last executing test programs: 7.42748888s ago: executing program 1 (id=730): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/psched\x00') (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) r3 = socket$inet(0x2, 0x6, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000017c0)={{r3}, r5, 0x2, @unused=[0xfd, 0xfffffffffffffffe, 0x4, 0x5], @subvolid=0x8}) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000180)=r5) (async) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d01000000000000001000000000008007498fe3fe000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.520029297s ago: executing program 4 (id=735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002300010322bd70000100002501000000"], 0x14}}, 0xc004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) sched_setattr(0x0, &(0x7f0000000280)={0xffffffffffffff07, 0x0, 0x1000000c, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd27, 0xffffffff}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4cd0) getsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000200), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7f, 0x2, 0x180, 0x4, 0x9, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x50000, 0x4000}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000001c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 5.596207645s ago: executing program 1 (id=737): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000500f7ffbf0900000000000055090100000000009500000000000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x2d, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000015c0)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2b, 0x107, 0x70bd2d, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='security.apparmor\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') quotactl_fd$Q_SYNC(r7, 0xffffffff80000101, 0x0, 0x0) lseek(r7, 0x2000, 0x0) readv(r7, &(0x7f0000001380)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2) r8 = syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902750002010000000904000001020d0000052406000105240000000d240f0112000100000000000606241a00000003240218042402000c241b04000200ed7f00000805241505000905810300020000000904010000020d00000904010102020d000009058202ff0000fe00090503020002000000"], 0x0) io_submit(0x0, 0x2, &(0x7f0000002780)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x6, 0x1, r4, &(0x7f00000013c0)="6c7f564f1d551e35ebc55d345ebda0dcce545933b1b2c01f41eca658b0672393a639810029d8232779133872fe7ad2a7ddfa4eab0e7ee269dd88a2dd0b34cc529610a7ddb007192b355a30af7b1a4c62190c4a8ca4aa010a1758265a07c42d7c0d1ac725466e839d505c67702bfd9d000edda522324ee7ed4624c506aa1096693022620e0cce5c4819fdfce7860c5f93df2864d334a1048add500e5e27e6e27f45", 0xa1, 0x1, 0x0, 0x2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f0000002600)="c1d596a3d7e21e646cb8637e2f2e930a0015ce0948062dc151d3f94b4bd3f2d0727445962265d4f6a40ef282cd929532b406b95bc4f9d5046308ef4d4fdef527ca9736cde41a16b601e19d8bd68e8c9c00f1cfd5bcedbfeff2e6ebd66064861470fd1882427d7927d60affd7e084392c1a4bc6147f910abc1df1314c25a0f6bfbb035f9734edd72b2d3d17b0458156b56bb6c8fcc6f055d4838b58b53ad878d09168d310e5b7707d1a69b5eb1f17e592115e896cfa6a84ca5d6f87609796b18a49effa2586bb7f2864b85c1689059b952944392374d7f25fdae0cbf9ebd83c868f9ad24a04d7", 0xe6, 0x3a7}]) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x28, 0x5a, 0xc6b747b6bf1c6b95, 0x2, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8810) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r7, @ANYRES32, @ANYRES16=r8], 0x84}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000001) 4.881813551s ago: executing program 4 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x51, 0x6, "141c7fa94f3524d8fb87d94308676254fc52a49970a412aa7711f656809a6880ae8631ecab3136fed1f61f0e5264baa16e638984b08fd5b79de19fabff5261b2ce14cc217bee68a53486215505"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}}, 0x0) 4.719299944s ago: executing program 4 (id=740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x108}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x200, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d4, 0x32}, @in=@local, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x2543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x81, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {0x0, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x18d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x9) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001b00000000001400", @ANYRES64=r3], 0x38}}, 0x0) shutdown(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) symlinkat(&(0x7f0000002040)='./file0\x00', r4, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') 4.133541602s ago: executing program 3 (id=746): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0xf3}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000100)='W', 0x1, 0x7a}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x2, r1, 0x0, &(0x7f0000000440)='O', 0x1, 0x6}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000000200)="0f", 0x1, 0x7}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x16, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0xaa6, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x80}}}, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89fb, &(0x7f0000000040)={'ip6_vti0\x00', @random="aa48d7db00"}) (async) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x2) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newchain={0x5480, 0x64, 0x0, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xc, 0x8}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @filter_kind_options=@f_basic={{0xa}, {0x534c, 0x2, [@TCA_BASIC_EMATCHES={0x12a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xe9, 0x2, 0x8}, {0xfffc, 0x5, 0x0, "a07df9507c"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x23c}, {0x6, 0xfc, 0x2, 0x0, 0x6, 0x2, 0x1}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfc, 0x1, 0x0, 0x0, {{0x7fff, 0x0, 0x9}, "1c84b8c10e4421a63063cf5918484572d2a259fd3692b629f96be99432a90e59ada77134734268dbe5a0f8565365ae1fcc8ededb1e4ebf1902871c5edcdc9cc3f582bef4f00888977210ac42acf2ae447f7ac092be70383f1427582fb1fa00be7ae61d3736419114760289a451ff1eb5ac7fc9679d8be67e3c1ded0bcec10690913a09a08c2026e6460ad52ad322aa20e92e5a71be69cdd9430c6d1296e264cfc7ee8e4602c880027591c47384ab921475daa204a74f7fe1fb09e24875f6a04bdcd6af2dd1a669ddb8cf8f4d72912c091527aa64ae82d84e9314cced5c0b3d2c88921b2d755125b2ecca69c4e823"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x8}, {0xc0, 0x0, 0x7ff, 0x0, 0x3, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x800, 0x1, 0x40}, {0xb0000000, 0x5, 0x19, 0x3, 0x5, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x1}, {0x1, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x5c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x8}, "364aa2850b753da5f4a6fafa5f3c0067acb519bebc72a80afbff7560339933d3a0ac05ba221cfbcd4ea0b9599929efa60ec82fba030520483ae068b7e4008bdc9bcb8afc3a81d24e2a1fce942f45"}}]}, @TCA_EMATCH_TREE_LIST={0x10a4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x8000, 0x0, 0x9}, "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"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x80}, {0x7, 0x5, 0x6, 0x4, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0x7c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x8}, "c1bea1556c5aaac9c8c0bfd722f2e515216244acbc629f33f63c8b7aa60a31508c30be435b10be3cffda8e3901030ed4e4b16be800ba0fa40dfedb7c64eeaea22219f5b0bf201871be6e294f1f4eb866415ba87f778689528c29567618bffa820d5e2e5af1c51562841e098612faa6"}}]}]}, @TCA_BASIC_ACT={0x40a0, 0x3, [@m_tunnel_key={0x130, 0x15, 0x0, 0x0, {{0xf}, {0xb0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0x6, 0x9, 0x558}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x6, 0x20000000, 0x5, 0x10001}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x5, 0x6, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}]}, {0x53, 0x6, "1812ec081b22add4eb238d7f272320245b8e5bd41630be049734b08039632e31e195d4abe10302ad0715d496c47f63c4d459d3361bc62d36cc1d6f99fc3549b743c0d716f080fe789db9bcef69eac0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x174, 0x5, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x8, 0x7fffffff, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xeea, 0x8, 0x4, 0x5, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x4, 0x8, 0x8}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x700000, 0x5, 0x537963f5, 0x9}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2, 0x0, 0x7}, 0x4, r5}}]}, {0xa8, 0x6, "422c4884409f86615a28db1cf49602073f306e7471865d116a388928608a9ff17562bf2be0ff29573803644b5bbbe8ef8963e7afaad6ba09dd7b18613b034b398632f89c78fbd08164148a7db34f241fea0ae3750946ac4852a9094a73a8ee47f9c8a03575eff7539a05ccaa442b83dde806d032dbabb278d4104e37fecfa14304599c4387526dfc48ea101a90ea2fca8bf1b79f531d66db6b41602bc60e7f449930c683"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x3c58, 0x15, 0x0, 0x0, {{0xa}, {0x3b2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x1, 0xa03, 0x3, 0x8}, 0xc, 0x9f, [{0x4254, 0x6f, 0x2, 0xcd6, 0x80, 0x7}, {0x8, 0x1, 0x3, 0x5, 0xe15d, 0x1}, {0x8001, 0x5354, 0x60000000, 0x444f8b62, 0x400, 0x4}]}, [{0x28fc, 0x8, 0xfffffff9, 0x4, 0x885, 0x4}, {0x8b6b1da, 0x7, 0x9, 0x8000, 0x40, 0x9}, {0x61, 0x7, 0x9, 0x50a1, 0x2, 0x5}, {0x3, 0x8, 0xdee, 0x1, 0x3, 0x8001}, {0x1, 0xdd00000, 0x2, 0x8, 0x2, 0x3}, {0x3, 0x200, 0x7fff, 0x10, 0x180000, 0x6}, {0x8, 0x3, 0x101, 0x200, 0x7, 0x6}, {0x40, 0x7fff, 0x300000, 0x1, 0x3, 0x2}, {0xbc, 0x3, 0x4, 0xa8b, 0xffffffff}, {0x3, 0x8, 0x2, 0xdba, 0x0, 0x4}, {0xe9f9, 0x1, 0x7e4, 0x8, 0x497, 0xfcad}, {0xa75, 0x6, 0x5, 0x1, 0x6, 0x2}, {0xffffff89, 0x2, 0x6, 0x7, 0x9, 0x4}, {0x7, 0x8000, 0x1, 0x0, 0x8, 0x7}, {0x3, 0x7, 0xc, 0x2cb1, 0x7fffffff, 0xffffffdf}, {0xc, 0x9, 0x1, 0x5, 0x7ff, 0x2}, {0x5, 0x7, 0x7, 0x6, 0x4, 0x2}, {0x5, 0x7fff, 0x401, 0xd, 0x8, 0xa}, {0x293, 0x5b, 0x6, 0x9, 0x40, 0x40}, {0x3, 0x81, 0x3, 0xc, 0x5, 0x40}, {0x7, 0x0, 0x6, 0xffffffff, 0x9f33, 0x5}, {0x3, 0xfffffff5, 0xfff, 0xfffffffc, 0x9, 0x1}, {0x4, 0x1, 0xcd, 0x7fff, 0x5, 0xe}, {0x80000001, 0x4567, 0x1, 0x4, 0x7fffffff, 0x5}, {0xfffff800, 0x7, 0x1, 0x6, 0x10000000, 0x8000}, {0x2, 0x7, 0xa, 0x1, 0x8fa3, 0x9}, {0x7, 0xfc, 0x8, 0x6, 0x78e9, 0x8}, {0x10a, 0x3, 0x4, 0x2, 0xe2, 0xffffffff}, {0x9b04, 0x12d143b7, 0x0, 0x2, 0x0, 0xfffffff8}, {0x2, 0x3, 0xa, 0x2, 0x4, 0x2}, {0x7, 0x5, 0xfffffff7, 0x72f, 0x1, 0x2}, {0xfffff800, 0x7, 0x2, 0x3, 0x1, 0x6}, {0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffffa}, {0x9194, 0x2, 0x1, 0x9, 0xb89d, 0x10}, {0x80000001, 0x5, 0x1, 0x4, 0x3c0, 0x5}, {0x0, 0x3, 0x0, 0x5, 0x100, 0xa}, {0x1, 0x3ff, 0xffffffff, 0x8, 0xffff, 0x9}, {0x0, 0x1, 0x3, 0x4, 0x9, 0x6}, {0xbe17, 0x4, 0x3ff, 0x0, 0x8, 0x401}, {0xfffffffa, 0xfffffffd, 0x5, 0x9, 0x0, 0x3}, {0x0, 0x0, 0x8001, 0x6a7, 0x8, 0x9}, {0x18, 0x4, 0xffffffff, 0x5, 0x2, 0x2}, {0x101, 0x0, 0x8, 0x68fa160e, 0x1, 0x80000001}, {0x9, 0x9, 0xfffffffe, 0x5, 0x4, 0x8}, {0x5, 0x1, 0x1, 0x7fffffff, 0x9, 0xfffffffb}, {0xc23, 0x0, 0x200, 0xfff, 0x7, 0x8}, {0x1, 0x8000, 0x200, 0xb2, 0x2, 0x1}, {0x80, 0xffff0000, 0x3, 0x9, 0x0, 0x4}, {0x4, 0x7f, 0x2, 0x7, 0x79, 0x6}, {0xffff7a56, 0x200, 0x40, 0x2, 0x3602, 0xfffff7d0}, {0x1, 0x9, 0xffff, 0x3, 0x2, 0x3}, {0x4, 0x6, 0x5, 0x10000, 0x5}, {0x9, 0x31, 0x0, 0x8, 0x5, 0x8b}, {0x2, 0x3, 0x101, 0x3, 0xd3f, 0x1}, {0x8, 0x1, 0x3, 0x0, 0x3, 0xb0}, {0x3, 0x5, 0x7ff, 0x100, 0x2a7, 0x9}, {0x1, 0x4, 0x1, 0x10001, 0xcca9, 0x1000}, {0x7, 0x22c, 0xfff, 0x10001, 0xa0, 0x6}, {0x6, 0x1, 0x8, 0x7, 0x6, 0x64c489db}, {0x3, 0x0, 0x7, 0xfffffeff, 0x8000, 0x47}, {0x81, 0x80000001, 0x800, 0x10, 0x7, 0x8}, {0x9, 0x7, 0xff, 0x0, 0x8, 0x100}, {0x100, 0x10001, 0x9, 0x5, 0xc, 0x9}, {0xa99, 0x0, 0x58e3, 0x7, 0x0, 0x159d}, {0x2, 0xe3, 0x6, 0x9, 0x9, 0x5}, {0x0, 0x1e3001a1, 0x400, 0x10001, 0x800, 0x4}, {0x7c000000, 0x3, 0x10000, 0xcb0, 0x2f, 0x6bae}, {0x1, 0x1, 0x7ff, 0x6, 0x80000001, 0x1}, {0x9, 0x5, 0xe64, 0x5, 0x8001, 0x9}, {0x81, 0x9, 0x1, 0x0, 0x6, 0xf9}, {0x9996, 0xe, 0x4, 0x0, 0x8e, 0x7}, {0xe, 0x0, 0x6, 0x2, 0x7ff, 0xe}, {0xffffff7e, 0x2, 0x1, 0x1, 0x3, 0x2}, {0x1, 0x1ff, 0x80000, 0xd09, 0x2}, {0x5, 0x100, 0x9, 0xde, 0x2, 0x58}, {0x2, 0x8000, 0x401, 0xffffff60, 0x3c, 0x70ec}, {0x3, 0x220, 0x8, 0x39, 0x81, 0xe9}, {0x7f, 0x1, 0x2, 0x2, 0x5, 0xa}, {0x3830, 0x5, 0xd66, 0xd759, 0x800, 0x7}, {0x0, 0x3, 0xfffffff8, 0x1, 0xb, 0x4}, {0x16, 0x0, 0xfff, 0xe, 0x43, 0x3}, {0xd35, 0x5, 0x0, 0x2, 0x0, 0xf}, {0xffffffff, 0x90, 0xda6, 0x200, 0x1, 0x8001}, {0x2, 0x7f, 0xb, 0x26, 0x7fff, 0x344}, {0xffff4252, 0x1, 0x7, 0x101, 0x173, 0x2}, {0x6, 0x1ff, 0x2, 0x8001, 0x10000, 0x1}, {0x200, 0x8001, 0x9, 0x6c, 0x3, 0x8}, {0xcb, 0x200, 0x9, 0x4, 0xf, 0x7}, {0x1, 0x3e, 0x6, 0x7, 0x0, 0x5}, {0x3, 0x96f1, 0x1ff, 0x6, 0x3, 0xfffffff8}, {0x546, 0x5, 0x3, 0x4, 0x2, 0x9}, {0x7, 0x5, 0x5a3b, 0x6, 0x1, 0x9cb563c}, {0x5, 0xfffffffc, 0x7ff, 0xf, 0x0, 0x889b}, {0xfffffff9, 0x4, 0x2a, 0x7fffffff, 0x9, 0x7c2}, {0x9, 0x0, 0x0, 0x5, 0x1, 0xb}, {0xff2, 0x2d, 0x3, 0x8, 0x6, 0x618f}, {0x6, 0x0, 0x6c3, 0x80000000, 0x8, 0x80000001}, {0x80000000, 0xfffffffa, 0x2, 0x2, 0x8, 0xb}, {0xc, 0x10000, 0x6, 0x4552, 0x5, 0x3}, {0xf73b, 0xa0, 0x4, 0xffff, 0x8c3, 0x5}, {0x3, 0x3, 0x800, 0x4, 0x0, 0x10}, {0x80, 0x0, 0x1, 0xc0, 0x4, 0x40}, {0x5, 0xff, 0x10, 0x9, 0x401, 0x1}, {0x557e, 0x7, 0x8, 0xfff, 0x1, 0x3}, {0x48, 0x1, 0x40, 0x5, 0xffff, 0x100}, {0x3fffc, 0x6, 0x3, 0x9, 0x3, 0x8001}, {0x9, 0x1d1b, 0xfffffff7, 0x8, 0x100, 0xf7}, {0x8, 0x8, 0x2, 0x7, 0x8, 0x5}, {0xf6f, 0x6, 0x6, 0x9, 0x3, 0x5}, {0xfe6, 0x8, 0xffffffff, 0x74, 0x5, 0xfffffff8}, {0x7e, 0x401, 0x7, 0x0, 0x4, 0x9}, {0x0, 0xffffff01, 0x2, 0x40, 0x2, 0x8}, {0x0, 0x9859, 0x8001, 0x1, 0x261, 0x2}, {0x1, 0xc, 0x1, 0x9e7, 0x8, 0x2}, {0x2, 0x2, 0x4658, 0x1, 0xf28e, 0x7ff}, {0x7, 0x3, 0x2, 0x9, 0x101, 0xff}, {0x10001, 0x80000000, 0x101, 0x4, 0x81, 0xd}, {0xb, 0x3ff, 0x800, 0x4, 0x91e2, 0xfff}, {0x1, 0x7, 0x9, 0x7, 0x3, 0x81}, {0x9, 0xfffffff7, 0x401, 0x9, 0xfffffff0}, {0x40, 0x5, 0x9, 0x1, 0x1ff, 0x2}, {0x2, 0x0, 0x1, 0x4, 0xffff7363, 0x1}, {0xef6, 0x7, 0x4, 0x6, 0x200, 0x2}, {0x871, 0x4, 0xfffffff4, 0x9, 0x0, 0xd3a}, {0x5, 0x1, 0x10000, 0x2, 0x7, 0x81}, {0x2, 0x1, 0x2, 0x29, 0x9, 0x2}, {0xb0, 0xd, 0x8, 0x0, 0x1, 0x4}, {0x3, 0xffff7fff, 0x150712a5, 0x7fff, 0x4, 0x101}], [{0x5, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {}, {0x3}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x3}, {0x2}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x7, 0x1}, {}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x7}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xae, 0x4, 0x3, 0x10001, 0x64}, 0x10, 0x2, [{0x41, 0x85, 0x1, 0x1, 0xffffff7f, 0x8000}]}, [{0x4, 0x2, 0x1, 0x3, 0x9, 0x6}, {0x8, 0x8, 0x108, 0xe, 0x80000001, 0x2}, {0x1, 0xfffffff2, 0x6, 0x7, 0x229, 0x9cc}, {0x6, 0x2, 0x3, 0x9, 0x5459, 0x80}, {0xe6, 0x8, 0x7, 0x2, 0xa7, 0x2e}, {0x5, 0x5, 0xffffffff, 0xc, 0x5, 0x2}, {0x3, 0x36db7926, 0x661, 0x101, 0xe43, 0xf9}, {0x4, 0x7f, 0x40, 0x8, 0xffffff72, 0x1ff}, {0x8001, 0x0, 0x2, 0x2, 0x0, 0x7}, {0xff, 0x1, 0x0, 0x7d0, 0x5, 0x9}, {0x9, 0x3ff, 0x4, 0x0, 0x7, 0x7}, {0x6, 0x5, 0xffffffb9, 0x6, 0x8, 0xb}, {0x1, 0x2, 0x69e, 0x2, 0x2, 0x401}, {0xffffffff, 0xffffffff, 0x97b8, 0x7, 0x0, 0x16}, {0x0, 0x2, 0x47f4, 0x0, 0x0, 0x2}, {0x1b56, 0x10, 0x4, 0x10, 0xcd8, 0x100}, {0x87d, 0x8, 0x9, 0x3, 0x0, 0x2}, {0x2, 0x2, 0xfd, 0x7, 0x8bc8, 0x7}, {0xb, 0x9, 0xc, 0x9, 0x8, 0x2}, {0x2, 0x40, 0x5, 0xffffff67, 0x5, 0x10000}, {0x7, 0xffff, 0x10a, 0x43a5, 0x7, 0x2}, {0x30, 0x3, 0xcd, 0x3, 0x7, 0x100}, {0x8, 0xf198, 0x3, 0x3, 0x8, 0x120}, {0x2, 0x0, 0x7, 0x8, 0xc03, 0x1}, {0x0, 0x6, 0x4, 0x9, 0x5, 0x6}, {0x7, 0x5, 0x3, 0x6, 0x1, 0x4}, {0x0, 0x93b, 0x5, 0x3, 0x4, 0xfd}, {0x263b4580, 0x1, 0x8, 0xca4, 0x9, 0x10}, {0x3, 0x1000, 0x100, 0xdcf8, 0x6d, 0x5}, {0x22e, 0xfffffffc, 0x40, 0xc, 0x8001, 0x40}, {0x2, 0x39, 0x4, 0x7, 0x6, 0x9}, {0x8001, 0x280000, 0x2, 0x8, 0x9, 0x8}, {0xda, 0x0, 0x4, 0x3, 0x2872, 0x4}, {0x5, 0xd, 0xffff476f, 0x1, 0x0, 0x6}, {0x8, 0xa9, 0x0, 0x4, 0x600, 0x3}, {0x2, 0x3, 0x8000, 0x3, 0xb, 0x22}, {0xffffffcc, 0x40, 0x5, 0x3, 0x3a, 0x7}, {0xd24, 0x2, 0x6, 0x9, 0x6, 0x9}, {0x0, 0x23b4, 0x7fffffff, 0x1000, 0x4, 0x9}, {0x0, 0xfffeffff, 0x0, 0x400, 0xa7a9, 0x100}, {0x9, 0x9, 0x34, 0x2, 0x6}, {0x4, 0xfff, 0x47, 0xdad, 0x1ff, 0xc3}, {0x8, 0x8, 0x5, 0xd, 0x48}, {0x0, 0x7, 0x0, 0x4, 0xb50, 0xc99}, {0x2, 0xa, 0x0, 0x9, 0x4a, 0x8}, {0x2, 0x3, 0x8, 0x17, 0x7, 0x3}, {0x7, 0x2, 0x8, 0x9, 0x81, 0x6}, {0xe9, 0x7ff, 0x2, 0x8dc8, 0x4, 0x4}, {0x9, 0xfdc, 0x9, 0x400, 0xb2, 0x6}, {0x4, 0x7, 0xa, 0x7, 0xfff, 0x8000}, {0x113, 0x0, 0x2, 0x2, 0x3ff, 0x2}, {0xa70, 0x95cf, 0x0, 0x80000000, 0x1, 0x1}, {0x7, 0xffffffff, 0x100, 0x2, 0xe98, 0x6}, {0x2, 0xe7, 0x5, 0x6, 0x80000001, 0x74}, {0x1, 0x99, 0x5, 0xf, 0x7, 0x6}, {0x8, 0x80000000, 0x2c07293b, 0xdc37, 0x9, 0x8}, {0x1, 0x8000, 0x101, 0x182, 0x7}, {0x1, 0x7, 0x3, 0xfb, 0xa, 0x3}, {0x4, 0x1, 0x101, 0x5, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x8, 0x1, 0x3}, {0x9, 0x8, 0x4, 0x8001, 0x6, 0xfffffffe}, {0x3, 0xfffffffc, 0x4, 0x0, 0x4, 0xffff8000}, {0x3, 0x5, 0x7f7, 0x7, 0x8, 0x7d2}, {0x7ff, 0x9, 0x8f73, 0xfffffff9, 0x9, 0x8}, {0x0, 0x4, 0x0, 0x8, 0x1000, 0x7}, {0x800000, 0x8, 0x1, 0x0, 0x4f0, 0x9}, {0x4, 0x3, 0x8100, 0x8001, 0xffffffff, 0x7fffffff}, {0x6, 0x81, 0x3, 0x80000001, 0x4a, 0x6}, {0x7, 0x80000001, 0xf52, 0x4, 0x7, 0x7}, {0xd2, 0xe, 0x3, 0x400, 0x1, 0x8}, {0x6, 0x3, 0x1000, 0x6, 0x100, 0x3}, {0xf3b, 0xfffffff5, 0x3, 0x6, 0x2, 0x1ff}, {0x0, 0x7, 0x2769, 0xdfa, 0x373, 0x7}, {0xcc, 0x40, 0x0, 0x1, 0x2, 0x962}, {0x2, 0x10001, 0x1, 0x4, 0x8, 0x4}, {0x9, 0x3, 0x98, 0x10001, 0x200, 0x4}, {0x400, 0x5, 0x4, 0xf5c, 0xfffffffd, 0x5}, {0x1, 0x5, 0xa, 0x1000, 0x8, 0xba10}, {0x9, 0x7, 0x3, 0x1, 0x2, 0x5}, {0x6, 0x3d, 0x7, 0x0, 0x343, 0x2}, {0x8, 0xffff, 0x8, 0x8, 0x68, 0x8}, {0xe633, 0x8, 0x81, 0xfff, 0x80000000, 0x5}, {0xffff, 0x8c, 0x7, 0x9, 0x1, 0x3}, {0x9, 0x6, 0x10, 0x0, 0x8, 0xa39}, {0x7, 0x5, 0x0, 0x1, 0xfffffff9}, {0x7, 0x57b4, 0x2, 0x3, 0x5, 0x7}, {0xffff8000, 0x3, 0x8000, 0x5, 0xf, 0x101}, {0x0, 0x0, 0x0, 0x81, 0x8, 0x5}, {0x66, 0x7fff, 0x7, 0xf, 0x34cf, 0x401}, {0x6, 0x0, 0x0, 0x7fffffff, 0x8, 0xd4cf}, {0x8, 0x4, 0x100, 0x9, 0x8, 0x6}, {0x0, 0x9, 0xfffffff7, 0x6, 0x800, 0x7ff}, {0x5, 0x5, 0x8, 0x1, 0x9, 0xf433}, {0x81, 0xffffd79d, 0x9, 0x1, 0xc63, 0x7a5}, {0x5, 0x1, 0x5, 0x10, 0x3, 0x31}, {0x7ff, 0x8, 0x6426, 0x7, 0x5, 0x2df4a88f}, {0x3, 0x8, 0x8, 0x5, 0x54, 0xeb9}, {0xc, 0x9, 0x9, 0x5d3b, 0x8, 0xe}, {0x80, 0x0, 0x7, 0x6, 0x0, 0x6}, {0x4, 0x1, 0x8, 0x3, 0x5, 0x6}, {0x4c3, 0x7, 0x4e5c, 0x7, 0x4a6, 0x1}, {0x2a4f1e8c, 0x5, 0x4c96, 0xfffffffd, 0x4b9, 0x100}, {0xd, 0x2, 0x4, 0xa, 0x6, 0x8}, {0x5, 0x70d7745a, 0x7228, 0x1de7, 0xe5ad, 0x7ff}, {0x48f2, 0x1, 0x2, 0xfffffffb, 0x8, 0x6}, {0x9, 0x7, 0x196c, 0x2, 0x9, 0xffff}, {0x1, 0x9c9, 0x5, 0x0, 0x1, 0x6}, {0x775, 0xffffffff, 0x400, 0xe, 0x8, 0x9}, {0x0, 0x6, 0x8001, 0x9, 0xfff, 0x8}, {0x4, 0x0, 0x200, 0x6, 0x2, 0x283}, {0x3ff, 0x2, 0x400, 0x8, 0x6, 0x2}, {0x0, 0xfe6, 0x10001, 0x2, 0x7, 0x4}, {0x63, 0x9, 0x960d, 0x80000000, 0x7132814e, 0xeb4}, {0x401, 0x95, 0x2, 0x3, 0x0, 0x1}, {0x2, 0x711d, 0xffffffa9, 0x400, 0xb14f, 0x5}, {0x8, 0x1, 0xa, 0x0, 0x4, 0x5}, {0x5, 0x2, 0x0, 0x3, 0x80000001, 0xede}, {0x4, 0xa6, 0x0, 0x2, 0x2, 0x4}, {0x690e, 0x7fffffff, 0x37, 0x101, 0x40, 0x7f}, {0x7, 0x9, 0x854e, 0xfffff719, 0x8, 0x200}, {0xa, 0x2, 0x6964, 0x6, 0x1, 0x1}, {0x7, 0x9, 0xffff, 0x368, 0x6, 0x7ff}, {0xffffffff, 0x3, 0x2, 0x9b, 0x1, 0x9}, {0x10, 0x1, 0x6, 0x6, 0x0, 0x7a}, {0x754, 0x1, 0x9, 0x0, 0x6a5ed4f7, 0xb79}, {0x2, 0x0, 0xd, 0xd, 0x4}, {0x0, 0x138, 0x40, 0x10, 0x9}, {0x535, 0x9, 0x3, 0xb7, 0x6, 0x85}], [{0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x3, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x81f78d68f89167de}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x3}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x6}, {0x3}, {0x1, 0x1}, {0x5}, {0xa994e73c7456b1c7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x38, 0x8, 0xffffffffffffffff, 0x73, 0xe}, 0x9, 0x9, [{0xfffffff8, 0x1, 0x1200, 0x5, 0x5, 0x2}, {0x5, 0x9, 0x6, 0xff, 0x8, 0x6523}, {0x8, 0x9, 0x10, 0x0, 0xfffffff1, 0x259}, {0xfffffffc, 0x9d, 0x7fffffff, 0xffff7fff, 0x3, 0xe}, {0x2, 0x2, 0x3, 0x80000000, 0x9, 0xc6ef}, {0x5, 0x4, 0x8, 0xb, 0xa, 0x5}, {0x9, 0x7fffffff, 0x7, 0xffffffff, 0x6, 0x8}, {0x0, 0x10000, 0x1, 0x9, 0xa, 0x4}]}, [{0x1, 0x7, 0x40, 0x2, 0x7f, 0x9}, {0xc000, 0x6, 0x3, 0xd, 0xffffffff, 0x1}, {0x7, 0x5, 0x8, 0x4ca8, 0x7, 0x1e}, {0x9, 0x2, 0x2, 0x4, 0x2, 0x4}, {0x7, 0x5, 0x4, 0x401, 0x4f76, 0x40}, {0x9, 0x0, 0x5, 0x8, 0x5, 0x5}, {0x22cc, 0x4, 0x2, 0x7, 0x6, 0x9}, {0xab66, 0x8, 0xd, 0x3ff, 0x9, 0x401}, {0x10000, 0x9, 0x3, 0xa, 0x927b, 0x29}, {0x3, 0x6, 0x2, 0x1, 0x19c, 0x8}, {0x0, 0x5c, 0x3, 0x7, 0x8, 0x6ac}, {0x9, 0x101, 0x0, 0x7e, 0x7, 