][T32224] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2265.993177][T32224] (&client->buffer_lock){..-.}-{3:3} [ 2265.993403][T32224] [ 2265.993403][T32224] ... which became SOFTIRQ-irq-safe at: [ 2266.006608][T32224] lock_acquire+0x107/0x340 [ 2266.011356][T32224] _raw_spin_lock+0x2e/0x40 [ 2266.017739][T32224] evdev_pass_values+0xb9/0xbd0 [ 2266.023020][T32224] evdev_events+0x1e6/0x340 [ 2266.027833][T32224] input_pass_values+0x288/0x890 [ 2266.032936][T32224] input_event_dispose+0x330/0x6b0 [ 2266.038723][T32224] input_event+0x89/0xe0 [ 2266.043380][T32224] hidinput_report_event+0xa1/0x100 [ 2266.048799][T32224] hid_report_raw_event+0x148b/0x1720 [ 2266.054613][T32224] hid_input_report+0x44b/0x580 [ 2266.059714][T32224] hid_irq_in+0x47e/0x6d0 [ 2266.064191][T32224] __usb_hcd_giveback_urb+0x376/0x540 [ 2266.069793][T32224] dummy_timer+0x85f/0x45b0 [ 2266.074447][T32224] __hrtimer_run_queues+0x51c/0xc30 [ 2266.080015][T32224] hrtimer_run_softirq+0x187/0x2b0 [ 2266.085381][T32224] handle_softirqs+0x22b/0x7c0 [ 2266.090501][T32224] __irq_exit_rcu+0x60/0x150 [ 2266.095586][T32224] irq_exit_rcu+0x9/0x30 [ 2266.100268][T32224] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2266.106037][T32224] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2266.112358][T32224] __kasan_check_byte+0x0/0x40 [ 2266.117393][T32224] lock_acquire+0x84/0x340 [ 2266.121966][T32224] lock_vma_under_rcu+0x109/0x4a0 [ 2266.127416][T32224] do_user_addr_fault+0x2d9/0x1380 [ 2266.133152][T32224] exc_page_fault+0x71/0xd0 [ 2266.139122][T32224] asm_exc_page_fault+0x26/0x30 [ 2266.144743][T32224] [ 2266.144743][T32224] to a SOFTIRQ-irq-unsafe lock: [ 2266.152138][T32224] (tasklist_lock){.+.+}-{3:3} [ 2266.152181][T32224] [ 2266.152181][T32224] ... which became SOFTIRQ-irq-unsafe at: [ 2266.165201][T32224] ... [ 2266.165217][T32224] lock_acquire+0x107/0x340 [ 2266.172535][T32224] _raw_read_lock+0x36/0x50 [ 2266.177190][T32224] __do_wait+0xde/0x740 [ 2266.181693][T32224] do_wait+0x1e8/0x4f0 [ 2266.186266][T32224] kernel_wait+0xab/0x170 [ 2266.191146][T32224] call_usermodehelper_exec_work+0xbe/0x230 [ 2266.198968][T32224] process_scheduled_works+0xad1/0x1770 [ 2266.206201][T32224] worker_thread+0x8a0/0xda0 [ 2266.211298][T32224] kthread+0x711/0x8a0 [ 2266.215778][T32224] ret_from_fork+0x510/0xa50 [ 2266.221298][T32224] ret_from_fork_asm+0x1a/0x30 [ 2266.226560][T32224] [ 2266.226560][T32224] other info that might help us debug this: [ 2266.226560][T32224] [ 2266.238660][T32224] Chain exists of: [ 2266.238660][T32224] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 2266.238660][T32224] [ 2266.255342][T32224] Possible interrupt unsafe locking scenario: [ 2266.255342][T32224] [ 2266.265120][T32224] CPU0 CPU1 [ 2266.271175][T32224] ---- ---- [ 2266.277456][T32224] lock(tasklist_lock); [ 2266.282911][T32224] local_irq_disable(); [ 2266.290190][T32224] lock(&client->buffer_lock); [ 2266.298603][T32224] lock(&f_owner->lock); [ 2266.306157][T32224] [ 2266.309892][T32224] lock(&client->buffer_lock); [ 2266.315069][T32224] [ 2266.315069][T32224] *** DEADLOCK *** [ 2266.315069][T32224] [ 2266.323974][T32224] 2 locks held by syz.1.6873/32224: [ 2266.329211][T32224] #0: ffff8880647e4ce0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 2266.341023][T32224] #1: ffff88802f0a16a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 2266.353533][T32224] [ 2266.353533][T32224] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2266.365354][T32224] -> (&client->buffer_lock){..