last executing test programs: 24m58.022615209s ago: executing program 0 (id=194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8001) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 24m56.442864786s ago: executing program 0 (id=198): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$vim2m(&(0x7f00000005c0), 0xca0, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95af, 0x400, 0x300000}, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 24m56.221727177s ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bind$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="17000000040001000003be8c5e687a8a12003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f", 0xb0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x1000, 0x8}) 24m55.597467739s ago: executing program 0 (id=201): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0xffffffff) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 24m54.796260636s ago: executing program 0 (id=203): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3e505f89, 0x5, 0x200000e4, 0x2, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24m54.397150644s ago: executing program 0 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) 24m39.100592804s ago: executing program 32 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) 23m32.852781879s ago: executing program 1 (id=441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) epoll_pwait2(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) 23m32.667021411s ago: executing program 1 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23m31.911229796s ago: executing program 1 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) setpgid(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 23m28.516285497s ago: executing program 1 (id=457): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='./bus\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') truncate(&(0x7f00000001c0)='./bus\x00', 0x5) 23m28.268117538s ago: executing program 1 (id=461): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 23m27.106183733s ago: executing program 1 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 23m11.274192811s ago: executing program 33 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 22m10.88944395s ago: executing program 6 (id=675): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 22m10.621720683s ago: executing program 6 (id=677): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x1, 0x4, 0xc, 0x100, 0xffffffffffffff00, 0x6}, &(0x7f0000000140)={0x9, 0x7, 0x100000000, 0x10, 0x3, 0x5, 0x5, 0x1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={[0x5c0]}, 0x8}) 22m9.726570078s ago: executing program 6 (id=680): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 22m8.568768435s ago: executing program 6 (id=686): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000200)={0x550, 0x240, 0x2000, 0x400, 0x5, 0x6, 0x18, 0x0, {0x5, 0x7fff}, {0x40f, 0x3, 0x1}, {0x46b, 0x2, 0x1}, {0x1, 0x4}, 0x1, 0x2, 0x6381, 0x7bcd, 0x0, 0xa2, 0x4d7, 0xc530, 0x0, 0x2, 0x694, 0x549c0e08, 0x4, 0x200, 0x1, 0xb}) 22m8.303377646s ago: executing program 6 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x42) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 22m6.527389688s ago: executing program 6 (id=694): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x206e) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e0, 0x3}}, 0x2f) 21m51.163321129s ago: executing program 34 (id=694): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x206e) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e0, 0x3}}, 0x2f) 17m35.453009345s ago: executing program 5 (id=1494): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000000c0)=ANY=[]) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)) 17m34.313550242s ago: executing program 5 (id=1496): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x4bc, 0x340) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 17m33.932712538s ago: executing program 5 (id=1498): r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x42a581, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3107040000800000000038"], 0x60}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8010) 17m29.948371779s ago: executing program 5 (id=1508): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 17m28.882901927s ago: executing program 5 (id=1513): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, 0x0, 0x0) 17m26.859799075s ago: executing program 5 (id=1516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe80000b0000000000000000000000bbff020000000000000000000000000001"], 0x0) 17m26.386018704s ago: executing program 35 (id=1516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe80000b0000000000000000000000bbff020000000000000000000000000001"], 0x0) 15m41.705621721s ago: executing program 2 (id=1885): socket(0x1e, 0xa, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x300}, 0x0) 15m41.54710129s ago: executing program 2 (id=1887): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 15m40.474078484s ago: executing program 2 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstat(0xffffffffffffffff, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4000000) 15m40.120611566s ago: executing program 2 (id=1892): syz_open_dev$sg(&(0x7f0000006d00), 0x0, 0x103001) r0 = io_uring_setup(0xc23, &(0x7f0000000340)={0x0, 0x40000001, 0x40, 0x0, 0x1ed}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x24040094) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m39.377490496s ago: executing program 2 (id=1895): mkdir(&(0x7f0000000200)='./file0\x00', 0x2d2753990b8aea5a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[]) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000800)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000009c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x3, 0x17}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x80000000002d}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 15m37.333085462s ago: executing program 2 (id=1899): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl(r0, 0x2, &(0x7f0000000100)="186e2a71ca9e2652e32c6d8e4d838e5e626105a60b3b4eaedb2f1b201583dd37b289d5dff9fa815568fc0a8e4622677fba306ddf89ce97ebb1d93a8d0ac3a4af608363b837085eaea0a02328c7dc05fa311acac8fe806c8bd5be84c20453aeb02d872e5a137683ea188a1064155c68bbc980e97dd2078633c06571698f44835a2a6e20c5a64b15b7fb014e276ba5c8429c6cf39e1d46ccdb302f73283d6b064e7b4103be7d3a7da0909eaebfa89590ef4deed2") fsopen(&(0x7f0000000100)='ceph\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x567) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000280)) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x9, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 15m21.789509279s ago: executing program 36 (id=1899): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl(r0, 0x2, &(0x7f0000000100)="186e2a71ca9e2652e32c6d8e4d838e5e626105a60b3b4eaedb2f1b201583dd37b289d5dff9fa815568fc0a8e4622677fba306ddf89ce97ebb1d93a8d0ac3a4af608363b837085eaea0a02328c7dc05fa311acac8fe806c8bd5be84c20453aeb02d872e5a137683ea188a1064155c68bbc980e97dd2078633c06571698f44835a2a6e20c5a64b15b7fb014e276ba5c8429c6cf39e1d46ccdb302f73283d6b064e7b4103be7d3a7da0909eaebfa89590ef4deed2") fsopen(&(0x7f0000000100)='ceph\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x567) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000280)) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x9, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 25.388623131s ago: executing program 7 (id=4021): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4a23, @private=0xa010100}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) 20.029280044s ago: executing program 7 (id=4028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = dup(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x400, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x9f, "6700138f4cedc9b18e80e9305ed65522e083c9dfd02ae69396b8525541d5cf80c10c25492d5d75a1fe9a0154dee662a3710d6a376e7002957f745c7e9e5da2eece4bb9379099db894735ec4915917c67ce9fd946226de21c7825f0770f9b5080bfbe04c2560fe70cb10940c7c41882a5ac44c05deb9f9ee1114b7059d8ec1f0f6be314d7d7a9cf98acd367d5557eced09545ec7c03e4e9406fa5e13544eec6"}, &(0x7f0000000380)=0xa7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000009c0)={r8, 0x4}, 0x8) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0xc0) unshare(0x400) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x1, 0x7, 0x7, '\x00', 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10}) 18.302711968s ago: executing program 8 (id=4032): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) iopl(0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cifs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}]}, 0x38}}, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) 16.376709736s ago: executing program 8 (id=4036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 15.275027983s ago: executing program 7 (id=4038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.475759153s ago: executing program 9 (id=4039): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 13.209793495s ago: executing program 9 (id=4041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) 13.199376938s ago: executing program 8 (id=4042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0) sendfile(r2, r2, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mmap(&(0x7f00008bb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x8) fcntl$setlease(r4, 0x400, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r6, 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x88100) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000001c0)={"000100", 0x0, 0x6, 0x4d, 0x40, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000280)={0x24ae, 0x2, 0x50b, 0x5, 0x200}) write$RDMA_USER_CM_CMD_LISTEN(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 12.149223921s ago: executing program 3 (id=4045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) futex(0x0, 0x88, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 11.969207056s ago: executing program 7 (id=4046): fsopen(&(0x7f0000000080)='bpf\x00', 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@remote, @in=@local, 0x4e1e, 0x8000, 0x4e1d, 0x3, 0x2, 0x0, 0x20, 0x1}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x8}, {0x7, 0x4, 0x3, 0x4}, 0x81, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@local, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x3, 0x0, 0x9, 0x4}}, 0xe8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5188, 0x30, 0xb, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ctinfo={0xec, 0xe, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x44, 0x0, 0x9, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfd4a}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3, 0x6, 0x9, 0xfe2}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x800, 0xc, 0x4, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x58, 0x6, "96e0da14842e6155d4ae8b546dcf706d2708c42211bff283daeb00200352dd5b209b261429a5755fe858b1f8a9a1b3670beda175a0fb3bad7f93966cad732e4d67ecade49a165267d3f3bc43c5ce4563f17dbc07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x5084, 0x1, [@m_skbmod={0x14c, 0x16, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xed, 0x1d0, 0xffffffffffffffff, 0x9, 0xffffffff}, 0x2}}]}, {0xd0, 0x6, "b6ea2e8d25ec4a801c1199860fce9b84ee619c986fbf1aa57b8fd5c6746db487672df6bfb14c57b276957422b97ed2090a60414f2f88540a410cccecd5265a950c7f648c77fa90c608a3400c68feeba27934269cd54395aea066e4b8d062feffb91e72f3d255ad91452ffde26415ed300afcd6fb819bb39e009d0b2f3c49f6ac6a8d67585392c17acf716627515c5372ff30d26caf6d5cb05e0980a6f22ceeed9fa0c4b46ffca0eafc53e4f301dfefd0e1132e0f4ceb06fcbca0af43a57d826e974406324ee724f0652c9718"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x184, 0xc, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x10000000, 0x10001, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x2, 0xff2b, 0xf87c}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x100, 0x5, 0x20000000, 0xfffffc00, 0x7}, 0x1}}]}, {0xf3, 0x6, "b0019a0c0208538f3f400d66dd149a7faabb5ead146d8201d430a41b4c4575378fe06b5ba8b484ad5e4211bfe55e0027fba318be85aa216cdf81d9062382a51a2291d3083bd0ef7b663daf7984b14ae5cc1bdfcfc13245690d30a07341d46353b6ed6830d30cea874494f3770671a348d8a4661d8fe8b220e87e408e735a89f1b6d2b57d156f16d9aeff877d24ba9e541963a25219cf695062c28f663eaf2bf3c2d2df05183571d9edda0c9dac28b98f5cb95d548a7c96300fb4401c1e70f7d3c81aaf308e5457b5b62bafc0b875bdb928b4cb21f05569c7412d4f0b49d1c8be3541e31fecb86ae5db14f933f22fbf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x1034, 0x14, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xff4, 0x6, "1fe43660cb9bc68c1f3a608f62b0f535ae15a0d50e9d57cc4bb23b70a0a2196c39201a33015241558d2de443098b7240e8d76a08519319bab7942cdbd4b91ca41fefd219d80c604e17bbaf64563bca132b1e96bb41b79df594f9ad3589977a10136846095318806b659d503642d9f38080d4c74514d334ab71ca0d3ac254bc15e0215f26ded1f598e2457c445bb9c11ced4ef545d7b6052a47a60df2d270f34903678569d3cb30514331677279f5c3f1b7171783a1cafce14c4607653cd8707ff1332b3a00bdd85463d8893dd1d157ba0a1a51b1c8d90c781fb17c153a1322c70ba54895f76707a377382f132049820ea151db5b5e779a40c53f60013fe3b9baeac111d68ae4fc2436b1ef5afe40710293b699074f7b9c61982243b31fa2f1039c8b2a3a55b858b579601fbe7274d3be878666906b9032acb035e168f067cd8300cd366b304c3731783d3e4e48b43bf5ab43717733fa9d3356538c9fdfbd78798cb0cfe0a00ed37cc4562cf29e96c81a84553daa5c0905e99b39a93bbd866ee6f787466b8eed779ac901b3bf5aaad2fca3537ce91895a4ab16f7b4921e09b9499912089399f11aa77d60757642353382af4216b05c959d0f575b67d94b66d0cf8f643fd113fe845a36d7c39e964c8cb09c0fa3220ec9d88884f12ce1f388fc067ac28f0e6bf18ed89a1007e5dc7b4171d3557711532da8eac364f199f8fc5d7c4293819a9727aeee3e0232310bb633d6ab53ca90ded55e6a32b6f27750007d1ac531227533d4381e60319c469874ebd5510ed23dc076dc483ac24ad0d622e96a485ca30d04a2d9318affb0ec9a2e0b3f93a116a9598852d7203244842353955bdae1a33d12fa86bd6eb6e2ee50d5f2268f2c86dd7df8db1e2f00c6cc95b802023a9f883efc9d5f9316807cb2c62fc756be629097fea7a72f2ef6dc8779774ff2ec756d54f678e3bc66c65b0bcee81ce56730ce4a4b36e6afa12a96fe0ebc4547ebf64c6ac8dd0103aca791a9b23fe750a456aa54a447a9f624431186f353616cd2fc3682f40362bacd0036889ab5a4ea556f0867c5701cd67ea702d956d0c544d958be4adc847eec1c2ad76a8ebcee1594591723659408fa3546686f097b36240ad68dca4eb62ac142bcf4c448a7ba873517e3eb4e404d58cfdc46d75aba3cf67b99a4c9a5c71a548169d66b1959318abc23b702859fe29e71eb00efd054e9f501a478a18d55ad8889108c42c59555281174e9f2b8af5b1fdfb26a019142d88fb2b967db96d6ae547e4ebe384068778a88a02ff3ce2f4a10c9f8e96c1a94b3c723f4cdc0e335d9206c6d45253cb46dfa355eeda04e93ac390ff3663bc84661a89537106e591eb3ab05cd1d3594d6d7ca9c28a0a874cec79d3c56e24f2f2025ded8eac138411be173f7d7036c30c65005c04ee54e1798af78b28293549154fe3efc5e03a158e0189937f31e440e89527587ef091be07a93d648840423d05f8c7d79d42b2a21eaee3fd2f9e5ffbc952bd334adf99b93263faeb36f9de84c44ae354ac5264edddd18e868d6c223539b2b104bf2aaf8f74eb2ddb97202cf6776d6731e3ebe4f29338e21a1a31c0ca6032b9548cb355777ecc0df3f7b87dd4342b01b5934e91dc7f1cdbc507cf802767c18299e84f72751731ee817c91e955b29d3bfe62cae3496a860d40f79e5849a25d44668399e2748350cfa52b0f26978d10f47dcd89bff9bd5501bf0f1e2b710bb6df0d51c158e67343de3abcc99b2ee97d8116924679c46d361de1db809a87ff777e4416881c0e0e94a1069d45f7ce480b83d7b2ea2dcc7fb55163f0e8d613cae39666ecaa94ed83f8fb9c4cdf22c0154d13e6bd35ad2f9e17d407dda2db762b7b030d42328cf72cbe01283e37fd8531e02fdcf6a2fed9ff5e10cafe9f7389df12e04a5522debbff9b3968f6ab018f318e004690a3d867c763acf0890dc918c568b6acc356123e3322ec4670a132587dc28356cd696830da1ad039b3340d085fec9e6333d20385d15499c99975352bcb27393c2424e9cef6cc79f52ee3437ee8cb490e39e2e33d47946d2bf1069b5d8841bd5ebe1db2c7df6be960adff3b7fecef921bbc6cb54aef7f430cd5bf373f9e84a1faa3cf7ac641689bb316905da1b662261b2981836cc91e42ad60724233c33be9ad80f2865f5b909b67eaff99b31517bed9c68cff06f74356409a64a56a89d57cf9e7e39026d8cea9587e1038703d81e6d660b7ccfa0c07fba975f295dd88896881a965c69eb533ed8ea8650b09ea323c34cb5b947864e6e948f433d898c9c2f2b63a8f486cbd793ea8aaeafbfa2468d68f472251e010f4c82530cb3adf118d4053ef860820dd17200bd4c0acfbbb3af5ce265722aaa4c4f6173381b8c15343313ab598cfd1575fdb1735bbba7eee8c2bf866c3a45eaa149801155be9caec4ffd2cea1ee5867629ae875db1c0fb8031964a1203852183dd5fd1192bc36f9afe95356a4e392457cb345acc55d69f01111e8a4a264491f82fea08450fe6104ee25088d61cdafde2d65f4a4bb8bbf49107a27d47736719b02b35c677018726c419858c538686ac6c08f2556eb5d5a11158e2cebb30ca136aa6f95622094f11edcea8792cea8c3a3029e9d73a008a9544f6cd8f19c563c523664a8ac4903343156e19ff1ee918042db64aea31da57a37c5039ef60cf7cdc55b9157b87cdbb1137484f93c4f451eff7f50ca5c81c31565a148a82867c7d24deee4f5e43d255dedbdb17fc61252111f8b59ff4a6b70b97e4438d965d8444bf7c90c8d1c2374afc0cfed2bc9c3f3b6bc25705211eee64af2392fcc082fc5d28b962602f38900a4ece138863a37a346f3c641703151634135c2951c9076dc40a88e194cdd00181a1c63a5d42bf33f53b6e621518fb988ededb87e08a6bb95a12825ff24040d71644465e66508afa3b4675998bd3b5a2816406663541e908c1761baf15c80495e57435c353969e36070b7c066a1ff67fbaf57403d9d20aa047454872c75a498c445dc13ea45e71a014bf55cede357a6e53586ac447d08c0df01f5773f6e54ed734d188e94a11c2f0f6459aff01838bb04de8932e1eb04b81ee6df7f39e72a86df9b9efc2a633e84d1b3268bc6ce7c35eec3011180fd34805ad8608e20e94288f4fd55ae709b825a5e10228ab3973bcbe217f54e37e29eeee1f5c608a8c45ec59cd863c63f6ec468b2d2a4fd96e44ffd58bc579b3d1bebac614e934227b4a94cde787668d641761c74f2b6a5408ca898a70702df222b4165382af5ff6733a64d5536b2ed8b4daa9514fc03c20e7500211c2a675ec987854102bcf23d57a94ff89121c629b9b9f80123d29315009d21deb34f695544dadccd2c7ff3b660ebf2fec8ff9e7d49cafeee59e2a2ba7bd03130570e56563abfbc1e8b9c4ea8b854536f1851761e0409b5702ba5c2849d9659b1488463a7bb805529d0450fc9455239ccad22ba74ba73b9ad7cc2e87e1cac88322f34eb0ad41bff95c023e98a3473187f6a1f1ae2b072ecc5019db4c53cc306e7022bc2594c66a87927246bb4e16c13167df68b7a477331e40de17416d2044522db0179ac6f68d58c3affc188f37b21745b4679081a042e3ebe81d9ed42721f19055dbdae423c1abb686cbbc2335cb01d4868d6f00becef351cf54f665278228d984870e1ba937c6f679f922ac501fe01c5090ba0e404be2987f58233ad88fbb23ac6e45c464a2fd542cb61ac61de9d3af8d0b20e2970cd1b21e2651507f0a47aebb6b81d86f086938f8107a1df80dea2949c733cbc436e60d2f3f6e666f3af7b8659b8d972239a42878c60b3e01ee0b8098be199e02463b59a8806756b44ba347c0563f712db1ebd22d14915f4c0444c770c47d550bb3501e1b680d76d8b1afdb5f0cc5e5fb933cbc7f615f33390b179351aba57fa6996b7de81d35ccc1a2818f507296d654c2c50caed60aefefc8b24be79fda40faeeda640608b87576fb010375c57fa064f8489171f10fad684fa14165b0b2d4ac49679cb8af66f596e2893343eb60dd2aadbd12ae3fdf72ab13ebe65fb0fb04f7efb2e420b9d290e14ff57bd1da448bccfb120771b38aae856d4da2bb02fba9dbc66a4c8f871a1390a774541fbafd53a6bd6064616e2cd48ad3efab19ea3446a31859a9093441616dfa2facdfcfa3dc34284711dc4304d90b6ec409d4c8271936b24be151ba2615102fc940772e12573bcf28f348d3e66615d4383331b83adc211c977a0c48bc5e625f19c5bcd6281940cd9c19e2f5f382cc1fb334f2b0fd16815295e71897ab28a8d42f9fe98c175d7509267fded4b19af05e6d53bb07be3e01ff9a812b26b7c5a862fba59a983d1c00f43adca2aebbffb6fef1b30523e086df2148526cbe44cbedc6cfd40d9b45794f33dbd9d373ed8dc6d85a58ac0b8fe81048ee8b29efad0fc70d319bfdfa87e18240b362e039490a430885a9e3726bf4cea0d70a251087a1c0770da37e95f71f6b877ce1084bba4fee927bfad18ecbbc12aa0f2fb957c34466b3ad742227f5dd8e7a0ec3a22bd091715e16703d89ddf42826b0c66a0f7ded58c69260781a9c9bbc241678976c7033fee3df464ba810b9640d813729aa2455705d82f39ec380a9d48a458f9a8656a45c4c88639ce091fc5036dabb59515c52cdb3d818c070582f40357b1ebd23c5ad06a454c85df32a2993a062cef0363b65e6a3963db9ea88dbefedd1b7a5cc85f3d9fd3a7c6a07ed38cf61025644a01594b156da40bfcb19ec1a0bddb7b3bbf18dd6f56a118fa31afc02aab1c3e71940bf204857aacb32d1e4aad5558d5134df8cd87959292bd83b72d05cb4c96b98aeb005540c0b6f5322c0fd173258fb24cdeff171c86364217aa358c31435907f41513267c5cfd6426be659cfbcbd6f98da7e584299fd251d2cedcd316e2f8d84ccc1e176d9e85a82059aff3a2e3289e4adf34aa6694d6363c468622670a5ffb18000eb6347ff0148fbc766c471e2a5568ebf395ff8acddd30a33b22e335eb3ebe7c4ae7bf9583330ccd614a748a70e6e2a67b181cdbce0f7998ed19c16dcc8d338d5dcdfe4dbe6705a55f8cca3bba2d6ac414a1ed6d7e5e4b6a9f87767de00521ae852f3b2e74292213e066b8af54c3822d1a4648bcd01acd19b3ebfe2f65f5ee49a52069543ad96f08ff5391a80a898a4310d9d9c02b28960e3e4456680b4190a77ffd42ee3b158e44c671b395768179865bf0707012f5fe9f1e24569af074fe0abb6b145c60ea9aab9d734acf7a98dfd08399cc061cb662a7c3f485ae6ad0ca8917b99de97e7acfeaf3e80944e58c69f0fca6710bd6ab686d44bd634435301967e7a5859d7e36a833fefef1778e1ba016ea3575e197dcd051e6175f42b4a689ae562e6c41ac4c3b088adb0f1d58a947d6922b4fc36e20134e50cd56da2b67c4b832e43f235d77d8355b2f804be39490727c9ac163073f729be6389f3dd65d73c2caecd12659b768e9b243df6f26457067724eb575fd7e48e7164e126d446a88af0958c8d4c4d69cc21d0b9ce901a250bfb3eb6cee346c7c0943068080ac6e40e8ad4a3db45fd3b6540d1b5fd0c4d3a0ce4652a4088ebae91b3ad79617df78dac59bc8947b6dc493c03fdc00d2d5af8cdc79110d2c57919a5ad5488f89400fa3d2d4091478b94ad5ac55194d5bc2b7c99811ac4b2fa60232fdefbe34a0fe707769463d66280108d7773fb8e2f3f6810f187e032cbbe095e0ddc030424b7e8230b43d66927345bd9b35eee1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x108, 