0x2}, {0x4, 0x0, 0x80000001, 0x7, 0x7, 0x800}, {0xfffff800, 0x8, 0x8000, 0x494, 0x4, 0x3}, {0xe000, 0x2, 0x2, 0x6, 0x1, 0x3}, {0xffff7bae, 0x0, 0x3, 0x6, 0x52, 0x3}, {0x7, 0x7, 0x6, 0x40, 0x0, 0x8}, {0x7fff, 0x0, 0x0, 0x7, 0x1, 0x9}, {0x57f9269e, 0x10000, 0xf, 0x600, 0x9, 0x1c000000}, {0x100, 0x1, 0x2, 0x8, 0x1835eac3, 0x6}, {0x4f, 0x7, 0xc0, 0x4, 0xa83, 0xd9}, {0x3, 0x8, 0x7, 0x8, 0x800, 0x2}, {0xd, 0xfffff001, 0x0, 0xffd2, 0x6, 0x5}, {0x80, 0x6, 0x7fffffff, 0x8, 0x6, 0x80000001}, {0x7, 0x1, 0xfffff801, 0x2, 0x1ff, 0x2}, {0x3, 0xef, 0x4, 0x85, 0x8, 0x6}, {0x3, 0x8001, 0x8, 0x0, 0x2, 0x8}, {0x1, 0x9, 0x1af0, 0xae2e, 0x400, 0x4}, {0x4, 0x7, 0xff, 0x6, 0x6, 0x7fff}, {0x0, 0x7fffffff, 0xf8, 0x9, 0x1000, 0x1b50}, {0x3, 0x4, 0x4fb, 0x80, 0x2, 0x100}, {0x2, 0x1ff, 0x2f5, 0x4, 0xa, 0xe}, {0x8000, 0x7, 0xff, 0x8001, 0x6, 0xa1}, {0xfffffff4, 0x8b, 0xffff5022, 0xcd2, 0x8, 0x6}, {0x800, 0x2, 0x2, 0x4, 0x101, 0x2}, {0x4, 0x7fff, 0x7, 0xc4, 0x1e000000, 0x401}, {0x6, 0x3, 0x9, 0x1, 0x7, 0x4}, {0x59, 0x14ef, 0x3ff8000, 0x1}, {0x5ca, 0x1, 0x7, 0x9, 0xc87c, 0x1000}, {0x9, 0x4, 0x3ff, 0xfff, 0x3, 0x5}, {0x1, 0x9, 0xf, 0x4, 0x81, 0x1}, {0x0, 0x8, 0x3, 0x60, 0x4, 0xfffffff8}, {0x80000000, 0x1ed6c616, 0x7, 0xb, 0x0, 0xb}, {0x8, 0x3, 0x4, 0x4, 0x2, 0x822f}, {0x9, 0x1, 0x9, 0x2, 0x7, 0x3}, {0x1ff, 0x7, 0x4, 0x2, 0x9, 0xd}, {0x5, 0x3, 0x9, 0x2, 0x9}, {0xf, 0x3d, 0x8, 0xfffffff8, 0x3, 0x3}, {0xa, 0x5, 0x5, 0x40, 0x6, 0x7ff}, {0x1ff, 0x2, 0x3, 0x8, 0x9}, {0xfff, 0x3, 0x4, 0x62, 0xfd, 0xaa3d00}, {0x2dd57935, 0x0, 0x9, 0x9, 0xfffffffb}, {0xdca4, 0x0, 0x5, 0x38b, 0x4}, {0x4, 0x101, 0xed3a, 0x7, 0xc, 0xffff8001}, {0x400, 0x1, 0xf, 0x7, 0xfffffeff, 0x9}, {0x7fffffff, 0x4, 0x4, 0x7fffffff, 0x400, 0x10001}, {0x9, 0x9, 0xf, 0x5, 0x4, 0x3}, {0x9, 0x0, 0x7, 0x2, 0x1, 0x1}, {0x4, 0x1, 0x9, 0x4, 0x3, 0x50}, {0x7fff, 0x452, 0x5, 0x0, 0x400, 0x2}, {0x1, 0x2, 0x9, 0xf4, 0x2, 0x101}, {0x9, 0x4, 0x9, 0x4, 0x1, 0x2}, {0xe, 0x10001, 0x8, 0x1, 0x6, 0x80}, {0x1, 0xffffffff, 0x6, 0x2, 0x0, 0x8}, {0x2, 0x8, 0xd306, 0x80, 0x3ff, 0x4}, {0x401, 0xaf, 0x5, 0x2, 0x1, 0x4}, {0x8, 0x8, 0xffffffff, 0xfffffffc, 0x9, 0xfb}, {0x0, 0x1, 0x8, 0x10001, 0x100, 0x7}, {0xa7, 0xfffffff9, 0xd5, 0x5, 0x9, 0x270}, {0x20ce, 0xa901, 0x9, 0x5, 0x6d1, 0x1}, {0x1, 0x6, 0x9, 0x8, 0x40, 0x35}, {0x0, 0x6, 0x0, 0x3, 0x0, 0x4}, {0x800, 0x2, 0x2, 0xfffffff9, 0x7, 0x10}, {0xeb, 0x0, 0x52dcb267, 0xffffffff, 0x3, 0x6fe1}, {0xb, 0xd4, 0x5, 0xfffffff8, 0x8, 0x3}, {0x9, 0x4, 0x6, 0x3607cd79, 0x7e, 0xb2c}, {0x5, 0x6a8, 0xf2, 0x4, 0x5, 0xffffffff}, {0x8, 0x4, 0xd, 0x0, 0x3ff, 0xd76}, {0x8, 0x1, 0x7, 0x8c2, 0xe, 0x7}, {0x6, 0x100, 0x6, 0x6, 0x8, 0x7}, {0x9, 0x0, 0x2, 0xfffffff7, 0x3, 0xe}, {0x92b8, 0x4, 0xfcb, 0x1, 0x2, 0x3}, {0x1, 0xe, 0xfffffff7, 0x8, 0x5, 0xffffffff}, {0x1, 0x8, 0x10, 0x200, 0x1, 0xad2}, {0xa, 0x1, 0x8eb7, 0x2, 0x80000001, 0x7}, {0x401, 0x40, 0x0, 0xa, 0x7, 0xa3}, {0x100, 0x1e78, 0x7, 0x5, 0x92fd, 0x4}, {0x6, 0x3ff, 0x6, 0x2, 0x7, 0x945}, {0x89, 0x8, 0xffffffff, 0x10001, 0xfffffffe, 0xffffffc2}, {0xfff, 0xe, 0x9, 0x9, 0xffff}, {0x8, 0x2, 0x5, 0x1000000, 0x8, 0xfffffffd}, {0x7fff, 0x2, 0x8, 0x0, 0x9, 0xfffffffe}, {0x4, 0x10, 0xff, 0x0, 0x2, 0x1}, {0x55df, 0xfffffffb, 0x400, 0x8, 0x5, 0xfffffc00}, {0x4, 0x9dd, 0x0, 0x14, 0xfffffff2, 0x6}, {0x1, 0x7, 0xc3, 0x0, 0x8, 0x8}, {0x6, 0x0, 0x400, 0x8, 0x9, 0x3}, {0x80000001, 0x1, 0x10, 0x3, 0x3, 0x2}, {0x2, 0x40, 0x5e000000, 0x84e9, 0x7, 0x8}, {0x80000000, 0x5, 0x7, 0x687d, 0x6}, {0x0, 0x7258bc14, 0x7, 0x8, 0x2, 0xffffffff}, {0x4, 0xffff, 0xe0, 0x8, 0x447d}, {0x4, 0x80000000, 0x1, 0x9, 0x1, 0x8}, {0xfffffffb, 0x280785af, 0x9, 0x2, 0x95b, 0x1}, {0x7fffffff, 0x400, 0x7, 0x6, 0xc5, 0x800}, {0x8, 0x6, 0x4, 0xc, 0x3, 0x4}, {0x10001, 0x5, 0x7, 0x0, 0x8, 0xffffc711}, {0x2, 0x8, 0x9, 0x1f3512e1, 0xb, 0x400}, {0x7, 0x0, 0x3720, 0x0, 0xfff, 0x7}, {0x7fffffff, 0x7, 0xfffffffe, 0xffff, 0x7, 0x6}, {0x4, 0x8173, 0x3d2c, 0x7, 0x5, 0x2}, {0x100, 0x80, 0x7eda, 0x2, 0x1eaf, 0x101}, {0x8, 0x6, 0x2, 0x1, 0x80000000}, {0x7, 0x9, 0x400, 0x8, 0x100, 0x5}, {0x8, 0xd0, 0x4, 0x1, 0x3, 0x101}, {0x2, 0x2408, 0xf, 0x3, 0x9156, 0xe}, {0x80000001, 0x4, 0x5, 0xfff, 0x247, 0x100}, {0x401, 0x0, 0x80, 0x2, 0x16d8, 0x8}, {0x7, 0x0, 0x2, 0x10001, 0x5, 0x5}, {0xffffff00, 0x3, 0x10000, 0x1, 0x7bd1, 0x5}, {0x0, 0x0, 0x80, 0x3f2d, 0x4a, 0x1}, {0xfffffff9, 0x5cd0, 0x1, 0xa, 0x9, 0x3}, {0xff, 0x8, 0x0, 0x4, 0x4, 0x5}, {0x1d34, 0xf, 0x7, 0x3, 0xbb0, 0x6}, {0x2, 0x3, 0x7fffffff, 0x7, 0x6000000, 0x5}, {0x0, 0x8, 0x7, 0x6, 0x1, 0x3}, {0x8, 0x5, 0x7, 0x94f, 0x1, 0xfffffffb}, {0x3, 0x7, 0x5, 0x0, 0x8, 0x7fffffff}], [{0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {0x1}, {}, {0x2, 0x4e615a8a6a307eb6}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x4}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x394f69f7acb56f52}, {0x2}, {}, {0x2}, {}, {0x4, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x100, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3b37e970a95e4894}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x100, 0xffffffff, 0x1, 0xd, 0x2}, 0x1, 0x7, [{0xa, 0x1, 0x7, 0x80000000, 0xc01, 0x6}, {0xbd2, 0x5d0, 0x7, 0x7, 0x0, 0x8000}, {0x0, 0x6, 0x7ff, 0x6, 0xf36, 0x3}]}, [{0x8, 0x2, 0x5, 0x10001, 0x0, 0x80000001}, {0x6, 0x2, 0xffff, 0x2, 0x15, 0x1064}, {0x1, 0x7f, 0x2, 0x48f, 0x400}, {0x200, 0x3, 0x4, 0x2, 0x0, 0x8001}, {0x9, 0x7, 0x1, 0x1, 0x9, 0x9}, {0xe526, 0x1, 0x0, 0x3, 0xd3, 0x7}, {0x8, 0xad31, 0x40, 0x6, 0x5, 0x2c2}, {0x8, 0xfffffffa, 0x7fffffff, 0xee47, 0x3, 0x2}, {0x3, 0xfffffff6, 0x401, 0x0, 0xea, 0x8}, {0x3, 0x9, 0xf, 0x979, 0x5, 0x84}, {0x8, 0x7, 0x8, 0x0, 0x6, 0xec}, {0x1, 0x9, 0x0, 0x3, 0x9, 0x7}, {0x9, 0x7fff, 0x5, 0xdb, 0xfffffff0, 0x1}, {0x3a3fcbd, 0x7, 0xf, 0x2, 0xc7ae, 0xfffffff7}, {0xa4, 0x5b44f5e8, 0x9, 0x8, 0x4, 0x5}, {0x8, 0x400000, 0x2, 0x7292, 0x4}, {0x0, 0xa, 0x581, 0x478, 0x4, 0x2}, {0x6, 0x5, 0x9, 0x10, 0x9, 0xfffffc00}, {0x2, 0x7, 0x3, 0xc2a, 0xfffffffd, 0x4}, {0x3, 0x8, 0x400, 0x2, 0x0, 0x120000}, {0x5, 0xaa3a, 0x57a2da42, 0x0, 0x200, 0x5}, {0xffffffff, 0x5, 0x1ff, 0xfffffff5, 0xffffffff, 0x9}, {0x5, 0x2, 0x3, 0x3, 0xddd7, 0x5}, {0x0, 0x9, 0xfffeffff, 0x3, 0x2000, 0x9}, {0x2, 0x5, 0xed, 0x7, 0x4, 0x5}, {0x6, 0x2, 0xffff0001, 0x83d, 0x3, 0x6}, {0x5, 0x4, 0xd423, 0x0, 0x0, 0x7fffffff}, {0xa, 0x1, 0xdc, 0xca2, 0x2, 0x7d}, {0x200, 0x0, 0x72a, 0xfffffeba, 0x9f0, 0x4}, {0x200, 0x7b3, 0x9, 0xd27, 0x3, 0x4}, {0x1d92, 0x7, 0x0, 0x2, 0x96a, 0x7fffffff}, {0x8, 0x7fff, 0x1ecc, 0x3ff, 0xce2, 0xd76}, {0xc, 0x1, 0x8, 0x2e, 0x6, 0x7}, {0x9, 0x6, 0xd2, 0x0, 0xc, 0x7}, {0x6, 0x7, 0x8, 0x6616347f, 0x80000001, 0x2}, {0x6, 0xde, 0x10001, 0x9, 0x4, 0x2}, {0x10, 0x1, 0x800, 0x1, 0x6, 0x401}, {0x9, 0x5, 0xab7d, 0x4, 0x8, 0x7}, {0x4, 0x5, 0x1, 0xc1f8, 0x1, 0x5}, {0x5, 0x0, 0x5d48, 0x5, 0xffffff45, 0xffff0001}, {0x10000, 0x4, 0x2, 0x0, 0x2, 0xffff}, {0x2a, 0xa04, 0x5, 0x4, 0x5, 0x2}, {0xf62, 0x9, 0x4, 0x7, 0x10, 0x6}, {0x6, 0xff, 0x5d, 0x7, 0x2, 0x1}, {0x2118, 0x7, 0x25ea, 0xffffffff, 0x8, 0x80}, {0x5, 0xfffffffb, 0x5, 0x5, 0x8, 0xfff}, {0x1a00000, 0x7dee, 0x4, 0x4, 0x4, 0x7}, {0x10, 0x2, 0x7, 0x3, 0x3, 0x9}, {0x7, 0x9, 0x7, 0x23db, 0x9, 0x9}, {0x4000000, 0x9, 0x294f86c9, 0x6, 0x6, 0xffff}, {0x1, 0x4210, 0xfffffff2, 0x400, 0x5, 0x4cba}, {0x4, 0x6, 0x5, 0x3, 0x8, 0x9}, {0x0, 0x5, 0x6, 0x7, 0x7, 0xfffffff0}, {0x7, 0x3f8, 0x6, 0x100, 0x5, 0x8}, {0x1486, 0x7, 0x8, 0x8, 0xffff, 0x81}, {0x8, 0x3, 0x10001, 0x8, 0x2, 0x3}, {0x1, 0x5, 0x9, 0x5, 0x1, 0xff}, {0xffff, 0x5, 0x1, 0x7, 0x9, 0x9}, {0x5, 0x9, 0x7f, 0x8, 0x401, 0xb}, {0x4, 0x8, 0x4, 0xffff4099, 0x5, 0x1}, {0x6, 0x5, 0x5, 0xdc21, 0x6, 0x9}, {0x5, 0x3, 0x3, 0x7, 0xe, 0xdd}, {0x8, 0xa6, 0x7, 0x7, 0x9, 0x4}, {0x7, 0x6, 0xf1, 0x4, 0x9, 0xfff}, {0xfffffffd, 0x7, 0x100, 0x401, 0x5, 0x2}, {0x5, 0x3, 0x7ff, 0x8, 0x31, 0x8}, {0x7, 0x3, 0x400, 0x7, 0x9, 0x8}, {0x9, 0x9, 0x7ff, 0x7, 0x4, 0x8}, {0x32b66864, 0xabd, 0x0, 0x0, 0x1, 0x984}, {0x3ff, 0x1, 0x81, 0xf3, 0x2, 0x71b}, {0xf, 0x1ff, 0x6, 0x6, 0x1, 0x8001}, {0x8, 0x1000, 0x80000001, 0x80000000, 0x6, 0xc9a}, {0x4, 0x0, 0xa77d, 0x1, 0x0, 0x18a1c74f}, {0x1, 0x10001, 0x0, 0x4, 0x736, 0x2}, {0x2, 0x5, 0x80000, 0x5a, 0x1, 0x101}, {0x3, 0x5, 0xa, 0x80000000, 0xf9f, 0x1}, {0xffffffd7, 0x4, 0x7, 0x1000, 0x0, 0x633}, {0x3, 0x4, 0x91, 0x81, 0x80000001, 0x4}, {0xb07, 0x0, 0xcb1, 0x8, 0xfff, 0x7}, {0x1, 0x6, 0x35, 0x1, 0x101, 0x2}, {0x5, 0x869, 0xdd, 0x7f, 0x0, 0x3}, {0xe0, 0x7, 0x2, 0x7, 0x4, 0x2}, {0x400, 0x4, 0x1, 0x3ff, 0x6, 0xfffffc01}, {0x1, 0x3, 0x0, 0x7, 0x9091, 0x2}, {0x2, 0x0, 0x5c8, 0x7, 0x6}, {0xffffffff, 0x7, 0x7, 0x6, 0xaf, 0x40800000}, {0x7, 0x7, 0x4, 0x80000000, 0x1, 0xf}, {0x8, 0x0, 0x2680, 0x158b2235, 0xe699, 0xfffffffb}, {0xa, 0x9, 0x1, 0xb, 0x79}, {0x9, 0x9, 0x7, 0x376, 0xffff0000, 0x3}, {0x80, 0x0, 0x9, 0x1, 0x8, 0xf3}, {0x6, 0xffffffff, 0x8, 0x8, 0x2, 0xa}, {0x4, 0x1ff, 0x2, 0x8, 0x1, 0x2536}, {0x0, 0x8, 0x0, 0x8, 0x0, 0xffffff01}, {0x6, 0x8000, 0x5, 0x81, 0xe0d7, 0x2}, {0x0, 0x6, 0x9, 0x80000000, 0x4, 0x40000000}, {0x4, 0x17, 0x0, 0x8, 0x8, 0x4}, {0x2, 0xfffffffc, 0xfffffeff, 0x2, 0x100, 0x4}, {0x7, 0x5, 0x8, 0x2, 0xfffffff2, 0x2}, {0x3, 0x3, 0xfffffffd, 0x2, 0x4, 0x3e3}, {0x9, 0x400, 0x3, 0xd57, 0x74d0357b, 0x4}, {0x1, 0xffffffff, 0x4, 0x800, 0x2c76, 0x81}, {0x7, 0x1, 0x88c6, 0x6}, {0xff, 0x2d52, 0x80000000, 0x1, 0x4, 0x200}, {0x4, 0xd1, 0x80, 0x6ad, 0x35, 0x6}, {0xa0, 0x9, 0x4, 0x4, 0x6, 0x7}, {0x933, 0x3, 0xd, 0x4, 0xa74a, 0x4}, {0x7600, 0x2, 0x80000001, 0xfff, 0x7, 0x5}, {0x800, 0x80, 0x40, 0xfffffffa, 0x6, 0x1b}, {0x2, 0x6, 0x10001, 0xe, 0xf81, 0x7fff}, {0x58, 0x9, 0x5, 0x3, 0x7, 0xaa}, {0x5, 0x7fffffff, 0x0, 0x100, 0x4, 0x8}, {0x10001, 0x5, 0x2, 0x0, 0x6, 0x7}, {0xfffffffd, 0x5, 0x8, 0x7fff, 0x5, 0xc7}, {0x2, 0x8, 0x3d, 0xff, 0x0, 0x9}, {0x4, 0xffffffff, 0x2000000, 0x82, 0x80000000, 0x10}, {0x3, 0x1, 0x5, 0x1, 0x4, 0x9}, {0x40, 0x2, 0xd, 0x3, 0x54f, 0x6}, {0x0, 0x0, 0x1, 0x3, 0x62, 0x7}, {0x9, 0x2, 0x1ff, 0x7ff, 0x9, 0x8001}, {0x5, 0xfffffc01, 0x4, 0xfffffffa, 0x0, 0x3}, {0x5, 0x6, 0x1000, 0xa21d, 0xfffffff5, 0x6}, {0x7fff, 0xb, 0x6, 0xb2, 0xa6, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x0, 0xfffffffb}, {0x1, 0x648f, 0x7, 0x1, 0x7, 0x1ff}, {0x5, 0x2, 0x9, 0x3bd, 0xe41, 0x9}, {0xea, 0x10, 0xffffffff, 0x6, 0x0, 0x1}, {0x0, 0x0, 0x3, 0xe87, 0xa35, 0x87}], [{0x3, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x6}, {0x7}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {0x2}, {0xa, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {}, {0x2, 0x3}, {0x2}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x2}, {0xc}, {0x5}, {0x2}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x13e269f77ca35802}], 0x1}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x9c, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x81}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7fff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x47, 0x6, "14ab7211c2395912d3ca95b7318e3377d006d27632cf05068060d05d79602ce39d624eff68ccea1fc8d50d900e580a8ac2da3f29d8f4765599ea0cf271b9c749556c32"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x104, 0xa, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x200}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0xc7, 0x6, "9a8ce6dc5223d05708a5fedaf696eda9844bbd92e134f931d423a79474e0e106dc263e1303d42bfb973819ad7afb5139b93a49b1924b1e5bca39415b76e80c126d800465fe73c823c240b4fd1a2156d8f75d45cb962a858427da18bb52cd6b77d2957c9983139fc274a2a877c2bd553255876448d8540ee0671998314a87296c1ace1fe72713dc889e58eb977125f1bdbcd006c0c61c4026c4b274cff6bba4d1ee6e05bf6e718c6dcb7e3ec37b90042e3e3a7c880f018dd77d37c4b94968c0931c6d3c"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xa4, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xf}}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x1, 0x3, 0xfd7, {0x8, 0x0, 0x4, 0x9, 0xfffd, 0xb263}, {0x25, 0x1, 0x1, 0x0, 0x4, 0x8}, 0x3, 0x63, 0x401}}]}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x200}]}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xc}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xfff3}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0xae}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x5480}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="850000008f000000d4000000100000003a240400100000001800000003000000000000000300000018200000", @ANYRES32, @ANYBLOB="00000000c70d000018430000040000000000000000000000182b0000", @ANYRES32, @ANYBLOB="00000000ff00000018320000040000000000000000000000183a00000200000000000000000000001858000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000791440478dd587fefc21d2aaeab49c287440c67b742e70a84e22c9bbed4e46922aa6e41bb58912a6d887db6ac3e52f24e4dc8c7d927ce9c8fedea983e0f36ed076dafacbcd4ff9c41e12a867f2af913122988990baa5c32a8da3f91f210586e12a8b276ed33f707b65dbd59b5946d486694cb9"], &(0x7f0000000240)='GPL\x00', 0x1, 0xcd, &(0x7f0000000580)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x6, r1, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0x7fff}) 4.025532653s ago: executing program 0 (id=747): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2000000d}) read$FUSE(r0, &(0x7f00000019c0)={0x2020}, 0xfffffdda) unshare(0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x3}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)={0x73}, 0x8) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.968294225s ago: executing program 2 (id=748): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1, 0x3, 0x8) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (fail_nth: 33) 3.911357495s ago: executing program 1 (id=749): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) unshare(0x20080) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x7, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x101, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x0, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x4d9b6eaf) write(r0, &(0x7f0000000280)='0', 0x1) 3.684895008s ago: executing program 2 (id=750): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002000000ac14140000000000000000005ad5db1ba32e35acc2cac00c5605e3d7b93855d6ff617869b1d35769ef69d6cdaba276538be5d5be6217aefa3a10e0dc010944f83dfa9cfb8002002195f4e175ccf364e1b35c214e5f777cc5348f0e334c48f4ddfbbc9a017519cf10d6e27cfdd00194194722b61837ed2a2f6d130a3b3b7458a66ea8"], 0x58}, 0x1, 0x7}, 0x44800) 3.531322171s ago: executing program 3 (id=751): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000040)="d6", 0x1}], 0x1) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000029000000370000006466"], 0x18}, 0x922bac8556bdad8e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x4081, &(0x7f00000002c0), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0xd) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x0, 0xd59f80, 0x8, 0x40, 0xa, 0x3, 0x10005, 0x27fd, 0x2800, 0x441, 0x5, 0xf, 0x0, {0x4, 0x6}, 0xcd, 0x7}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000206010300000605000100070000000900020073797a3000000000140007940800130000000060080012400000000a0500050002000000250004000000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000100), &(0x7f0000000140), 0x4000}, 0x20) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) 3.496121881s ago: executing program 2 (id=752): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) (async) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) mlockall(0x2) r0 = syz_io_uring_setup(0x10f, &(0x7f00000003c0)={0x0, 0x39c1, 0x2, 0x0, 0xfffffffe}, &(0x7f0000000240), &(0x7f0000000200), &(0x7f0000000340)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000052000102"], 0x18}}, 0x80) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) (async) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) (async) r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x80900) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000300)=""/18) close(r3) (async) fgetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) (async, rerun: 64) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) 3.322420109s ago: executing program 1 (id=753): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x84000) r6 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x4205, 0x8, 0x0, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r15, {0x0, 0xfff3}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}}, 0x4894) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0x9, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.747561999s ago: executing program 2 (id=754): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000180)={'fscrypt:', @auto=[0x63, 0x38, 0x39, 0x39, 0x34, 0x64, 0x63, 0x66, 0x33, 0x31, 0x35, 0x62, 0x39, 0x30, 0x0, 0x32]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445567778999aabbccddeeff00112233445566778899aabfccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000b40)={0x0, "0011228100798ab7ca99aabbbbccddee1401110233445566778899aafc4d162f90001122aabbccddeeff00", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x35, 0x30, 0x36, 0x63, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "42b6f79eb265b5857af864c58803d13c052f6bf1da5cc706c15f7e54ddbb21d67e1662214422745234909a6d75d28400000000000000000000fbffffff00", 0x36}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x32, 0x33, 0x62, 0x37, 0x37, 0x61, 0x30, 0x65, 0x30, 0x30, 0x66, 0x37, 0x36, 0x30]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x1a}, 0x48, r0) 2.746500238s ago: executing program 0 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00b00000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.641235306s ago: executing program 2 (id=756): r0 = socket$inet(0x2, 0x3, 0x100) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x800) sendto$inet6(r1, &(0x7f0000000240)="39dec4564b68f340a4dc3b9aa6a5c854f3dc0a86f5efd62b6f7bbd2c43db2dceed39c9f6040a74e41bf92a1f6cf69713d33e4510dd4ec415012c5e5502a2c27cacb2022da6681fe52b4c45b6f9cc0b8fb8215d3fa26517ab8dd7cc770ad412000bd1587ef60e22d5c0eb7b9f05e32def90b00645f1688ce761e0dce67994a11310f58231469392d8b4bcd1a76d0190bbc5c178ab6127db6700c3db597e3a58fcb08b65539ac4c17ba0748b1b54153df4cd149970e1432aad374c8d1f4514e1db8f1ac22c329e591906334dfb1825d8fd9b9858354b6b3355c602a03251c4a19da1e77d723b726d02f2cf6d34a5fe961af9affc", 0xf3, 0x808, &(0x7f0000000340)={0xa, 0x4e22, 0x605, @loopback, 0xfffffff8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000880)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0xffff, 0x4, 0x7, 0x0, r2, 0x10000}, 0xfffffffffffffde3) ioctl$FITHAW(r3, 0xc0045878) r6 = io_uring_setup(0x676a, &(0x7f0000000180)={0x0, 0x296d, 0x1, 0x0, 0xff}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000380)={0x6, r4, 0x3e, {0xf1bb, 0x10000}, 0x4}, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r5}, 0x38) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="ae", 0x1}], 0x1) 2.534304411s ago: executing program 2 (id=757): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fsopen(&(0x7f0000000200)='adfs\x00', 0x1) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c0002800500050000000000080004000100000008000300"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x2) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, 0x0, 0x20000080) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000001c0)={0x1d, r10}, 0x10) 2.480327279s ago: executing program 0 (id=758): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x7, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x101, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x0, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x4d9b6eaf) (fail_nth: 19) write(r0, &(0x7f0000000280)='0', 0x1) 2.38792361s ago: executing program 1 (id=759): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0xf40, "81d6478c731b56279ad7824d68d0527d24d8a671840e1cec27a4f4a388ce4808"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r2, 0xfffffffc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) (async) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f00000003c0)=[@request_death={0x400c6313, 0x4000000}], 0x0, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) (async) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(seed-generic)\x00'}, 0x58) (async) getpid() setns(0xffffffffffffffff, 0x8020000) 2.160767191s ago: executing program 0 (id=760): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1, 0x3, 0x8) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (fail_nth: 34) 1.967591198s ago: executing program 4 (id=761): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201470138080008d81301fe4c3a01020301090212000122ff4004090474030034a3f163"], 0x0) 1.67620164s ago: executing program 0 (id=762): socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000f40)={0x916}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40500, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x541b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 1.494331429s ago: executing program 3 (id=763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x1, 0xd) fsopen(0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x2800001d}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x1, 0xfffffc00, 0x0, 0x0, 0x6, 0xfff, 0x20001ff, 0x4}, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x7, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x101, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x0, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080), 0x4d9b6eaf) write(r0, &(0x7f0000000280)='0', 0x1) 803.580606ms ago: executing program 1 (id=764): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000400)) r1 = getpgrp(0x0) kcmp(r1, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x200, 0x0, @mcast2, 0xc9c}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 584.864443ms ago: executing program 0 (id=765): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0493c20000000000fd09022400010000e8010904000001030000000921fd7f000122eb00090581"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2870905"], 0x0) syz_usb_control_io(r6, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 497.391772ms ago: executing program 4 (id=766): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000180)={'fscrypt:', @auto=[0x63, 0x38, 0x39, 0x39, 0x34, 0x64, 0x63, 0x66, 0x33, 0x31, 0x35, 0x62, 0x39, 0x30, 0x0, 0x32]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445567778999aabbccddeeff00112233445566778899aabfccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x31, 0xe, 0x63, 0x38, 0x31, 0x38, 0x61, 0x64, 0x63, 0x30, 0x65, 0x30, 0x36, 0x31, 0x32, 0x36]}, &(0x7f0000000a40)={0x0, "2628ef6169ce0c23300aad3bd8276bfa5a76274e6d287faf262c30f0f01f01afdf7dd0c90abeed83d9b7ae21c1731df54db18c7f4736fb3ba12abb31f88487a5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677880502d2b9ddff7f00112233445566778899aabbccd3ceff001122aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x0, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000b40)={0x0, "0011228100798ab7ca99aabbbbccddee1401110233445566778899aafc4d162f90001122aabbccddeeff00", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x35, 0x30, 0x36, 0x63, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x33, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "42b6f79eb265b5857af864c58803d13c052f6bf1da5cc706c15f7e54ddbb21d67e1662214422745234909a6d75d28400000000000000000000fbffffff00", 0x36}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x65, 0x32, 0x33, 0x62, 0x37, 0x37, 0x61, 0x30, 0x65, 0x30, 0x30, 0x66, 0x37, 0x36, 0x30]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x1a}, 0x48, r0) 423.541519ms ago: executing program 3 (id=767): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000010) r2 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000100)={0xfee00000, 0x10000}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000040)="ae", 0x1}], 0x1) 376.005811ms ago: executing program 4 (id=768): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x4, 0x511400) r1 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31010000000900010073797a30000000000800054000000021400000001e0a0197ca252b95b56c28000700000009000200730f0a31000000000900010073797a3000"], 0xc4}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000d00)={0x4d5, 0x2, {0x1, 0x0, 0x8, 0x2, 0xfffffffe}, 0x2}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x16c, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="f2b69071a60d2086a74f82dd8f2f25d2427e61696f763314fb669f1e050288ef035569221091540dab8b2588c2579b4ef0fa7b474065f87d3f3f2e9d6beb9cdd23570fabec2dab81b5f788c53c3d30384abb5be119849552a939c11b442405ee8ce702fb19c83c28faf4d11bda7aefdf1127408bc7fe880627a6062e47ad1a4573122bfdf79cab066beedda889a75d62fb90c55b12b0e723143526e4d875731e", @ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="c971dc3a9cde1edae99a377886c33cc0ce12d667931fc1834dbc968df42ae40ff6e28c45533957a371f3603e9d5a2016e45374fb7e2f7e316612ff3ae3d91acafd61be7f834e8920ca880b46175849e0ba222c8cfd8116db28fbdf6033262eae99da6c312cd8323482513b", @ANYRESDEC=r2, @ANYRESOCT=r0]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x3) memfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x8000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mlock(&(0x7f0000419000/0x3000)=nil, 0x3000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 143.275124ms ago: executing program 3 (id=769): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) io_setup(0x10001, &(0x7f00000004c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x8, r0}, 0x38) unshare(0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 0s ago: executing program 3 (id=770): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x22, 0x40000000, 0x0, 0x0}) (async, rerun: 64) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="01000000000000000900"/72) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x1000, &(0x7f000000b000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x1, 0x0, 0x9000, 0x1000, &(0x7f000000c000/0x1000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) signalfd4(r3, &(0x7f00000001c0)={[0x3]}, 0x8, 0x0) (async) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0100"/72) ioctl(r2, 0x4048aecb, &(0x7f0000000300)="0000000000000000001000"/72) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x30, 0x2) (async, rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xc}}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) (async) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000614bb6a860d6af856c82d50000ffffac1462e3dd35ccb608ad4a145aa39ceb7c803d1f91b75dd36a4258e1a91a72d5ce3e494359e02545b8a0b80f588e73eee861a6944b1d01ecbfa273880669532ae3a430fba77f6900c99688a79cc065dbc31460293e3d0362194d57bb7e7708b2a9631b9535c44f5a28ece3aa3119c7f5941e1fe80919f4a6fcd26aff680cc3117ecd22d6b5164cb0267856a266b25e74eb8288a4765bc262"], 0x20, 0x4855}, 0x24000052) landlock_restrict_self(r4, 0x4) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.2.557'. [ 218.530854][ T30] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 218.554017][ T30] usb 3-1: USB disconnect, device number 55 [ 218.626228][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.714340][ T5712] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 218.865208][ T5712] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.866654][ T5712] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.866688][ T5712] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.866724][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.873129][ T8079] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 218.929910][ T5712] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.227856][ T8086] fuse: Invalid uid '00000000000000000005' [ 219.471599][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.493346][ T8090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.567'. [ 219.493380][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 219.493415][ T8090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.567'. [ 219.539130][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.567623][ T2239] usb 4-1: USB disconnect, device number 49 [ 219.740981][ T5685] usb 1-1: USB disconnect, device number 51 [ 219.854809][ T5692] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 220.005561][ T5692] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 220.008656][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.008681][ T5692] usb 2-1: Product: syz [ 220.008695][ T5692] usb 2-1: Manufacturer: syz [ 220.008708][ T5692] usb 2-1: SerialNumber: syz [ 220.144101][ T5743] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 220.298114][ T5743] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.298166][ T5743] usb 4-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 220.303366][ T5743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.303392][ T5743] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.303424][ T5743] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 220.303444][ T5743] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.314670][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.314695][ T5743] usb 4-1: Product: syz [ 220.314707][ T5743] usb 4-1: Manufacturer: syz [ 220.314720][ T5743] usb 4-1: SerialNumber: syz [ 220.326581][ T5692] rtl8150 2-1:1.0: couldn't reset the device [ 220.326933][ T5692] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 220.356486][ T5692] usb 2-1: USB disconnect, device number 36 [ 220.640470][ T5743] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 220.738850][ T5743] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 220.741018][ T5743] usb 4-1: can't set first interface for hiFace device. [ 220.741044][ T5743] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 220.750798][ T5743] usb 4-1: USB disconnect, device number 50 [ 220.819316][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.840564][ T5713] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 220.894088][ T5712] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 220.995625][ T5713] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.996875][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.996933][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.003216][ T5713] usb 1-1: config 0 descriptor?? [ 221.028343][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 221.054705][ T5712] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 221.056357][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.056447][ T5712] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 221.058987][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.059009][ T5712] usb 5-1: Product: syz [ 221.059022][ T5712] usb 5-1: Manufacturer: syz [ 221.059059][ T5712] usb 5-1: SerialNumber: syz [ 221.123269][ T5712] usb-storage 5-1:1.0: USB Mass Storage device detected [ 221.154432][ T5712] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 221.157133][ T5712] scsi host1: usb-storage 5-1:1.0 [ 221.264078][ T987] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 221.361159][ T5743] usb 5-1: USB disconnect, device number 44 [ 221.428761][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.430533][ T5713] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.453609][ T987] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 221.465973][ T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 221.466045][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.486417][ T5713] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.501637][ T5713] pwc: recv_control_msg error -32 req 04 val 1000 [ 221.503368][ T8096] key id 00000001 not found [ 221.523226][ T5713] pwc: recv_control_msg error -32 req 04 val 1300 [ 221.530710][ T5713] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.537982][ T5713] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.539984][ T5713] pwc: recv_control_msg error -32 req 02 val 2100 [ 221.558239][ T5713] pwc: recv_control_msg error -32 req 04 val 1500 [ 221.788249][ T5713] pwc: recv_control_msg error -71 req 02 val 2400 [ 221.788729][ T5713] pwc: recv_control_msg error -71 req 02 val 2600 [ 221.789181][ T5713] pwc: recv_control_msg error -71 req 02 val 2900 [ 221.789627][ T5713] pwc: recv_control_msg error -71 req 02 val 2800 [ 221.790277][ T5713] pwc: recv_control_msg error -71 req 04 val 1100 [ 221.790760][ T5713] pwc: recv_control_msg error -71 req 04 val 1200 [ 221.865558][ T5713] pwc: Registered as video103. [ 221.882532][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 221.936051][ T5713] usb 1-1: USB disconnect, device number 52 [ 221.975568][ T987] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 222.067185][ T987] wwan wwan0: port wwan0qmi0 attached [ 222.176711][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.180475][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.352399][ T8132] binder: BINDER_SET_CONTEXT_MGR already set [ 222.352416][ T8132] binder: 8131:8132 ioctl 4018620d 200000004a80 returned -16 [ 222.380682][ T8132] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 222.394276][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 222.425005][ T987] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 4e:17:ef:8f:50:e0 [ 222.813486][ T5743] usb 2-1: USB disconnect, device number 37 [ 222.842654][ T5743] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 222.924478][ T987] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 222.964073][ T5713] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 223.084827][ T987] usb 1-1: Using ep0 maxpacket: 8 [ 223.086268][ T987] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 223.088353][ T987] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.088375][ T987] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.092005][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.092029][ T987] usb 1-1: Product: syz [ 223.092042][ T987] usb 1-1: Manufacturer: syz [ 223.092055][ T987] usb 1-1: SerialNumber: syz [ 223.109905][ T5713] usb 5-1: device descriptor read/64, error -71 [ 223.364757][ T5713] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 223.473711][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.490245][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.494091][ T5713] usb 5-1: device descriptor read/64, error -71 [ 223.502217][ T5743] wwan wwan0: port wwan0qmi0 disconnected [ 223.564622][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 223.604915][ T5713] usb usb5-port1: attempt power cycle [ 223.606177][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 223.766391][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.767791][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.767811][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.767831][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.822406][ T8159] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.851383][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.903376][ T8164] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.964645][ T5713] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 223.984850][ T5713] usb 5-1: device descriptor read/8, error -71 [ 224.073552][ T987] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 224.096779][ T987] usb 1-1: USB disconnect, device number 53 [ 224.129035][ T8151] syz.3.578 (8151): drop_caches: 2 [ 224.230109][ T5713] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 224.234105][ T5743] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 224.236645][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 224.269137][ T5713] usb 5-1: device descriptor read/8, error -71 [ 224.374430][ T5713] usb usb5-port1: unable to enumerate USB device [ 224.377484][ T5692] usb 3-1: USB disconnect, device number 56 [ 224.394429][ T5743] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 224.398019][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.398049][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.398083][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.404159][ T5743] usb 2-1: config 0 descriptor?? [ 225.064879][ T5743] usbhid 2-1:0.0: can't add hid device: -71 [ 225.064981][ T5743] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 225.102495][ T5743] usb 2-1: USB disconnect, device number 38 [ 225.404844][ T5685] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 225.556873][ T5685] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 225.557843][ T5685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.557885][ T5685] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.557904][ T5685] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.560250][ T5685] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 225.560272][ T5685] usb 3-1: Product: syz [ 225.560285][ T5685] usb 3-1: Manufacturer: syz [ 225.560298][ T5685] usb 3-1: SerialNumber: syz [ 225.574677][ T5685] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 225.767902][ T5743] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 225.839788][ T8187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.843420][ T8187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.868991][ T8212] FAULT_INJECTION: forcing a failure. [ 225.868991][ T8212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.869023][ T8212] CPU: 0 UID: 0 PID: 8212 Comm: syz.1.589 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.869047][ T8212] Tainted: [L]=SOFTLOCKUP [ 225.869054][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.869065][ T8212] Call Trace: [ 225.869072][ T8212] [ 225.869080][ T8212] dump_stack_lvl+0xe8/0x150 [ 225.869110][ T8212] should_fail_ex+0x410/0x560 [ 225.869137][ T8212] _copy_from_iter+0x3b0/0x1660 [ 225.869168][ T8212] ? rcu_is_watching+0x16/0xb0 [ 225.869197][ T8212] ? __pfx__copy_from_iter+0x10/0x10 [ 225.869215][ T8212] ? trace_kmalloc+0x2a/0xf0 [ 225.869236][ T8212] ? __kmalloc_noprof+0x38c/0x720 [ 225.869253][ T8212] ? __kmalloc_noprof+0x1ab/0x720 [ 225.869269][ T8212] ? bcm_tx_setup+0x557/0x1c00 [ 225.869303][ T8212] bcm_tx_setup+0x693/0x1c00 [ 225.869346][ T8212] bcm_sendmsg+0x50d/0x7a0 [ 225.869374][ T8212] ? __pfx_bcm_sendmsg+0x10/0x10 [ 225.869410][ T8212] ? apparmor_socket_sendmsg+0x98/0x360 [ 225.869433][ T8212] ? __pfx_bcm_sendmsg+0x10/0x10 [ 225.869456][ T8212] sock_sendmsg_nosec+0x13a/0x180 [ 225.869479][ T8212] ____sys_sendmsg+0x54e/0x850 [ 225.869509][ T8212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.869542][ T8212] ? import_iovec+0x73/0xa0 [ 225.869568][ T8212] ___sys_sendmsg+0x2a5/0x360 [ 225.869591][ T8212] ? __lock_acquire+0x747/0x2de0 [ 225.869614][ T8212] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.869673][ T8212] ? __fget_files+0x2a/0x420 [ 225.869696][ T8212] ? __fget_files+0x3a2/0x420 [ 225.869730][ T8212] __x64_sys_sendmsg+0x1b1/0x290 [ 225.869757][ T8212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.869803][ T8212] do_syscall_64+0x166/0x520 [ 225.869825][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.869844][ T8212] ? clear_bhb_loop+0x70/0xc0 [ 225.869866][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.869884][ T8212] RIP: 0033:0x7f8cf859e159 [ 225.869901][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.869916][ T8212] RSP: 002b:00007f8cf951c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.869936][ T8212] RAX: ffffffffffffffda RBX: 00007f8cf8825fa0 RCX: 00007f8cf859e159 [ 225.869949][ T8212] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 225.869960][ T8212] RBP: 00007f8cf951c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.869971][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.869982][ T8212] R13: 00007f8cf8826038 R14: 00007f8cf8825fa0 R15: 00007f8cf894fa48 [ 225.870012][ T8212] [ 225.925526][ T987] usb 3-1: USB disconnect, device number 57 [ 225.956516][ T5743] usb 1-1: device descriptor read/64, error -71 [ 226.084684][ T8214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.166901][ T5713] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 226.194114][ T5743] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 226.324532][ T5743] usb 1-1: device descriptor read/64, error -71 [ 226.324854][ T5713] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.325855][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.325902][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.330879][ T5713] usb 5-1: config 0 descriptor?? [ 226.339479][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 226.434327][ T5743] usb usb1-port1: attempt power cycle [ 226.634403][ T5625] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 226.738894][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 226.739935][ T5713] pwc: recv_control_msg error -32 req 02 val 2700 [ 226.745731][ T5713] pwc: recv_control_msg error -32 req 02 val 2c00 [ 226.746569][ T5713] pwc: recv_control_msg error -32 req 04 val 1000 [ 226.747401][ T8205] key id 00000001 not found [ 226.747873][ T5713] pwc: recv_control_msg error -32 req 04 val 1300 [ 226.748907][ T5713] pwc: recv_control_msg error -32 req 04 val 1400 [ 226.749522][ T5713] pwc: recv_control_msg error -32 req 02 val 2000 [ 226.750294][ T5713] pwc: recv_control_msg error -32 req 02 val 2100 [ 226.751149][ T5713] pwc: recv_control_msg error -32 req 04 val 1500 [ 226.803259][ T5743] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 226.804066][ T5625] usb 2-1: Using ep0 maxpacket: 8 [ 226.804797][ T5625] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 226.806135][ T5625] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.806155][ T5625] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.808510][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.808531][ T5625] usb 2-1: Product: syz [ 226.808543][ T5625] usb 2-1: Manufacturer: syz [ 226.808556][ T5625] usb 2-1: SerialNumber: syz [ 226.869567][ T5743] usb 1-1: device descriptor read/8, error -71 [ 226.958885][ T5713] pwc: recv_control_msg error -71 req 02 val 2400 [ 226.959589][ T5713] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.960846][ T5713] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.961327][ T5713] pwc: recv_control_msg error -71 req 02 val 2800 [ 226.962848][ T5713] pwc: recv_control_msg error -71 req 04 val 1100 [ 226.963453][ T5713] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.970631][ T5713] pwc: Registered as video103. [ 226.973899][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 226.974640][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.597'. [ 227.054226][ T5713] usb 5-1: USB disconnect, device number 49 [ 227.112878][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.126631][ T5743] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 227.130681][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.151165][ T5743] usb 1-1: device descriptor read/8, error -71 [ 227.154448][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 227.254844][ T5743] usb usb1-port1: unable to enumerate USB device [ 227.322469][ T5625] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 227.360098][ T5625] usb 2-1: USB disconnect, device number 39 [ 227.406985][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.469581][ T8251] FAULT_INJECTION: forcing a failure. [ 227.469581][ T8251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.469614][ T8251] CPU: 0 UID: 0 PID: 8251 Comm: syz.2.600 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.469637][ T8251] Tainted: [L]=SOFTLOCKUP [ 227.469644][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.469656][ T8251] Call Trace: [ 227.469740][ T8251] [ 227.469789][ T8251] dump_stack_lvl+0xe8/0x150 [ 227.469931][ T8251] should_fail_ex+0x410/0x560 [ 227.470025][ T8251] _copy_from_iter+0x3b0/0x1660 [ 227.470095][ T8251] ? rcu_is_watching+0x16/0xb0 [ 227.470167][ T8251] ? __pfx__copy_from_iter+0x10/0x10 [ 227.470186][ T8251] ? trace_kmalloc+0x2a/0xf0 [ 227.470231][ T8251] ? __kmalloc_noprof+0x38c/0x720 [ 227.470249][ T8251] ? __kmalloc_noprof+0x1ab/0x720 [ 227.470265][ T8251] ? bcm_tx_setup+0x557/0x1c00 [ 227.470401][ T8251] bcm_tx_setup+0x693/0x1c00 [ 227.470442][ T8251] bcm_sendmsg+0x50d/0x7a0 [ 227.470470][ T8251] ? __pfx_bcm_sendmsg+0x10/0x10 [ 227.470505][ T8251] ? apparmor_socket_sendmsg+0x98/0x360 [ 227.470561][ T8251] ? __pfx_bcm_sendmsg+0x10/0x10 [ 227.470584][ T8251] sock_sendmsg_nosec+0x13a/0x180 [ 227.470661][ T8251] ____sys_sendmsg+0x54e/0x850 [ 227.470716][ T8251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.470750][ T8251] ? import_iovec+0x73/0xa0 [ 227.470803][ T8251] ___sys_sendmsg+0x2a5/0x360 [ 227.470826][ T8251] ? __lock_acquire+0x747/0x2de0 [ 227.470859][ T8251] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.470917][ T8251] ? __fget_files+0x2a/0x420 [ 227.470953][ T8251] ? __fget_files+0x3a2/0x420 [ 227.470995][ T8251] __x64_sys_sendmsg+0x1b1/0x290 [ 227.471021][ T8251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.471064][ T8251] do_syscall_64+0x166/0x520 [ 227.471127][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.471151][ T8251] ? clear_bhb_loop+0x70/0xc0 [ 227.471163][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.471173][ T8251] RIP: 0033:0x7fd3f799e159 [ 227.471213][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.471245][ T8251] RSP: 002b:00007fd3f88dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.471284][ T8251] RAX: ffffffffffffffda RBX: 00007fd3f7c25fa0 RCX: 00007fd3f799e159 [ 227.471291][ T8251] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 227.471297][ T8251] RBP: 00007fd3f88dc090 R08: 0000000000000000 R09: 0000000000000000 [ 227.471311][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.471317][ T8251] R13: 00007fd3f7c26038 R14: 00007fd3f7c25fa0 R15: 00007fd3f7d4fa48 [ 227.471338][ T8251] [ 227.708963][ T8253] netlink: 232 bytes leftover after parsing attributes in process `syz.4.601'. [ 227.714099][ T5713] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 227.887368][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 227.892108][ T5713] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 227.906528][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 227.927134][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.927152][ T5713] usb 4-1: Product: syz [ 227.927164][ T5713] usb 4-1: Manufacturer: syz [ 227.927177][ T5713] usb 4-1: SerialNumber: syz [ 227.940286][ T5713] usb 4-1: config 0 descriptor?? [ 227.959181][ T5713] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 228.434053][ T5743] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 228.584851][ T5743] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 228.588846][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.606142][ T5743] usb 5-1: config 0 descriptor?? [ 228.649048][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 228.650854][ T5743] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 228.848208][ T8287] loop5: detected capacity change from 0 to 7 [ 228.852230][ T8287] Dev loop5: unable to read RDB block 7 [ 228.852257][ T8287] loop5: AHDI p1 [ 228.852276][ T8287] loop5: partition table partially beyond EOD, truncated [ 229.032194][ T5743] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 229.244345][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 229.367488][ T5713] gspca_sonixj: reg_w1 err -71 [ 229.374192][ T987] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 229.398233][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 229.399431][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.401858][ T25] usb 2-1: config 0 descriptor?? [ 229.411377][ T25] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 229.442944][ T5743] gspca_cpia1: usb_control_msg 02, error -71 [ 229.442963][ T5743] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 229.464258][ T5713] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 229.465353][ T5743] usb 5-1: USB disconnect, device number 50 [ 229.485228][ T5713] usb 4-1: USB disconnect, device number 51 [ 229.558857][ T987] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.561723][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.561792][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.571252][ T987] usb 3-1: config 0 descriptor?? [ 229.592349][ T987] pwc: Askey VC010 type 2 USB webcam detected. [ 229.659787][ T8294] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 229.964135][ T30] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 229.987171][ T987] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.988617][ T987] pwc: recv_control_msg error -32 req 02 val 2700 [ 230.023734][ T987] pwc: recv_control_msg error -32 req 02 val 2c00 [ 230.026983][ T987] pwc: recv_control_msg error -32 req 04 val 1000 [ 230.027767][ T8291] key id 00000001 not found [ 230.032141][ T987] pwc: recv_control_msg error -32 req 04 val 1300 [ 230.032943][ T987] pwc: recv_control_msg error -32 req 04 val 1400 [ 230.033709][ T987] pwc: recv_control_msg error -32 req 02 val 2000 [ 230.037243][ T987] pwc: recv_control_msg error -32 req 02 val 2100 [ 230.125968][ T30] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.126041][ T30] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 230.128958][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.129036][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.129061][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.136238][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.136313][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.136338][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.140246][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.140316][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.140339][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.149161][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.149208][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.149263][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.156882][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.156974][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.156998][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.159490][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.159536][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.159560][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.163054][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.163122][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.163167][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.169097][ T30] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.169144][ T30] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.169167][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.181061][ T30] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.181085][ T30] usb 1-1: Product: syz [ 230.181098][ T30] usb 1-1: Manufacturer: syz [ 230.181135][ T30] usb 1-1: SerialNumber: syz [ 230.215444][ T30] usb 1-1: config 0 descriptor?? [ 230.286414][ T5713] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 230.323158][ T30] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 230.425632][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 230.426334][ T5713] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 230.427533][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.427547][ T5713] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.464173][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.464198][ T5713] usb 4-1: Product: syz [ 230.464210][ T5713] usb 4-1: Manufacturer: syz [ 230.464256][ T5713] usb 4-1: SerialNumber: syz [ 230.529908][ T987] pwc: recv_control_msg error -71 req 02 val 2400 [ 230.532325][ T987] pwc: recv_control_msg error -71 req 02 val 2600 [ 230.534603][ T987] pwc: recv_control_msg error -71 req 02 val 2900 [ 230.538642][ T987] pwc: recv_control_msg error -71 req 02 val 2800 [ 230.541426][ T987] pwc: recv_control_msg error -71 req 04 val 1100 [ 230.545103][ T987] pwc: recv_control_msg error -71 req 04 val 1200 [ 230.556577][ T987] pwc: Registered as video103. [ 230.580667][ T987] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 230.616754][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 230.617122][ T5743] usb 1-1: USB disconnect, device number 58 [ 230.629575][ T987] usb 3-1: USB disconnect, device number 58 [ 230.666202][ T5743] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 230.833717][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.834664][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.870294][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 231.024103][ T5743] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 231.065236][ T5713] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 231.078662][ T5713] usb 4-1: USB disconnect, device number 52 [ 231.166917][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.190564][ T5743] usb 1-1: Using ep0 maxpacket: 32 [ 231.198044][ T5743] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 231.215881][ T5743] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 231.215908][ T5743] usb 1-1: config 0 has no interface number 0 [ 231.215952][ T5743] usb 1-1: config 0 interface 12 has no altsetting 0 [ 231.222206][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.222231][ T5743] usb 1-1: Product: syz [ 231.222248][ T5743] usb 1-1: Manufacturer: syz [ 231.222265][ T5743] usb 1-1: SerialNumber: syz [ 231.279120][ T5743] usb 1-1: config 0 descriptor?? [ 231.557547][ T8318] syz.4.618 (8318): /proc/8317/oom_adj is deprecated, please use /proc/8317/oom_score_adj instead. [ 231.601808][ T8308] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 231.601853][ T8308] netlink: 'syz.2.615': attribute type 2 has an invalid length. [ 231.601866][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.615'. [ 231.912200][ T25] gspca_stv06xx: I2C: Read error writing address: -71 [ 231.937309][ T25] usb 2-1: USB disconnect, device number 40 [ 232.534159][ T5685] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 232.691715][ T5685] usb 3-1: not running at top speed; connect to a high speed hub [ 232.691752][ T5685] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 232.693373][ T5685] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 232.693398][ T5685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.693415][ T5685] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 232.693495][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.763849][ T5685] usb 3-1: config 0 descriptor?? [ 232.774738][ T5743] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 232.774875][ T5743] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 232.774921][ T5743] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 232.775051][ T5743] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 232.838835][ T5685] uvcvideo 3-1:0.0: Found UVC 9.00 device (046d:0825) [ 232.858462][ T5743] usb 1-1: USB disconnect, device number 59 [ 233.334160][ T5743] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 233.485284][ T5743] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 233.487543][ T5743] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 233.487580][ T5743] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.487597][ T5743] usb 1-1: config 220 has no interface number 2 [ 233.487681][ T5743] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 233.487705][ T5743] usb 1-1: config 220 interface 0 has no altsetting 0 [ 233.487721][ T5743] usb 1-1: config 220 interface 76 has no altsetting 0 [ 233.487737][ T5743] usb 1-1: config 220 interface 1 has no altsetting 0 [ 233.490445][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.490503][ T5743] usb 1-1: Product: syz [ 233.490516][ T5743] usb 1-1: Manufacturer: syz [ 233.490528][ T5743] usb 1-1: SerialNumber: syz [ 233.574606][ T987] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 233.596561][ T5685] uvcvideo 3-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 233.596599][ T5685] uvcvideo 3-1:0.1: Failed to initialize the device (-71). [ 233.597098][ T5685] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -71 [ 233.636127][ T5685] usb 3-1: USB disconnect, device number 59 [ 233.736072][ T987] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 233.737062][ T987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.737121][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.741650][ T987] usb 5-1: config 0 descriptor?? [ 233.750862][ T987] pwc: Askey VC010 type 2 USB webcam detected. [ 233.817360][ T5743] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 233.817386][ T5743] uvcvideo 1-1:220.0: No valid video chain found. [ 233.817459][ T5743] usb 1-1: selecting invalid altsetting 0 [ 233.857094][ T5743] usb 1-1: selecting invalid altsetting 0 [ 233.857122][ T5743] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 233.859768][ T5743] usb 1-1: USB disconnect, device number 60 [ 234.161767][ T987] pwc: recv_control_msg error -32 req 02 val 2b00 [ 234.163327][ T987] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.203188][ T987] pwc: recv_control_msg error -32 req 02 val 2c00 [ 234.212582][ T987] pwc: recv_control_msg error -32 req 04 val 1000 [ 234.227361][ T8341] key id 00000001 not found [ 234.229013][ T987] pwc: recv_control_msg error -32 req 04 val 1300 [ 234.232328][ T987] pwc: recv_control_msg error -32 req 04 val 1400 [ 234.236134][ T987] pwc: recv_control_msg error -32 req 02 val 2000 [ 234.245070][ T987] pwc: recv_control_msg error -32 req 02 val 2100 [ 234.514855][ T5743] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 234.662394][ T987] pwc: recv_control_msg error -71 req 02 val 2400 [ 234.663256][ T987] pwc: recv_control_msg error -71 req 02 val 2600 [ 234.664778][ T987] pwc: recv_control_msg error -71 req 02 val 2900 [ 234.665367][ T987] pwc: recv_control_msg error -71 req 02 val 2800 [ 234.667296][ T987] pwc: recv_control_msg error -71 req 04 val 1100 [ 234.667771][ T987] pwc: recv_control_msg error -71 req 04 val 1200 [ 234.694101][ T25] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 234.715029][ T5743] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.716628][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.716672][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.718460][ T987] pwc: Registered as video103. [ 234.721125][ T5743] usb 3-1: config 0 descriptor?? [ 234.747450][ T987] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 234.795873][ T987] usb 5-1: USB disconnect, device number 51 [ 234.854795][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 234.871673][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c8.70 [ 234.885820][ T25] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 234.885849][ T25] usb 1-1: config 0 has no interface number 0 [ 234.885902][ T25] usb 1-1: config 0 interface 154 has no altsetting 0 [ 234.895461][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.895486][ T25] usb 1-1: Product: syz [ 234.895506][ T25] usb 1-1: Manufacturer: syz [ 234.895519][ T25] usb 1-1: SerialNumber: syz [ 234.935357][ T25] usb 1-1: config 0 descriptor?? [ 235.007517][ T5743] usbhid 3-1:0.0: can't add hid device: -71 [ 235.007618][ T5743] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 235.029606][ T5743] usb 3-1: USB disconnect, device number 60 [ 235.153382][ T25] ldusb 1-1:0.154: Interrupt in endpoint not found [ 235.160651][ T25] usb 1-1: USB disconnect, device number 61 [ 235.534672][ T5743] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 235.669762][ T5743] usb 3-1: device descriptor read/64, error -71 [ 235.925594][ T5743] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 236.055389][ T5743] usb 3-1: device descriptor read/64, error -71 [ 236.169761][ T5743] usb usb3-port1: attempt power cycle [ 236.526206][ T8385] tipc: Started in network mode [ 236.526234][ T8385] tipc: Node identity 9e726a84ab88, cluster identity 4711 [ 236.526645][ T8385] tipc: Enabled bearer , priority 0 [ 236.527418][ T8385] syzkaller0: entered promiscuous mode [ 236.527435][ T8385] syzkaller0: entered allmulticast mode [ 236.568584][ T5743] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 236.587160][ T5743] usb 3-1: device descriptor read/8, error -71 [ 236.754110][ T5692] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 236.754566][ T5685] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 236.780683][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 236.824696][ T5743] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 236.845270][ T5743] usb 3-1: device descriptor read/8, error -71 [ 236.884282][ T5685] usb 2-1: device descriptor read/64, error -71 [ 236.904776][ T5692] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 236.906121][ T5692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.906170][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.909006][ T5692] usb 5-1: config 0 descriptor?? [ 236.954679][ T5692] pwc: Askey VC010 type 2 USB webcam detected. [ 236.955564][ T5743] usb usb3-port1: unable to enumerate USB device [ 236.977310][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 236.978058][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.996485][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.996517][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 236.996567][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 236.996606][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.000809][ T10] usb 1-1: config 0 descriptor?? [ 237.001844][ T8385] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 237.028735][ T10] hub 1-1:0.0: USB hub found [ 237.134221][ T5685] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 237.208893][ T10] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 237.264132][ T5685] usb 2-1: device descriptor read/64, error -71 [ 237.332464][ T5692] pwc: recv_control_msg error -32 req 02 val 2b00 [ 237.344622][ T5692] pwc: recv_control_msg error -32 req 02 val 2700 [ 237.372814][ T5692] pwc: recv_control_msg error -32 req 02 val 2c00 [ 237.379815][ T5685] usb usb2-port1: attempt power cycle [ 237.386628][ T5692] pwc: recv_control_msg error -32 req 04 val 1000 [ 237.392656][ T8390] key id 00000001 not found [ 237.393871][ T5692] pwc: recv_control_msg error -32 req 04 val 1300 [ 237.410870][ T5692] pwc: recv_control_msg error -32 req 04 val 1400 [ 237.412753][ T8385] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 237.420997][ T5692] pwc: recv_control_msg error -32 req 02 val 2000 [ 237.425925][ T5692] pwc: recv_control_msg error -32 req 02 val 2100 [ 237.659697][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 237.659828][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 237.681799][ T8384] tipc: Resetting bearer [ 237.686144][ T10] usb 1-1: USB disconnect, device number 62 [ 237.745262][ T5685] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 237.755167][ T8384] tipc: Disabling bearer [ 237.776002][ T5685] usb 2-1: device descriptor read/8, error -71 [ 237.812161][ T5743] tipc: Node number set to 905603716 [ 237.840826][ T5692] pwc: recv_control_msg error -71 req 02 val 2400 [ 237.841810][ T5692] pwc: recv_control_msg error -71 req 02 val 2600 [ 237.842224][ T5692] pwc: recv_control_msg error -71 req 02 val 2900 [ 237.842633][ T5692] pwc: recv_control_msg error -71 req 02 val 2800 [ 237.843201][ T5692] pwc: recv_control_msg error -71 req 04 val 1100 [ 237.849196][ T5692] pwc: recv_control_msg error -71 req 04 val 1200 [ 237.855311][ T5692] pwc: Registered as video103. [ 237.856902][ T8406] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü(˜ŒüýeŒ–ª\{ò«šáÍær% [ 237.860480][ T5692] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 237.903236][ T5692] usb 5-1: USB disconnect, device number 52 [ 238.025749][ T5685] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 238.045592][ T5685] usb 2-1: device descriptor read/8, error -71 [ 238.065539][ T8406] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü(˜ŒüýeŒ–ª\{ò«šáÍær%8ñ' [ 238.065560][ T8406] CPU: 1 UID: 0 PID: 8406 Comm: syz.3.