-.}-{3:3} { [ 2266.372177][T32224] IN-SOFTIRQ-W at: [ 2266.376988][T32224] lock_acquire+0x107/0x340 [ 2266.385194][T32224] _raw_spin_lock+0x2e/0x40 [ 2266.392847][T32224] evdev_pass_values+0xb9/0xbd0 [ 2266.402634][T32224] evdev_events+0x1e6/0x340 [ 2266.410758][T32224] input_pass_values+0x288/0x890 [ 2266.418565][T32224] input_event_dispose+0x330/0x6b0 [ 2266.426947][T32224] input_event+0x89/0xe0 [ 2266.433515][T32224] hidinput_report_event+0xa1/0x100 [ 2266.441888][T32224] hid_report_raw_event+0x148b/0x1720 [ 2266.450534][T32224] hid_input_report+0x44b/0x580 [ 2266.458352][T32224] hid_irq_in+0x47e/0x6d0 [ 2266.465662][T32224] __usb_hcd_giveback_urb+0x376/0x540 [ 2266.473942][T32224] dummy_timer+0x85f/0x45b0 [ 2266.481401][T32224] __hrtimer_run_queues+0x51c/0xc30 [ 2266.490034][T32224] hrtimer_run_softirq+0x187/0x2b0 [ 2266.498100][T32224] handle_softirqs+0x22b/0x7c0 [ 2266.505201][T32224] __irq_exit_rcu+0x60/0x150 [ 2266.512615][T32224] irq_exit_rcu+0x9/0x30 [ 2266.519785][T32224] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2266.529184][T32224] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2266.537733][T32224] __kasan_check_byte+0x0/0x40 [ 2266.546056][T32224] lock_acquire+0x84/0x340 [ 2266.553299][T32224] lock_vma_under_rcu+0x109/0x4a0 [ 2266.560647][T32224] do_user_addr_fault+0x2d9/0x1380 [ 2266.567800][T32224] exc_page_fault+0x71/0xd0 [ 2266.574474][T32224] asm_exc_page_fault+0x26/0x30 [ 2266.581566][T32224] INITIAL USE at: [ 2266.585990][T32224] lock_acquire+0x107/0x340 [ 2266.592459][T32224] _raw_spin_lock+0x2e/0x40 [ 2266.599498][T32224] evdev_pass_values+0xb9/0xbd0 [ 2266.606336][T32224] evdev_events+0x1e6/0x340 [ 2266.612904][T32224] input_pass_values+0x288/0x890 [ 2266.620182][T32224] input_event_dispose+0x330/0x6b0 [ 2266.627357][T32224] input_event+0x89/0xe0 [ 2266.634599][T32224] hidinput_report_event+0xa1/0x100 [ 2266.642469][T32224] hid_report_raw_event+0x148b/0x1720 [ 2266.651018][T32224] hid_input_report+0x44b/0x580 [ 2266.658727][T32224] hid_irq_in+0x47e/0x6d0 [ 2266.665028][T32224] __usb_hcd_giveback_urb+0x376/0x540 [ 2266.672468][T32224] dummy_timer+0x85f/0x45b0 [ 2266.678918][T32224] __hrtimer_run_queues+0x51c/0xc30 [ 2266.686072][T32224] hrtimer_run_softirq+0x187/0x2b0 [ 2266.693160][T32224] handle_softirqs+0x22b/0x7c0 [ 2266.700249][T32224] __irq_exit_rcu+0x60/0x150 [ 2266.707329][T32224] irq_exit_rcu+0x9/0x30 [ 2266.713567][T32224] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2266.721265][T32224] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2266.729287][T32224] __kasan_check_byte+0x0/0x40 [ 2266.736094][T32224] lock_acquire+0x84/0x340 [ 2266.742581][T32224] lock_vma_under_rcu+0x109/0x4a0 [ 2266.749581][T32224] do_user_addr_fault+0x2d9/0x1380 [ 2266.756701][T32224] exc_page_fault+0x71/0xd0 [ 2266.763179][T32224] asm_exc_page_fault+0x26/0x30 [ 2266.769996][T32224] } [ 2266.772723][T32224] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 2266.781195][T32224] -> (&new->fa_lock){....