last executing test programs: 2m19.092951094s ago: executing program 2 (id=2000): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x6, 0x0, 0xfffffdf5}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1, 0x4}, 0x38) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000440)={0x22a0}, 0x41, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m41.896161788s ago: executing program 2 (id=2000): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x6, 0x0, 0xfffffdf5}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1, 0x4}, 0x38) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000440)={0x22a0}, 0x41, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m21.421653727s ago: executing program 2 (id=2000): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x6, 0x0, 0xfffffdf5}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1, 0x4}, 0x38) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000440)={0x22a0}, 0x41, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 56.495283262s ago: executing program 2 (id=2000): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x6, 0x0, 0xfffffdf5}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1, 0x4}, 0x38) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000440)={0x22a0}, 0x41, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 16.675247166s ago: executing program 2 (id=2000): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x6, 0x0, 0xfffffdf5}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1, 0x4}, 0x38) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000440)={0x22a0}, 0x41, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.471973545s ago: executing program 4 (id=2381): socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}, {&(0x7f0000000140)="075dcc8fe0", 0x5}, {&(0x7f0000000380)="c912bdf5e36c95ab82f19893b8ee54bd71692d614717ae28ca4e9c574baefd436b8626d2a4d16897aa7bbfb3ee64af440a73deac504bb93bbc66c43382cf74fc78d8835709d28b0dfe165fa3413c13dcec9687357d1843461b821a992f587efbe305d53f03c6ca065e6f419d4de7f03d1e21e1a234ad06fa9bfa69bf6cdeb3ae6afe2277b1a794a9f729fa6848e2dec438d18dfa3d4fb9040c941c9d80499c8112792ba3739fc90b218a983f607aea583cc1a62378", 0xb5}], 0x3) socket$inet(0x2, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r2}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) get_mempolicy(&(0x7f00000001c0), 0x0, 0x0, &(0x7f0000502000/0x1000)=nil, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff0000008500000061", @ANYRESHEX=0x0, @ANYRES32], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040), 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x4) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="04ff9a1b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bbfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a67068801c85cc7a9467ccc15c0184f9dd3c5e9a79557de090e6b802a8f6ef793559296443e9390c638572de513228d22ba7d5b75ea0f616a8260c35248b713832df84a92289b88cfa03fcde"], 0x9d) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962"], 0x22) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x8, 0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x1b) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000000)={{0x1}}) 4.565868705s ago: executing program 4 (id=2385): unshare(0x2000680) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x624442, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) openat(0xffffffffffffffff, 0x0, 0x20002, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000003c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 3.565009616s ago: executing program 4 (id=2391): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, &(0x7f0000000340), &(0x7f0000000300)=0xfffffffffffffda7) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x450}}, 0x4000041) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e0005001801"], 0x17) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) 3.564421907s ago: executing program 3 (id=2392): bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002900)="ccb0f1104dc7f600b9a3720847aac9a2b51a80af9565", 0x16}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/207, 0xcf}], 0x1}}], 0x1, 0x0, 0x0) 3.419943286s ago: executing program 3 (id=2393): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r3}, 0x10) brk(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x1f}, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 3.067201098s ago: executing program 0 (id=2394): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, &(0x7f0000000180), 0x4003) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x41) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x0, @output}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x20000000000005) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0xf06, &(0x7f0000002d40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x0, 0x1) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102388, 0x18ff4}], 0x1, 0x9, 0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4600, 0x0) r3 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) r5 = dup(r4) sendfile(r5, r3, 0x0, 0x89ffc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) 2.794971466s ago: executing