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.065583][ T8406] Tainted: [L]=SOFTLOCKUP [ 238.065589][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.065613][ T8406] Call Trace: [ 238.065621][ T8406] [ 238.065629][ T8406] dump_stack_lvl+0xe8/0x150 [ 238.065659][ T8406] sysfs_warn_dup+0x8e/0xa0 [ 238.065714][ T8406] sysfs_do_create_link_sd+0xc0/0x110 [ 238.065742][ T8406] device_add_class_symlinks+0x1cf/0x240 [ 238.065877][ T8406] device_add+0x467/0xb80 [ 238.065899][ T8406] wiphy_register+0x1fc8/0x2ff0 [ 238.065982][ T8406] ? __pfx_wiphy_register+0x10/0x10 [ 238.066001][ T8406] ? __pfx_netdev_run_todo+0x10/0x10 [ 238.066088][ T8406] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 238.066195][ T8406] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 238.066250][ T8406] ieee80211_register_hw+0x3dbb/0x4b00 [ 238.066313][ T8406] ? ieee80211_register_hw+0x19b1/0x4b00 [ 238.066359][ T8406] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 238.066385][ T8406] ? __asan_memset+0x22/0x50 [ 238.066412][ T8406] ? __hrtimer_setup+0x1b7/0x260 [ 238.066452][ T8406] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 238.066524][ T8406] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 238.066575][ T8406] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 238.066595][ T8406] ? kstrndup+0xbd/0x160 [ 238.066623][ T8406] ? kstrndup+0xbd/0x160 [ 238.066641][ T8406] hwsim_new_radio_nl+0xd8b/0xf90 [ 238.066674][ T8406] genl_family_rcv_msg_doit+0x233/0x340 [ 238.066738][ T8406] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 238.066771][ T8406] ? bpf_lsm_capable+0x9/0x20 [ 238.066797][ T8406] ? security_capable+0x7e/0x2c0 [ 238.066885][ T8406] genl_rcv_msg+0x614/0x7a0 [ 238.066912][ T8406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.066930][ T8406] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 238.066963][ T8406] netlink_rcv_skb+0x226/0x4a0 [ 238.067016][ T8406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.067037][ T8406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.067076][ T8406] ? down_read+0x2be/0x330 [ 238.067174][ T8406] genl_rcv+0x28/0x40 [ 238.067195][ T8406] netlink_unicast+0x7bd/0x940 [ 238.067242][ T8406] netlink_sendmsg+0x813/0xb40 [ 238.067271][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.067296][ T8406] ? apparmor_socket_sendmsg+0x98/0x360 [ 238.067316][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.067330][ T8406] sock_sendmsg_nosec+0x13a/0x180 [ 238.067352][ T8406] ____sys_sendmsg+0x54e/0x850 [ 238.067378][ T8406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.067412][ T8406] ? import_iovec+0x73/0xa0 [ 238.067440][ T8406] ___sys_sendmsg+0x2a5/0x360 [ 238.067464][ T8406] ? __lock_acquire+0x747/0x2de0 [ 238.067489][ T8406] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.067519][ T8406] ? futex_wait+0x2a2/0x390 [ 238.067575][ T8406] ? __fget_files+0x2a/0x420 [ 238.067597][ T8406] ? __fget_files+0x3a2/0x420 [ 238.067629][ T8406] __x64_sys_sendmsg+0x1b1/0x290 [ 238.067655][ T8406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.067697][ T8406] do_syscall_64+0x166/0x520 [ 238.067720][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.067740][ T8406] ? clear_bhb_loop+0x70/0xc0 [ 238.067761][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.067778][ T8406] RIP: 0033:0x7fc74c99e159 [ 238.067795][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.067809][ T8406] RSP: 002b:00007fc74d83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.067829][ T8406] RAX: ffffffffffffffda RBX: 00007fc74cc26090 RCX: 00007fc74c99e159 [ 238.067842][ T8406] RDX: 0000000000000084 RSI: 0000200000000180 RDI: 0000000000000003 [ 238.067854][ T8406] RBP: 00007fc74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 238.067866][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.067877][ T8406] R13: 00007fc74cc26128 R14: 00007fc74cc26090 R15: 00007fc74cd4fa48 [ 238.067910][ T8406] [ 238.164382][ T5685] usb usb2-port1: unable to enumerate USB device [ 238.355576][ T8406] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü(˜ŒüýeŒ–ª\{ò«šáÍær%8ñ' [ 238.355596][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.3.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.355620][ T8406] Tainted: [L]=SOFTLOCKUP [ 238.355627][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.355638][ T8406] Call Trace: [ 238.355645][ T8406] [ 238.355652][ T8406] dump_stack_lvl+0xe8/0x150 [ 238.355687][ T8406] sysfs_warn_dup+0x8e/0xa0 [ 238.355715][ T8406] sysfs_do_create_link_sd+0xc0/0x110 [ 238.355744][ T8406] device_add_class_symlinks+0x1cf/0x240 [ 238.355769][ T8406] device_add+0x467/0xb80 [ 238.355790][ T8406] wiphy_register+0x1fc8/0x2ff0 [ 238.355826][ T8406] ? __pfx_wiphy_register+0x10/0x10 [ 238.355844][ T8406] ? __pfx_netdev_run_todo+0x10/0x10 [ 238.355872][ T8406] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 238.355905][ T8406] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 238.355930][ T8406] ieee80211_register_hw+0x3dbb/0x4b00 [ 238.355965][ T8406] ? ieee80211_register_hw+0x19b1/0x4b00 [ 238.356012][ T8406] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 238.356037][ T8406] ? __asan_memset+0x22/0x50 [ 238.356064][ T8406] ? __hrtimer_setup+0x1b7/0x260 [ 238.356088][ T8406] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 238.356113][ T8406] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 238.356164][ T8406] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 238.356184][ T8406] ? kstrndup+0xbd/0x160 [ 238.356207][ T8406] ? kstrndup+0xbd/0x160 [ 238.356228][ T8406] hwsim_new_radio_nl+0xd8b/0xf90 [ 238.356265][ T8406] genl_family_rcv_msg_doit+0x233/0x340 [ 238.356296][ T8406] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 238.356331][ T8406] ? bpf_lsm_capable+0x9/0x20 [ 238.356379][ T8406] ? security_capable+0x7e/0x2c0 [ 238.356408][ T8406] genl_rcv_msg+0x614/0x7a0 [ 238.356436][ T8406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.356456][ T8406] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 238.356492][ T8406] netlink_rcv_skb+0x226/0x4a0 [ 238.356519][ T8406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.356542][ T8406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.356584][ T8406] ? down_read+0x2be/0x330 [ 238.356611][ T8406] genl_rcv+0x28/0x40 [ 238.356627][ T8406] netlink_unicast+0x7bd/0x940 [ 238.356659][ T8406] netlink_sendmsg+0x813/0xb40 [ 238.356684][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.356708][ T8406] ? apparmor_socket_sendmsg+0x98/0x360 [ 238.356729][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.356744][ T8406] sock_sendmsg_nosec+0x13a/0x180 [ 238.356764][ T8406] ____sys_sendmsg+0x54e/0x850 [ 238.356792][ T8406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.356824][ T8406] ? import_iovec+0x73/0xa0 [ 238.356849][ T8406] ___sys_sendmsg+0x2a5/0x360 [ 238.356872][ T8406] ? __lock_acquire+0x747/0x2de0 [ 238.356896][ T8406] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.356924][ T8406] ? futex_wait+0x2a2/0x390 [ 238.356979][ T8406] ? __fget_files+0x2a/0x420 [ 238.357003][ T8406] ? __fget_files+0x3a2/0x420 [ 238.357037][ T8406] __x64_sys_sendmsg+0x1b1/0x290 [ 238.357065][ T8406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.357112][ T8406] do_syscall_64+0x166/0x520 [ 238.357133][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.357152][ T8406] ? clear_bhb_loop+0x70/0xc0 [ 238.357174][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.357192][ T8406] RIP: 0033:0x7fc74c99e159 [ 238.357210][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.357224][ T8406] RSP: 002b:00007fc74d83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.357244][ T8406] RAX: ffffffffffffffda RBX: 00007fc74cc26090 RCX: 00007fc74c99e159 [ 238.357257][ T8406] RDX: 0000000000000084 RSI: 0000200000000180 RDI: 0000000000000003 [ 238.357269][ T8406] RBP: 00007fc74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 238.357278][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.357289][ T8406] R13: 00007fc74cc26128 R14: 00007fc74cc26090 R15: 00007fc74cd4fa48 [ 238.357320][ T8406] [ 238.495478][ T8406] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü(˜ŒüýeŒ–ª\{ò«šáÍær%8ñ' [ 238.495503][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.3.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.495527][ T8406] Tainted: [L]=SOFTLOCKUP [ 238.495534][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.495544][ T8406] Call Trace: [ 238.495552][ T8406] [ 238.495559][ T8406] dump_stack_lvl+0xe8/0x150 [ 238.495602][ T8406] sysfs_warn_dup+0x8e/0xa0 [ 238.495629][ T8406] sysfs_do_create_link_sd+0xc0/0x110 [ 238.495659][ T8406] device_add_class_symlinks+0x1cf/0x240 [ 238.495683][ T8406] device_add+0x467/0xb80 [ 238.495704][ T8406] wiphy_register+0x1fc8/0x2ff0 [ 238.495740][ T8406] ? __pfx_wiphy_register+0x10/0x10 [ 238.495759][ T8406] ? __pfx_netdev_run_todo+0x10/0x10 [ 238.495786][ T8406] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 238.495820][ T8406] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 238.495844][ T8406] ieee80211_register_hw+0x3dbb/0x4b00 [ 238.495879][ T8406] ? ieee80211_register_hw+0x19b1/0x4b00 [ 238.495934][ T8406] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 238.495959][ T8406] ? __asan_memset+0x22/0x50 [ 238.495986][ T8406] ? __hrtimer_setup+0x1b7/0x260 [ 238.496010][ T8406] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 238.496037][ T8406] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 238.496088][ T8406] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 238.496109][ T8406] ? kstrndup+0xbd/0x160 [ 238.496132][ T8406] ? kstrndup+0xbd/0x160 [ 238.496152][ T8406] hwsim_new_radio_nl+0xd8b/0xf90 [ 238.496195][ T8406] genl_family_rcv_msg_doit+0x233/0x340 [ 238.496226][ T8406] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 238.496260][ T8406] ? bpf_lsm_capable+0x9/0x20 [ 238.496276][ T8406] ? security_capable+0x7e/0x2c0 [ 238.496305][ T8406] genl_rcv_msg+0x614/0x7a0 [ 238.496333][ T8406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.496352][ T8406] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 238.496388][ T8406] netlink_rcv_skb+0x226/0x4a0 [ 238.496415][ T8406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.496438][ T8406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.496480][ T8406] ? down_read+0x2be/0x330 [ 238.496510][ T8406] genl_rcv+0x28/0x40 [ 238.496529][ T8406] netlink_unicast+0x7bd/0x940 [ 238.496565][ T8406] netlink_sendmsg+0x813/0xb40 [ 238.496592][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.496619][ T8406] ? apparmor_socket_sendmsg+0x98/0x360 [ 238.496641][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.496659][ T8406] sock_sendmsg_nosec+0x13a/0x180 [ 238.496682][ T8406] ____sys_sendmsg+0x54e/0x850 [ 238.496712][ T8406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.496745][ T8406] ? import_iovec+0x73/0xa0 [ 238.496772][ T8406] ___sys_sendmsg+0x2a5/0x360 [ 238.496795][ T8406] ? __lock_acquire+0x747/0x2de0 [ 238.496818][ T8406] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.496846][ T8406] ? futex_wait+0x2a2/0x390 [ 238.496903][ T8406] ? __fget_files+0x2a/0x420 [ 238.496927][ T8406] ? __fget_files+0x3a2/0x420 [ 238.496961][ T8406] __x64_sys_sendmsg+0x1b1/0x290 [ 238.496988][ T8406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.497035][ T8406] do_syscall_64+0x166/0x520 [ 238.497055][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.497074][ T8406] ? clear_bhb_loop+0x70/0xc0 [ 238.497097][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.497114][ T8406] RIP: 0033:0x7fc74c99e159 [ 238.497132][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.497146][ T8406] RSP: 002b:00007fc74d83a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.497164][ T8406] RAX: ffffffffffffffda RBX: 00007fc74cc26090 RCX: 00007fc74c99e159 [ 238.497178][ T8406] RDX: 0000000000000084 RSI: 0000200000000180 RDI: 0000000000000003 [ 238.497194][ T8406] RBP: 00007fc74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 238.497205][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.497216][ T8406] R13: 00007fc74cc26128 R14: 00007fc74cc26090 R15: 00007fc74cd4fa48 [ 238.497248][ T8406] [ 238.915131][ T8415] FAULT_INJECTION: forcing a failure. [ 238.915131][ T8415] name failslab, interval 1, probability 0, space 0, times 9 [ 238.915170][ T8415] CPU: 0 UID: 0 PID: 8415 Comm: syz.0.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.915195][ T8415] Tainted: [L]=SOFTLOCKUP [ 238.915201][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.915212][ T8415] Call Trace: [ 238.915219][ T8415] [ 238.915229][ T8415] dump_stack_lvl+0xe8/0x150 [ 238.915261][ T8415] should_fail_ex+0x410/0x560 [ 238.915287][ T8415] should_failslab+0xa8/0x100 [ 238.915319][ T8415] __kmalloc_noprof+0xfe/0x720 [ 238.915338][ T8415] ? iter_file_splice_write+0x1ea/0x1240 [ 238.915362][ T8415] ? iter_file_splice_write+0x1ea/0x1240 [ 238.915395][ T8415] iter_file_splice_write+0x1ea/0x1240 [ 238.915419][ T8415] ? __lock_acquire+0x747/0x2de0 [ 238.915460][ T8415] ? __pfx_iter_file_splice_write+0x10/0x10 [ 238.915486][ T8415] ? lock_acquire+0x115/0x350 [ 238.915518][ T8415] ? __pfx_iter_file_splice_write+0x10/0x10 [ 238.915546][ T8415] direct_splice_actor+0x101/0x160 [ 238.915575][ T8415] splice_direct_to_actor+0x57b/0xcb0 [ 238.915619][ T8415] ? __pfx_direct_splice_actor+0x10/0x10 [ 238.915645][ T8415] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 238.915681][ T8415] do_splice_direct+0x195/0x290 [ 238.915709][ T8415] ? __pfx_do_splice_direct+0x10/0x10 [ 238.915735][ T8415] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 238.915759][ T8415] ? rw_verify_area+0x203/0x4c0 [ 238.915814][ T8415] do_sendfile+0x52e/0x7c0 [ 238.915843][ T8415] ? __pfx_do_sendfile+0x10/0x10 [ 238.915876][ T8415] __se_sys_sendfile64+0xdf/0x1a0 [ 238.915899][ T8415] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 238.915930][ T8415] do_syscall_64+0x166/0x520 [ 238.915952][ T8415] ? trace_irq_disable+0x3b/0x140 [ 238.915976][ T8415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.915995][ T8415] ? clear_bhb_loop+0x70/0xc0 [ 238.916016][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.916034][ T8415] RIP: 0033:0x7efe8c79e159 [ 238.916050][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.916065][ T8415] RSP: 002b:00007efe8d718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 238.916085][ T8415] RAX: ffffffffffffffda RBX: 00007efe8ca25fa0 RCX: 00007efe8c79e159 [ 238.916098][ T8415] RDX: 0000200000000080 RSI: 0000000000000006 RDI: 0000000000000006 [ 238.916109][ T8415] RBP: 00007efe8d718090 R08: 0000000000000000 R09: 0000000000000000 [ 238.916120][ T8415] R10: 000000004d9b6eaf R11: 0000000000000246 R12: 0000000000000002 [ 238.916131][ T8415] R13: 00007efe8ca26038 R14: 00007efe8ca25fa0 R15: 00007efe8cb4fa48 [ 238.916160][ T8415] [ 239.485723][ T5692] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 239.547911][ T8419] netlink: 272 bytes leftover after parsing attributes in process `syz.2.649'. [ 239.673038][ T5692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.673072][ T5692] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 239.682981][ T5692] usb 4-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 239.683011][ T5692] usb 4-1: config 66 interface 0 has no altsetting 0 [ 239.694851][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.694875][ T5692] usb 4-1: Product: syz [ 239.694888][ T5692] usb 4-1: Manufacturer: syz [ 239.694900][ T5692] usb 4-1: SerialNumber: syz [ 239.703683][ T8421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 239.733867][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 239.830701][ T8433] ipvlan2: entered allmulticast mode [ 239.830716][ T8433] syz_tun: entered allmulticast mode [ 239.928059][ T5692] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 239.959471][ T5692] usb 4-1: USB disconnect, device number 53 [ 240.608562][ T31] audit: type=1326 audit(1790081850.619:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.3.657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc74c99e159 code=0x0 [ 240.614084][ T5713] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 240.784857][ T5713] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.785887][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.785935][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.790245][ T5713] usb 3-1: config 0 descriptor?? [ 240.828020][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 241.187390][ T8456] syzkaller1: entered promiscuous mode [ 241.187414][ T8456] syzkaller1: entered allmulticast mode [ 241.192721][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 241.215733][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 241.217800][ T5713] pwc: recv_control_msg error -32 req 02 val 2700 [ 241.230753][ T5713] pwc: recv_control_msg error -32 req 02 val 2c00 [ 241.234156][ T5685] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 241.238311][ T8443] key id 00000001 not found [ 241.240551][ T8457] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 241.244199][ T5713] pwc: recv_control_msg error -32 req 04 val 1000 [ 241.271111][ T5713] pwc: recv_control_msg error -32 req 04 val 1300 [ 241.282822][ T5713] pwc: recv_control_msg error -32 req 04 val 1400 [ 241.290969][ T5713] pwc: recv_control_msg error -32 req 02 val 2000 [ 241.291807][ T5713] pwc: recv_control_msg error -32 req 02 val 2100 [ 241.334335][ T5692] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 241.400485][ T5685] usb 5-1: Using ep0 maxpacket: 8 [ 241.401218][ T5685] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 241.403360][ T5685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.403383][ T5685] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.406528][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.406550][ T5685] usb 5-1: Product: syz [ 241.406562][ T5685] usb 5-1: Manufacturer: syz [ 241.406574][ T5685] usb 5-1: SerialNumber: syz [ 241.487444][ T5692] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 241.510483][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.510510][ T5692] usb 4-1: Product: syz [ 241.510524][ T5692] usb 4-1: Manufacturer: syz [ 241.510537][ T5692] usb 4-1: SerialNumber: syz [ 241.650827][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.656920][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.668667][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 241.750050][ T5713] pwc: recv_control_msg error -71 req 02 val 2400 [ 241.752430][ T5713] pwc: recv_control_msg error -71 req 02 val 2600 [ 241.752865][ T5713] pwc: recv_control_msg error -71 req 02 val 2900 [ 241.753353][ T5713] pwc: recv_control_msg error -71 req 02 val 2800 [ 241.753902][ T5713] pwc: recv_control_msg error -71 req 04 val 1100 [ 241.774608][ T5713] pwc: recv_control_msg error -71 req 04 val 1200 [ 241.816151][ T5713] pwc: Registered as video103. [ 241.835136][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 241.859855][ T5713] usb 3-1: USB disconnect, device number 65 [ 242.018576][ T8466] netlink: 14 bytes leftover after parsing attributes in process `syz.1.664'. [ 242.193257][ T5685] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 242.223349][ T5685] usb 5-1: USB disconnect, device number 53 [ 242.337899][ T7672] udevd[7672]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.775408][ T5692] rtl8150 4-1:1.0: couldn't reset the device [ 242.775722][ T5692] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 242.909923][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 242.910164][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 243.017496][ T8493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.668'. [ 243.118244][ T5685] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 243.263685][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.267546][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.273507][ T5685] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 243.282014][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.282405][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.292794][ T5685] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 243.292824][ T5685] usb 2-1: config 0 interface 0 has no altsetting 0 [ 243.292856][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.311687][ T5685] usb 2-1: config 0 descriptor?? [ 243.384140][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 243.504074][ T5692] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 243.524095][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.664134][ T25] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 243.664995][ T5692] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 243.666225][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.668611][ T5692] usb 1-1: config 0 descriptor?? [ 243.750136][ T5685] logitech 0003:046D:C626.0018: unknown main item tag 0x0 [ 243.750174][ T5685] logitech 0003:046D:C626.0018: unknown main item tag 0x1 [ 243.750327][ T5685] logitech 0003:046D:C626.0018: invalid report_count 1591645534 [ 243.750352][ T5685] logitech 0003:046D:C626.0018: item 0 4 1 9 parsing failed [ 243.751328][ T5685] logitech 0003:046D:C626.0018: parse failed [ 243.751460][ T5685] logitech 0003:046D:C626.0018: probe with driver logitech failed with error -22 [ 243.777153][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 243.814062][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 243.814752][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 243.815895][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.815922][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.815956][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.818442][ T25] usb 3-1: config 0 descriptor?? [ 243.934280][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.960043][ T5713] usb 2-1: USB disconnect, device number 45 [ 244.044641][ T10] usb usb5-port1: attempt power cycle [ 244.056595][ T25] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 244.121342][ T5712] usb 4-1: USB disconnect, device number 54 [ 244.227605][ T8506] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 244.397805][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 244.401407][ T5692] usb 1-1: Cannot read MAC address [ 244.401622][ T5692] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 244.431755][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.432253][ T5692] usb 1-1: USB disconnect, device number 63 [ 244.694585][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 244.715185][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.824293][ T10] usb usb5-port1: unable to enumerate USB device [ 244.884105][ T5712] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 244.990197][ T8530] fuse: Unknown parameter '0xffffffffffffffff00000000000000000004' [ 244.991938][ T8530] misc userio: The device must be registered before sending interrupts [ 245.015808][ T8530] fuse: Unknown parameter 'group[id' [ 245.037364][ T5712] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.039204][ T5712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.039253][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.041280][ T5712] usb 2-1: config 0 descriptor?? [ 245.046139][ T5712] pwc: Askey VC010 type 2 USB webcam detected. [ 245.104201][ T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 245.146263][ T5713] usb 3-1: USB disconnect, device number 66 [ 245.254057][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 245.254718][ T25] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 245.255660][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.255680][ T25] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.257609][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.257660][ T25] usb 1-1: Product: syz [ 245.257674][ T25] usb 1-1: Manufacturer: syz [ 245.257683][ T25] usb 1-1: SerialNumber: syz [ 245.450858][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 245.451507][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 245.458148][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 245.458815][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 245.459646][ T8517] key id 00000001 not found [ 245.460132][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 245.461198][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 245.463852][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 245.465865][ T5712] pwc: recv_control_msg error -32 req 02 val 2100 [ 245.487607][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.488141][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.496406][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'. [ 245.613330][ T8538] FAULT_INJECTION: forcing a failure. [ 245.613330][ T8538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.613364][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.3.680 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.613389][ T8538] Tainted: [L]=SOFTLOCKUP [ 245.613396][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.613407][ T8538] Call Trace: [ 245.613415][ T8538] [ 245.613424][ T8538] dump_stack_lvl+0xe8/0x150 [ 245.613455][ T8538] should_fail_ex+0x410/0x560 [ 245.613482][ T8538] _copy_from_iter+0x3b0/0x1660 [ 245.613516][ T8538] ? rcu_is_watching+0x16/0xb0 [ 245.613539][ T8538] ? __pfx__copy_from_iter+0x10/0x10 [ 245.613558][ T8538] ? trace_kmalloc+0x2a/0xf0 [ 245.613580][ T8538] ? __kmalloc_noprof+0x38c/0x720 [ 245.613597][ T8538] ? __kmalloc_noprof+0x1ab/0x720 [ 245.613614][ T8538] ? bcm_tx_setup+0x557/0x1c00 [ 245.613649][ T8538] bcm_tx_setup+0x693/0x1c00 [ 245.613691][ T8538] bcm_sendmsg+0x50d/0x7a0 [ 245.613747][ T8538] ? __pfx_bcm_sendmsg+0x10/0x10 [ 245.613786][ T8538] ? apparmor_socket_sendmsg+0x98/0x360 [ 245.613810][ T8538] ? __pfx_bcm_sendmsg+0x10/0x10 [ 245.613834][ T8538] sock_sendmsg_nosec+0x13a/0x180 [ 245.613858][ T8538] ____sys_sendmsg+0x54e/0x850 [ 245.613888][ T8538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.613923][ T8538] ? import_iovec+0x73/0xa0 [ 245.613945][ T8538] ___sys_sendmsg+0x2a5/0x360 [ 245.613965][ T8538] ? __lock_acquire+0x747/0x2de0 [ 245.613987][ T8538] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.614042][ T8538] ? __fget_files+0x2a/0x420 [ 245.614065][ T8538] ? __fget_files+0x3a2/0x420 [ 245.614096][ T8538] __x64_sys_sendmsg+0x1b1/0x290 [ 245.614120][ T8538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.614165][ T8538] do_syscall_64+0x166/0x520 [ 245.614187][ T8538] ? trace_irq_disable+0x3b/0x140 [ 245.614206][ T8538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.614224][ T8538] ? clear_bhb_loop+0x70/0xc0 [ 245.614247][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.614266][ T8538] RIP: 0033:0x7fc74c99e159 [ 245.614284][ T8538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.614299][ T8538] RSP: 002b:00007fc74d85b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.614319][ T8538] RAX: ffffffffffffffda RBX: 00007fc74cc25fa0 RCX: 00007fc74c99e159 [ 245.614333][ T8538] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 245.614345][ T8538] RBP: 00007fc74d85b090 R08: 0000000000000000 R09: 0000000000000000 [ 245.614357][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.614367][ T8538] R13: 00007fc74cc26038 R14: 00007fc74cc25fa0 R15: 00007fc74cd4fa48 [ 245.614399][ T8538] [ 245.666341][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 245.676948][ T25] usb 1-1: USB disconnect, device number 64 [ 245.759322][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.923110][ T5712] pwc: recv_control_msg error -71 req 02 val 2400 [ 245.924243][ T5712] pwc: recv_control_msg error -71 req 02 val 2600 [ 245.926351][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 245.927030][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 245.929125][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 245.934546][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 245.942163][ T5712] pwc: Registered as video103. [ 245.965780][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 246.014474][ T8540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.017586][ T5712] usb 2-1: USB disconnect, device number 46 [ 246.281317][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 246.476032][ T8552] input: syz1 as /devices/virtual/input/input37 [ 246.754926][ T5692] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 246.758852][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 246.795797][ T8566] bridge_slave_0: left allmulticast mode [ 246.795821][ T8566] bridge_slave_0: left promiscuous mode [ 246.796071][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.800407][ T8566] bridge_slave_1: left allmulticast mode [ 246.800431][ T8566] bridge_slave_1: left promiscuous mode [ 246.800645][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.862295][ T8566] bond0: (slave bond_slave_0): Releasing backup interface [ 246.886562][ T8566] bond0: (slave bond_slave_1): Releasing backup interface [ 246.905150][ T5692] usb 1-1: Using ep0 maxpacket: 32 [ 246.905889][ T5692] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 246.907165][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 246.907191][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 246.907209][ T5692] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 246.907232][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 246.910609][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.910630][ T5692] usb 1-1: Product: syz [ 246.910643][ T5692] usb 1-1: Manufacturer: syz [ 246.910655][ T5692] usb 1-1: SerialNumber: syz [ 246.913608][ T5692] usb 1-1: config 0 descriptor?? [ 246.928878][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 246.962431][ T10] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 246.995495][ T8566] team0: Port device team_slave_0 removed [ 247.025207][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.025231][ T10] usb 3-1: Product: syz [ 247.025243][ T10] usb 3-1: Manufacturer: syz [ 247.025255][ T10] usb 3-1: SerialNumber: syz [ 247.026316][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 247.032629][ T10] usb 3-1: config 0 descriptor?? [ 247.086304][ T5692] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 247.092156][ T8566] team0: Port device team_slave_1 removed [ 247.093045][ T8566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.093066][ T8566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.109822][ T4968] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 247.123579][ T8566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.123604][ T8566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.157725][ T4968] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 247.178431][ T8566] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.178644][ T4968] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 247.201596][ T4968] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 247.207856][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.207905][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 247.211944][ T25] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 247.211969][ T25] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 247.211987][ T25] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 247.212005][ T25] usb 2-1: config 129 has no interface number 0 [ 247.212019][ T25] usb 2-1: config 129 has no interface number 1 [ 247.212063][ T25] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.212085][ T25] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 247.212122][ T25] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 247.212144][ T25] usb 2-1: config 129 interface 135 has no altsetting 0 [ 247.212159][ T25] usb 2-1: config 129 interface 5 has no altsetting 0 [ 247.228143][ T25] usb 2-1: string descriptor 0 read error: -22 [ 247.228318][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.351336][ T5692] usb 1-1: USB disconnect, device number 65 [ 247.382918][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.383077][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 247.509975][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 247.553859][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.570891][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 247.570973][ T10] usb 3-1: media controller created [ 247.609483][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.964114][ T30] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 247.964295][ T8582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.121691][ T30] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.144447][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.144482][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.149280][ T30] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 248.149305][ T30] usb 5-1: Manufacturer: syz [ 248.159402][ T30] usb 5-1: config 0 descriptor?? [ 248.221699][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 248.221851][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 248.221926][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 248.229113][ T8552] dtv5100: wlen = 0, aborting. [ 248.263425][ T10] usb 3-1: USB disconnect, device number 67 [ 248.422303][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 248.564090][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 248.695006][ T25] usb 4-1: device descriptor read/64, error -71 [ 248.774523][ T5713] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 248.924189][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 248.926181][ T5713] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 248.931755][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.931779][ T5713] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.935212][ T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 248.939888][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.939910][ T5713] usb 1-1: Product: syz [ 248.939924][ T5713] usb 1-1: Manufacturer: syz [ 248.939961][ T5713] usb 1-1: SerialNumber: syz [ 248.983981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 249.064112][ T25] usb 4-1: device descriptor read/64, error -71 [ 249.178543][ T25] usb usb4-port1: attempt power cycle [ 249.234697][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.235978][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.241723][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 249.394717][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 249.411923][ T5713] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 249.431945][ T5713] usb 1-1: USB disconnect, device number 66 [ 249.489724][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 249.514059][ T25] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 249.535205][ T25] usb 4-1: device descriptor read/8, error -71 [ 249.565281][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 249.566279][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.566328][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.571792][ T10] usb 3-1: config 0 descriptor?? [ 249.597256][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 249.748096][ T5685] usb 2-1: USB disconnect, device number 47 [ 249.774411][ T25] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 249.797876][ T25] usb 4-1: device descriptor read/8, error -71 [ 249.904523][ T25] usb usb4-port1: unable to enumerate USB device [ 250.048005][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.050214][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.077403][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.080679][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.081639][ T8600] key id 00000001 not found [ 250.082306][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 250.083029][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 250.091124][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 250.103414][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 250.254689][ T25] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 250.404831][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.406237][ T25] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 250.406257][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.408793][ T25] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.408817][ T25] usb 1-1: Product: syz [ 250.408829][ T25] usb 1-1: Manufacturer: syz [ 250.408876][ T25] usb 1-1: SerialNumber: syz [ 250.412008][ T25] usb 1-1: config 0 descriptor?? [ 250.476143][ T25] usb 1-1: selecting invalid altsetting 0 [ 250.519980][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 250.522464][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 250.523559][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 250.524120][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 250.525846][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 250.526979][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 250.552501][ T10] pwc: Registered as video103. [ 250.561474][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 250.582009][ T10] usb 3-1: USB disconnect, device number 68 [ 250.706940][ T8604] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.708420][ T5685] usb 1-1: USB disconnect, device number 67 [ 250.821922][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.073210][ T30] uclogic 0003:256C:006D.001A: failed retrieving Huion firmware version: -71 [ 251.073329][ T30] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 251.091424][ T30] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 251.114492][ T30] usb 5-1: USB disconnect, device number 58 [ 251.567328][ T8638] syz_tun: entered allmulticast mode [ 251.580625][ T8640] x_tables: unsorted entry at hook 2 [ 251.614146][ T30] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 251.768909][ T30] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.770230][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.770283][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.804409][ T30] usb 3-1: config 0 descriptor?? [ 251.822478][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 252.217607][ T30] pwc: recv_control_msg error -32 req 02 val 2b00 [ 252.218305][ T30] pwc: recv_control_msg error -32 req 02 val 2700 [ 252.254750][ T30] pwc: recv_control_msg error -32 req 02 val 2c00 [ 252.255389][ T30] pwc: recv_control_msg error -32 req 04 val 1000 [ 252.255987][ T30] pwc: recv_control_msg error -32 req 04 val 1300 [ 252.260494][ T30] pwc: recv_control_msg error -32 req 04 val 1400 [ 252.261208][ T30] pwc: recv_control_msg error -32 req 02 val 2000 [ 252.262962][ T30] pwc: recv_control_msg error -32 req 02 val 2100 [ 252.266637][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.267118][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.281556][ T8630] syz_tun: left allmulticast mode [ 252.454177][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 252.614821][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 252.616760][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.616783][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.616816][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.624155][ T5685] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 252.655467][ T10] usb 5-1: config 0 descriptor?? [ 252.774169][ T5685] usb 4-1: Using ep0 maxpacket: 16 [ 252.774850][ T5685] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 252.776432][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 252.778269][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.782542][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.782566][ T5685] usb 4-1: Product: syz [ 252.782579][ T5685] usb 4-1: Manufacturer: syz [ 252.782592][ T5685] usb 4-1: SerialNumber: syz [ 252.787785][ T5685] usb 4-1: config 0 descriptor?? [ 252.803662][ T5685] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 252.803694][ T5685] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 252.888362][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 253.079477][ T8658] netlink: 'syz.4.711': attribute type 10 