0xa, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf6e}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2a}]}, {0xbb, 0x6, "bb13ab3d55dc839940d6e68226fd82811932b0cdca81f386eada62a6f50ce48565963bdd46ab3d0c65c8c4f832fce2664706c69a9aad67f19a13cb52b4acaeca3fa1505913f1ab81589c525e4895539a87453546f96ea253ab2178f6d259b7ad791dffa7f69b9652d267f58bca8493608ca67a407d510affbde45e52b44d096daf2aa8645f2a73904c0606cb6529d06a4dba63690f00e6e5a3945f94720c5f0aa080d4fcbf7fa537e6af92dd2f9ee836f84c02ccbd5e49"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x4c, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x16, 0x6, "df42e90749900ebc72cbb95b295cfc07a8ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x84, 0xa, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "5247260d071983ac1e68d19ab482d0dd"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_ZONE={0x6, 0x4, 0x5}]}, {0x30, 0x6, "3d20a59a395c29412e5081d104ba3324fc3d919bee331b3db0bfe6d29c682881f4d105db91bfb71e40d516c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x3b68, 0x0, 0x0, 0x0, {{0xa}, {0x3a68, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0xc5d5, 0x2, 0x6, 0x81, 0x7ff}, 0x9, 0x6, [{0x4, 0x7, 0x6, 0x10000, 0xfffffff9}, {0x8, 0xff, 0x4, 0x0, 0x6, 0x8}, {0x2, 0xfffffffb, 0x2, 0x5, 0x9, 0x5d0}, {0x8e6, 0x7, 0x2, 0x4e, 0xf}, {0x4, 0x7, 0x2, 0xfffffffb, 0x1, 0xffffff55}, {0x3f, 0x1, 0x0, 0x10000, 0x9, 0x6}]}, [{0x9, 0x6, 0x0, 0x8, 0x0, 0x114c}, {0x9, 0x7, 0x10000, 0xffffffd3, 0x3, 0x400000}, {0x2, 0x4a, 0x2, 0x4297, 0x8, 0x715c}, {0x1, 0x7, 0x1, 0x4, 0x8, 0x7}, {0x9, 0x3, 0xff800000, 0x4, 0x5731, 0xc2}, {0x5e1, 0xfffffffa, 0x6, 0x6, 0x400, 0x7}, {0x4, 0xffff, 0x100, 0x5, 0x2, 0x6}, {0x9, 0x401, 0x5, 0x7e00, 0x400, 0x9b4}, {0x1, 0x5, 0x2, 0x4f3421aa, 0x4, 0x81}, {0x32, 0x4, 0x70, 0x8, 0x7, 0x2}, {0x8, 0x9, 0xe9a1, 0xc, 0x83, 0x30}, {0x3, 0x4, 0x7, 0x100, 0x20000, 0xfff}, {0x8, 0x2d5, 0x6, 0xcb, 0xe, 0x1}, {0x4, 0x3d1, 0x1ff, 0x3, 0x5, 0x2}, {0x3, 0x0, 0xffff, 0x6, 0x5, 0x8}, {0x0, 0x4, 0x5, 0xfff, 0x4, 0x6}, {0x3, 0x1, 0x1, 0xb173, 0x7, 0x5}, {0x2, 0x4e33fc20, 0xab, 0x3, 0xcc19, 0x9}, {0x3, 0x7, 0x2d5f8667, 0x3, 0x894, 0x2528}, {0x3, 0x7, 0x6, 0x3, 0x1ff, 0x4}, {0x5, 0x0, 0xb, 0x7, 0xdfc, 0x3}, {0xac37, 0x8, 0x9, 0x25acf86b, 0xb, 0xfffffffa}, {0x77, 0x1, 0x1, 0x3, 0xfffffffb, 0x81}, {0x6, 0x80000001, 0xef2, 0x0, 0x3e, 0x3}, {0x1, 0x9, 0x821, 0xfff, 0x7fff, 0x8d}, {0xec1, 0x0, 0xffffffff, 0x1, 0x5, 0x9f16}, {0x80, 0x1, 0x7, 0xa82, 0x4, 0x7fff}, {0xfffffff7, 0xfff, 0x5, 0x9, 0x3, 0x40}, {0x4, 0xa61, 0x1, 0x10, 0xb8cd, 0xfffffdae}, {0x1, 0x400, 0x1000, 0x1, 0x1ff, 0x9}, {0x9, 0x800, 0x9, 0x52a, 0x7, 0x5}, {0x3379, 0x8, 0x5, 0x9, 0x5}, {0x3, 0x0, 0x7bff, 0x0, 0x6, 0x1}, {0x2, 0x2, 0xfffffff4, 0x9, 0xfffffff0, 0x9}, {0xec5a, 0x54d2, 0xc, 0xcf3, 0x8, 0x2}, {0x9, 0x2, 0x4, 0x0, 0x401, 0x151}, {0x8, 0x7fffffff, 0x0, 0x7, 0x8, 0x4}, {0x8, 0x1, 0x0, 0x7, 0x7}, {0x8001, 0x4, 0x9, 0x7, 0x2, 0x4e2}, {0x5, 0x6, 0x40, 0x9, 0x3, 0xfff}, {0x80, 0x2, 0xf, 0x9, 0xfffffffd, 0x5}, {0x7eaebd7f, 0x9, 0xffffffff, 0x200, 0x1000, 0x6}, {0x8, 0xbe7, 0x9, 0xe, 0x9, 0x5f}, {0x6, 0x6, 0xa65, 0x8001, 0x0, 0x2}, {0x3, 0x3, 0x1ff, 0x8, 0x6, 0x3}, {0x8, 0x9, 0x200, 0x4, 0x2, 0xa}, {0x9, 0xf0d, 0x9, 0x8, 0x8000000, 0x6}, {0x3, 0x7fff, 0xcbb7, 0x3, 0x3ff, 0x3}, {0x8, 0xa7bf, 0x401, 0x7d, 0x101, 0x8}, {0xfffffffc, 0x1d, 0x3, 0xc, 0x10000, 0x2}, {0xc6, 0x8, 0x91c4, 0x10000, 0x10001}, {0x1, 0x8, 0x5d, 0x9, 0x9, 0xffffffff}, {0x7e4, 0x2, 0x9, 0x9, 0xfffff800, 0x6}, {0x4, 0x7fffffff, 0x91e, 0x6, 0x3, 0x5}, {0xcb5, 0x0, 0x81, 0x9, 0x80, 0xb}, {0xbd7, 0x9, 0x6, 0x5, 0x2, 0x1}, {0x80, 0x9, 0x9, 0x5, 0x5, 0xd8}, {0x0, 0x80, 0x4, 0x0, 0xa, 0xb}, {0x100, 0x4, 0x1, 0x1, 0xe, 0xfffffff8}, {0xf, 0x6, 0xbf, 0x0, 0x0, 0x8}, {0x9, 0xffffffff, 0xfffffff4, 0xa, 0x3, 0x3ff}, {0x7, 0xe0000000, 0x7, 0x9, 0x7f, 0x1ff}, {0xe, 0x6, 0x5421, 0x2, 0x784, 0x24f}, {0x8, 0x7fffffff, 0x2ab9, 0x2, 0x7fffffff, 0x9}, {0xfff, 0x7, 0x4, 0xfffffff3, 0x7fff, 0x8}, {0xdb, 0x22, 0x4, 0xaf, 0xfffffff9, 0xdd}, {0x2, 0xf, 0x29, 0xf9, 0x80c, 0x6}, {0x7fff, 0xc, 0x9, 0xfff, 0x2, 0x15b6}, {0x6, 0xe, 0x1, 0x9, 0x7b65, 0x40}, {0x1, 0x8, 0x9, 0x6e, 0xd5, 0x5}, {0x81, 0x8, 0x7fffffff, 0x1000, 0xb0f3, 0x9}, {0xffffffff, 0x2, 0x2, 0x0, 0x83f, 0x5}, {0x4, 0x46d, 0x7a57e83b, 0x8, 0x2, 0xfffffffd}, {0x5, 0x9, 0x5, 0x8, 0x2, 0xffffffff}, {0xacff, 0x8, 0x8, 0x4, 0xffe2, 0x10}, {0x3ff, 0x5, 0x8, 0x80, 0x380, 0x5}, {0x6, 0xb, 0x5, 0xa, 0x6, 0x32b}, {0x9, 0x7, 0xffffffff, 0x7fffffff, 0x8, 0x1000}, {0xffffffff, 0x2, 0x0, 0x4, 0xffff, 0x4}, {0x6, 0xde, 0x5, 0x5, 0x2, 0x3}, {0x40, 0x81, 0x81, 0x6, 0xb3ed, 0x5}, {0xf651, 0x8001, 0x40, 0x9, 0x3, 0x7}, {0x1ff, 0x0, 0x9, 0x8, 0x7, 0x8}, {0x7f00, 0x7, 0x9, 0x4, 0x28e8, 0x4}, {0x0, 0x9, 0xa, 0x4, 0x0, 0x101}, {0xfffffeff, 0x1ff, 0x6, 0x1, 0x40, 0x1ff}, {0x800, 0xff, 0xff7, 0xfb2, 0x1, 0x5}, {0x2, 0x0, 0x1, 0xfffffffa, 0x101, 0x7f}, {0x3ff8, 0x366, 0x6, 0x0, 0x981c, 0x3}, {0xfffffffe, 0x5f8d6b2a, 0x9, 0x1b000000, 0xffff, 0x2}, {0x81, 0x2, 0xfff, 0x9f, 0x9, 0x1}, {0x9, 0x0, 0x7, 0x6, 0x4, 0xfffff801}, {0xfffffffb, 0x4, 0x7, 0x0, 0xfffffff5, 0x401}, {0x4, 0x9, 0x5, 0x3, 0x7fff, 0x5}, {0x7, 0xb, 0x30e, 0x2, 0x0, 0x2c}, {0xf, 0x7fff, 0x8, 0x5, 0xc, 0x6}, {0x4, 0x5, 0x7fff, 0x6, 0xff, 0x80}, {0x2, 0xa, 0x7, 0x4, 0xffffffff, 0x2}, {0x7ff, 0x0, 0xffffffff, 0x10001, 0xc, 0x32}, {0x2e9, 0x5, 0x7, 0x8, 0x7f, 0x7}, {0xfffffff7, 0xc54, 0x8001, 0xe, 0xfffffffa, 0x39}, {0x0, 0xd, 0x8000, 0x4, 0x8, 0x1}, {0x10000, 0x7f, 0x7ff, 0x401, 0xfc, 0x8}, {0x7, 0x80000001, 0xffffffff, 0xffff, 0x2, 0x1}, {0x5, 0x9, 0x3, 0x2, 0xffff, 0x9}, {0xfffffffc, 0xd, 0x9, 0x4, 0x39, 0x3}, {0xfff, 0x0, 0x0, 0xa61c, 0x6fd}, {0x9, 0x200, 0x7, 0x1, 0x0, 0x6}, {0x9, 0x12, 0x8, 0x0, 0xdc, 0x6}, {0x9, 0x4, 0xae, 0x40, 0x3, 0xff49}, {0x0, 0x5de, 0xa, 0x7, 0x6, 0x4}, {0x2, 0x1, 0x1, 0x9, 0x101, 0x9}, {0x5, 0x9, 0x3, 0x0, 0x2, 0x4}, {0xf4, 0x3, 0x1c39229b, 0x15, 0x8, 0x7f}, {0x7, 0x7ff, 0x8b, 0xfffffffa, 0x9, 0x2c5}, {0x1, 0x2, 0x5, 0x400, 0x6, 0xc1}, {0x8, 0x10, 0x6, 0x1, 0x84650bb}, {0x3, 0x0, 0x8, 0x403d, 0x3, 0xec}, {0x8, 0xc, 0x4, 0x1c00, 0xffffffa9, 0x1ff}, {0x7, 0x1, 0x7, 0x1, 0x0, 0x1}, {0x4, 0x3ff, 0x9bb1, 0x10001, 0x0, 0x6}, {0x7fffffff, 0x0, 0x8, 0x0, 0x7, 0x6}, {0x41f4, 0xf, 0x8, 0x3, 0x0, 0x101}, {0x7, 0x7, 0x40, 0x7, 0x3, 0x8}, {0x5, 0x5, 0xfffffffe, 0x7f, 0x4, 0x4}, {0x0, 0xffffef99, 0x1000, 0xfffffff8, 0x3, 0x5}, {0xc, 0xf2, 0x4, 0xffffffb9, 0x8072, 0x3}, {0x10000, 0x6, 0x7fffffff, 0x0, 0xfffff14e, 0xfffffffe}], [{0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2}, {0x2, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x2}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {}, {0x5}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x9, 0x10000000, 0x9, 0x401}, 0x5, 0x0, [{0x100, 0x400, 0x4, 0x200, 0x6, 0x3}, {0x5, 0x6, 0x4, 0x5, 0xb, 0xd3bc7180}]}, [{0x9, 0x9, 0x8001, 0x6, 0xffff, 0xfffffffc}, {0x6, 0x1000, 0x1d, 0x40, 0x4, 0x8bf2}, {0x1, 0x2, 0x4, 0x9b, 0x0, 0x9}, {0x29, 0x6, 0x8, 0x5, 0x4, 0x7fb}, {0x4, 0x80, 0x6, 0x1, 0x8, 0x57f}, {0x7, 0x401, 0x7, 0x2, 0x6, 0x9}, {0x883e, 0xe, 0x80000000, 0xd2, 0x8fb, 0x8}, {0x6, 0x2, 0x3ff, 0x4, 0x1, 0x9}, {0xd51, 0x1, 0x0, 0x6, 0x1, 0x6}, {0xf0f, 0x400, 0x4, 0xffff, 0x24, 0x2}, {0xfffffe01, 0x1, 0x4, 0x3, 0x2, 0x9e48}, {0x5, 0x40, 0x6, 0x3, 0x7fffffff, 0x15}, {0xa3d, 0x3, 0x9, 0xe, 0x6, 0x6}, {0x1, 0x80000001, 0x186d800, 0x2, 0x7ff, 0x7}, {0x45, 0x10000, 0x1, 0x4, 0x8, 0x1}, {0x6, 0xa02, 0x6, 0x8001, 0x4, 0xfffffffa}, {0x8, 0x40008, 0x5, 0xf, 0x6, 0x10000}, {0x2, 0x5, 0x5, 0x1000, 0x1ff, 0x3}, {0x24, 0x6, 0x8, 0x9, 0x26b2, 0x3ff}, {0x2, 0x9, 0xeb, 0x3, 0x8, 0x7}, {0x200, 0x3, 0x5, 0x6, 0x7, 0x7fffffff}, {0x401, 0xe, 0x1, 0x7f, 0x8, 0xff}, {0xd5, 0x9, 0x5, 0x36474abe, 0x9, 0x4820}, {0x0, 0xd47, 0x6, 0xfffffffa, 0x4cf4, 0x44}, {0x9, 0x3, 0x3be0, 0x6, 0x8, 0x9}, {0x2, 0x6, 0xa85, 0x65, 0x1, 0x1000}, {0x4, 0x2, 0x5, 0x4, 0x7, 0x9}, {0x6, 0x7, 0x4, 0x8, 0x80000000, 0x5}, {0x8, 0x2, 0x6, 0x7, 0x0, 0x9}, {0x76f6, 0xcb, 0x7fff, 0x7fffffff, 0x4, 0x1ff}, {0x78e, 0x9, 0x4, 0xffffffff, 0x4}, {0x1, 0x1, 0x3, 0x2ce3, 0x30}, {0x6, 0x6, 0x4, 0x3, 0x9, 0x2}, {0x4, 0x6, 0x1f, 0x800000, 0x586d, 0x7f}, {0xf838, 0x8, 0xa814, 0xe5, 0x6, 0x400}, {0x8, 0x200, 0x6, 0x3, 0x5, 0x1a}, {0x1a000, 0x10000, 0x200, 0x10000, 0x0, 0x8}, {0x8, 0xffffffff, 0x100, 0x1ff, 0x5, 0x9}, {0x4, 0x10, 0x18800000, 0x9, 0x4}, {0x3ff, 0x9, 0xa827, 0x35d, 0x7, 0x9}, {0x6, 0xc8a, 0xb, 0x7, 0x1, 0xde6}, {0x2, 0xffffffff, 0x7b914cb4, 0x7, 0x76, 0x3}, {0x7fffffff, 0x4, 0xffffb40b, 0x5, 0xaf5e, 0xffffffc0}, {0x2, 0xec, 0x4, 0xeb, 0x6, 0x1f123fd9}, {0x4000, 0x4f2f, 0x2, 0x2, 0x0, 0x7}, {0x7, 0x2184, 0x7, 0x1, 0x7, 0x9}, {0x5, 0x5a8d, 0x3, 0x6852, 0x7fffffff, 0x401}, {0x4c9c37f8, 0x4, 0x9, 0xa, 0xfff, 0x2}, {0x3, 0xfffffff8, 0x39, 0x7fffffff, 0x4, 0x7fff}, {0x1, 0x8, 0x5, 0xfff, 0xc65, 0x9}, {0x9, 0x5, 0x7, 0x17, 0xd}, {0x80000000, 0x5, 0x3, 0x1, 0x9, 0x8}, {0x9, 0x60f1e129, 0xc, 0x43a9e09e, 0xe, 0x7}, {0x80000001, 0x5, 0x7, 0x6fd, 0x1000, 0x100}, {0x4, 0x1, 0x1, 0x5, 0x8, 0x4}, {0x4, 0x8, 0x1, 0xa626, 0x2, 0x6}, {0xff, 0xfffffff9, 0x3, 0x400, 0x5, 0x400}, {0xce10, 0x3, 0xea, 0x10, 0x2, 0x455}, {0xff, 0x0, 0xfffffffc, 0xe2, 0x1, 0x4}, {0x7, 0x0, 0x4, 0x9, 0x5, 0x3}, {0x6, 0x8, 0xf, 0x6, 0x40, 0xb2}, {0x1, 0x8, 0x1, 0x6, 0x72, 0x4000000}, {0xc2, 0x8, 0x8, 0x6, 0x1, 0x8}, {0x8, 0x7, 0x41f6, 0x2b74, 0x80, 0x4}, {0x3, 0x10000, 0x3, 0x1ff, 0x4, 0x9}, {0x6, 0x3, 0x2, 0xffff, 0x1, 0xf}, {0x8, 0x4, 0xfffffffe, 0x967f, 0x1, 0x1ff}, {0x7, 0x0, 0x5, 0x6, 0xfff, 0x4}, {0x9, 0x1, 0x8, 0x7, 0x10, 0xff}, {0x93, 0x4, 0x9, 0x5, 0x11cff6f1, 0x9}, {0xffff, 0x7, 0x4, 0x4, 0x9, 0xfffffff5}, {0x703eba25, 0x1, 0x5, 0x9, 0x4}, {0x6, 0x5, 0x6, 0x6, 0xf, 0x8}, {0x0, 0x7, 0x1, 0xc0, 0x7, 0x2}, {0x6, 0x0, 0x6, 0xf, 0xa, 0x401}, {0x5, 0xda7, 0x200, 0x7, 0xffff6a1e, 0x5}, {0x3, 0xfffffc01, 0x159, 0xfffffff4, 0x7fff, 0xc}, {0xa, 0xfffffffe, 0x1, 0x8, 0xb87e, 0x9}, {0x1, 0x9, 0x8, 0x10000, 0x9005, 0x3}, {0x3a, 0x8, 0x7ff, 0x81, 0x3, 0x7}, {0x1, 0x4, 0xfff, 0x7, 0x8, 0x2}, {0x0, 0xf, 0x0, 0x9, 0x81, 0x1}, {0x9, 0x8, 0xfffffff9, 0x9, 0x13c2, 0x5}, {0x5, 0x4, 0x1e2, 0x1, 0x10000, 0x9}, {0xfffff800, 0x4, 0x9, 0x10000, 0x3, 0x2}, {0x4, 0x800, 0x2, 0x6, 0xfffffffa, 0x1ff}, {0x6, 0x21, 0x2, 0x3, 0xfffffff7, 0x2}, {0x0, 0xa72d, 0x6, 0x0, 0x9, 0x6}, {0x9e1, 0x0, 0x40, 0x9, 0xc40, 0xa}, {0x400, 0x88, 0x2, 0x4, 0x80000001, 0x8}, {0x7, 0x2, 0x3, 0x40, 0x9, 0xfff}, {0x8, 0x6, 0x9d, 0x5, 0xc, 0x10001}, {0x48499481, 0x200, 0x2, 0x6, 0x0, 0x1}, {0x5, 0x2, 0x8, 0x8, 0xf8d8, 0x6b9}, {0x9, 0x1, 0x4, 0x7fff, 0xfff, 0x5}, {0x0, 0x0, 0xfffffff8, 0x3, 0x52, 0x7}, {0x9, 0x1d, 0x401, 0x8, 0x8, 0x10001}, {0x7, 0xa, 0x0, 0x0, 0x8, 0x401}, {0xf4, 0x4, 0x3, 0x4, 0x535, 0x16}, {0x81, 0x3, 0x0, 0x401, 0x5, 0x9f46}, {0x1000, 0x2d2c4c37, 0x401, 0x9, 0xffff, 0xfffffffd}, {0xfffffff9, 0x9, 0x9, 0x80000000, 0x1, 0x80000000}, {0x7f, 0x2, 0x1b5a0431, 0xa, 0x3175, 0xeb7}, {0x10000, 0x1, 0x4, 0x4, 0x1, 0x8}, {0x7ff, 0x5, 0x6, 0x0, 0x2, 0x4fa}, {0x9, 0x3, 0x2, 0x80, 0x4}, {0xffffff81, 0x5, 0x4, 0x9, 0xfffffffe, 0x53b}, {0x6, 0x5, 0x40, 0x1, 0x3, 0x10001}, {0xf72, 0x3, 0x1, 0x3, 0x3ff, 0x3}, {0x6, 0xfffffffe, 0x9, 0xaa7, 0xc, 0x3ff}, {0x4, 0x18000, 0x800, 0x32953ec2, 0x5, 0x7fff}, {0xb0c, 0xa7, 0x4, 0x0, 0x1, 0x7}, {0x9, 0x2, 0x3, 0xe, 0x400, 0x5}, {0x8, 0x7, 0x6, 0x0, 0x0, 0xe4d2}, {0xa, 0x3, 0x7, 0x0, 0x1, 0x6}, {0x4, 0x200, 0x6, 0x4a4a, 0xfffffe00}, {0x7, 0x7, 0x3, 0x9, 0x5, 0x3}, {0x2, 0x5e9, 0x8, 0x5, 0xfffff629, 0xbd}, {0x5, 0xfffffff1, 0x0, 0x4, 0x5, 0x400}, {0x8, 0x9, 0x81, 0x2, 0x9, 0x6}, {0x4, 0x9, 0x66, 0xf, 0x4, 0xfffffffa}, {0x9, 0x1, 0x1, 0xb6, 0xffff35ae, 0xffffffff}, {0x6, 0x5, 0x7, 0x1, 0x1, 0x9}, {0x5, 0x6, 0x10000, 0x7, 0x1, 0xfffffe92}, {0x80000001, 0x5, 0x3, 0x420c, 0xd, 0x6}, {0x0, 0x9, 0x400, 0x2, 0x5f, 0x8}, {0x1, 0x400, 0x2, 0x7, 0x6, 0x9a}, {0x5, 0x81, 0x8, 0x9, 0x7fffffff, 0x1d9}], [{0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {}, {0x4de842c5619c7b19, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x61153224a2528654}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x83971d2b989f3d07}, {0x3}, {0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0xe1ccbaf28722f850}, {0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0xa, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x7, 0x0, 0x0, 0x5, 0x1}, 0x5, 0xe, [{0x80000000, 0x400, 0xfffff3be, 0x4, 0x9, 0x9}, {0x6, 0x5, 0x5, 0xb18a, 0x2, 0x9}, {0x8000, 0x7ff, 0x4, 0x8, 0xc1a4, 0x4}]}, [{0x2, 0x3, 0x7, 0x8d, 0x98, 0xc}, {0x8000, 0x7fff, 0x9, 0xffffffff, 0xc5, 0xb}, {0x8, 0x5, 0x2, 0x8, 0xb55, 0x4}, {0x6, 0xfffff664, 0x0, 0x2, 0x8, 0xc861}, {0x6, 0xfffffff9, 0x80000001, 0x10000, 0xfffffff8, 0x800}, {0x62, 0x0, 0xfa09, 0x9, 0x5, 0x5}, {0xfffffffa, 0x400, 0x5, 0x200, 0x9, 0x4}, {0x8, 0x3f8, 0x7, 0x6, 0x0, 0x401}, {0x6, 0x8, 0x0, 0x0, 0x5, 0x7ff}, {0x5550, 0x0, 0x7f, 0x4, 0x401, 0x2}, {0x1, 0x3, 0x3, 0xe000, 0x0, 0x2}, {0x10000, 0x7, 0x9, 0x9, 0x513, 0xe}, {0x3, 0x0, 0x0, 0x2, 0x33, 0x10000}, {0x3, 0x3, 0x8, 0x0, 0x7fff, 0xb2}, {0x3, 0x6, 0x2, 0xfedf, 0x8001, 0x4}, {0xa, 0xc5e8, 0xb, 0x8, 0x1, 0x7}, {0x4080, 0x100, 0x4, 0x0, 0x4, 0x80000000}, {0x8000, 0x8, 0x10000, 0x1, 0x5, 0x6}, {0x8, 0xffffc442, 0xfffffffa, 0x2, 0x10000, 0x3}, {0xff, 0x10000, 0x8, 0x8, 0x100, 0x4}, {0x0, 0xd, 0x0, 0x1000, 0x9, 0x3}, {0xfffffffb, 0xfffffffe, 0x81, 0x2, 0x401, 0xd4}, {0x9, 0xc65a, 0x8, 0x8, 0x7, 0x43f}, {0xde, 0x2, 0x9, 0x0, 0x9, 0x9}, {0x5, 0xffffffff, 0x5, 0x7, 0xffffffff, 0xa}, {0x87d, 0x621, 0x100, 0x101, 0x5, 0xffffffff}, {0x2, 0x3, 0xfe, 0x6, 0x623, 0x1}, {0x8, 0x7fffffff, 0xe7, 0xff, 0x7, 0x145c}, {0x100, 0xee7, 0x6, 0xc2b8, 0x6, 0x8}, {0x401, 0x3, 0x0, 0x6, 0x872, 0x1ff}, {0x5, 0x7fff, 0x3, 0x7fff, 0x10000, 0x91a}, {0x5, 0x4, 0xb4f7, 0x7fff, 0x5877, 0x40}, {0x6, 0x5, 0x800, 0x6, 0x3d7f5438, 0x8}, {0x3, 0xfffffff4, 0x8001, 0x10001, 0x3, 0x90}, {0x9, 0x8001, 0x8, 0x5, 0x5, 0x3}, {0x80, 0xa26f, 0x1, 0x3, 0xe2, 0x3}, {0x3, 0x8, 0x0, 0x4, 0x10000, 0xa}, {0x10000, 0x0, 0x6, 0x401, 0xfffffffa, 0x9}, {0x9, 0x81, 0x89a, 0x5, 0x4, 0x7}, {0x7f, 0x7, 0x9, 0x40}, {0x4, 0xfffffffb, 0x4, 0xbe7, 0x3ff, 0x43}, {0x8, 0xfff, 0x6, 0x7fff, 0x1, 0xa}, {0x6, 0x9, 0xb052, 0x7, 0x80000000, 0x3}, {0x10, 0x53ca, 0x1820000, 0x1, 0x6, 0x8}, {0xbe7, 0x9, 0x6, 0x6, 0xa, 0x6}, {0x4, 0x9, 0x400, 0x4, 0x7fff, 0x9b5e}, {0xffff, 0x6, 0x4, 0xfffffff7, 0xc1, 0x3b59}, {0x4, 0x8, 0xfffffff9, 0x6, 0x1, 0x101}, {0x4, 0x100000, 0xc104, 0x7, 0xb, 0xb}, {0x4, 0xffffff81, 0x5, 0x3, 0x6, 0x2d3}, {0x401, 0x7, 0x800, 0x4, 0x8, 0x2}, {0xffffffff, 0x5b9, 0x2, 0x7, 0x3, 0xffff}, {0x6, 0x10000, 0xfffffffd, 0x6e, 0xffffffff, 0xe}, {0x6, 0x5, 0x9, 0x9a28, 0x9, 0x5}, {0xe449, 0x7, 0x5, 0x6, 0x6, 0x5}, {0x3ff, 0x7, 0x4d9, 0x3, 0x9}, {0x10001, 0x7, 0xffffffff, 0x5, 0x401, 0xfffffbff}, {0xffffffff, 0x7c2, 0x200, 0x7, 0x45, 0xfffffb01}, {0x4, 0x6, 0x6e, 0xb5f7, 0x1, 0x3}, {0x7, 0x2, 0x8, 0x5, 0x200, 0x3}, {0x4, 0x5, 0x3}, {0x6, 0x4800, 0x9, 0x1, 0x0, 0x5}, {0x4, 0x1, 0x7fff, 0x1, 0x9b0, 0x8}, {0x2, 0xeda, 0x75d53901, 0x3, 0x9, 0xfff}, {0x4, 0x1, 0x7, 0x381, 0x1, 0x2}, {0x4, 0x0, 0x5, 0x8, 0x7, 0xfffffff9}, {0x0, 0x5f7c8a99, 0x1345, 0x2, 0x0, 0x2}, {0x1, 0x3ff, 0xbc6a, 0x0, 0x4}, {0x5, 0x1000, 0x5, 0x4, 0x0, 0x2}, {0xe000000, 0x7f, 0x81, 0x8, 0x0, 0x2}, {0x8, 0x6, 0x1000, 0x81, 0x5f4b, 0xf}, {0x34b, 0x6, 0xfff, 0x2, 0x2, 0x71beb99e}, {0x7, 0x1, 0x800, 0x23c2, 0x6, 0x3}, {0x3, 0xc, 0x2, 0x6, 0x0, 0xffffffff}, {0x7, 0x7, 0x80, 0x6, 0x1, 0x101}, {0xe, 0x5, 0x9, 0x4, 0x7, 0x4}, {0x2, 0x2, 0x9, 0x7fff, 0x5, 0x2}, {0xe0, 0x8, 0x3, 0x0, 0x2, 0x4}, {0x7, 0x10, 0x9, 0x6, 0x8000000, 0x74}, {0x6, 0x5, 0x80000001, 0xf1, 0x2}, {0xd2, 0x6, 0x3, 0x2, 0xe35, 0x3}, {0xa, 0xfffe0000, 0x8, 0x8, 0x8, 0x7ff}, {0x3a6, 0x2, 0x6, 0x7, 0x1, 0x2}, {0x81, 0xffff, 0x9, 0xb, 0x7, 0xc}, {0xf, 0x1, 0x6, 0x8, 0x5}, {0xa, 0x9, 0x9, 0x2, 0x6, 0xd6c}, {0x4, 0x5d, 0x2, 0xfffffff9, 0x3}, {0x2, 0xa, 0x800000, 0x6, 0x7, 0x4}, {0x0, 0xa74c, 0x7, 0x349, 0x9, 0x1}, {0x5, 0x7fffffff, 0x3, 0x6, 0xfffff001, 0x3}, {0x9, 0x5, 0x0, 0x9, 0x0, 0x5}, {0x9, 0x6, 0x7, 0x7, 0x6, 0x6}, {0x4, 0x4, 0x3, 0x8, 0x1, 0x6}, {0x3, 0x4, 0x1, 0xb, 0xffffffff, 0x9}, {0x7, 0x7, 0xe6, 0x0, 0x0, 0x9}, {0x10, 0xadd4, 0x7, 0x1, 0x200000, 0x7}, {0xffff, 0x90000, 0x0, 0x40, 0x17, 0x9}, {0x8, 0x8, 0x7, 0x401, 0x8001, 0x36}, {0x3, 0x7, 0x0, 0xcc7, 0x0, 0x46e3}, {0x6, 0x5, 0x9, 0x8001, 0x0, 0x1}, {0x80000000, 0xffff, 0x2, 0x9, 0x4, 0x200}, {0x0, 0x1, 0x24b, 0xc8fd, 0xeee2, 0xd5fe}, {0x1, 0x800, 0xfffffff9, 0x9, 0x7, 0x9}, {0xe, 0x3, 0x9d, 0x5, 0x2, 0x31c}, {0x2, 0x6, 0x2, 0xffffff01, 0x2}, {0x1, 0x5, 0x5, 0xd7b, 0x2, 0xff}, {0x8000, 0x7, 0x3, 0xf7b3, 0x7, 0xfffffffe}, {0x608, 0x2, 0x7, 0xa, 0x9, 0x2}, {0x8, 0x0, 0x9, 0x2, 0x5, 0x5}, {0x9000, 0x51, 0x0, 0x9, 0x97c, 0x3}, {0x8, 0xfffffffb, 0x631e, 0x5, 0x2, 0x5}, {0x53cd, 0x7, 0x1, 0x3, 0xfffff04c, 0x2}, {0x80000000, 0x1, 0x2, 0x358e3d02, 0x8, 0x4}, {0x6, 0xfff, 0x3fb, 0x1, 0x1000, 0x9}, {0x6, 0x8, 0x6, 0x8, 0x4, 0x9}, {0x80, 0x6, 0x2, 0x9, 0x80f, 0x5}, {0x9, 0x3, 0x6, 0xffffffff, 0x1000, 0x6}, {0x964c, 0x100000, 0x3, 0x1, 0x0, 0x927}, {0xa, 0x8, 0xfffff801, 0x8001, 0x800, 0x8000000}, {0x80000001, 0x7, 0x10000, 0xd3, 0x34fe, 0x5}, {0x7fffffff, 0x80000001, 0x0, 0x0, 0x9, 0x10}, {0x8, 0x1ff, 0x0, 0x7, 0x6, 0x80}, {0x5, 0x3, 0xe, 0x9, 0x5}, {0x92c, 0xfffffffa, 0x6a29, 0x200, 0x0, 0xa}, {0x7, 0x80, 0xffffee6f, 0x2, 0xfffffffb, 0x5}, {0x0, 0x4, 0x6, 0x80, 0x5, 0xe4}, {0x0, 0x1, 0x3, 0x1, 0x6, 0x8}, {0x4, 0x9, 0x0, 0xde, 0x9, 0x6b}], [{0x3}, {}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x5dae95812f16da97}, {0x2, 0x1}, {0x3}, {0x5}, {0x1}, {0x1}, {0x1}, {}, {0x0, 0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x0, 0x1}, {0xe5f6bc0852784801, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x2}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x6}, {0x2}, {0x5, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x7, 0x7, 0xeae, 0x6}, 0x0, 0x6}, [{0x7f, 0x5, 0x4, 0x0, 0x4, 0x5}, {0xfffff800, 0x0, 0x9, 0x8, 0x4, 0xfffffffb}, {0x1, 0xffff8000, 0xffffffff, 0x66c4, 0x7, 0x1}, {0x4, 0xdf, 0x4, 0xd, 0x2ed, 0x5aab}, {0x3, 0x4, 0xc, 0x1ff, 0xffffffff, 0x8a}, {0xf993, 0x5, 0x5, 0x8, 0x4, 0x6b14}, {0x1ff, 0xffffff7f, 0x3ff, 0xfe6}, {0x8, 0x1, 0xfffff995, 0x0, 0x586, 0x1000}, {0x400, 0x3, 0x9, 0x22, 0x6, 0x9}, {0x9, 0x7, 0xfffffff4, 0x1, 0x2, 0x5}, {0x1, 0x9, 0x0, 0x3, 0x10001, 0xbf}, {0x4, 0x0, 0x8, 0xeb7, 0x401}, {0x4, 0xffff, 0xb, 0x5, 0x9, 0x7}, {0xffffffbc, 0xe, 0x40, 0x0, 0x7, 0x5}, {0x10000, 0xfffffffa, 0x9, 0xb, 0x5, 0x23}, {0x8, 0x9, 0x5, 0xff47, 0x4}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x6}, {0x2, 0x1ff, 0xb, 0x9, 0x30, 0x8001}, {0x0, 0x0, 0xc0eb, 0x9, 0x5, 0x9}, {0x3, 0x5173, 0x94, 0x5, 0x3}, {0x5, 0x10000, 0x8, 0x3, 0x86f, 0x5}, {0x9, 0x9, 0xfffffff9, 0x8, 0x3e59, 0xfffffffc}, {0x80000001, 0x547, 0x4, 0x0, 0x4, 0x6}, {0x20000000, 0x0, 0x6, 0x3, 0x5d34, 0x7fff}, {0x10001, 0x7, 0x10, 0x3, 0x0, 0x10001}, {0x3, 0xffff0000, 0x9, 0x8, 0x1000, 0x6}, {0x2, 0xd, 0x6, 0x6, 0x1, 0x8}, {0x7, 0x9, 0x7, 0x2, 0xffff, 0x4}, {0xe11a, 0x9, 0x9, 0x2, 0x0, 0x3}, {0xfffffffe, 0x7fff, 0x10, 0x8001, 0x101, 0x1}, {0x1000, 0x4, 0x8001, 0x2, 0x5, 0x2}, {0x6, 0x1, 0x0, 0xfffffffe, 0x4, 0x4}, {0x2, 0x2, 0x3, 0x0, 0xc, 0x3}, {0xf1, 0x1, 0x5, 0x1, 0x8, 0x7}, {0x9, 0x7fffffff, 0x6, 0xba, 0x1ff, 0x8}, {0x0, 0xa6c, 0x1, 0x101, 0x0, 0x5}, {0x0, 0xcb, 0xa2, 0x7, 0x8, 0xfffffff7}, {0xef2, 0x4e27, 0x6, 0x5, 0x9, 0x8}, {0x3, 0x5, 0xffff, 0x0, 0x7fff, 0x6}, {0x9, 0x76e, 0x14a, 0x7, 0x4, 0x9b}, {0x0, 0x29f, 0x1000, 0x200, 0x8, 0x1}, {0x3, 0x0, 0x2, 0x0, 0x140, 0xfffffffe}, {0xffffffff, 0x2, 0x0, 0xa, 0x3, 0x6}, {0xd584, 0x1, 0x9, 0x0, 0x1e84, 0x1}, {0x7, 0x1, 0x1, 0x0, 0xfffffff7}, {0x18, 0x3, 0x3, 0x3, 0x7fffffff, 0x2}, {0x3, 0x4, 0x7, 0x1, 0xffff, 0xfffffffb}, {0x7, 0x9, 0x773d15b7, 0x0, 0xfffffe01, 0xd3}, {0x8001, 0x101, 0x2, 0x7, 0xd, 0x7fff}, {0x1, 0x8, 0x0, 0x4747c421, 0x5, 0x40}, {0x2, 0xff, 0x8, 0x6, 0x4, 0x400}, {0x401, 0x9, 0x0, 0x8001, 0x45, 0x80000001}, {0x643, 0x0, 0x8, 0xffffffff, 0x400, 0x4}, {0x7, 0x8, 0x1, 0x4, 0x80000000, 0x8001}, {0x80000000, 0x71d, 0xd, 0x900000, 0x8, 0x79}, {0x100, 0xf82e, 0x5, 0x1ff, 0xc000000, 0x1}, {0x8, 0x101, 0xb61, 0x3ff, 0x8, 0x3}, {0xc, 0x2, 0x0, 0x7, 0x0, 0xff}, {0xa7dc, 0x5fe, 0xe65c, 0xff, 0x7d00, 0xf991}, {0x1, 0x0, 0xffff2d96, 0x7, 0x1884, 0xe36ebd3d}, {0x8, 0x7, 0x101, 0x100, 0x2ca5, 0xbd5}, {0x2, 0x6, 0x4, 0x1ff, 0xfffffff2, 0x8}, {0x4, 0x731, 0xf4c, 0x5, 0x4, 0x4}, {0x0, 0x9, 0xc, 0x9, 0xecc, 0x9}, {0x8, 0x9, 0x7fff, 0x0, 0xffff}, {0x9, 0x101, 0x9, 0x5, 0xc, 0x9}, {0x9, 0x6, 0xa569, 0xab2, 0x3, 0xe}, {0xc, 0x0, 0x1ff, 0x9, 0x2000, 0x8}, {0x7, 0x1, 0x5, 0x8000, 0x0, 0x10000}, {0x9, 0x80000001, 0x8000, 0x1, 0x3, 0x23b2}, {0x7d17, 0x401, 0x3, 0x4, 0x35, 0x6}, {0x7fff, 0x1, 0x4, 0x0, 0x0, 0x6}, {0x10001, 0x100, 0x4, 0x8, 0x5, 0x1ff}, {0x1, 0x2, 0xd6, 0x3, 0x7, 0xff2b}, {0x6, 0xb36f, 0x5, 0x63, 0xb, 0x3}, {0x80000000, 0x1, 0x80000, 0x8080, 0x1, 0x7}, {0x80000001, 0xfffffff9, 0x3, 0x9, 0xfffffff7, 0x1}, {0x4, 0xfffffef9, 0x1, 0xf0000000, 0x3, 0xd6}, {0x8, 0x7f, 0xb6, 0x2, 0x13269250, 0x6}, {0x80ff, 0xa, 0x0, 0x9, 0x7fff}, {0x20d51773, 0x3, 0xfffff801, 