}-{3:3} { [ 2266.786579][T32224] INITIAL USE at: [ 2266.790616][T32224] lock_acquire+0x107/0x340 [ 2266.797085][T32224] _raw_write_lock_irq+0x3d/0x50 [ 2266.803819][T32224] fasync_remove_entry+0xf1/0x1c0 [ 2266.810753][T32224] lease_modify+0x1ca/0x3c0 [ 2266.817092][T32224] locks_remove_file+0x4bf/0xea0 [ 2266.823813][T32224] __fput+0x3ab/0xa70 [ 2266.829659][T32224] task_work_run+0x1d4/0x260 [ 2266.836021][T32224] exit_to_user_mode_loop+0xef/0x4e0 [ 2266.843299][T32224] __do_fast_syscall_32+0x398/0x570 [ 2266.850404][T32224] do_fast_syscall_32+0x34/0x80 [ 2266.857163][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2266.865833][T32224] INITIAL READ USE at: [ 2266.870296][T32224] lock_acquire+0x107/0x340 [ 2266.877060][T32224] _raw_read_lock_irqsave+0x48/0x60 [ 2266.884898][T32224] kill_fasync+0x199/0x4d0 [ 2266.891626][T32224] lease_break_callback+0x26/0x30 [ 2266.899516][T32224] __break_lease+0x730/0x1620 [ 2266.906811][T32224] do_dentry_open+0x73a/0x1420 [ 2266.913901][T32224] vfs_open+0x3b/0x340 [ 2266.920704][T32224] dentry_open+0x61/0xa0 [ 2266.927239][T32224] do_mq_open+0x638/0x780 [ 2266.933781][T32224] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 2266.941660][T32224] __do_fast_syscall_32+0x1dc/0x570 [ 2266.949076][T32224] do_fast_syscall_32+0x34/0x80 [ 2266.956140][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2266.964709][T32224] } [ 2266.967348][T32224] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2266.976196][T32224] ... acquired at: [ 2266.980197][T32224] _raw_read_lock_irqsave+0x48/0x60 [ 2266.985641][T32224] kill_fasync+0x199/0x4d0 [ 2266.990308][T32224] evdev_pass_values+0x627/0xbd0 [ 2266.995596][T32224] evdev_events+0x1e6/0x340 [ 2267.000613][T32224] input_pass_values+0x288/0x890 [ 2267.005935][T32224] input_event_dispose+0x330/0x6b0 [ 2267.011286][T32224] input_inject_event+0x1dd/0x340 [ 2267.016731][T32224] evdev_write+0x2fc/0x480 [ 2267.021720][T32224] vfs_write+0x27e/0xb30 [ 2267.026363][T32224] ksys_write+0x145/0x250 [ 2267.030956][T32224] __do_fast_syscall_32+0x1dc/0x570 [ 2267.036631][T32224] do_fast_syscall_32+0x34/0x80 [ 2267.041969][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2267.048641][T32224] [ 2267.051008][T32224] -> (&f_owner->lock){....}-{3:3} { [ 2267.056282][T32224] INITIAL USE at: [ 2267.060319][T32224] lock_acquire+0x107/0x340 [ 2267.066481][T32224] _raw_write_lock_irq+0x3d/0x50 [ 2267.073052][T32224] __f_setown+0x67/0x370 [ 2267.078930][T32224] generic_setlease+0xe1e/0x1280 [ 2267.085576][T32224] do_fcntl_add_lease+0x34d/0x460 [ 2267.092259][T32224] fcntl_setlease+0x123/0x180 [ 2267.099043][T32224] do_fcntl+0x867/0x1a50 [ 2267.105078][T32224] do_compat_fcntl64+0x477/0x720 [ 2267.111813][T32224] __do_fast_syscall_32+0x1dc/0x570 [ 2267.118910][T32224] do_fast_syscall_32+0x34/0x80 [ 2267.125581][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2267.133541][T32224] INITIAL