has an invalid length. [ 253.141884][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.711'. [ 253.157564][ T8665] netlink: 84 bytes leftover after parsing attributes in process `syz.1.715'. [ 253.223094][ T8658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.250494][ T8658] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 253.311548][ T5692] usb 5-1: USB disconnect, device number 59 [ 253.412139][ T5685] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 253.412783][ T5685] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 253.425075][ T8670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.425092][ T8670] IPv6: NLM_F_CREATE should be set when creating new route [ 253.494117][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 253.581812][ T30] pwc: recv_control_msg error -71 req 02 val 2500 [ 253.582235][ T30] pwc: recv_control_msg error -71 req 02 val 2400 [ 253.582661][ T30] pwc: recv_control_msg error -71 req 02 val 2600 [ 253.583058][ T30] pwc: recv_control_msg error -71 req 02 val 2900 [ 253.598743][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 253.620508][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 253.620946][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 253.641262][ T30] pwc: Registered as video103. [ 253.646478][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 253.648277][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.652037][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.652065][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.652115][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.652153][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.665692][ T10] usb 1-1: config 0 descriptor?? [ 253.711459][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 253.737994][ T30] usb 3-1: USB disconnect, device number 69 [ 253.804144][ T5692] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 253.829206][ T5685] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 253.829329][ T5685] em28xx 4-1:0.0: No AC97 audio processor [ 253.956747][ T5692] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.958110][ T5692] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 253.958132][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.958148][ T5692] usb 2-1: config 0 has no interface number 0 [ 253.960542][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 253.960572][ T5692] usb 2-1: Product: syz [ 253.960612][ T5692] usb 2-1: Manufacturer: syz [ 253.960625][ T5692] usb 2-1: SerialNumber: syz [ 253.969144][ T5692] usb 2-1: config 0 descriptor?? [ 254.097763][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.098043][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.175789][ T5692] usb 2-1: USB disconnect, device number 48 [ 254.214203][ T30] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 254.284388][ T1180] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 254.364080][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 254.371152][ T30] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 254.372054][ T30] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 254.372069][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.372078][ T30] usb 3-1: config 0 has no interface number 0 [ 254.372092][ T30] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 254.372118][ T30] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 254.372142][ T30] usb 3-1: config 0 interface 255 has no altsetting 0 [ 254.441718][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.441747][ T30] usb 3-1: Product: syz [ 254.441759][ T30] usb 3-1: Manufacturer: syz [ 254.441772][ T30] usb 3-1: SerialNumber: syz [ 254.465598][ T1180] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 254.466430][ T30] usb 3-1: config 0 descriptor?? [ 254.469954][ T1180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 254.470004][ T1180] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 254.470040][ T1180] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 254.674168][ T5685] usb 3-1: USB disconnect, device number 70 [ 254.935261][ T8683] kvm: user requested TSC rate below hardware speed [ 255.095004][ T8686] FAULT_INJECTION: forcing a failure. [ 255.095004][ T8686] name failslab, interval 1, probability 0, space 0, times 8 [ 255.095032][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: syz.1.722 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.095047][ T8686] Tainted: [L]=SOFTLOCKUP [ 255.095050][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.095057][ T8686] Call Trace: [ 255.095061][ T8686] [ 255.095066][ T8686] dump_stack_lvl+0xe8/0x150 [ 255.095086][ T8686] should_fail_ex+0x410/0x560 [ 255.095102][ T8686] should_failslab+0xa8/0x100 [ 255.095117][ T8686] __kmalloc_noprof+0xfe/0x720 [ 255.095128][ T8686] ? iter_file_splice_write+0x1ea/0x1240 [ 255.095142][ T8686] ? iter_file_splice_write+0x1ea/0x1240 [ 255.095165][ T8686] iter_file_splice_write+0x1ea/0x1240 [ 255.095182][ T8686] ? __lock_acquire+0x747/0x2de0 [ 255.095208][ T8686] ? __pfx_iter_file_splice_write+0x10/0x10 [ 255.095225][ T8686] ? lock_acquire+0x115/0x350 [ 255.095243][ T8686] ? __pfx_iter_file_splice_write+0x10/0x10 [ 255.095257][ T8686] direct_splice_actor+0x101/0x160 [ 255.095274][ T8686] splice_direct_to_actor+0x57b/0xcb0 [ 255.095302][ T8686] ? __pfx_direct_splice_actor+0x10/0x10 [ 255.095319][ T8686] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 255.095342][ T8686] do_splice_direct+0x195/0x290 [ 255.095369][ T8686] ? __pfx_do_splice_direct+0x10/0x10 [ 255.095395][ T8686] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 255.095418][ T8686] ? rw_verify_area+0x203/0x4c0 [ 255.095449][ T8686] do_sendfile+0x52e/0x7c0 [ 255.095479][ T8686] ? __pfx_do_sendfile+0x10/0x10 [ 255.095501][ T8686] __se_sys_sendfile64+0xdf/0x1a0 [ 255.095513][ T8686] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 255.095530][ T8686] do_syscall_64+0x166/0x520 [ 255.095543][ T8686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.095554][ T8686] ? clear_bhb_loop+0x70/0xc0 [ 255.095566][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.095576][ T8686] RIP: 0033:0x7f8cf859e159 [ 255.095587][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.095596][ T8686] RSP: 002b:00007f8cf951c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 255.095608][ T8686] RAX: ffffffffffffffda RBX: 00007f8cf8825fa0 RCX: 00007f8cf859e159 [ 255.095615][ T8686] RDX: 0000200000000080 RSI: 0000000000000007 RDI: 0000000000000007 [ 255.095622][ T8686] RBP: 00007f8cf951c090 R08: 0000000000000000 R09: 0000000000000000 [ 255.095628][ T8686] R10: 000000004d9b6eaf R11: 0000000000000246 R12: 0000000000000002 [ 255.095634][ T8686] R13: 00007f8cf8826038 R14: 00007f8cf8825fa0 R15: 00007f8cf894fa48 [ 255.095650][ T8686] [ 255.611808][ T5692] usb 4-1: USB disconnect, device number 59 [ 255.613179][ T5692] em28xx 4-1:0.0: Disconnecting em28xx [ 255.627486][ T5685] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 255.687161][ T5692] em28xx: Freeing device [ 255.774255][ T5685] usb 3-1: Using ep0 maxpacket: 16 [ 255.775007][ T5685] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 255.775918][ T5685] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 255.775940][ T5685] usb 3-1: config 0 has no interface number 0 [ 255.775962][ T5685] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 255.775974][ T5685] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 255.775985][ T5685] usb 3-1: config 0 interface 41 has no altsetting 0 [ 255.778589][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.778603][ T5685] usb 3-1: Product: syz [ 255.778610][ T5685] usb 3-1: Manufacturer: syz [ 255.778618][ T5685] usb 3-1: SerialNumber: syz [ 255.782710][ T5685] usb 3-1: config 0 descriptor?? [ 255.783177][ T8691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.783238][ T8691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.803032][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.803114][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.873994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.962869][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 255.989200][ T8691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.989267][ T8691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.186830][ T8703] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 256.193810][ T5685] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 256.208081][ T5685] usb 3-1: USB disconnect, device number 71 [ 256.354843][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 256.354977][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.373471][ T10] usb 1-1: USB disconnect, device number 68 [ 256.841177][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 256.919951][ T8726] FAULT_INJECTION: forcing a failure. [ 256.919951][ T8726] name failslab, interval 1, probability 0, space 0, times 7 [ 256.919976][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.2.733 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.919993][ T8726] Tainted: [L]=SOFTLOCKUP [ 256.919997][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.920003][ T8726] Call Trace: [ 256.920008][ T8726] [ 256.920013][ T8726] dump_stack_lvl+0xe8/0x150 [ 256.920033][ T8726] should_fail_ex+0x410/0x560 [ 256.920049][ T8726] should_failslab+0xa8/0x100 [ 256.920064][ T8726] __kmalloc_noprof+0xfe/0x720 [ 256.920075][ T8726] ? iter_file_splice_write+0x1ea/0x1240 [ 256.920089][ T8726] ? iter_file_splice_write+0x1ea/0x1240 [ 256.920106][ T8726] iter_file_splice_write+0x1ea/0x1240 [ 256.920120][ T8726] ? __lock_acquire+0x747/0x2de0 [ 256.920142][ T8726] ? __pfx_iter_file_splice_write+0x10/0x10 [ 256.920156][ T8726] ? lock_acquire+0x115/0x350 [ 256.920174][ T8726] ? __pfx_iter_file_splice_write+0x10/0x10 [ 256.920189][ T8726] direct_splice_actor+0x101/0x160 [ 256.920205][ T8726] splice_direct_to_actor+0x57b/0xcb0 [ 256.920229][ T8726] ? __pfx_direct_splice_actor+0x10/0x10 [ 256.920242][ T8726] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 256.920262][ T8726] do_splice_direct+0x195/0x290 [ 256.920277][ T8726] ? __pfx_do_splice_direct+0x10/0x10 [ 256.920291][ T8726] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 256.920304][ T8726] ? rw_verify_area+0x203/0x4c0 [ 256.920321][ T8726] do_sendfile+0x52e/0x7c0 [ 256.920343][ T8726] ? __pfx_do_sendfile+0x10/0x10 [ 256.920361][ T8726] __se_sys_sendfile64+0xdf/0x1a0 [ 256.920374][ T8726] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 256.920391][ T8726] do_syscall_64+0x166/0x520 [ 256.920403][ T8726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.920414][ T8726] ? clear_bhb_loop+0x70/0xc0 [ 256.920426][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.920436][ T8726] RIP: 0033:0x7fd3f799e159 [ 256.920447][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.920456][ T8726] RSP: 002b:00007fd3f88dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 256.920468][ T8726] RAX: ffffffffffffffda RBX: 00007fd3f7c25fa0 RCX: 00007fd3f799e159 [ 256.920476][ T8726] RDX: 0000200000000080 RSI: 0000000000000006 RDI: 0000000000000006 [ 256.920482][ T8726] RBP: 00007fd3f88dc090 R08: 0000000000000000 R09: 0000000000000000 [ 256.920488][ T8726] R10: 000000004d9b6eaf R11: 0000000000000246 R12: 0000000000000002 [ 256.920494][ T8726] R13: 00007fd3f7c26038 R14: 00007fd3f7c25fa0 R15: 00007fd3f7d4fa48 [ 256.920510][ T8726] [ 257.016410][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 257.071868][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.071938][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.071959][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 257.071979][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.072014][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.320690][ T1180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.355824][ T1180] usb 5-1: can't set config #1, error -71 [ 257.371347][ T1180] usb 5-1: USB disconnect, device number 60 [ 257.664398][ T1180] usb 2-1: USB disconnect, device number 49 [ 257.764041][ T25] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 257.887745][ T8736] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 257.924111][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 257.925922][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 257.929504][ T25] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 257.929535][ T25] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41434, setting to 1024 [ 257.972625][ T25] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=8 [ 257.972650][ T25] usb 3-1: Product: syz [ 257.972661][ T25] usb 3-1: Manufacturer: syz [ 257.972673][ T25] usb 3-1: SerialNumber: syz [ 258.003689][ T25] hub 3-1:4.0: USB hub found [ 258.307099][ T25] hub 3-1:4.0: 2 ports detected [ 258.684141][ T5685] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 258.777284][ T25] hub 3-1:4.0: set hub depth failed [ 258.794567][ T25] usb 3-1: USB disconnect, device number 72 [ 258.835231][ T5685] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.837383][ T5685] usb 2-1: config 1 has an invalid interface number: 36 but max is 1 [ 258.837403][ T5685] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 258.837413][ T5685] usb 2-1: config 1 has no interface number 1 [ 258.837439][ T5685] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.837453][ T5685] usb 2-1: config 1 interface 36 has no altsetting 0 [ 258.839799][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.839822][ T5685] usb 2-1: Product: syz [ 258.839835][ T5685] usb 2-1: Manufacturer: syz [ 258.839847][ T5685] usb 2-1: SerialNumber: syz [ 258.873181][ T5685] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 258.873235][ T5685] cdc_ncm 2-1:1.0: bind() failure [ 259.068689][ T8743] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 259.219476][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.227499][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.296043][ T5685] usb 2-1: USB disconnect, device number 50 [ 259.660588][ T8765] FAULT_INJECTION: forcing a failure. [ 259.660588][ T8765] name failslab, interval 1, probability 0, space 0, times 6 [ 259.660621][ T8765] CPU: 1 UID: 0 PID: 8765 Comm: syz.2.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.660646][ T8765] Tainted: [L]=SOFTLOCKUP [ 259.660653][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.660664][ T8765] Call Trace: [ 259.660671][ T8765] [ 259.660679][ T8765] dump_stack_lvl+0xe8/0x150 [ 259.660711][ T8765] should_fail_ex+0x410/0x560 [ 259.660739][ T8765] should_failslab+0xa8/0x100 [ 259.660765][ T8765] __kmalloc_noprof+0xfe/0x720 [ 259.660785][ T8765] ? iter_file_splice_write+0x1ea/0x1240 [ 259.660811][ T8765] ? iter_file_splice_write+0x1ea/0x1240 [ 259.660844][ T8765] iter_file_splice_write+0x1ea/0x1240 [ 259.660870][ T8765] ? __lock_acquire+0x747/0x2de0 [ 259.660913][ T8765] ? __pfx_iter_file_splice_write+0x10/0x10 [ 259.660939][ T8765] ? lock_acquire+0x115/0x350 [ 259.660975][ T8765] ? __pfx_iter_file_splice_write+0x10/0x10 [ 259.661003][ T8765] direct_splice_actor+0x101/0x160 [ 259.661034][ T8765] splice_direct_to_actor+0x57b/0xcb0 [ 259.661080][ T8765] ? __pfx_direct_splice_actor+0x10/0x10 [ 259.661106][ T8765] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 259.661144][ T8765] do_splice_direct+0x195/0x290 [ 259.661179][ T8765] ? __pfx_do_splice_direct+0x10/0x10 [ 259.661207][ T8765] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 259.661232][ T8765] ? rw_verify_area+0x203/0x4c0 [ 259.661262][ T8765] do_sendfile+0x52e/0x7c0 [ 259.661293][ T8765] ? __pfx_do_sendfile+0x10/0x10 [ 259.661327][ T8765] __se_sys_sendfile64+0xdf/0x1a0 [ 259.661351][ T8765] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 259.661383][ T8765] do_syscall_64+0x166/0x520 [ 259.661406][ T8765] ? trace_irq_disable+0x3b/0x140 [ 259.661424][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.661443][ T8765] ? clear_bhb_loop+0x70/0xc0 [ 259.661466][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.661485][ T8765] RIP: 0033:0x7fd3f799e159 [ 259.661502][ T8765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.661517][ T8765] RSP: 002b:00007fd3f88dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 259.661537][ T8765] RAX: ffffffffffffffda RBX: 00007fd3f7c25fa0 RCX: 00007fd3f799e159 [ 259.661550][ T8765] RDX: 0000200000000080 RSI: 0000000000000006 RDI: 0000000000000006 [ 259.661562][ T8765] RBP: 00007fd3f88dc090 R08: 0000000000000000 R09: 0000000000000000 [ 259.661573][ T8765] R10: 000000004d9b6eaf R11: 0000000000000246 R12: 0000000000000002 [ 259.661584][ T8765] R13: 00007fd3f7c26038 R14: 00007fd3f7c25fa0 R15: 00007fd3f7d4fa48 [ 259.661614][ T8765] [ 260.057077][ T8782] FAULT_INJECTION: forcing a failure. [ 260.057077][ T8782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.057110][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.2.748 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.057134][ T8782] Tainted: [L]=SOFTLOCKUP [ 260.057141][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.057152][ T8782] Call Trace: [ 260.057159][ T8782] [ 260.057167][ T8782] dump_stack_lvl+0xe8/0x150 [ 260.057198][ T8782] should_fail_ex+0x410/0x560 [ 260.057222][ T8782] _copy_from_iter+0x3b0/0x1660 [ 260.057249][ T8782] ? rcu_is_watching+0x16/0xb0 [ 260.057270][ T8782] ? __pfx__copy_from_iter+0x10/0x10 [ 260.057288][ T8782] ? trace_kmalloc+0x2a/0xf0 [ 260.057309][ T8782] ? __kmalloc_noprof+0x38c/0x720 [ 260.057325][ T8782] ? __kmalloc_noprof+0x1ab/0x720 [ 260.057341][ T8782] ? bcm_tx_setup+0x557/0x1c00 [ 260.057376][ T8782] bcm_tx_setup+0x693/0x1c00 [ 260.057417][ T8782] bcm_sendmsg+0x50d/0x7a0 [ 260.057446][ T8782] ? __pfx_bcm_sendmsg+0x10/0x10 [ 260.057481][ T8782] ? apparmor_socket_sendmsg+0x98/0x360 [ 260.057503][ T8782] ? __pfx_bcm_sendmsg+0x10/0x10 [ 260.057527][ T8782] sock_sendmsg_nosec+0x13a/0x180 [ 260.057550][ T8782] ____sys_sendmsg+0x54e/0x850 [ 260.057581][ T8782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.057616][ T8782] ? import_iovec+0x73/0xa0 [ 260.057642][ T8782] ___sys_sendmsg+0x2a5/0x360 [ 260.057666][ T8782] ? __lock_acquire+0x747/0x2de0 [ 260.057690][ T8782] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.057751][ T8782] ? __fget_files+0x2a/0x420 [ 260.057778][ T8782] ? __fget_files+0x3a2/0x420 [ 260.057819][ T8782] __x64_sys_sendmsg+0x1b1/0x290 [ 260.057848][ T8782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.057894][ T8782] do_syscall_64+0x166/0x520 [ 260.057916][ T8782] ? trace_irq_disable+0x3b/0x140 [ 260.057935][ T8782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.057954][ T8782] ? clear_bhb_loop+0x70/0xc0 [ 260.057977][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.057996][ T8782] RIP: 0033:0x7fd3f799e159 [ 260.058013][ T8782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.058028][ T8782] RSP: 002b:00007fd3f88dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.058048][ T8782] RAX: ffffffffffffffda RBX: 00007fd3f7c25fa0 RCX: 00007fd3f799e159 [ 260.058062][ T8782] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 260.058074][ T8782] RBP: 00007fd3f88dc090 R08: 0000000000000000 R09: 0000000000000000 [ 260.058085][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.058097][ T8782] R13: 00007fd3f7c26038 R14: 00007fd3f7c25fa0 R15: 00007fd3f7d4fa48 [ 260.058128][ T8782] [ 