0x7, 0x7, 0x52603705}, {0x6, 0x5, 0x4, 0x4, 0x4, 0x7}, {0xf1, 0x7, 0x0, 0x200, 0x8001, 0x2}, {0x6, 0xfffffffd, 0x2, 0x8, 0x458f, 0x6}, {0x7fffffff, 0x5, 0x4, 0x4ab, 0x2, 0x80}, {0x44, 0x6, 0x7, 0x80000000, 0x0, 0x8}, {0x9, 0x4, 0x1ff, 0x3, 0x1, 0x4}, {0x8, 0x0, 0x400, 0xc0, 0x7f, 0xffffffff}, {0x4, 0x7f, 0x800, 0x9c9c, 0x5, 0x4cb0}, {0x5, 0x0, 0xe, 0x4128, 0x4404, 0x4}, {0x1, 0x5, 0xfffffff5, 0x0, 0x10}, {0x35, 0x3, 0x5, 0x0, 0x9, 0x9}, {0x4, 0x55574578, 0xfcde, 0x1, 0x0, 0x10001}, {0xc00, 0x7, 0x5, 0x8, 0x9, 0xffffffff}, {0x4, 0x1, 0xe, 0x1, 0xfffffffa, 0x1c}, {0x3, 0x5, 0x2, 0x8, 0x1, 0x10}, {0x8, 0x9, 0xffff0001, 0x4, 0x8, 0x5fa}, {0xe3d, 0x2, 0x3, 0xfffffff7, 0x1, 0x6}, {0xb, 0x1000, 0x5, 0x0, 0x9, 0xfffffff8}, {0x3, 0x4, 0x1000, 0x6, 0x3, 0x8}, {0x5, 0x101, 0x8c, 0x9, 0x8001, 0x5}, {0x1, 0x3, 0xffff0000, 0xc, 0x10000, 0x10}, {0x1, 0x7, 0x8000, 0x4, 0xffff7fff}, {0xfffffff8, 0xffffff9a, 0x4063, 0x10001, 0x9, 0x5}, {0xc, 0x9, 0x8, 0x401, 0x1, 0x1}, {0x3b25, 0x9, 0x0, 0x3, 0x14e, 0xf}, {0x200, 0x8, 0x8001, 0x10000, 0x1, 0x6}, {0xfd2, 0x6, 0x7, 0x5, 0x1, 0xd1a}, {0x9, 0x2, 0x6, 0x7, 0x9, 0x5}, {0x6, 0x1, 0x1275, 0x5, 0x401, 0x10}, {0x200, 0x6, 0x1, 0x5, 0x4, 0x9}, {0x9, 0xfffffe01, 0x41fa, 0x80000001, 0x7f, 0x8}, {0xffffff35, 0x2291, 0x4, 0x6, 0x8, 0x7}, {0x0, 0x6, 0x5, 0x10001, 0x6, 0x9}, {0x7, 0x2, 0x0, 0x5, 0x2, 0xfffffff0}, {0x2, 0xfff, 0x0, 0xdc7, 0xf, 0x3ff}, {0xe, 0x3, 0x10001, 0x4, 0x7, 0x80}, {0x7, 0x4, 0x2f8, 0x1, 0x4, 0xed}, {0x2, 0xffffffff, 0x0, 0x80000001, 0x5, 0x7}, {0xb8, 0x6, 0x9, 0x6, 0x7, 0x5}, {0x1, 0x5, 0x800, 0x1, 0xa0000, 0x34c}, {0x875, 0x1, 0x0, 0x100, 0x0, 0x7fff}, {0x7fff, 0x1, 0xe, 0x7, 0x6, 0x3ff}, {0x1, 0x80000001, 0x2, 0x4, 0x4, 0x6}, {0x1, 0x0, 0xbb8, 0x3, 0xa, 0x400}, {0x9, 0x8, 0x18000, 0x4, 0xffff, 0x8}, {0x5, 0x7, 0xb33, 0x7, 0x1, 0x9}, {0x9, 0x0, 0x1, 0x9, 0x7fff, 0x6}], [{}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x6, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x7}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0xf8a8022085bf1571}, {0x3}, {0x0, 0x1}, {0x4}, {0x2}, {0x2}, {}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x2}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}]}}]}, {0xd7, 0x6, "4507c4a51754d34894619a12c22ef60c535c3e4ba6ef6f54120cbe63277ba48a87076a4278b1a36b6880e605063e6ccb17b044e30c0511cb27644290f2d29dbb3e379da0bfc73b5065f872d3325bde84b4e4752e6e9f2d048a69134209a4204ae6b289f24c5c617ceb14efbad110f902a04a578c4c224f6f66e48e0b92701309370cacc058ad8ceab723281ccfda03d30aa080dae3cca2b193d4aaa8ccb9fde6e4761b2c1410b7ff84a33855a09dc6c34da65cb5f1d279c20d42400ea849d0c4ff32b0eec89a6ccbc1aa7308a1b9afdcae1ea2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x3c, 0x12, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x9, 0x6, "6aa83bf798"}, {0xc, 0x7, {0x1, 0xec0f70aae1555666}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x5188}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0), 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x16, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xfffffe01, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000100)=0x300, 0x100000000010001) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c003f000000000000000020040000807f001100ff010000000000f2eb04450000000001"], 0x28}], 0x1}, 0x0) 10.526274996s ago: executing program 3 (id=4048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = eventfd2(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 10.331112218s ago: executing program 9 (id=4049): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0) pipe(0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 10.212589115s ago: executing program 8 (id=4050): r0 = syz_usb_connect(0x3, 0x44, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x10, 0xff}}]}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000005e80), 0x406, 0x1) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000005ec0)={0x1, 0xfe, 0x64, 0xb, "a2196bf0ae9048ced3900813726203ea0333b065c6b388e3cdf73cb18bbd1b04"}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xd, 0xd4, {0xd4, 0x11, "2b5a260a0c622260943014e2fc7b863b3c4bc55b2fcd59cfa9f6ea64cef5f9d4b1e213badc2755a2d23f3eb789d691070a1dab7df69538841e5c8bde19bf8975bdea612fc0f24cdddeecc43b3561d9a924d26541cf17061b2e6e0315fa8ee1c86e8972e3fbb226ba19b87bd6e817e0eb5d10b863be8b1058c7ef9adc9e61d7636d1c164d18b7d79b3e2bd0337f230751cd72d8c2a83ac0d0cb94b8c715a9154fe56df80c6dad46ac927556db1e198e8cdfa04aa5566e316574112b40ea3bb473a1d3df47b36c02d69af375a3f89545417e0e"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x684eb7e219844d1e, 0x6a, "1e97b169993e4197dddc5ffe01daadb3cdb5c3bc796e468e4f77ec019fc5b69c071c279312f1778d2bf38a167943eb48d085657e557c51602ea5eb52fc4723677e4ab5731c1077b929d3b98a2261d28691a2d19094b4867ba606f122880ac91d222178494bf3ae701369"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7e}}) 9.972689839s ago: executing program 4 (id=4051): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x1900, 0x0, 0x0, 0x0, 0x1, 0x4000}) dup(0xffffffffffffffff) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) r1 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='ramfs\x00', &(0x7f00000001c0)='\\\xb2)^\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x3, 0x4, 0x1000008) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x34) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000756c6c2500000000002d20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f9ffffff85000000cc00000095"], &(0x7f0000000000)='GPL\x00', 0x53, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) 9.472308154s ago: executing program 9 (id=4052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 8.626108519s ago: executing program 9 (id=4053): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x1ff, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0xc8000) sendmmsg(r2, 0x0, 0x0, 0x40080) syz_open_dev$evdev(0x0, 0x200, 0x101000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x3c}}, 0x0) 7.497520971s ago: executing program 7 (id=4054): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) pipe(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000005}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 7.132606143s ago: executing program 9 (id=4055): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) alarm(0x1) alarm(0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0xa}, {}, {0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 7.003620998s ago: executing program 8 (id=4056): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x60, 0x13, 0x3, "4f7e9b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 6.983977393s ago: executing program 4 (id=4057): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{}, {0x2, 0x4}}}}, 0x8) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5.773682225s ago: executing program 4 (id=4058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) futex(0x0, 0x88, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 5.519264754s ago: executing program 3 (id=4059): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4], 0x84}}, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.919747945s ago: executing program 3 (id=4060): lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x3c}}, 0x0) 3.675336038s ago: executing program 8 (id=4061): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.510521528s ago: executing program 4 (id=4062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070088000000060004004e2100000800"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.940372755s ago: executing program 4 (id=4063): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x51f, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffef0}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x6c) linkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x400) 1.62466139s ago: executing program 3 (id=4064): sched_setscheduler(0x0, 0x1, 0x0) mount(0x0, 0x0, &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x15d) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 1.583398097s ago: executing program 4 (id=4065): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.190238215s ago: executing program 3 (id=4066): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000005}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=4067): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7]}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x89, 0x0, &(0x7f00000000c0)={0x1, 0x2, [0x1ef, 0x8f5, 0xabe, 0x465]}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, 0x0, &(0x7f0000000300)='\xc4\x10\xfa\xae\xf0V\r\xf6\xca\xd3\xe3\x85\x1fd\xf8\x02jw=\x1b\xa0\xce\xc0\xf3\xb7@\r\xa5m\xeb\x8bo\x03\x15\xc5\x17\xb6\x9c\xa6\xb2\xc9\xb2\xb8\xeb\x1d\xb6R~_\xfa\xc0; cs}uI\xa7\x98vxMp\xee~\xc1', 0x43, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.7.2889'. [ 1035.593464][T15870] autofs: Unknown parameter 'TIPCv2' [ 1036.172318][ T25] usb 10-1: USB disconnect, device number 23 [ 1036.426041][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2894'. [ 1037.320209][T15896] CIFS mount error: No usable UNC path provided in device string! [ 1037.320209][T15896] [ 1037.330475][T15896] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1037.340816][T15896] overlayfs: overlapping lowerdir path [ 1039.212919][T15908] autofs: Unknown parameter 'TIPCv2' [ 1040.676672][ T9] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1040.838341][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1040.869740][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1040.899531][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.953811][ T9] usb 9-1: config 0 descriptor?? [ 1040.983736][ T9] appletouch 9-1:0.0: Could not find int-in endpoint [ 1041.002218][ T9] appletouch 9-1:0.0: probe with driver appletouch failed with error -5 [ 1041.042086][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1042.516307][T15938] CIFS mount error: No usable UNC path provided in device string! [ 1042.516307][T15938] [ 1042.526549][T15938] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1042.538908][T15938] overlayfs: overlapping lowerdir path [ 1043.484033][ T58] usb 9-1: USB disconnect, device number 36 [ 1043.984273][ T29] audit: type=1326 audit(1737574248.012:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15951 comm="syz.3.2920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c92385d29 code=0x0 [ 1044.629108][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'. [ 1046.906465][T15997] CIFS mount error: No usable UNC path provided in device string! [ 1046.906465][T15997] [ 1046.917332][T15997] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1046.930190][T15997] overlayfs: overlapping lowerdir path [ 1046.950177][ T5875] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1047.829819][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1047.853155][ T5875] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1048.025097][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.036981][ T5875] usb 5-1: config 0 descriptor?? [ 1048.047446][ T5875] appletouch 5-1:0.0: Could not find int-in endpoint [ 1048.056463][ T5875] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1048.084789][ T5875] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1048.141105][T16018] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2938'. [ 1048.921824][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 1049.462347][ T5135] Bluetooth: hci4: command 0x0405 tx timeout [ 1049.971605][ T57] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1050.231795][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 1050.305039][ T57] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1050.375238][ T57] usb 4-1: config 0 has no interface number 0 [ 1050.427817][ T57] usb 4-1: config 0 interface 115 has no altsetting 0 [ 1050.504234][ T57] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=fb.74 [ 1050.540443][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.549170][T12970] usb 5-1: USB disconnect, device number 74 [ 1050.558886][ T57] usb 4-1: Product: syz [ 1050.591511][ T57] usb 4-1: Manufacturer: syz [ 1050.616453][ T57] usb 4-1: SerialNumber: syz [ 1050.637341][ T57] usb 4-1: config 0 descriptor?? [ 1050.935438][ T57] usb 4-1: USB disconnect, device number 47 [ 1051.151584][T12970] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1051.342819][T12970] usb 8-1: Using ep0 maxpacket: 8 [ 1051.370447][ T29] audit: type=1326 audit(1737574255.392:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16038 comm="syz.4.2946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3614b85d29 code=0x0 [ 1051.401916][T12970] usb 8-1: config 0 has no interfaces? [ 1051.419457][T12970] usb 8-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1051.439189][T12970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.494110][T12970] usb 8-1: Product: syz [ 1051.516900][T12970] usb 8-1: Manufacturer: syz [ 1051.548970][T12970] usb 8-1: SerialNumber: syz [ 1051.687686][T12970] usb 8-1: config 0 descriptor?? [ 1051.701604][T11415] Bluetooth: hci4: command 0x0405 tx timeout [ 1052.979064][T16062] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2950'. [ 1053.598727][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2952'. [ 1053.979991][T16067] CIFS mount error: No usable UNC path provided in device string! [ 1053.979991][T16067] [ 1053.990159][T16067] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1054.000694][T16067] overlayfs: overlapping lowerdir path [ 1054.302071][ T9] usb 8-1: USB disconnect, device number 30 [ 1054.819909][ T9] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1054.832463][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.838894][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.181524][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1055.241406][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1055.281015][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.314063][ T9] usb 9-1: config 0 descriptor?? [ 1055.335289][ T9] appletouch 9-1:0.0: Could not find int-in endpoint [ 1055.351787][ T9] appletouch 9-1:0.0: probe with driver appletouch failed with error -5 [ 1055.360927][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1056.536935][T16099] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1056.946928][ T29] audit: type=1326 audit(1737574260.932:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16093 comm="syz.9.2962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde32b85d29 code=0x0 [ 1057.942574][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1057.982151][ T5875] usb 9-1: USB disconnect, device number 37 [ 1058.131703][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1058.422208][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2968'. [ 1058.444996][ T9] usb 8-1: config 0 has no interfaces? [ 1058.974033][ T9] usb 8-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1059.013597][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.055650][ T9] usb 8-1: Product: syz [ 1059.071699][ T9] usb 8-1: Manufacturer: syz [ 1059.076354][ T9] usb 8-1: SerialNumber: syz [ 1059.120335][ T9] usb 8-1: config 0 descriptor?? [ 1059.966081][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2974'. [ 1060.081589][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2974'. [ 1060.169862][T15494] usb 8-1: USB disconnect, device number 31 [ 1061.085892][ T29] audit: type=1326 audit(1737574265.102:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16140 comm="syz.7.2977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0833385d29 code=0x0 [ 1062.142010][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1062.205633][T11415] Bluetooth: hci0: command 0x0406 tx timeout [ 1062.361437][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1062.382619][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1062.392185][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.498124][ T9] usb 10-1: config 0 descriptor?? [ 1062.696798][ T9] appletouch 10-1:0.0: Could not find int-in endpoint [ 1062.711631][ T9] appletouch 10-1:0.0: probe with driver appletouch failed with error -5 [ 1062.720892][ T9] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1063.585669][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1063.657571][T16176] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1063.892250][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1064.053698][ T9] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.087338][ T9] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.115650][ T9] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1064.833676][ T9] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1064.842259][ T9] usb 5-1: Manufacturer: syz [ 1064.846931][ T9] usb 5-1: SerialNumber: syz [ 1064.911768][T15494] usb 10-1: USB disconnect, device number 24 [ 1065.171798][T16173] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2987'. [ 1065.294071][T16173] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2987'. [ 1066.155709][ T9] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1066.177316][ T9] usb 5-1: USB disconnect, device number 75 [ 1067.794086][ T29] audit: type=1326 audit(1737574271.822:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16201 comm="syz.9.2996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde32b85d29 code=0x0 [ 1067.991166][ T29] audit: type=1326 audit(1737574272.012:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16195 comm="syz.7.2994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0833385d29 code=0x0 [ 1071.051599][T12970] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1071.183030][ T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1071.295307][ T5833] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1071.300245][T12970] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1071.377222][T12970] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1071.475801][T12970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.475974][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.604750][T12970] usb 4-1: config 0 descriptor?? [ 1071.612515][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1071.644040][T12970] appletouch 4-1:0.0: Could not find int-in endpoint [ 1071.661225][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.669809][ T9] usb 9-1: Product: syz [ 1071.674972][T12970] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 1071.689384][ T5833] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.699722][T12970] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1071.732035][ T9] usb 9-1: Manufacturer: syz [ 1071.736696][ T9] usb 9-1: SerialNumber: syz [ 1071.758221][ T5833] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1071.786666][ T5833] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1071.798113][ T5833] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1071.807817][ T5833] usb 5-1: Manufacturer: syz [ 1071.812969][ T5833] usb 5-1: SerialNumber: syz [ 1071.891554][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3010'. [ 1072.073335][T16250] wireguard0: entered promiscuous mode [ 1072.079102][T16250] wireguard0: entered allmulticast mode [ 1072.411539][T16239] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1072.415956][T16237] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1072.480806][ T5833] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1072.525357][ T5833] usb 5-1: USB disconnect, device number 76 [ 1073.241071][ T9] cdc_ncm 9-1:1.0: failed to get mac address [ 1073.249875][ T9] cdc_ncm 9-1:1.0: bind() failure [ 1073.291742][ T9] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1073.338135][ T9] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1073.362341][ T9] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1073.398336][ T9] usb 9-1: USB disconnect, device number 38 [ 1073.668104][T16272] program syz.9.3015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.677655][T16272] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1073.836015][ T9] usb 4-1: USB disconnect, device number 48 [ 1074.140438][ T29] audit: type=1800 audit(1737574278.162:1203): pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3017" name="bus" dev="overlay" ino=1566 res=0 errno=0 [ 1075.250001][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1075.394776][T16295] Cannot find add_set index 0 as target [ 1075.876636][ T29] audit: type=1326 audit(1737574279.902:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16288 comm="syz.4.3020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3614b85d29 code=0x0 [ 1076.929127][T16309] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1077.401526][ T975] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1077.471944][ T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1077.481774][T15090] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1077.581637][ T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.655587][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1077.725902][T15090] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1077.742497][ T9] usb 8-1: config 0 has no interfaces? [ 1077.759056][ T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.775747][ T9] usb 8-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1077.790087][T15090] usb 9-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1077.843499][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.857529][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.874490][ T975] usb 4-1: Product: syz [ 1077.880657][T15090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.893238][ T9] usb 8-1: Product: syz [ 1077.953710][ T975] usb 4-1: Manufacturer: syz [ 1077.968135][ T9] usb 8-1: Manufacturer: syz [ 1077.975396][ T975] usb 4-1: SerialNumber: syz [ 1077.985574][T15090] usb 9-1: config 0 descriptor?? [ 1078.002768][ T9] usb 8-1: SerialNumber: syz [ 1078.056495][T15090] appletouch 9-1:0.0: Could not find int-in endpoint [ 1078.072652][T15090] appletouch 9-1:0.0: probe with driver appletouch failed with error -5 [ 1078.095510][ T9] usb 8-1: config 0 descriptor?? [ 1078.165144][T15090] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1079.862502][ T58] usb 8-1: USB disconnect, device number 32 [ 1079.871649][ T975] cdc_ncm 4-1:1.0: failed to get mac address [ 1079.878292][ T975] cdc_ncm 4-1:1.0: bind() failure [ 1079.910793][ T975] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1079.963489][ T975] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1079.994127][ T975] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1080.016171][ T975] usb 4-1: USB disconnect, device number 49 [ 1080.071196][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3035'. [ 1081.592970][ T9] usb 9-1: USB disconnect, device number 39 [ 1083.633284][ T29] audit: type=1326 audit(1737574287.662:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16369 comm="syz.4.3042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3614b85d29 code=0x0 [ 1085.191417][ T9] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1085.296567][ T975] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1085.392145][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1085.420948][ T9] usb 8-1: config 0 has no interfaces? [ 1085.443143][ T9] usb 8-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1085.463266][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.491858][ T9] usb 8-1: Product: syz [ 1085.496468][ T9] usb 8-1: Manufacturer: syz [ 1085.502661][ T975] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.524139][ T9] usb 8-1: SerialNumber: syz [ 1085.534450][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1085.553796][ T9] usb 8-1: config 0 descriptor?? [ 1085.559181][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.579062][ T975] usb 5-1: Product: syz [ 1085.583629][ T975] usb 5-1: Manufacturer: syz [ 1085.588271][ T975] usb 5-1: SerialNumber: syz [ 1085.650844][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1086.806800][T12970] usb 8-1: USB disconnect, device number 33 [ 1088.180773][ T975] cdc_ncm 5-1:1.0: failed to get mac address [ 1088.197994][ T29] audit: type=1326 audit(1737574292.222:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16404 comm="syz.9.3054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde32b85d29 code=0x0 [ 1088.270848][ T975] cdc_ncm 5-1:1.0: bind() failure [ 1088.312723][ T975] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1088.482309][ T975] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1088.521543][ T975] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1089.344343][ T975] usb 5-1: USB disconnect, device number 77 [ 1091.618852][T16428] Bluetooth: hci5: Frame reassembly failed (-84) [ 1091.849399][T12408] Bluetooth: hci5: Frame reassembly failed (-84) [ 1093.891829][T11415] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1096.902748][T16460] kvm: kvm [16459]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1096.927243][T16460] kvm: kvm [16459]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1102.032831][T16509] Bluetooth: hci5: Frame reassembly failed (-84) [ 1102.071671][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 1102.687729][T16516] veth0: entered promiscuous mode [ 1102.732494][T16516] veth0: left promiscuous mode [ 1104.101525][T11415] Bluetooth: hci5: command 0x1003 tx timeout [ 1104.108179][ T5135] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1104.807386][ T58] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1104.861721][ T5903] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1105.114332][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 1105.131639][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 1105.174950][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1105.193003][ T5903] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1105.231443][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1105.232975][ T5903] usb 10-1: config 17 has an invalid interface number: 11 but max is 0 [ 1105.265764][ T58] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1105.277361][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.325291][ T58] usb 5-1: Product: syz [ 1105.329766][ T58] usb 5-1: Manufacturer: syz [ 1105.337670][ T5903] usb 10-1: config 17 has no interface number 0 [ 1105.378531][ T58] usb 5-1: SerialNumber: syz [ 1105.392732][ T5903] usb 10-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 1105.465528][ T58] usb 5-1: config 0 descriptor?? [ 1105.486122][ T5903] usb 10-1: config 17 interface 11 has no altsetting 0 [ 1105.537656][ T58] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1105.565588][ T5903] usb 10-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 1105.602283][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1105.623408][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.651573][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1105.673223][ T5903] usb 10-1: Product: syz [ 1105.677677][ T5903] usb 10-1: Manufacturer: syz [ 1106.864510][ T5903] usb 10-1: SerialNumber: syz [ 1107.183411][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1107.191159][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1107.263037][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1107.270886][ T5903] usb 10-1: can't set config #17, error -71 [ 1107.276997][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1107.297280][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1107.305654][ T5903] usb 10-1: USB disconnect, device number 25 [ 1107.340606][ T58] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1107.390353][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1107.432904][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1107.452103][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1107.459839][ T58] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1107.491018][ T58] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1107.561393][ T58] usb 5-1: USB disconnect, device number 78 [ 1108.127973][ T58] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1108.222270][ T58] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1108.261029][ T58] keyspan 5-1:0.0: device disconnected [ 1109.427040][T16565] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3095'. [ 1111.015158][T16577] Bluetooth: hci5: Frame reassembly failed (-84) [ 1111.043992][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 1111.912639][ T29] audit: type=1800 audit(1737574315.942:1207): pid=16579 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3101" name="bus" dev="overlay" ino=425 res=0 errno=0 [ 1112.641382][ T5903] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1112.811663][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 1112.843407][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1112.975414][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1113.062970][ T5135] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1113.112065][ T5903] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1113.225520][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.283023][ T5903] usb 5-1: Product: syz [ 1113.297596][ T5903] usb 5-1: Manufacturer: syz [ 1113.321332][ T5903] usb 5-1: SerialNumber: syz [ 1113.686398][ T5903] usb 5-1: config 0 descriptor?? [ 1113.922725][ T5903] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1113.981501][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1114.285052][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1114.317823][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1115.466418][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1115.501441][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1115.695701][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1115.722432][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1115.745962][ T5903] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1116.008090][T16610] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3110'. [ 1116.239116][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.245888][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.542629][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1116.550396][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1116.582999][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1116.601385][ T5903] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1116.639639][ T5903] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1116.701637][ T5903] usb 5-1: USB disconnect, device number 79 [ 1116.764083][ T5903] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1116.814174][ T5903] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1116.861839][ T5903] keyspan 5-1:0.0: device disconnected [ 1121.559756][ T29] audit: type=1800 audit(1737574325.572:1208): pid=16651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.3122" name="bus" dev="overlay" ino=3176 res=0 errno=0 [ 1124.337700][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 1124.998026][T16700] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1125.930343][T11415] Bluetooth: hci3: command 0x0406 tx timeout [ 1126.831261][T16714] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.060811][T11415] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1127.137918][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3146'. [ 1129.291799][T16736] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3150'. [ 1131.422570][ T29] audit: type=1800 audit(1737574335.432:1209): pid=16749 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3156" name="bus" dev="overlay" ino=501 res=0 errno=0 [ 1131.442509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1133.146140][T15090] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1134.252284][T15090] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1134.293445][T15090] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1134.310989][T15090] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.590703][T15090] usb 10-1: config 0 descriptor?? [ 1134.786874][T15090] appletouch 10-1:0.0: Could not find int-in endpoint [ 1134.819243][T15090] appletouch 10-1:0.0: probe with driver appletouch failed with error -5 [ 1134.852619][T15090] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1136.021385][ T5833] usb 10-1: USB disconnect, device number 26 [ 1136.140712][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1136.164186][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1136.175029][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1136.185627][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1136.195602][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1136.204344][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.340473][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.580414][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.116468][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.296253][T11415] Bluetooth: hci0: command tx timeout [ 1138.442305][T15090] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1138.717740][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.765212][T16810] chnl_net:caif_netlink_parms(): no params data found [ 1138.813364][T15090] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1138.836698][T15090] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1138.892744][T15090] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.009064][T15090] usb 10-1: config 0 descriptor?? [ 1139.256838][T15090] appletouch 10-1:0.0: Could not find int-in endpoint [ 1139.361465][T15090] appletouch 10-1:0.0: probe with driver appletouch failed with error -5 [ 1139.401993][T15090] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1139.895914][T16810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.910441][T16810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.954810][ T29] audit: type=1326 audit(1737574343.982:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16847 comm="syz.8.3184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2eb85d29 code=0x0 [ 1140.626743][T11415] Bluetooth: hci0: command tx timeout [ 1140.642484][T16810] bridge_slave_0: entered allmulticast mode [ 1140.658832][T16810] bridge_slave_0: entered promiscuous mode [ 1140.878674][T16810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.064676][T16810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.172248][T16810] bridge_slave_1: entered allmulticast mode [ 1142.389591][T16810] bridge_slave_1: entered promiscuous mode [ 1142.680766][T11415] Bluetooth: hci0: command tx timeout [ 1142.800953][ T5833] usb 10-1: USB disconnect, device number 27 [ 1144.741948][T11415] Bluetooth: hci0: command tx timeout [ 1146.073309][ T975] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1146.661759][ T975] usb 10-1: Using ep0 maxpacket: 8 [ 1146.874789][ T975] usb 10-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1146.887488][ T975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.897320][ T29] audit: type=1326 audit(1737574350.932:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16895 comm="syz.8.3196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2eb85d29 code=0x0 [ 1146.922376][ T975] usb 10-1: config 0 descriptor?? [ 1146.934301][ T975] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1146.957825][ T975] pwc: Warning: more than 1 configuration available. [ 1147.181908][ T64] bond0 (unregistering): Released all slaves [ 1147.235902][ T975] pwc: Failed to set LED on/off time (-71) [ 1147.257638][ T975] pwc: send_video_command error -71 [ 1147.286445][ T975] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1147.306868][ T975] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1147.341072][ T975] usb 10-1: USB disconnect, device number 28 [ 1147.397759][T16810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.658979][T16810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.968421][T16810] team0: Port device team_slave_0 added [ 1149.990933][T16810] team0: Port device team_slave_1 added [ 1150.419529][T16924] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1152.766237][T16810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.862492][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.137939][T16810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.292196][T16810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.302229][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.414473][T16810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.431980][ T29] audit: type=1326 audit(1737574357.362:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16940 comm="syz.9.3208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde32b85d29 code=0x0 [ 1153.471683][ T64] hsr_slave_0: left promiscuous mode [ 1153.479078][ T64] hsr_slave_1: left promiscuous mode [ 1154.445334][ T64] veth1_macvtap: left promiscuous mode [ 1154.457419][ T64] veth0_macvtap: left promiscuous mode [ 1154.504631][ T64] veth1_vlan: left promiscuous mode [ 1154.657808][ T64] veth0_vlan: left promiscuous mode [ 1157.228788][ T5903] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1159.770636][ T64] lo (unregistering): left allmulticast mode [ 1159.850691][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 1161.672533][ T29] audit: type=1326 audit(1737574365.692:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16990 comm="syz.3.3220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c92385d29 code=0x0 [ 1161.707496][T16810] hsr_slave_0: entered promiscuous mode [ 1161.736286][T16810] hsr_slave_1: entered promiscuous mode [ 1162.100553][ T64] IPVS: stop unused estimator thread 0... [ 1165.916024][T16971] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1166.276167][ T29] audit: type=1326 audit(1737574370.302:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17026 comm="syz.7.3231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0833385d29 code=0x0 [ 1166.513091][T16971] usb 9-1: Using ep0 maxpacket: 8 [ 1167.180573][T16810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1167.251642][T16971] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1167.259275][T16971] usb 9-1: can't read configurations, error -71 [ 1167.268677][T16810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1167.312311][T16810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1168.450128][T16810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1169.104678][T16810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.639838][T16810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.804885][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.812114][T12408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.916817][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.924070][ T8633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.795088][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3240'. [ 1171.651677][ T58] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1171.912049][ T58] usb 9-1: Using ep0 maxpacket: 32 [ 1171.928615][ T58] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1171.988622][ T58] usb 9-1: config 17 has an invalid interface number: 11 but max is 0 [ 1172.216910][ T58] usb 9-1: config 17 has no interface number 0 [ 1172.228696][ T58] usb 9-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 1172.240553][ T58] usb 9-1: config 17 interface 11 has no altsetting 0 [ 1172.247285][T16810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.252880][ T58] usb 9-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 1172.286071][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.798777][ T58] usb 9-1: Product: syz [ 1172.814825][ T58] usb 9-1: Manufacturer: syz [ 1172.819475][ T58] usb 9-1: SerialNumber: syz [ 1173.465623][T16971] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1173.562067][ T5833] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1173.882912][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 1173.943722][ T5833] usb 8-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1173.955879][T16971] usb 4-1: Using ep0 maxpacket: 16 [ 1173.970425][T16971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1173.983823][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.001417][T16971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1174.019200][ T5833] usb 8-1: config 0 descriptor?? [ 1174.047622][T16971] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1174.062698][ T5833] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1174.076466][T16971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.085238][ T5833] pwc: Warning: more than 1 configuration available. [ 1174.096994][T16971] usb 4-1: Product: syz [ 1174.103169][T16971] usb 4-1: Manufacturer: syz [ 1174.108443][T16971] usb 4-1: SerialNumber: syz [ 1174.130295][T16971] usb 4-1: config 0 descriptor?? [ 1174.142050][T16971] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 1174.160029][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 1174.182994][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1174.231955][ T58] usb 9-1: bad CDC descriptors [ 1174.250359][T16810] veth0_vlan: entered promiscuous mode [ 1174.263526][ T5833] pwc: Failed to set LED on/off time (-71) [ 1174.272851][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1174.282240][ T58] usb 9-1: USB disconnect, device number 43 [ 1174.303608][ T5833] pwc: send_video_command error -71 [ 1174.308993][ T5833] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1174.322012][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1174.329669][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1174.341797][T16810] veth1_vlan: entered promiscuous mode [ 1174.374182][ T5833] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1174.407746][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 1174.422533][ T5833] usb 8-1: USB disconnect, device number 34 [ 1174.428970][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 1174.436724][T16810] veth0_macvtap: entered