READ USE at: [ 2267.138048][T32224] lock_acquire+0x107/0x340 [ 2267.144942][T32224] _raw_read_lock_irqsave+0x48/0x60 [ 2267.152257][T32224] send_sigio+0x38/0x370 [ 2267.158999][T32224] kill_fasync+0x24d/0x4d0 [ 2267.165490][T32224] lease_break_callback+0x26/0x30 [ 2267.172711][T32224] __break_lease+0x730/0x1620 [ 2267.179690][T32224] do_dentry_open+0x73a/0x1420 [ 2267.186527][T32224] vfs_open+0x3b/0x340 [ 2267.192745][T32224] dentry_open+0x61/0xa0 [ 2267.199453][T32224] do_mq_open+0x638/0x780 [ 2267.206226][T32224] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 2267.214101][T32224] __do_fast_syscall_32+0x1dc/0x570 [ 2267.221448][T32224] do_fast_syscall_32+0x34/0x80 [ 2267.228444][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2267.237383][T32224] } [ 2267.239962][T32224] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2267.248963][T32224] ... acquired at: [ 2267.252814][T32224] _raw_read_lock_irqsave+0x48/0x60 [ 2267.258244][T32224] send_sigio+0x38/0x370 [ 2267.262788][T32224] kill_fasync+0x24d/0x4d0 [ 2267.267549][T32224] lease_break_callback+0x26/0x30 [ 2267.272837][T32224] __break_lease+0x730/0x1620 [ 2267.277721][T32224] do_dentry_open+0x73a/0x1420 [ 2267.282703][T32224] vfs_open+0x3b/0x340 [ 2267.286989][T32224] dentry_open+0x61/0xa0 [ 2267.291590][T32224] do_mq_open+0x638/0x780 [ 2267.296672][T32224] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 2267.302823][T32224] __do_fast_syscall_32+0x1dc/0x570 [ 2267.308236][T32224] do_fast_syscall_32+0x34/0x80 [ 2267.313345][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2267.319907][T32224] [ 2267.322268][T32224] [ 2267.322268][T32224] the dependencies between the lock to be acquired [ 2267.322283][T32224] and SOFTIRQ-irq-unsafe lock: [ 2267.335924][T32224] -> (tasklist_lock){.+.+}-{3:3} { [ 2267.341116][T32224] HARDIRQ-ON-R at: [ 2267.345177][T32224] lock_acquire+0x107/0x340 [ 2267.351420][T32224] _raw_read_lock+0x36/0x50 [ 2267.358446][T32224] __do_wait+0xde/0x740 [ 2267.364751][T32224] do_wait+0x1e8/0x4f0 [ 2267.370523][T32224] kernel_wait+0xab/0x170 [ 2267.376555][T32224] call_usermodehelper_exec_work+0xbe/0x230 [ 2267.384772][T32224] process_scheduled_works+0xad1/0x1770 [ 2267.392199][T32224] worker_thread+0x8a0/0xda0 [ 2267.398940][T32224] kthread+0x711/0x8a0 [ 2267.404912][T32224] ret_from_fork+0x510/0xa50 [ 2267.411316][T32224] ret_from_fork_asm+0x1a/0x30 [ 2267.417993][T32224] SOFTIRQ-ON-R at: [ 2267.422360][T32224] lock_acquire+0x107/0x340 [ 2267.428670][T32224] _raw_read_lock+0x36/0x50 [ 2267.434880][T32224] __do_wait+0xde/0x740 [ 2267.440746][T32224] do_wait+0x1e8/0x4f0 [ 2267.446676][T32224] kernel_wait+0xab/0x170 [ 2267.452928][T32224] call_usermodehelper_exec_work+0xbe/0x230 [ 2267.461289][T32224] process_scheduled_works+0xad1/0x1770 [ 2267.468713][T32224] worker_thread+0x8a0/0xda0 [ 2267.475280][T32224] kthread+0x711/0x8a0 [ 2267.481340][T32224] ret_from_fork+0x510/0xa50 [ 2267.487939][T32224] ret_from_fork_asm+0x1a/0x30 [ 2267.495076][T32224] INITIAL USE at: [ 2267.499683][T32224] lock_acquire+0x107/0x340 [ 2267.506414][T32224] _raw_write_lock_irq+0x3d/0x50 [ 