260.509017][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.509564][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.512494][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.516082][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.537824][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.537925][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538009][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538098][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538197][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538287][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538373][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538456][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538540][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538628][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538722][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538808][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538890][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.538979][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539063][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539151][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539237][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539327][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539412][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539505][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539604][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539701][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539787][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539874][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.539962][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.540060][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.540146][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.540224][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557189][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557315][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557397][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557447][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557510][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557563][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557634][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557696][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557746][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.557795][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.562535][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.566150][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.567275][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.576799][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.580077][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.582337][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.587276][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.606729][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.613502][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.619667][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.621957][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.674146][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.690464][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.715639][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.725933][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.754678][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.755756][ T25] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 260.760082][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.774995][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.789780][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.805614][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.813347][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.819258][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.829363][ T8790] binder: 8789:8790 ioctl 4018620d 0 returned -22 [ 260.961120][ T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 260.962267][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 260.962294][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.962315][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 260.962338][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 261.005519][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.005536][ T25] usb 4-1: Product: syz [ 261.005544][ T25] usb 4-1: Manufacturer: syz [ 261.005551][ T25] usb 4-1: SerialNumber: syz [ 261.049350][ T25] usb 4-1: config 0 descriptor?? [ 261.079329][ T8753] netlink: 'syz.4.740': attribute type 27 has an invalid length. [ 261.118846][ T8795] syzkaller0: entered promiscuous mode [ 261.118869][ T8795] syzkaller0: entered allmulticast mode [ 261.198328][ T8795] tipc: Started in network mode [ 261.198359][ T8795] tipc: Node identity c68962aadfe8, cluster identity 4711 [ 261.198712][ T8795] tipc: Enabled bearer , priority 0 [ 261.216156][ T8795] tipc: Resetting bearer [ 261.229056][ T8794] tipc: Resetting bearer [ 261.257672][ T25] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 261.319913][ T8794] tipc: Disabling bearer [ 261.460441][ T8788] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 261.490970][ T8807] FAULT_INJECTION: forcing a failure. [ 261.490970][ T8807] name failslab, interval 1, probability 0, space 0, times 5 [ 261.491002][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.0.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.491027][ T8807] Tainted: [L]=SOFTLOCKUP [ 261.491033][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.491045][ T8807] Call Trace: [ 261.491052][ T8807] [ 261.491060][ T8807] dump_stack_lvl+0xe8/0x150 [ 261.491089][ T8807] should_fail_ex+0x410/0x560 [ 261.491113][ T8807] should_failslab+0xa8/0x100 [ 261.491137][ T8807] __kmalloc_noprof+0xfe/0x720 [ 261.491156][ T8807] ? iter_file_splice_write+0x1ea/0x1240 [ 261.491182][ T8807] ? iter_file_splice_write+0x1ea/0x1240 [ 261.491214][ T8807] iter_file_splice_write+0x1ea/0x1240 [ 261.491247][ T8807] ? __lock_acquire+0x747/0x2de0 [ 261.491290][ T8807] ? __pfx_iter_file_splice_write+0x10/0x10 [ 261.491315][ T8807] ? lock_acquire+0x115/0x350 [ 261.491351][ T8807] ? __pfx_iter_file_splice_write+0x10/0x10 [ 261.491378][ T8807] direct_splice_actor+0x101/0x160 [ 261.491409][ T8807] splice_direct_to_actor+0x57b/0xcb0 [ 261.491456][ T8807] ? __pfx_direct_splice_actor+0x10/0x10 [ 261.491483][ T8807] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 261.491520][ T8807] do_splice_direct+0x195/0x290 [ 261.491550][ T8807] ? __pfx_do_splice_direct+0x10/0x10 [ 261.491578][ T8807] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 261.491603][ T8807] ? rw_verify_area+0x203/0x4c0 [ 261.491634][ T8807] do_sendfile+0x52e/0x7c0 [ 261.491665][ T8807] ? __pfx_do_sendfile+0x10/0x10 [ 261.491700][ T8807] __se_sys_sendfile64+0xdf/0x1a0 [ 261.491721][ T8807] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 261.491753][ T8807] do_syscall_64+0x166/0x520 [ 261.491774][ T8807] ? trace_irq_disable+0x3b/0x140 [ 261.491791][ T8807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.491810][ T8807] ? clear_bhb_loop+0x70/0xc0 [ 261.491833][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.491852][ T8807] RIP: 0033:0x7efe8c79e159 [ 261.491869][ T8807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.491884][ T8807] RSP: 002b:00007efe8d718028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 261.491905][ T8807] RAX: ffffffffffffffda RBX: 00007efe8ca25fa0 RCX: 00007efe8c79e159 [ 261.491919][ T8807] RDX: 0000200000000080 RSI: 0000000000000006 RDI: 0000000000000006 [ 261.491931][ T8807] RBP: 00007efe8d718090 R08: 0000000000000000 R09: 0000000000000000 [ 261.491942][ T8807] R10: 000000004d9b6eaf R11: 0000000000000246 R12: 0000000000000002 [ 261.491954][ T8807] R13: 00007efe8ca26038 R14: 00007efe8ca25fa0 R15: 00007efe8cb4fa48 [ 261.491985][ T8807] [ 261.712732][ T5685] usb 4-1: USB disconnect, device number 60 [ 261.881259][ T8817] FAULT_INJECTION: forcing a failure. [ 261.881259][ T8817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.881293][ T8817] CPU: 0 UID: 0 PID: 8817 Comm: syz.0.760 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.881317][ T8817] Tainted: [L]=SOFTLOCKUP [ 261.881324][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.881334][ T8817] Call Trace: [ 261.881341][ T8817] [ 261.881349][ T8817] dump_stack_lvl+0xe8/0x150 [ 261.881380][ T8817] should_fail_ex+0x410/0x560 [ 261.881408][ T8817] _copy_from_iter+0x3b0/0x1660 [ 261.881438][ T8817] ? rcu_is_watching+0x16/0xb0 [ 261.881460][ T8817] ? __pfx__copy_from_iter+0x10/0x10 [ 261.881478][ T8817] ? trace_kmalloc+0x2a/0xf0 [ 261.881500][ T8817] ? __kmalloc_noprof+0x38c/0x720 [ 261.881518][ T8817] ? __kmalloc_noprof+0x1ab/0x720 [ 261.881534][ T8817] ? bcm_tx_setup+0x557/0x1c00 [ 261.881569][ T8817] bcm_tx_setup+0x693/0x1c00 [ 261.881610][ T8817] bcm_sendmsg+0x50d/0x7a0 [ 261.881637][ T8817] ? __pfx_bcm_sendmsg+0x10/0x10 [ 261.881681][ T8817] ? apparmor_socket_sendmsg+0x98/0x360 [ 261.881704][ T8817] ? __pfx_bcm_sendmsg+0x10/0x10 [ 261.881728][ T8817] sock_sendmsg_nosec+0x13a/0x180 [ 261.881751][ T8817] ____sys_sendmsg+0x54e/0x850 [ 261.881782][ T8817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.881816][ T8817] ? import_iovec+0x73/0xa0 [ 261.881842][ T8817] ___sys_sendmsg+0x2a5/0x360 [ 261.881866][ T8817] ? __lock_acquire+0x747/0x2de0 [ 261.881889][ T8817] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.881949][ T8817] ? __fget_files+0x2a/0x420 [ 261.881972][ T8817] ? __fget_files+0x3a2/0x420 [ 261.882003][ T8817] __x64_sys_sendmsg+0x1b1/0x290 [ 261.882032][ T8817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.882079][ T8817] do_syscall_64+0x166/0x520 [ 261.882101][ T8817] ? trace_irq_disable+0x3b/0x140 [ 261.882120][ T8817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.882139][ T8817] ? clear_bhb_loop+0x70/0xc0 [ 261.882162][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.882180][ T8817] RIP: 0033:0x7efe8c79e159 [ 261.882197][ T8817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.882212][ T8817] RSP: 002b:00007efe8d718028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.882233][ T8817] RAX: ffffffffffffffda RBX: 00007efe8ca25fa0 RCX: 00007efe8c79e159 [ 261.882246][ T8817] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 261.882256][ T8817] RBP: 00007efe8d718090 R08: 0000000000000000 R09: 0000000000000000 [ 261.882267][ T8817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.882277][ T8817] R13: 00007efe8ca26038 R14: 00007efe8ca25fa0 R15: 00007efe8cb4fa48 [ 261.882308][ T8817] [ 262.414069][ T5713] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 262.565841][ T5713] usb 5-1: New USB device found, idVendor=13d8, idProduct=fe01, bcdDevice=3a.4c [ 262.567500][ T5713] usb 5-1: config 34 has an invalid interface number: 116 but max is 0 [ 262.567526][ T5713] usb 5-1: config 34 has no interface number 0 [ 262.567555][ T5713] usb 5-1: config 34 interface 116 has no altsetting 0 [ 262.573065][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.573091][ T5713] usb 5-1: Product: syz [ 262.573105][ T5713] usb 5-1: Manufacturer: syz [ 262.573119][ T5713] usb 5-1: SerialNumber: syz [ 262.717111][ T8813] binder: 8811:8813 ioctl c0306201 200000000440 returned -22 [ 262.871291][ T5713] usb 5-1: USB disconnect, device number 61 [ 263.364115][ T5713] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 263.494565][ T5713] usb 2-1: device descriptor read/64, error -71 [ 263.550445][ T31] audit: type=1326 audit(1790081873.559:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c79e159 code=0x7ffc0000 [ 263.552184][ T31] audit: type=1326 audit(1790081873.559:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8c79e159 code=0x7ffc0000 [ 263.552231][ T31] audit: type=1326 audit(1790081873.559:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe8c797ed7 code=0x7ffc0000 [ 263.552282][ T31] audit: type=1326 audit(1790081873.559:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8c73f4d9 code=0x7ffc0000 [ 263.552321][ T31] audit: type=1326 audit(1790081873.559:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe8c797ed7 code=0x7ffc0000 [ 263.552357][ T31] audit: type=1326 audit(1790081873.559:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe8c797ed7 code=0x7ffc0000 [ 263.552394][ T31] audit: type=1326 audit(1790081873.559:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8c73f4d9 code=0x7ffc0000 [ 263.552432][ T31] audit: type=1326 audit(1790081873.559:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe8c797ed7 code=0x7ffc0000 [ 263.552470][ T31] audit: type=1326 audit(1790081873.559:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe8c73f4d9 code=0x7ffc0000 [ 263.552508][ T31] audit: type=1326 audit(1790081873.559:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe8c797ed7 code=0x7ffc0000 [ 263.800425][ T5713] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 263.804287][ T5685] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 263.934698][ T5713] usb 2-1: device descriptor read/64, error -71 [ 263.956642][ T5685] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 263.957626][ T5685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.961703][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.961726][ T5685] usb 5-1: Product: syz [ 263.961738][ T5685] usb 5-1: Manufacturer: syz [ 263.961752][ T5685] usb 5-1: SerialNumber: syz [ 264.044355][ T5713] usb usb2-port1: attempt power cycle [ 264.166419][ T8846] ------------[ cut here ]------------ [ 264.166434][ T8846] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 264.166446][ T8846] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#1: syz.3.770/8846 [ 264.192387][ T8846] Modules linked in: [ 264.196403][ T8846] CPU: 1 UID: 0 PID: 8846 Comm: syz.3.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.200049][ T5685] snd-usb-6fire 5-1:1.0: unable to receive device firmware state. [ 264.200080][ T5685] snd-usb-6fire 5-1:1.0: probe with driver snd-usb-6fire failed with error -32 [ 264.224403][ T8846] Tainted: [L]=SOFTLOCKUP [ 264.228867][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.239024][ T8846] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 264.245063][ T8846] Code: c6 05 cb e1 22 0f 01 48 c7 c7 a2 ac 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 264.264913][ T8846] RSP: 0018:ffffc9000931f540 EFLAGS: 00010293 [ 264.271007][ T8846] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: ffff888068ab0000 [ 264.279138][ T8846] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000 [ 264.287218][ T8846] RBP: ffffc9000931f6d8 R08: ffffffff907a517f R09: 1ffffffff20f4a2f [ 264.295245][ T8846] R10: dffffc0000000000 R11: fffffbfff20f4a30 R12: 1ffff92001263ebc [ 264.303226][ T8846] R13: ffff888079a21090 R14: ffff888000000000 R15: ffffffffffffff01 [ 264.311367][ T8846] FS: 00007fc74d83a6c0(0000) GS:ffff888124dcb000(0000) knlGS:0000000000000000 [ 264.320366][ T8846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.327070][ T8846] CR2: 00007fc74d7f8d58 CR3: 0000000068c90000 CR4: 00000000003526f0 [ 264.335146][ T8846] Call Trace: [ 264.338441][ T8846] [ 264.341397][ T8846] ? kvm_gpc_refresh+0x31/0x110 [ 264.346341][ T8846] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 264.351855][ T8846] kvm_gpc_refresh+0xe1/0x110 [ 264.356590][ T8846] kvm_xen_inject_pending_events+0xfb/0x540 [ 264.362566][ T8846] ? lock_acquire+0x115/0x350 [ 264.367292][ T8846] ? __pfx_kvm_xen_inject_pending_events+0x10/0x10 [ 264.373859][ T8846] ? __vmx_complete_interrupts+0xe7/0x640 [ 264.379623][ T8846] vcpu_run+0x6583/0x79b0 [ 264.384028][ T8846] ? vcpu_run+0x28fd/0x79b0 [ 264.388536][ T8846] ? __pfx_vcpu_run+0x10/0x10 [ 264.393189][ T8846] ? lock_acquire+0x115/0x350 [ 264.397904][ T8846] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 264.403459][ T8846] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 264.409214][ T8846] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 264.414090][ T8846] kvm_vcpu_ioctl+0xa61/0xfd0 [ 264.418772][ T8846] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.424594][ T8846] ? hook_file_ioctl+0x1f2/0x600 [ 264.429717][ T8846] ? __fget_files+0x2a/0x420 [ 264.434859][ T8846] ? __fget_files+0x2a/0x420 [ 264.439473][ T8846] ? __fget_files+0x3a2/0x420 [ 264.444319][ T8846] ? __fget_files+0x2a/0x420 [ 264.449040][ T8846] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.454058][ T8846] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.459267][ T8846] __se_sys_ioctl+0xfc/0x170 [ 264.463859][ T8846] do_syscall_64+0x166/0x520 [ 264.468467][ T8846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.474549][ T8846] ? clear_bhb_loop+0x70/0xc0 [ 264.479214][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.485138][ T8846] RIP: 0033:0x7fc74c99e159 [ 264.489556][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.509555][ T8846] RSP: 002b:00007fc74d83a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.518485][ T8846] RAX: ffffffffffffffda RBX: 00007fc74cc26090 RCX: 00007fc74c99e159 [ 264.526637][ T8846] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 264.534682][ T8846] RBP: 00007fc74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 264.542650][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.550687][ T8846] R13: 00007fc74cc26128 R14: 00007fc74cc26090 R15: 00007fc74cd4fa48 [ 264.558727][ T8846] [ 264.561785][ T8846] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.569052][ T8846] CPU: 1 UID: 0 PID: 8846 Comm: syz.3.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.579804][ T8846] Tainted: [L]=SOFTLOCKUP [ 264.584113][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.594242][ T8846] Call Trace: [ 264.597651][ T8846] [ 264.600582][ T8846] vpanic+0x56d/0xa60 [ 264.604668][ T8846] ? __pfx__printk+0x10/0x10 [ 264.609241][ T8846] ? __pfx_vpanic+0x10/0x10 [ 264.613732][ T8846] ? is_bpf_text_address+0x292/0x2b0 [ 264.619051][ T8846] ? is_bpf_text_address+0x26/0x2b0 [ 264.624249][ T8846] panic+0xc5/0xd0 [ 264.627988][ T8846] ? __pfx_panic+0x10/0x10 [ 264.632433][ T8846] __warn+0x315/0x4c0 [ 264.636415][ T8846] ? __kvm_gpc_refresh+0x1510/0x1710 [ 264.641699][ T8846] ? __kvm_gpc_refresh+0x1510/0x1710 [ 264.646973][ T8846] __report_bug+0x276/0x570 [ 264.651584][ T8846] ? check_path+0x21/0x40 [ 264.655920][ T8846] ? __kvm_gpc_refresh+0x1510/0x1710 [ 264.661219][ T8846] ? __pfx___report_bug+0x10/0x10 [ 264.666251][ T8846] ? lockdep_unlock+0x5c/0xd0 [ 264.670942][ T8846] ? __lock_acquire+0x1511/0x2de0 [ 264.675986][ T8846] ? __kvm_gpc_refresh+0x1510/0x1710 [ 264.681285][ T8846] report_bug+0x16b/0x220 [ 264.685629][ T8846] ? __kvm_gpc_refresh+0x1510/0x1710 [ 264.690940][ T8846] ? __kvm_gpc_refresh+0x1512/0x1710 [ 264.696325][ T8846] handle_bug+0x9c/0x200 [ 264.700592][ T8846] exc_invalid_op+0x1a/0x50 [ 264.705116][ T8846] asm_exc_invalid_op+0x1a/0x20 [ 264.709977][ T8846] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 264.715950][ T8846] Code: c6 05 cb e1 22 0f 01 48 c7 c7 a2 ac 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 264.735552][ T8846] RSP: 0018:ffffc9000931f540 EFLAGS: 00010293 [ 264.741608][ T8846] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: ffff888068ab0000 [ 264.749567][ T8846] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000 [ 264.757530][ T8846] RBP: ffffc9000931f6d8 R08: ffffffff907a517f R09: 1ffffffff20f4a2f [ 264.765497][ T8846] R10: dffffc0000000000 R11: fffffbfff20f4a30 R12: 1ffff92001263ebc [ 264.773568][ T8846] R13: ffff888079a21090 R14: ffff888000000000 R15: ffffffffffffff01 [ 264.781588][ T8846] ? __kvm_gpc_refresh+0x150f/0x1710 [ 264.787004][ T8846] ? kvm_gpc_refresh+0x31/0x110 [ 264.791893][ T8846] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 264.798699][ T8846] kvm_gpc_refresh+0xe1/0x110 [ 264.803403][ T8846] kvm_xen_inject_pending_events+0xfb/0x540 [ 264.809310][ T8846] ? lock_acquire+0x115/0x350 [ 264.813999][ T8846] ? __pfx_kvm_xen_inject_pending_events+0x10/0x10 [ 264.820534][ T8846] ? __vmx_complete_interrupts+0xe7/0x640 [ 264.826298][ T8846] vcpu_run+0x6583/0x79b0 [ 264.830655][ T8846] ? vcpu_run+0x28fd/0x79b0 [ 264.835182][ T8846] ? __pfx_vcpu_run+0x10/0x10 [ 264.839860][ T8846] ? lock_acquire+0x115/0x350 [ 264.844556][ T8846] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 264.850133][ T8846] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 264.855946][ T8846] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 264.860821][ T8846] kvm_vcpu_ioctl+0xa61/0xfd0 [ 264.865588][ T8846] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.870814][ T8846] ? hook_file_ioctl+0x1f2/0x600 [ 264.875768][ T8846] ? __fget_files+0x2a/0x420 [ 264.880359][ T8846] ? __fget_files+0x2a/0x420 [ 264.884954][ T8846] ? __fget_files+0x3a2/0x420 [ 264.889627][ T8846] ? __fget_files+0x2a/0x420 [ 264.894562][ T8846] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.899508][ T8846] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.904705][ T8846] __se_sys_ioctl+0xfc/0x170 [ 264.909302][ T8846] do_syscall_64+0x166/0x520 [ 264.913885][ T8846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.919936][ T8846] ? clear_bhb_loop+0x70/0xc0 [ 264.924606][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.930486][ T8846] RIP: 0033:0x7fc74c99e159 [ 264.934908][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.954506][ T8846] RSP: 002b:00007fc74d83a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.962913][ T8846] RAX: ffffffffffffffda RBX: 00007fc74cc26090 RCX: 00007fc74c99e159 [ 264.970891][ T8846] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 264.978865][ T8846] RBP: 00007fc74ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 264.986869][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.994867][ T8846] R13: 00007fc74cc26128 R14: 00007fc74cc26090 R15: 00007fc74cd4fa48 [ 265.002869][ T8846] [ 265.006208][ T8846] Kernel Offset: disabled [ 265.010557][ T8846] Rebooting in 86400 seconds..