promiscuous mode [ 1174.456023][T16971] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1174.480564][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1174.480643][T16810] veth1_macvtap: entered promiscuous mode [ 1174.499822][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1174.510819][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 1174.530549][T16971] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1174.550193][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.559683][T16971] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1174.573031][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1174.673729][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1174.729195][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.141738][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.158729][T16971] usb 4-1: USB disconnect, device number 50 [ 1175.181622][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.201791][T16971] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1175.211252][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.211276][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.211292][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.211306][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.211322][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.211334][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.211348][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.211359][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.211375][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1175.211387][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1175.212579][T16810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.402378][T16971] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1175.452171][T16971] keyspan 4-1:0.0: device disconnected [ 1175.844196][T17110] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3251'. [ 1176.403848][T17112] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3253'. [ 1176.430170][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.573100][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.601530][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.642923][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.651727][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.667287][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.679358][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.690850][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.710588][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.724819][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.734998][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.749403][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.770938][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.807711][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.830358][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.886929][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.907289][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.930059][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.989544][T16810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.112276][T16810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.121109][T16810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.130621][T16810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.139727][T16810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.203719][T17126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1178.417262][T12870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.450790][T12870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.496842][ T8633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.531375][ T8633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.777401][T17136] wireguard1: entered promiscuous mode [ 1178.783393][T17136] wireguard1: entered allmulticast mode [ 1181.711372][ T5135] Bluetooth: hci2: command 0x0405 tx timeout [ 1182.451455][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3264'. [ 1183.844677][T17172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1184.328781][T17178] netlink: 'syz.7.3272': attribute type 1 has an invalid length. [ 1184.742533][T17186] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3272'. [ 1184.899883][T17178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1185.059410][T17186] vlan2: entered promiscuous mode [ 1185.091468][T17186] bond1: entered promiscuous mode [ 1186.887480][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3279'. [ 1187.061744][ T5135] Bluetooth: hci0: command tx timeout [ 1190.130232][T17226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.332358][T16971] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1190.504482][T16971] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1190.605479][T16971] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1190.707782][T16971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.787306][T16971] usb 8-1: config 0 descriptor?? [ 1190.814389][T16971] appletouch 8-1:0.0: Could not find int-in endpoint [ 1190.857887][T16971] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1190.882948][T16971] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1193.419042][ T5135] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1195.180955][ T975] usb 8-1: USB disconnect, device number 35 [ 1195.251509][T17260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3293'. [ 1195.657804][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3296'. [ 1195.704742][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3296'. [ 1201.011823][T12970] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1201.391254][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1201.946109][T12970] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1201.964340][T12970] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1202.128170][T12970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.156369][T12970] usb 8-1: config 0 descriptor?? [ 1202.171875][T12970] appletouch 8-1:0.0: Could not find int-in endpoint [ 1202.178666][T12970] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1203.024236][T12970] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1204.480700][T15090] usb 8-1: USB disconnect, device number 36 [ 1206.999923][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3320'. [ 1207.805835][T17350] CIFS mount error: No usable UNC path provided in device string! [ 1207.805835][T17350] [ 1207.816463][T17350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1207.945556][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1211.712269][T15090] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1213.833427][T15090] usb 9-1: device descriptor read/all, error -71 [ 1219.864221][ T5833] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1220.223821][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 1220.242926][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1220.294363][ T5833] usb 5-1: config 17 has an invalid interface number: 11 but max is 0 [ 1220.322124][ T5833] usb 5-1: config 17 has no interface number 0 [ 1220.328362][ T5833] usb 5-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 1220.391256][ T5833] usb 5-1: config 17 interface 11 has no altsetting 0 [ 1220.417654][ T5833] usb 5-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 1220.445233][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.470824][ T5833] usb 5-1: Product: syz [ 1220.485343][ T5833] usb 5-1: Manufacturer: syz [ 1220.489992][ T5833] usb 5-1: SerialNumber: syz [ 1220.627605][ T5833] usb 5-1: bad CDC descriptors [ 1220.741778][ T5833] usb 5-1: USB disconnect, device number 80 [ 1221.365688][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3336'. [ 1229.852327][T17476] wireguard1: left allmulticast mode [ 1230.666294][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1235.329696][T17515] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3364'. [ 1238.452243][ T5833] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1238.980192][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 1239.010635][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.041346][ T5833] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1239.075024][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.081524][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.108187][ T5833] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1239.121815][ T5833] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1239.135582][ T5833] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1239.145167][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.161514][ T5833] usb 4-1: Product: syz [ 1239.165734][ T5833] usb 4-1: Manufacturer: syz [ 1239.170366][ T5833] usb 4-1: SerialNumber: syz [ 1239.607014][ T5833] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1239.628066][ T5833] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1242.138427][ T5819] usb 4-1: USB disconnect, device number 51 [ 1242.772374][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3378'. [ 1248.715792][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1249.871384][ T5833] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1249.924211][T16971] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1250.106497][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 1250.137026][ T5833] usb 8-1: config 0 has no interfaces? [ 1250.162248][T16971] usb 5-1: Using ep0 maxpacket: 16 [ 1250.176388][T16971] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1250.217919][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3391'. [ 1250.881446][ T5833] usb 8-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1250.921457][T16971] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1250.931619][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.939622][ T5833] usb 8-1: Product: syz [ 1250.961848][T16971] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.998391][ T5833] usb 8-1: Manufacturer: syz [ 1251.006495][ T5833] usb 8-1: SerialNumber: syz [ 1251.025241][T16971] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1251.056694][ T5833] usb 8-1: config 0 descriptor?? [ 1251.073703][T16971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.096641][T16971] usb 5-1: Product: syz [ 1251.105956][T16971] usb 5-1: Manufacturer: syz [ 1251.110574][T16971] usb 5-1: SerialNumber: syz [ 1251.849341][T12970] usb 8-1: USB disconnect, device number 37 [ 1252.207663][T16971] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1252.228107][T16971] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1254.385649][ T5819] usb 5-1: USB disconnect, device number 81 [ 1255.695312][T11415] Bluetooth: hci1: command 0x0406 tx timeout [ 1256.536359][T16971] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1257.461275][T16971] usb 10-1: Using ep0 maxpacket: 16 [ 1257.495048][T17659] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3400'. [ 1257.597494][T16971] usb 10-1: device descriptor read/all, error -71 [ 1260.489369][ T5833] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1260.615731][T17683] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3409'. [ 1261.141517][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 1261.183257][ T5833] usb 8-1: config 0 has no interfaces? [ 1261.216336][ T5833] usb 8-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1261.241494][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.286556][ T5833] usb 8-1: Product: syz [ 1261.302169][ T5833] usb 8-1: Manufacturer: syz [ 1261.307166][ T5833] usb 8-1: SerialNumber: syz [ 1261.338299][ T5833] usb 8-1: config 0 descriptor?? [ 1261.653293][ T5135] Bluetooth: hci0: command 0x0406 tx timeout [ 1264.371712][ T5819] usb 8-1: USB disconnect, device number 38 [ 1264.778102][T17722] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1264.797032][T17722] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1269.244317][T12970] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1269.591428][T12970] usb 9-1: Using ep0 maxpacket: 8 [ 1269.664503][T12970] usb 9-1: config 0 has no interfaces? [ 1269.673264][T12970] usb 9-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1269.704449][T12970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.721806][T12970] usb 9-1: Product: syz [ 1269.730574][T12970] usb 9-1: Manufacturer: syz [ 1269.740994][T12970] usb 9-1: SerialNumber: syz [ 1269.887643][T12970] usb 9-1: config 0 descriptor?? [ 1270.917147][T17768] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1270.937339][T17768] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1271.787315][ T5819] usb 9-1: USB disconnect, device number 46 [ 1277.838277][T15090] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1277.991574][T12970] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1279.857986][T12970] usb 9-1: Using ep0 maxpacket: 8 [ 1279.886306][T12970] usb 9-1: config 0 has no interfaces? [ 1279.951311][T12970] usb 9-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1279.960485][T12970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.996607][T12970] usb 9-1: Product: syz [ 1280.000826][T12970] usb 9-1: Manufacturer: syz [ 1280.851270][T12970] usb 9-1: SerialNumber: syz [ 1280.873123][T12970] usb 9-1: config 0 descriptor?? [ 1280.878496][T12970] usb 9-1: can't set config #0, error -71 [ 1280.885544][T12970] usb 9-1: USB disconnect, device number 47 [ 1287.981293][ T5833] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1288.163166][ T5833] usb 9-1: Using ep0 maxpacket: 8 [ 1288.189107][ T5833] usb 9-1: config 0 has no interfaces? [ 1288.211365][T15090] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1288.229531][ T5833] usb 9-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1288.249014][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.491493][ T5833] usb 9-1: Product: syz [ 1288.495714][ T5833] usb 9-1: Manufacturer: syz [ 1288.500300][ T5833] usb 9-1: SerialNumber: syz [ 1288.694772][T15090] usb 8-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.732624][ T5833] usb 9-1: config 0 descriptor?? [ 1288.741512][T15090] usb 8-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.582406][T15090] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1289.592071][T15090] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1289.600681][T15090] usb 8-1: Manufacturer: syz [ 1289.621022][T15090] usb 8-1: SerialNumber: syz [ 1290.927779][T17850] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3459'. [ 1290.954755][T17850] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.3459'. [ 1291.381444][ T58] usb 9-1: USB disconnect, device number 48 [ 1291.497727][T15090] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 1291.512759][T15090] usb 8-1: USB disconnect, device number 39 [ 1296.131421][T17921] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1296.361408][T16971] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1296.545181][T16971] usb 5-1: Using ep0 maxpacket: 8 [ 1296.556883][T16971] usb 5-1: config 0 has no interfaces? [ 1296.567402][T16971] usb 5-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 1296.612238][T16971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.650590][T16971] usb 5-1: Product: syz [ 1296.671314][T16971] usb 5-1: Manufacturer: syz [ 1296.677447][T16971] usb 5-1: SerialNumber: syz [ 1296.706555][T16971] usb 5-1: config 0 descriptor?? [ 1297.466997][T16971] usb 5-1: USB disconnect, device number 82 [ 1300.508270][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.516088][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.508089][ T5135] Bluetooth: hci0: command 0x0406 tx timeout [ 1310.304660][T18013] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1312.620158][T18033] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1316.101888][ T25] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1316.352816][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1316.368169][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1316.550402][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1316.575663][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.429475][ T25] usb 4-1: config 0 descriptor?? [ 1318.861262][ T25] appletouch 4-1:0.0: Geyser mode initialized. [ 1318.868736][ T25] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 1319.207626][T11415] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1319.267076][ C0] appletouch 4-1:0.0: atp_complete: usb_submit_urb failed with result -1 [ 1319.486754][ T5819] usb 4-1: USB disconnect, device number 52 [ 1319.619065][ T5819] appletouch 4-1:0.0: input: appletouch disconnected [ 1320.654209][ T25] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1322.351348][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1322.381876][ T25] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1322.401271][ T25] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1322.411078][ T25] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1322.502238][ T25] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1322.534616][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.583855][ T25] usb 10-1: Product: syz [ 1322.600558][ T25] usb 10-1: Manufacturer: syz [ 1322.606005][ T25] usb 10-1: SerialNumber: syz [ 1322.921718][T18104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3524'. [ 1324.054086][T11415] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1324.845070][T11415] Bluetooth: hci1: Injecting HCI hardware error event [ 1324.854852][ T5135] Bluetooth: hci1: hardware error 0x00 [ 1324.985875][ T25] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 1325.075280][ T25] usb 10-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1325.193316][ T25] usb 10-1: USB disconnect, device number 32 [ 1326.312123][T18118] udevd[18118]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1327.609934][ T5135] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1328.642872][ T5819] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1330.591318][T17993] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1330.761243][T17993] usb 8-1: Using ep0 maxpacket: 16 [ 1330.781369][T17993] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1330.811253][T17993] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1330.831566][T17993] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1330.896715][T17993] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1330.934970][T17993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.981392][T17993] usb 8-1: Product: syz [ 1330.985617][T17993] usb 8-1: Manufacturer: syz [ 1330.990233][T17993] usb 8-1: SerialNumber: syz [ 1331.519437][T17993] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 1331.924012][T17993] usb 8-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1332.007748][T17993] usb 8-1: USB disconnect, device number 40 [ 1332.597577][T18052] udevd[18052]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.934127][T18160] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1334.721680][ T5833] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1335.352633][ T5833] usb 10-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 1335.363092][ T5833] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1335.408289][ T5833] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1336.611330][ T5833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.677390][ T5833] usb 10-1: config 0 descriptor?? [ 1336.712596][ T5833] appletouch 10-1:0.0: Could not find int-in endpoint [ 1336.719396][ T5833] appletouch 10-1:0.0: probe with driver appletouch failed with error -5 [ 1336.752202][ T5833] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1336.957937][ T5833] usb 10-1: USB disconnect, device number 34 [ 1338.235096][T18204] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1341.835906][ T5819] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1342.112962][ T5819] usb 10-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 1342.124289][ T5819] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1343.146038][ T5819] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1343.158562][ T5819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.182201][ T5819] usb 10-1: config 0 descriptor?? [ 1343.561084][ T5819] appletouch 10-1:0.0: Could not find int-in endpoint [ 1343.569413][ T5819] appletouch 10-1:0.0: probe with driver appletouch failed with error -5 [ 1343.579151][ T5819] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1344.961736][T16971] usb 10-1: USB disconnect, device number 35 [ 1356.492651][T18306] netlink: 'syz.8.3582': attribute type 1 has an invalid length. [ 1356.555177][T18306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1356.612383][T18306] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3582'. [ 1357.067241][T17993] IPVS: starting estimator thread 0... [ 1357.533985][T18321] IPVS: using max 37 ests