program 1 (id=2395): recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0x1df5, 0x4) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f00000002c0)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 2.694361285s ago: executing program 4 (id=2396): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='percpu_free_percpu\x00', r9}, 0x10) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 2.60375015s ago: executing program 1 (id=2397): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4c632602c", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbb", 0xa3}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1", 0xe3}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)="b45a498ea447ee604887121819ab170a8c4da8", 0x13}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3", 0x4e}], 0x6}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.412271829s ago: executing program 0 (id=2398): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0xfffffff, 0x0, 0x3, 0x0, "7f12ddc1517600000000000000000000eaff00"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000a80)=0xd) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = accept$alg(r7, 0x0, 0x0) r9 = dup(r8) write$FUSE_INIT(r9, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r9, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) read$FUSE(r9, &(0x7f0000002000)={0x2020}, 0xfffffc7c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf25420000000af305003512071bc3740000d55080a70a000600667681a5ab0000130a00ae15eb060008021100000000000a00060033ddbe2917c903000a000600f8650800000007f2e0db303185991315"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_open_pts(r0, 0x0) r11 = dup3(r0, r10, 0x0) read$FUSE(r11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f00000005c0)={0x7fff, 0xfffa, 0x8008, 0x6, 0x2, 0x7, 0x101, 0x1f, 0x0}, &(0x7f0000000600)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, &(0x7f0000000640)={r12, @in={{0x2, 0x4e20, @private=0xa010101}}, 0xed9, 0x4, 0x53, 0x4, 0x3}, &(0x7f0000000700)=0x98) 2.403101662s ago: executing program 1 (id=2399): socket$inet(0x2, 0x4000000000000001, 0x6) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) 2.326270189s ago: executing program 3 (id=2400): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x40) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x3, 'syz1\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'tunl0\x00', {'veth1\x00'}, 0xdac3}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {r1, r2+60000000}}, &(0x7f00000001c0)) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000200)='\x00', 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x83}, @generic={0x6, 0x6, 0x5, 0x6000, 0xd0}, @map_fd={0x18, 0xa}, @exit, @map_fd={0x18, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000300)='GPL\x00', 0x0, 0x57, &(0x7f0000000340)=""/87, 0x41100, 0x73, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xa, 0x10001, 0xfffffff1}, 0x10, 0x2ff83, 0xffffffffffffffff, 0x4, &(0x7f0000000440)=[0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xc, 0x8}, {0x2, 0x5, 0xe, 0x9}, {0x4, 0x4, 0x5}], 0x10, 0x4}, 0x90) poll(&(0x7f0000001040)=[{r0, 0x1}, {r3, 0x4}, {0xffffffffffffffff, 0x8060}], 0x3, 0x1) 2.260190323s ago: executing program 1 (id=2401): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f0009"], 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="030f00000000000000f708000000150001"], 0x2c}}, 0x0) 2.259665876s ago: executing program 3 (id=2402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='syzkaller\x00', 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000400)=@ieee802154, 0x80, &(0x7f0000000100)=[{&(0x7f0000000700)=""/219, 0xdb}], 0x1, &(0x7f00000001c0)=""/17, 0x11}}], 0x1, 0x10040, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) 1.76892619s ago: executing program 4 (id=2403): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x28) r4 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r4, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x2, 0xc8, @any, 0x0, 0x9, 0x8, 0x2, 0x1, 0x9}}}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x67b}, {0x1, 0x5, 0x3, 0x8000}, {0x7, 0x5, 0x6, 0x53}, {0x8, 0xd0, 0x4, 0x3}, {0x20, 0x5b, 0x8, 0x71}]}, 0x8) io_setup(0x9, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e1f0a00000000000000ff07858aff0105d904f44b7d19142618104008aa278aef596ca670866d1a449da20a3caf3b91d38c16cec3bcbe7da5b3b3c957e458b4b1cd2282d713bb80c06c9114f10ee47cedcd13972c6285768ce0303e88e20b5f6a59054099aa3bf64d334543330ea740ae822b113a23577ea84c6635e3426bb2c73d4c8dbac61074a0bf20683376c90805cb48c5ff3ceee37f53"], 0x14) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x320000) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="840c0803c800188100da4c4adec6f5fe890553000000008eed7ce31c9562974285e13e1ed73d54bfbe64ab8f2d0f3247fea9ca3fc0f006d4f3a5e5b366ffed6b37c909725dd2d2e9c8ab6ecc74adfed78cc5fddc0df3e8965d736b4d5b0f54b100dc55f29d6795690f5560aa148d80d01440cbe6cf29bf9464f03d83e8e3725b5d5f7dd3712f2bc31022c99d50373f62ceb0226a0293d40a345d97765858e7197f9ed44f7b6e71780cfbffffffcb9747a6b1f5605c8b806ad0f258edbfe0"], 0xb) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x5c) 1.610478826s