2267.513666][T32224] copy_process+0x2185/0x3950 [ 2267.521028][T32224] kernel_clone+0x21e/0x820 [ 2267.527336][T32224] user_mode_thread+0xdd/0x140 [ 2267.533936][T32224] rest_init+0x23/0x300 [ 2267.540000][T32224] start_kernel+0x381/0x3d0 [ 2267.546853][T32224] x86_64_start_reservations+0x24/0x30 [ 2267.554019][T32224] x86_64_start_kernel+0x143/0x1c0 [ 2267.560864][T32224] common_startup_64+0x13e/0x147 [ 2267.567885][T32224] INITIAL READ USE at: [ 2267.572434][T32224] lock_acquire+0x107/0x340 [ 2267.579063][T32224] _raw_read_lock+0x36/0x50 [ 2267.585819][T32224] __do_wait+0xde/0x740 [ 2267.592220][T32224] do_wait+0x1e8/0x4f0 [ 2267.598691][T32224] kernel_wait+0xab/0x170 [ 2267.605598][T32224] call_usermodehelper_exec_work+0xbe/0x230 [ 2267.614710][T32224] process_scheduled_works+0xad1/0x1770 [ 2267.622884][T32224] worker_thread+0x8a0/0xda0 [ 2267.629847][T32224] kthread+0x711/0x8a0 [ 2267.635989][T32224] ret_from_fork+0x510/0xa50 [ 2267.643505][T32224] ret_from_fork_asm+0x1a/0x30 [ 2267.651498][T32224] } [ 2267.654231][T32224] ... key at: [] tasklist_lock+0x18/0x40 [ 2267.663910][T32224] ... acquired at: [ 2267.668033][T32224] _raw_read_lock+0x36/0x50 [ 2267.674266][T32224] send_sigurg+0x12b/0x420 [ 2267.679668][T32224] sk_send_sigurg+0x6c/0x2e0 [ 2267.684930][T32224] queue_oob+0x420/0x4f0 [ 2267.689742][T32224] unix_stream_sendmsg+0xc32/0xde0 [ 2267.695543][T32224] __sock_sendmsg+0x21c/0x270 [ 2267.702544][T32224] ____sys_sendmsg+0x505/0x820 [ 2267.708371][T32224] ___sys_sendmsg+0x21f/0x2a0 [ 2267.713585][T32224] __sys_sendmsg+0x164/0x220 [ 2267.718728][T32224] __do_fast_syscall_32+0x1dc/0x570 [ 2267.724249][T32224] do_fast_syscall_32+0x34/0x80 [ 2267.729583][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2267.736781][T32224] [ 2267.739239][T32224] [ 2267.739239][T32224] stack backtrace: [ 2267.745942][T32224] CPU: 1 UID: 0 PID: 32224 Comm: syz.1.6873 Tainted: G L syzkaller #0 PREEMPT(full) [ 2267.745968][T32224] Tainted: [L]=SOFTLOCKUP [ 2267.745974][T32224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2267.745985][T32224] Call Trace: [ 2267.745995][T32224] [ 2267.746003][T32224] dump_stack_lvl+0xe8/0x150 [ 2267.746028][T32224] __lock_acquire+0x2a95/0x2cf0 [ 2267.746054][T32224] ? send_sigurg+0x12b/0x420 [ 2267.746077][T32224] lock_acquire+0x107/0x340 [ 2267.746092][T32224] ? send_sigurg+0x12b/0x420 [ 2267.746119][T32224] _raw_read_lock+0x36/0x50 [ 2267.746145][T32224] ? send_sigurg+0x12b/0x420 [ 2267.746167][T32224] send_sigurg+0x12b/0x420 [ 2267.746191][T32224] sk_send_sigurg+0x6c/0x2e0 [ 2267.746216][T32224] queue_oob+0x420/0x4f0 [ 2267.746233][T32224] ? __pfx_queue_oob+0x10/0x10 [ 2267.746251][T32224] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2267.746269][T32224] unix_stream_sendmsg+0xc32/0xde0 [ 2267.746291][T32224] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 2267.746307][T32224] ? __asan_memset+0x22/0x50 [ 2267.746359][T32224] ? __import_iovec+0x5d4/0x7f0 [ 2267.746378][T32224] ? aa_sock_msg_perm+0xda/0x1b0 [ 2267.746400][T32224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2267.746414][T32224] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 