per chain, 88800 per kthread [ 1360.971321][ T25] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1361.271299][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1361.403728][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1361.415115][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1361.430917][ T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1361.621458][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1361.795091][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.851645][ T25] usb 5-1: Product: syz [ 1361.855872][ T25] usb 5-1: Manufacturer: syz [ 1361.860579][ T25] usb 5-1: SerialNumber: syz [ 1361.961584][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.968224][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.125694][ T25] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1365.164690][ T25] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1365.234404][T18360] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 1365.259040][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3594'. [ 1365.309061][ T25] usb 5-1: USB disconnect, device number 83 [ 1365.349310][T18360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1365.467352][T18360] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3595'. [ 1365.518333][T18362] bond1: (slave gretap1): making interface the new active one [ 1365.584033][T18362] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1365.652026][T18363] udevd[18363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1370.981530][ T5903] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1371.150873][ T5903] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.561795][ T5903] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.571017][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.604414][ T5903] usb 10-1: Product: syz [ 1371.608707][ T5903] usb 10-1: Manufacturer: syz [ 1371.634620][ T5903] usb 10-1: SerialNumber: syz [ 1372.271411][ T5903] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 1372.277703][ T5903] cdc_ncm 10-1:1.0: bind() failure [ 1372.302935][ T5903] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1372.330481][ T5903] cdc_ncm 10-1:1.1: bind() failure [ 1372.476501][T15090] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1373.251444][T15090] usb 4-1: Using ep0 maxpacket: 16 [ 1373.276113][T15090] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1373.301523][T15090] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1374.024643][T15090] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.054306][T15090] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1374.071000][T15090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.088709][T15090] usb 4-1: Product: syz [ 1374.100555][T15090] usb 4-1: Manufacturer: syz [ 1374.117637][T15090] usb 4-1: SerialNumber: syz [ 1374.280542][ T5833] usb 10-1: USB disconnect, device number 36 [ 1377.342210][T15090] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1377.373267][T15090] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1377.450250][T15090] usb 4-1: USB disconnect, device number 53 [ 1377.599351][T18418] kvm: kvm [18417]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x612d [ 1377.713749][ T29] audit: type=1800 audit(1737574581.732:1215): pid=18430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3612" name="bus" dev="overlay" ino=1033 res=0 errno=0 [ 1378.181712][T18418] kvm: kvm [18417]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8107 [ 1378.198318][T18342] udevd[18342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1380.173564][T15090] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1380.344140][T15090] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.367829][T15090] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1380.388009][T15090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.418010][T15090] usb 4-1: Product: syz [ 1380.431299][T15090] usb 4-1: Manufacturer: syz [ 1380.441308][T15090] usb 4-1: SerialNumber: syz [ 1380.490180][T18448] kvm: kvm [18447]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x612d [ 1380.531278][T18448] kvm: kvm [18447]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x8107 [ 1381.280476][T15090] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1381.291234][T15090] cdc_ncm 4-1:1.0: bind() failure [ 1381.299642][T15090] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1382.060461][T15090] cdc_ncm 4-1:1.1: bind() failure [ 1383.083589][ T5903] usb 4-1: USB disconnect, device number 54 [ 1383.554905][T15090] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1383.832134][T15090] usb 5-1: Using ep0 maxpacket: 16 [ 1384.104245][T15090] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1384.159968][T15090] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1384.180904][T15090] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1384.244459][T15090] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1384.284740][T15090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.329576][T15090] usb 5-1: Product: syz [ 1384.340349][T15090] usb 5-1: Manufacturer: syz [ 1384.966164][T15090] usb 5-1: SerialNumber: syz [ 1385.557433][T15090] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1385.616600][T15090] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1385.731425][T15090] usb 5-1: USB disconnect, device number 84 [ 1385.815301][T18488] net_ratelimit: 1 callbacks suppressed [ 1385.815345][T18488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.092528][T18358] udevd[18358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1386.842507][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3631'. [ 1387.344986][T18496] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1388.611687][ T975] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1389.693190][ T975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.833140][ T975] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1389.857399][ T975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.884265][ T975] usb 10-1: Product: syz [ 1390.100234][ T975] usb 10-1: Manufacturer: syz [ 1390.105970][ T975] usb 10-1: SerialNumber: syz [ 1391.014396][ T975] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 1391.023553][ T975] cdc_ncm 10-1:1.0: bind() failure [ 1391.042711][ T975] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1391.049694][ T975] cdc_ncm 10-1:1.1: bind() failure [ 1392.970753][T12970] usb 10-1: USB disconnect, device number 37 [ 1395.281589][T12970] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1395.691995][T12970] usb 4-1: Using ep0 maxpacket: 16 [ 1396.176934][T12970] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1396.191787][T12970] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1397.251302][T12970] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1397.613385][T12970] usb 4-1: string descriptor 0 read error: -71 [ 1397.619735][T12970] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1397.693155][T12970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.731351][T12970] usb 4-1: can't set config #1, error -71 [ 1397.772493][T12970] usb 4-1: USB disconnect, device number 55 [ 1399.072170][T18557] futex_wake_op: syz.8.3649 tries to shift op by -1; fix this program [ 1399.351276][ T9] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1399.923109][ T9] usb 8-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 1399.941717][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1399.976324][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1399.993546][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.019310][ T9] usb 8-1: config 0 descriptor?? [ 1400.052378][ T9] appletouch 8-1:0.0: Could not find int-in endpoint [ 1400.077736][ T9] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1400.102061][ T9] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1400.136675][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1400.309214][T18571] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1403.395041][ T25] usb 8-1: USB disconnect, device number 41 [ 1403.931335][T12970] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1404.131189][T12970] usb 5-1: Using ep0 maxpacket: 16 [ 1404.144348][T12970] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1404.171284][T12970] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1404.181016][T12970] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1404.223307][T12970] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1404.233588][T12970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.251489][T12970] usb 5-1: Product: syz [ 1404.255707][T12970] usb 5-1: Manufacturer: syz [ 1404.260323][T12970] usb 5-1: SerialNumber: syz [ 1404.825345][T12970] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1404.861893][T12970] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1405.757101][T12970] usb 5-1: USB disconnect, device number 85 [ 1409.042597][T18624] udevd[18624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.061517][T12970] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1411.225400][T12970] usb 8-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 1411.250420][T12970] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1411.301346][T12970] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1411.321352][T12970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.346039][T12970] usb 8-1: config 0 descriptor?? [ 1411.360476][T12970] appletouch 8-1:0.0: Could not find int-in endpoint [ 1411.380395][T12970] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1411.428417][T12970] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1413.909859][ T25] usb 8-1: USB disconnect, device number 42 [ 1414.731624][ T975] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1415.101448][ T975] usb 8-1: Using ep0 maxpacket: 32 [ 1415.108530][ T975] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1415.137448][ T975] usb 8-1: config 0 has no interface number 0 [ 1415.178088][ T975] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1415.211239][ T975] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.252701][ T975] usb 8-1: Product: syz [ 1415.256934][ T975] usb 8-1: Manufacturer: syz [ 1415.272941][ T975] usb 8-1: SerialNumber: syz [ 1415.305572][ T975] usb 8-1: config 0 descriptor?? [ 1415.567204][ T9] usb 8-1: USB disconnect, device number 43 [ 1420.244858][ T25] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1420.472503][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1420.527974][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1420.661644][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.693895][ T25] usb 5-1: config 0 descriptor?? [ 1420.712782][ T25] appletouch 5-1:0.0: Could not find int-in endpoint [ 1420.720009][ T25] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1420.759427][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1422.994443][T12970] usb 5-1: USB disconnect, device number 86 [ 1423.422065][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.440862][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.891251][T15090] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1429.256603][T15090] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1429.269997][T15090] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1430.230595][ T9] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1430.287149][T15090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.307279][T15090] usb 8-1: config 0 descriptor?? [ 1430.324494][T15090] appletouch 8-1:0.0: Could not find int-in endpoint [ 1430.333026][T15090] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1430.352125][T15090] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1430.480847][ T9] usb 9-1: config 0 has an invalid interface number: 28 but max is 0 [ 1430.493909][ T9] usb 9-1: config 0 has no interface number 0 [ 1430.510875][ T9] usb 9-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.550194][ T9] usb 9-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.589593][ T9] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1430.606570][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.651290][ T9] usb 9-1: config 0 descriptor?? [ 1432.381884][ T9] usb 8-1: USB disconnect, device number 44 [ 1432.473095][T18767] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3708'. [ 1433.935473][T12970] usb 9-1: USB disconnect, device number 49 [ 1436.929194][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3716'. [ 1438.501192][T15090] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1439.241554][T15090] usb 9-1: config 0 has an invalid interface number: 28 but max is 0 [ 1439.261266][T15090] usb 9-1: config 0 has no interface number 0 [ 1439.291308][ T5819] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1439.887926][T15090] usb 9-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.919896][T15090] usb 9-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.931378][T15090] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1439.940894][T15090] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.962793][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 1440.048034][T15090] usb 9-1: config 0 descriptor?? [ 1440.082938][ T5819] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1440.188052][ T5819] usb 5-1: config 0 has no interface number 0 [ 1440.281626][ T5819] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1440.301169][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.309278][ T5819] usb 5-1: Product: syz [ 1440.360926][ T5819] usb 5-1: Manufacturer: syz [ 1440.401007][ T5819] usb 5-1: SerialNumber: syz [ 1440.422195][ T5819] usb 5-1: config 0 descriptor?? [ 1442.278827][T15090] usb 5-1: USB disconnect, device number 87 [ 1442.498732][T12970] usb 9-1: USB disconnect, device number 50 [ 1451.891313][ T5819] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1452.052800][ T5819] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 1452.061420][ T5819] usb 4-1: config 0 has no interface number 0 [ 1452.069366][ T5819] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.111178][ T5819] usb 4-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.172614][ T5819] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1452.204700][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.321384][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'. [ 1452.323726][ T5819] usb 4-1: config 0 descriptor?? [ 1453.666818][ T975] usb 4-1: USB disconnect, device number 56 [ 1453.881330][ T5819] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1454.161971][T18898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3745'. [ 1455.003096][ T5819] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1455.244710][ T5819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1455.340774][ T5819] usb 9-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1455.427377][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.502239][ T5819] usb 9-1: config 0 descriptor?? [ 1456.781734][ T5819] appletouch 9-1:0.0: Geyser mode initialized. [ 1456.901634][ T5819] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input44 [ 1456.959452][T12970] usb 9-1: USB disconnect, device number 51 [ 1457.079706][T12970] appletouch 9-1:0.0: input: appletouch disconnected [ 1459.128479][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3752'. [ 1459.231889][ T5875] kworker/0:6 (5875) used greatest stack depth: 16624 bytes left [ 1460.187642][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1460.307743][T18937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1461.591464][ T5819] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1462.766262][ T5819] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1462.797900][ T5819] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1462.830119][ T5819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.916212][ T5819] usb 10-1: config 0 descriptor?? [ 1463.670291][ T5819] appletouch 10-1:0.0: Could not find int-in endpoint [ 1463.695704][ T5819] appletouch 10-1:0.0: probe with driver appletouch failed with error -5 [ 1463.731136][ T5819] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1463.774383][ T5819] usb 10-1: USB disconnect, device number 38 [ 1463.979526][T18964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3765'. [ 1464.064970][T18964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1464.230114][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 1465.011413][T15494] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1465.862039][T15494] usb 10-1: Using ep0 maxpacket: 16 [ 1465.897060][T15494] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1465.948978][T15494] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1466.057891][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1466.226536][T15494] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1466.279741][T15494] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1466.477024][T15494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.486051][T15494] usb 10-1: Product: syz [ 1466.501573][T15494] usb 10-1: Manufacturer: syz [ 1466.511496][T15494] usb 10-1: SerialNumber: syz [ 1467.062907][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3772'. [ 1467.802097][T15494] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 1467.830099][T15494] usb 10-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1468.074854][T15494] usb 10-1: USB disconnect, device number 39 [ 1468.167978][T19002] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3777'. [ 1468.241661][T15090] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1468.433266][T15090] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1468.444625][T15090] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1468.477707][T15090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.659597][T15090] usb 4-1: config 0 descriptor?? [ 1468.892809][T15090] appletouch 4-1:0.0: Could not find int-in endpoint [ 1468.900238][T15090] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 1468.911581][T15090] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1469.123986][T19011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1471.035306][T15090] usb 4-1: USB disconnect, device number 57 [ 1471.229549][T19026] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1471.240142][T19026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1471.261001][T19026] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1471.281395][T19026] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1471.294400][T19026] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1471.305814][T19026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1472.246738][ T8716] syz_tun (unregistering): left allmulticast mode [ 1473.381805][ T5135] Bluetooth: hci5: command tx timeout [ 1473.493988][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3788'. [ 1474.133602][T19024] chnl_net:caif_netlink_parms(): no params data found [ 1475.022699][T19024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.043992][T19024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.071020][T19024] bridge_slave_0: entered allmulticast mode [ 1475.078761][T19024] bridge_slave_0: entered promiscuous mode [ 1475.100406][T19024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.127882][T19024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.162357][T19024] bridge_slave_1: entered allmulticast mode [ 1475.178683][T19024] bridge_slave_1: entered promiscuous mode [ 1475.501431][ T5135] Bluetooth: hci5: command tx timeout [ 1475.775377][T19024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.517031][T19024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.187870][T19024] team0: Port device team_slave_0 added [ 1477.251717][T19024] team0: Port device team_slave_1 added [ 1477.542882][ T5135] Bluetooth: hci5: command tx timeout [ 1477.789147][ T29] audit: type=1800 audit(1737574681.802:1216): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3798" name="bus" dev="overlay" ino=1246 res=0 errno=0 [ 1478.497957][T19024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.508778][T19024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.161325][T19024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.213169][T19024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.220163][T19024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.297967][T19024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.511006][T19024] hsr_slave_0: entered promiscuous mode [ 1479.621455][ T5135] Bluetooth: hci5: command tx timeout [ 1480.241265][ T29] audit: type=1326 audit(1737574683.612:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19085 comm="syz.9.3801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde32b85d29 code=0x0 [ 1480.270493][T19024] hsr_slave_1: entered promiscuous mode [ 1480.312497][T19024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1480.387337][T19024] Cannot create