2267.746430][T32224] __sock_sendmsg+0x21c/0x270 [ 2267.746454][T32224] ____sys_sendmsg+0x505/0x820 [ 2267.746475][T32224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2267.746497][T32224] ? __pfx_futex_wake_mark+0x10/0x10 [ 2267.746519][T32224] ___sys_sendmsg+0x21f/0x2a0 [ 2267.746539][T32224] ? __pfx____sys_sendmsg+0x10/0x10 [ 2267.746561][T32224] ? futex_wait+0x285/0x360 [ 2267.746592][T32224] ? __fget_files+0x2a/0x420 [ 2267.746613][T32224] ? __fget_files+0x3a0/0x420 [ 2267.746636][T32224] __sys_sendmsg+0x164/0x220 [ 2267.746655][T32224] ? __pfx___sys_sendmsg+0x10/0x10 [ 2267.746677][T32224] ? rcu_is_watching+0x15/0xb0 [ 2267.746701][T32224] __do_fast_syscall_32+0x1dc/0x570 [ 2267.746719][T32224] ? do_fast_syscall_32+0x34/0x80 [ 2267.746739][T32224] do_fast_syscall_32+0x34/0x80 [ 2267.746756][T32224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2267.746776][T32224] RIP: 0023:0xf7fe1539 [ 2267.746793][T32224] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2267.746807][T32224] RSP: 002b:00000000f54b555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2267.746825][T32224] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002740 [ 2267.746837][T32224] RDX: 0000000024004011 RSI: 0000000000000000 RDI: 0000000000000000 [ 2267.746847][T32224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2267.746857][T32224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2267.746867][T32224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2267.746883][T32224] [ 2268.059342][T17210] usb 3-1: config 0 descriptor?? [ 2268.148714][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2268.148734][ T30] audit: type=1326 audit(1767807263.216:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2268.422415][ T30] audit: type=1326 audit(1767807263.216:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2268.492172][ T30] audit: type=1326 audit(1767807263.516:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2268.577729][ T30] audit: type=1326 audit(1767807263.516:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2268.683820][T17210] usbhid 3-1:0.0: can't add hid device: -71 [ 2268.699587][T17210] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2268.720768][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2268.721608][T17097] usb 4-1: USB disconnect, device number 117 [ 2268.759086][T17210] usb 3-1: USB disconnect, device number 95 [ 2268.802618][T17097] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2268.822138][T17097] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2268.834539][T17097] quatech2 4-1:0.51: device disconnected [ 2268.926822][ T30] audit: type=1326 audit(1767807263.996:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2269.001675][ T30] audit: type=1326 audit(1767807264.016:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2269.051809][ T30] audit: type=1326 audit(1767807264.016:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 2269.112490][ T30] audit: type=1326 audit(1767807264.016:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32222 comm="syz.1.6873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000