hsr debugfs directory [ 1481.808445][T19097] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1484.823775][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.834570][T19122] Bluetooth: MGMT ver 1.23 [ 1484.845012][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.886330][T19024] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.975160][T19122] netlink: 20276 bytes leftover after parsing attributes in process `syz.3.3810'. [ 1485.295261][T19024] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.518676][T19122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.716226][T19024] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.299648][T19122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.479782][T19024] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.731582][ T29] audit: type=1326 audit(1737574690.732:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19130 comm="syz.8.3813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca2eb85d29 code=0x0 [ 1487.354022][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3812'. [ 1487.405673][T19122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.085398][T19122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.222229][T19024] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1489.342260][T19024] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1489.462995][T19024] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1489.694918][T19024] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1490.645738][T19122] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.701883][T19122] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.756112][T19122] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.614697][T19122] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.736584][T19024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.774538][T19024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.842826][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.850036][ T8637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.900981][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.908250][ T8637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.068361][T19024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1493.586114][T19024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.601344][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3827'. [ 1498.222289][T19024] veth0_vlan: entered promiscuous mode [ 1498.369297][T19024] veth1_vlan: entered promiscuous mode [ 1499.100331][T19024] veth0_macvtap: entered promiscuous mode [ 1499.109669][T19024] veth1_macvtap: entered promiscuous mode [ 1499.125456][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.136196][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.205077][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.275262][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.321099][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.499617][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.510707][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.545533][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.012376][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.071511][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.121232][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.132347][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.173874][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.249074][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.291309][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.031267][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.061302][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1501.074172][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.102870][T19024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.228325][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.281181][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.311603][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.361182][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.411300][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.481416][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.541842][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.571474][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.621145][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.781129][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.801169][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.821122][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.833661][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.863397][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.911279][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1501.961163][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.001297][T19024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1502.061139][T19024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1502.092735][T19024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.164222][T19024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.201313][T19024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.210249][T19024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.261236][T19024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.841004][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.884988][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.250307][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.292030][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.300110][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3838'. [ 1504.849565][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3783'. [ 1510.362798][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3849'. [ 1517.682719][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 1519.018671][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3864'. [ 1519.068285][T19337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1519.861619][T15090] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1520.077067][T15090] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1520.121292][T15090] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1520.210178][T15090] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1520.240845][T15090] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1520.261191][T15090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.314400][T15090] usb 8-1: config 0 descriptor?? [ 1520.589862][T15090] appletouch 8-1:0.0: Failed to read mode from device. [ 1520.617043][T15090] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1520.650762][T15090] usb 8-1: USB disconnect, device number 45 [ 1523.121408][T15494] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1523.531439][T15494] usb 10-1: Using ep0 maxpacket: 16 [ 1523.564428][T15494] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1523.596026][T15494] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1523.621469][T15494] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1523.650533][T15494] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1523.681579][T15494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.720312][T15494] usb 10-1: Product: syz [ 1523.735822][T15494] usb 10-1: Manufacturer: syz [ 1523.740560][T15494] usb 10-1: SerialNumber: syz [ 1525.183555][T15494] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 1525.303274][T15494] usb 10-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1525.381425][T15494] usb 10-1: USB disconnect, device number 40 [ 1525.537720][T19388] netlink: 'syz.4.3878': attribute type 3 has an invalid length. [ 1525.565482][T19388] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3878'. [ 1525.613195][T19383] udevd[19383]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1525.921246][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1526.414440][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1526.445760][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1526.845828][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1526.981355][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1527.000749][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.041848][ T9] usb 4-1: config 0 descriptor?? [ 1527.260244][ T9] appletouch 4-1:0.0: Failed to read mode from device. [ 1527.290775][ T9] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 1527.342484][ T9] usb 4-1: USB disconnect, device number 58 [ 1528.686955][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1529.020381][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1529.061323][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1529.196075][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.272585][ T9] usb 5-1: config 0 descriptor?? [ 1529.512657][ T9] appletouch 5-1:0.0: Could not find int-in endpoint [ 1529.519526][ T9] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1529.539129][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1530.781421][T19442] fuse: Unknown parameter 'user_i00000000000000000000' [ 1531.503724][ T25] usb 5-1: USB disconnect, device number 88 [ 1536.672636][ T29] audit: type=1800 audit(1737574740.702:1219): pid=19473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3900" name="bus" dev="overlay" ino=1369 res=0 errno=0 [ 1539.121314][ T5819] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1539.331552][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 1539.362752][ T5819] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1539.370963][ T5819] usb 5-1: config 0 has no interface number 0 [ 1539.414850][ T5819] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1539.441359][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.459935][ T5819] usb 5-1: Product: syz [ 1539.484013][ T5819] usb 5-1: Manufacturer: syz [ 1539.488753][ T5819] usb 5-1: SerialNumber: syz [ 1540.307737][ T5819] usb 5-1: config 0 descriptor?? [ 1540.661667][ T58] usb 5-1: USB disconnect, device number 89 [ 1545.155211][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3911'. [ 1546.336704][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.341126][ T29] audit: type=1800 audit(1737574750.342:1220): pid=19527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.3920" name="bus" dev="overlay" ino=132 res=0 errno=0 [ 1546.343588][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.560672][T19551] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3927'. [ 1554.451265][ T975] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1555.865673][ T975] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.612358][ T975] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1556.641554][ T975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.655327][ T975] usb 10-1: Product: syz [ 1556.659918][ T975] usb 10-1: Manufacturer: syz [ 1556.684665][ T975] usb 10-1: SerialNumber: syz [ 1556.744241][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3937'. [ 1557.281403][ T975] usb 10-1: can't set config #1, error -71 [ 1557.331457][ T975] usb 10-1: USB disconnect, device number 41 [ 1558.039109][ T5135] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1559.811308][ T5819] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1560.001611][ T5819] usb 9-1: Using ep0 maxpacket: 16 [ 1560.272599][ T5819] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1560.469602][ T5819] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1560.481431][ T5819] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1560.663299][ T5819] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1561.104072][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.112230][ T5819] usb 9-1: Product: syz [ 1561.116415][ T5819] usb 9-1: Manufacturer: syz [ 1561.122915][ T5819] usb 9-1: SerialNumber: syz [ 1561.592419][ T5819] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 1561.624289][ T5819] usb 9-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1563.107462][ T5819] usb 9-1: USB disconnect, device number 52 [ 1563.287776][T19633] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3949'. [ 1563.342773][T19630] udevd[19630]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.193151][T19660] netlink: 'syz.4.3957': attribute type 4 has an invalid length. [ 1566.230522][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3958'. [ 1566.824101][ T5819] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1566.994291][ T5819] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.015049][ T5819] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1567.052738][ T5819] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1567.065525][ T5819] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1567.095721][ T5819] usb 5-1: Manufacturer: syz [ 1567.100465][ T5819] usb 5-1: SerialNumber: syz [ 1567.161195][ T25] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1567.321191][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 1567.335834][T19660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1567.356163][ T25] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1567.357095][T19660] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1567.382097][ T25] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1567.400835][ T5819] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1567.425280][ T25] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1567.429244][ T5819] usb 5-1: USB disconnect, device number 90 [ 1567.463517][ T25] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1567.484377][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.511464][ T25] usb 9-1: Product: syz [ 1567.521141][ T25] usb 9-1: Manufacturer: syz [ 1567.538432][ T25] usb 9-1: SerialNumber: syz [ 1568.008420][ T25] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 1568.045516][ T25] usb 9-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1568.062178][T17993] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1568.113137][ T25] usb 9-1: USB disconnect, device number 53 [ 1568.204080][T19632] udevd[19632]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1568.347563][T17993] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.735595][T17993] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1568.772006][T17993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.032228][T17993] usb 8-1: Product: syz [ 1569.993904][T17993] usb 8-1: Manufacturer: syz [ 1569.998543][T17993] usb 8-1: SerialNumber: syz [ 1572.931252][T17993] cdc_ncm 8-1:1.0: bind() failure [ 1572.991744][T17993] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1572.998620][T17993] cdc_ncm 8-1:1.1: bind() failure [ 1573.051417][T17993] usb 8-1: USB disconnect, device number 46 [ 1574.159396][T19718] netlink: 'syz.9.3973': attribute type 4 has an invalid length. [ 1574.641997][T17993] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1574.862128][T17993] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.888860][T17993] usb 10-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1575.293832][T17993] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1575.331236][T17993] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1575.339866][T17993] usb 10-1: Manufacturer: syz [ 1575.347092][T17993] usb 10-1: SerialNumber: syz [ 1576.086203][T19718] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1576.175533][T19718] netlink: 4096 bytes leftover after parsing attributes in process `syz.9.3973'. [ 1576.193994][T17993] usbhid 10-1:36.0: couldn't find an input interrupt endpoint [ 1576.279841][T17993] usb 10-1: USB disconnect, device number 42 [ 1577.742136][T19744] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1579.511291][ T25] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1580.661378][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.683768][ T25] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1580.701633][T12970] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1580.721087][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.729128][ T25] usb 9-1: Product: syz [ 1580.752134][ T25] usb 9-1: Manufacturer: syz [ 1580.756786][ T25] usb 9-1: SerialNumber: syz [ 1580.901420][T12970] usb 10-1: Using ep0 maxpacket: 32 [ 1580.914581][T12970] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1580.950010][T12970] usb 10-1: config 17 has an invalid interface number: 11 but max is 0 [ 1581.048425][T12970] usb 10-1: config 17 has no interface number 0 [ 1581.070456][T12970] usb 10-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 1581.111276][T12970] usb 10-1: config 17 interface 11 has no altsetting 0 [ 1581.130714][T12970] usb 10-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 1581.141407][T12970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.149540][T12970] usb 10-1: Product: syz [ 1581.181175][T12970] usb 10-1: Manufacturer: syz [ 1581.200560][T12970] usb 10-1: SerialNumber: syz [ 1581.289313][T19768] netlink: 20276 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1581.423592][T19771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1581.527092][T19768] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.652390][T19768] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.803697][T19768] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.864356][ T25] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1581.871282][ T25] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1581.878919][ T25] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 1581.925211][T19768] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.736126][T12970] usb 10-1: bad CDC descriptors [ 1583.763769][T12970] usb 10-1: USB disconnect, device number 43 [ 1583.841592][T19593] udevd[19593]: setting owner of /dev/bus/usb/010/043 to uid=0, gid=0 failed: No such file or directory [ 1583.876370][ T25] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 1583.935445][ T25] cdc_ncm 9-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1583.935473][T19781] netlink: 'syz.9.3990': attribute type 4 has an invalid length. [ 1584.077377][T19768] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.101629][ T25] usb 9-1: USB disconnect, device number 54 [ 1584.256908][T19768] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.257823][ T25] cdc_ncm 9-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1584.320738][T19768] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.696211][T19768] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.872222][ T5819] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1586.302846][ T5819] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.315426][ T5819] usb 10-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1586.342678][ T5819] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1586.371310][ T5819] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1586.379705][ T5819] usb 10-1: Manufacturer: syz [ 1586.411044][ T5819] usb 10-1: SerialNumber: syz [ 1586.672816][T19781] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3990'. [ 1586.685361][T19781] netlink: 4096 bytes leftover after parsing attributes in process `syz.9.3990'. [ 1586.700803][ T5819] usbhid 10-1:36.0: couldn't find an input interrupt endpoint [ 1586.742290][ T5819] usb 10-1: USB disconnect, device number 44 [ 1587.840510][T19813] autofs: Unknown parameter '0x0000000000000000' [ 1588.202146][ T975] libceph: connect (1)[c::]:6789 error -101 [ 1588.220153][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 1588.491919][T19799] ceph: No mds server is up or the cluster is laggy [ 1589.447828][ T975] libceph: connect (1)[c::]:6789 error -101 [ 1589.454454][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 1589.493334][T19026] Bluetooth: hci5: command 0x0405 tx timeout [ 1593.248019][T19848] kvm: kvm [19847]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc308 [ 1593.290852][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1593.295509][T19848] kvm: kvm [19847]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1721 [ 1593.358423][T19838] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.395866][T19848] kvm: kvm [19847]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3f42 [ 1593.565912][T19848] kvm_intel: kvm [19847]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x77df [ 1593.596765][T19848] kvm: kvm [19847]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x7e22 [ 1593.666345][T19838] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.848715][T19848] kvm: kvm [19847]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb0b2 [ 1593.911941][T19848] kvm: kvm [19847]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xdbf6 [ 1594.053096][T19838] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.164266][T19856] autofs: Unknown parameter '0x0000000000000000' [ 1595.050211][T19838] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.070320][T19026] Bluetooth: hci5: command 0x0405 tx timeout [ 1595.761867][T19838] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.883485][T19838] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.149495][T19838] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.820079][T19838] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.912278][T19891] netlink: 20276 bytes leftover after parsing attributes in process `syz.9.4018'. [ 1599.475706][T19892] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4018'. [ 1599.527172][T19891] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.382929][T19891] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.553632][T19891] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.695378][T19891] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.815312][T19903] autofs: Unknown parameter '0x0000000000000000' [ 1604.984379][T19921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1605.038404][T19921] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1605.631857][ T5819] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1606.387641][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 1606.413565][ T5819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1606.426574][ T5819] usb 5-1: config 17 has an invalid interface number: 11 but max is 0 [ 1606.447648][ T5819] usb 5-1: config 17 has no interface number 0 [ 1606.459267][ T5819] usb 5-1: config 17 interface 11 altsetting 128 endpoint 0xA has an invalid bInterval 254, changing to 7 [ 1606.498448][ T5819] usb 5-1: config 17 interface 11 has no altsetting 0 [ 1606.512632][T19891] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.532101][ T5819] usb 5-1: New USB device found, idVendor=1e2d, idProduct=005b, bcdDevice=79.14 [ 1606.995609][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.006679][T19891] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.018495][ T5819] usb 5-1: Product: syz [ 1607.027724][ T5819] usb 5-1: Manufacturer: syz [ 1607.033873][T19891] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.042382][ T5819] usb 5-1: SerialNumber: syz [ 1607.069461][T19891] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.332515][T19939] CIFS mount error: No usable UNC path provided in device string! [ 1607.332515][T19939] [ 1607.342729][T19939] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1607.353592][T19939] overlayfs: overlapping lowerdir path [ 1607.444149][T19942] netlink: 20276 bytes leftover after parsing attributes in process `syz.3.4033'. [ 1607.715497][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.724588][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.036299][T19942] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.098806][T19942] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.165973][T19947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4033'. [ 1608.314719][T19942] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.368452][ T5819] usb 5-1: bad CDC descriptors [ 1608.494779][ T5819] usb 5-1: USB disconnect, device number 91 [ 1609.512235][T19953] autofs: Unknown parameter '0x0000000000000000' [ 1610.425646][T19942] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.934038][T19942] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.330814][T19942] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.359478][T19971] kvm: kvm [19970]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1612.412905][T19971] kvm: kvm [19970]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1612.414001][T19942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.422475][T19971] kvm: kvm [19970]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1612.502088][T19971] kvm: kvm [19970]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1612.547645][T19942] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.435990][T19991] netlink: 20276 bytes leftover after parsing attributes in process `syz.7.4046'. [ 1613.916960][T19995] CIFS mount error: No usable UNC path provided in device string! [ 1613.916960][T19995] [ 1613.927096][T19995] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1613.937444][T19995] overlayfs: overlapping lowerdir path [ 1613.964661][T19993] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4046'. [ 1614.130812][T19991] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.244486][T19999] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4041'. [ 1614.352071][T19999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1614.545876][T19991] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.784445][T20008] autofs: Unknown parameter '0x0000000000000000' [ 1615.348610][T19991] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.634090][ T9] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1616.054758][ T9] usb 9-1: config 0 has an invalid interface number: 142 but max is 1 [ 1616.075701][ T9] usb 9-1: config 0 has no interface number 0 [ 1616.091937][T19991] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.107833][ T9] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1616.127725][ T9] usb 9-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 1616.154106][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.172752][ T9] usb 9-1: Product: syz [ 1616.180164][ T9] usb 9-1: Manufacturer: syz [ 1616.191661][ T9] usb 9-1: SerialNumber: syz [ 1616.219610][ T9] usb 9-1: config 0 descriptor?? [ 1616.365202][T19991] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.670401][T19991] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.742426][T19991] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.777084][T19991] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.778475][ T9] msi2500 9-1:0.1: Registered as swradio24 [ 1616.810554][ T9] msi2500 9-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 1617.399508][ T9] videodev: could not get a free minor [ 1617.407316][ T9] msi2500 9-1:0.142: Failed to register as video device (-23) [ 1617.443191][ T9] msi2500 9-1:0.142: probe with driver msi2500 failed with error -23 [ 1617.483801][ T9] usb 9-1: USB disconnect, device number 55 [ 1617.946491][ T5135] Bluetooth: hci0: unexpected event for opcode 0x203b [ 1619.031168][T17993] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1619.341732][T17993] usb 9-1: Using ep0 maxpacket: 32 [ 1619.891377][T17993] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1619.900683][T17993] usb 9-1: config 0 has no interface number 0 [ 1619.972608][T17993] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1621.093664][T17993] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1621.154529][T17993] usb 9-1: string descriptor 0 read error: -71 [ 1621.160862][T17993] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1621.254989][T17993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.326301][T17993] usb 9-1: config 0 descriptor?? [ 1621.422148][T17993] usb 9-1: can't set config #0, error -71 [ 1621.503787][T17993] usb 9-1: USB disconnect, device number 56 [ 1621.921124][T17993] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1622.021167][ T5135] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1622.031473][ T5135] Bluetooth: hci0: Injecting HCI hardware error event [ 1622.042551][T19026] Bluetooth: hci0: hardware error 0x00 [ 1622.084672][T17993] usb 9-1: Using ep0 maxpacket: 16 [ 1622.171506][T17993] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.541870][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4063'. [ 1622.957088][T17993] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.241636][T17993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1623.248327][T17993] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1623.362468][T17993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.684781][T17993] usb 9-1: config 0 descriptor?? [ 1623.871515][T15090] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1624.043075][T15090] usb 5-1: Using ep0 maxpacket: 16 [ 1624.060885][T15090] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.083682][T15090] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.130853][T15090] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1624.161063][T15090] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1624.177102][T17993] hid-corsair-void 0003:1B1C:1B25.0010: unknown main item tag 0x0 [ 1624.190728][T15090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.223893][T15090] usb 5-1: config 0 descriptor?? [ 1624.250301][T17993] hid-corsair-void 0003:1B1C:1B25.0010: unknown main item tag 0x0 [ 1624.261713][T19026] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1624.344725][T17993] hid-corsair-void 0003:1B1C:1B25.0010: unknown main item tag 0x0 [ 1624.426191][T17993] hid-corsair-void 0003:1B1C:1B25.0010: unknown main item tag 0x0 [ 1624.437744][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.456891][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.491601][T17993] hid-corsair-void 0003:1B1C:1B25.0010: unknown main item tag 0x0 [ 1624.552169][T17993] hid-corsair-void 0003:1B1C:1B25.0010: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.8-1/input0 [ 1624.647650][T17993] usb 9-1: USB disconnect, device number 57 [ 1624.696869][T15090] usbhid 5-1:0.0: can't add hid device: -71 [ 1624.725995][T15090] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1624.727393][T17993] ------------[ cut here ]------------ [ 1624.741198][T17993] ODEBUG: free active (active state 0) object: ffff88801218a9a8 object type: timer_list hint: corsair_void_status_work_handler+0x0/0x190 [ 1624.789197][ T25] hid-corsair-void 0003:1B1C:1B25.0010: failed to request battery (reason: -19) [ 1624.801691][T15090] usb 5-1: USB disconnect, device number 92 [ 1624.878600][T17993] WARNING: CPU: 1 PID: 17993 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0 [ 1624.888669][T17993] Modules linked in: [ 1624.893018][T17993] CPU: 1 UID: 0 PID: 17993 Comm: kworker/1:3 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 1624.903903][T17993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1624.914405][T17993] Workqueue: usb_hub_wq hub_event [ 1624.920131][T17993] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 1624.926530][T17993] Code: e8 cb 5c 3d fd 4c 8b 0b 48 c7 c7 40 4b 5f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 fb 16 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 f8 8c 53 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 1624.946427][T17993] RSP: 0018:ffffc9000bfbeeb8 EFLAGS: 00010286 [ 1624.952708][T17993] RAX: e75d73ad34d4bd00 RBX: ffffffff8c0ca540 RCX: 0000000000100000 [ 1624.960750][T17993] RDX: ffffc9001a3c5000 RSI: 0000000000040749 RDI: 000000000004074a [ 1624.968910][T17993] RBP: ffffffff8c5f4cc0 R08: ffffffff81603052 R09: 1ffff920017f7d70 [ 1624.977186][T17993] R10: dffffc0000000000 R11: fffff520017f7d71 R12: 0000000000000000 [ 1624.985792][T17993] R13: ffffffff8c5f4bd8 R14: dffffc0000000000 R15: ffff88801218a9a8 [ 1624.993915][T17993] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1625.003218][T17993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1625.009957][T17993] CR2: 00007f16443fcca0 CR3: 000000005d056000 CR4: 00000000003526f0 [ 1625.018065][T17993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1625.027029][T17993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1625.035900][T17993] Call Trace: [ 1625.039227][T17993] [ 1625.042314][T17993] ? __warn+0x165/0x4d0 [ 1625.046638][T17993] ? debug_print_object+0x17a/0x1f0 [ 1625.051970][T17993] ? report_bug+0x2b3/0x500 [ 1625.056509][T17993] ? debug_print_object+0x17a/0x1f0 [ 1625.061995][T17993] ? handle_bug+0x60/0x90 [ 1625.066381][T17993] ? exc_invalid_op+0x1a/0x50 [ 1625.071155][T17993] ? asm_exc_invalid_op+0x1a/0x20 [ 1625.076264][T17993] ? __warn_printk+0x292/0x360 [ 1625.081184][T17993] ? debug_print_object+0x17a/0x1f0 [ 1625.086409][T17993] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 1625.093276][T17993] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 1625.100066][T17993] debug_check_no_obj_freed+0x45b/0x580 [ 1625.105865][T17993] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1625.111998][T17993] ? kasan_quarantine_put+0xdc/0x230 [ 1625.117326][T17993] ? devres_release_group+0x328/0x350 [ 1625.123790][T17993] ? devres_release_group+0x328/0x350 [ 1625.129999][T17993] kfree+0x115/0x430 [ 1625.134007][T17993] devres_release_group+0x328/0x350 [ 1625.139263][T17993] ? __pfx_devres_release_group+0x10/0x10 [ 1625.145157][T17993] ? __pfx_corsair_void_remove+0x10/0x10 [ 1625.150794][T17993] ? kernfs_put+0x315/0x370 [ 1625.155400][T17993] ? sysfs_remove_group+0x242/0x2c0 [ 1625.160644][T17993] ? __pfx_corsair_void_remove+0x10/0x10 [ 1625.166837][T17993] hid_device_remove+0x250/0x370 [ 1625.171908][T17993] ? __pfx_hid_device_remove+0x10/0x10 [ 1625.177399][T17993] device_release_driver_internal+0x4a9/0x7c0 [ 1625.183568][T17993] bus_remove_device+0x34f/0x420 [ 1625.188527][T17993] device_del+0x57a/0x9b0 [ 1625.192950][T17993] ? __pfx_device_del+0x10/0x10 [ 1625.197819][T17993] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1625.204220][T17993] hid_destroy_device+0x6a/0x1b0 [ 1625.209191][T17993] usbhid_disconnect+0x9e/0xc0 [ 1625.214232][T17993] usb_unbind_interface+0x25b/0x940 [ 1625.219445][T17993] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1625.226293][T17993] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1625.232797][T17993] device_release_driver_internal+0x503/0x7c0 [ 1625.239013][T17993] bus_remove_device+0x34f/0x420 [ 1625.244078][T17993] device_del+0x57a/0x9b0 [ 1625.248422][T17993] ? kobject_put+0x272/0x480 [ 1625.253138][T17993] ? __pfx_device_del+0x10/0x10 [ 1625.258068][T17993] ? kobject_put+0x44d/0x480 [ 1625.262783][T17993] usb_disable_device+0x3bf/0x850 [ 1625.267843][T17993] usb_disconnect+0x340/0x950 [ 1625.272666][T17993] hub_event+0x1ebc/0x5150 [ 1625.277118][T17993] ? debug_object_deactivate+0x2d5/0x390 [ 1625.282926][T17993] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1625.288135][T17993] ? __pfx_hub_event+0x10/0x10 [ 1625.292962][T17993] ? __pfx_lock_acquire+0x10/0x10 [ 1625.297985][T17993] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1625.305434][T17993] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1625.311859][T17993] ? process_scheduled_works+0x976/0x1840 [ 1625.317619][T17993] process_scheduled_works+0xa66/0x1840 [ 1625.323360][T17993] ? __pfx_process_scheduled_works+0x10/0x10 [ 1625.329895][T17993] ? assign_work+0x364/0x3d0 [ 1625.334985][T17993] worker_thread+0x870/0xd30 [ 1625.339580][T17993] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1625.345554][T17993] ? __kthread_parkme+0x169/0x1d0 [ 1625.350609][T17993] ? __pfx_worker_thread+0x10/0x10 [ 1625.355775][T17993] kthread+0x7a9/0x920 [ 1625.359898][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.364572][T17993] ? __pfx_worker_thread+0x10/0x10 [ 1625.369700][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.374400][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.379033][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.383761][T17993] ? _raw_spin_unlock_irq+0x23/0x50 [ 1625.388980][T17993] ? lockdep_hardirqs_on+0x99/0x150 [ 1625.394263][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.398859][T17993] ret_from_fork+0x4b/0x80 [ 1625.403332][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.407942][T17993] ret_from_fork_asm+0x1a/0x30 [ 1625.412831][T17993] [ 1625.415901][T17993] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1625.423199][T17993] CPU: 1 UID: 0 PID: 17993 Comm: kworker/1:3 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 1625.433778][T17993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1625.443832][T17993] Workqueue: usb_hub_wq hub_event [ 1625.448854][T17993] Call Trace: [ 1625.452123][T17993] [ 1625.455040][T17993] dump_stack_lvl+0x241/0x360 [ 1625.459887][T17993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1625.465080][T17993] ? __pfx__printk+0x10/0x10 [ 1625.469757][T17993] ? vscnprintf+0x5d/0x90 [ 1625.474080][T17993] panic+0x349/0x880 [ 1625.477977][T17993] ? __warn+0x174/0x4d0 [ 1625.482124][T17993] ? __pfx_panic+0x10/0x10 [ 1625.486720][T17993] ? ret_from_fork_asm+0x1a/0x30 [ 1625.491655][T17993] __warn+0x344/0x4d0 [ 1625.495633][T17993] ? debug_print_object+0x17a/0x1f0 [ 1625.500824][T17993] report_bug+0x2b3/0x500 [ 1625.505146][T17993] ? debug_print_object+0x17a/0x1f0 [ 1625.510346][T17993] handle_bug+0x60/0x90 [ 1625.514499][T17993] exc_invalid_op+0x1a/0x50 [ 1625.519083][T17993] asm_exc_invalid_op+0x1a/0x20 [ 1625.523944][T17993] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 1625.529778][T17993] Code: e8 cb 5c 3d fd 4c 8b 0b 48 c7 c7 40 4b 5f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 fb 16 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 f8 8c 53 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 1625.549402][T17993] RSP: 0018:ffffc9000bfbeeb8 EFLAGS: 00010286 [ 1625.555665][T17993] RAX: e75d73ad34d4bd00 RBX: ffffffff8c0ca540 RCX: 0000000000100000 [ 1625.563628][T17993] RDX: ffffc9001a3c5000 RSI: 0000000000040749 RDI: 000000000004074a [ 1625.571599][T17993] RBP: ffffffff8c5f4cc0 R08: ffffffff81603052 R09: 1ffff920017f7d70 [ 1625.579569][T17993] R10: dffffc0000000000 R11: fffff520017f7d71 R12: 0000000000000000 [ 1625.587549][T17993] R13: ffffffff8c5f4bd8 R14: dffffc0000000000 R15: ffff88801218a9a8 [ 1625.595515][T17993] ? __warn_printk+0x292/0x360 [ 1625.600287][T17993] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 1625.607071][T17993] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 1625.613839][T17993] debug_check_no_obj_freed+0x45b/0x580 [ 1625.619423][T17993] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1625.625515][T17993] ? kasan_quarantine_put+0xdc/0x230 [ 1625.630807][T17993] ? devres_release_group+0x328/0x350 [ 1625.636208][T17993] ? devres_release_group+0x328/0x350 [ 1625.641679][T17993] kfree+0x115/0x430 [ 1625.645612][T17993] devres_release_group+0x328/0x350 [ 1625.650823][T17993] ? __pfx_devres_release_group+0x10/0x10 [ 1625.656592][T17993] ? __pfx_corsair_void_remove+0x10/0x10 [ 1625.662231][T17993] ? kernfs_put+0x315/0x370 [ 1625.666751][T17993] ? sysfs_remove_group+0x242/0x2c0 [ 1625.671969][T17993] ? __pfx_corsair_void_remove+0x10/0x10 [ 1625.677631][T17993] hid_device_remove+0x250/0x370 [ 1625.682585][T17993] ? __pfx_hid_device_remove+0x10/0x10 [ 1625.688060][T17993] device_release_driver_internal+0x4a9/0x7c0 [ 1625.694174][T17993] bus_remove_device+0x34f/0x420 [ 1625.699400][T17993] device_del+0x57a/0x9b0 [ 1625.703732][T17993] ? __pfx_device_del+0x10/0x10 [ 1625.708602][T17993] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1625.714925][T17993] hid_destroy_device+0x6a/0x1b0 [ 1625.719882][T17993] usbhid_disconnect+0x9e/0xc0 [ 1625.724658][T17993] usb_unbind_interface+0x25b/0x940 [ 1625.729870][T17993] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1625.735608][T17993] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1625.741374][T17993] device_release_driver_internal+0x503/0x7c0 [ 1625.747471][T17993] bus_remove_device+0x34f/0x420 [ 1625.752588][T17993] device_del+0x57a/0x9b0 [ 1625.756914][T17993] ? kobject_put+0x272/0x480 [ 1625.761502][T17993] ? __pfx_device_del+0x10/0x10 [ 1625.766368][T17993] ? kobject_put+0x44d/0x480 [ 1625.770959][T17993] usb_disable_device+0x3bf/0x850 [ 1625.776038][T17993] usb_disconnect+0x340/0x950 [ 1625.780729][T17993] hub_event+0x1ebc/0x5150 [ 1625.785244][T17993] ? debug_object_deactivate+0x2d5/0x390 [ 1625.790918][T17993] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1625.796147][T17993] ? __pfx_hub_event+0x10/0x10 [ 1625.800921][T17993] ? __pfx_lock_acquire+0x10/0x10 [ 1625.806138][T17993] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1625.812140][T17993] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1625.818486][T17993] ? process_scheduled_works+0x976/0x1840 [ 1625.824223][T17993] process_scheduled_works+0xa66/0x1840 [ 1625.829802][T17993] ? __pfx_process_scheduled_works+0x10/0x10 [ 1625.835811][T17993] ? assign_work+0x364/0x3d0 [ 1625.840535][T17993] worker_thread+0x870/0xd30 [ 1625.845127][T17993] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1625.851025][T17993] ? __kthread_parkme+0x169/0x1d0 [ 1625.856131][T17993] ? __pfx_worker_thread+0x10/0x10 [ 1625.861233][T17993] kthread+0x7a9/0x920 [ 1625.865297][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.869877][T17993] ? __pfx_worker_thread+0x10/0x10 [ 1625.875007][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.879587][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.884185][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.888764][T17993] ? _raw_spin_unlock_irq+0x23/0x50 [ 1625.893950][T17993] ? lockdep_hardirqs_on+0x99/0x150 [ 1625.899139][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.903717][T17993] ret_from_fork+0x4b/0x80 [ 1625.908138][T17993] ? __pfx_kthread+0x10/0x10 [ 1625.912721][T17993] ret_from_fork_asm+0x1a/0x30 [ 1625.917489][T17993] [ 1625.920779][T17993] Kernel Offset: disabled [ 1625.925168][T17993] Rebooting in 86400 seconds..