ago: executing program 0 (id=2404): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "c7241275f410a1a0e2c6c979634165ca47bef8"}) read(r0, &(0x7f0000000100)=""/27, 0x1b) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$TIOCSETD(r0, 0x5423, 0x0) 1.260397761s ago: executing program 3 (id=2405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="95002000f4ff0000"], &(0x7f0000000200)='GPL\x00'}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3}, @l2cap_cid_le_signaling={{}, @l2cap_cmd_rej_unk={{0x1, 0xe}, {0xff}}}}, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000540)={0x8, &(0x7f0000000500)=[{0x20, 0x0, 0x1, 0x8001}, {0x23, 0x0, 0x0, 0x1f}, {0xff, 0x0, 0x0, 0x2}, {0x4, 0x6, 0x8, 0x7f03}, {0x6, 0xff, 0xfc, 0x6}, {0x1, 0x4, 0xf0, 0x1}, {0x2, 0xa, 0x7, 0x80000000}, {0x3, 0x2, 0x1, 0xff}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000740)="ceb9adac", 0xb9ce}], 0x1}}], 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) mknodat(r6, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) execveat(r6, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000100)={0x3, 'bond0\x00', {0x6}, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010400000000000000009200000008000300", @ANYRES32=r8], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0x2, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x4, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0x8) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x3, @vbi}}) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x5}, 0x48) 1.197426319s ago: executing program 2 (id=2000): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x6, 0x0, 0xfffffdf5}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1, 0x4}, 0x38) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000440)={0x22a0}, 0x41, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 258.878994ms ago: executing program 0 (id=2406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=@gettaction={0x3c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 257.083889ms ago: executing program 1 (id=2407): recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0x1df5, 0x4) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f00000002c0)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) 249.728475ms ago: executing program 3 (id=2408): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x7, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40884}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000200201005) 243.251258ms ago: executing program 4 (id=2409): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[], 0x1, [{0x0, 0x0}]}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100627269646765000000000000794e690fd9be33b6"], 0x3c}, 0x1, 0xba01}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000a00000074000000000e00", 0x1b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 140.063707ms ago: executing program 1 (id=2410): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e8010000", @ANYRES16, @ANYBLOB="000029bd7000fedbdf25110000000c00038008000200050000000c0009800800010000008000cc0004801300010062726f6164636173742d6c696e6b00000900010073797a30000000000c0007800800020003000000540007809bbc0400910000000800020007000000080001002000000008000200080000000800010008000000080003002000000008000300e4"], 0x1e8}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000340)='contention_begin\x00', &(0x7f0000000900)='host1x_cdma_push_wide\x00', 0x0) fcntl$setsig(r7, 0xa, 0x21) 123.218291ms ago: executing program 0 (id=2411): socket$inet(0x2, 0x4000000000000001, 0x6) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) 0s ago: executing program 0 (id=2412): syz_open_dev$hidraw(&(0x7f0000000040), 0x80000000, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = socket(0x11, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000001, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_submit(r4, 0x0, 0x0) read(r5, &(0x7f0000000280)=""/240, 0xf0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(r5, 0x8010aa02, &(0x7f0000000380)={{&(0x7f000048b000/0x4000)=nil, 0x4000}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80002) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="58000000140091d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff00000001100003000000deff0000000200000000", 0x53}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r9]) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007d40)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000b40000000000500040000000000050005000000000012000300686173683a6e65742c706f727400000033435d7979ca9a2a58125b256118ab242835f1e6ac12339799"], 0x58}}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x0, r7, 0x0, &(0x7f0000ff7000/0x1000)=nil, 0x1000}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4457, 0x4) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000007d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000007cc0)={&(0x7f0000000200)=@newtfilter={0x7a9c, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0xfff1}, {0x7, 0x9}, {0x4, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x7a6c, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0xfff2}}, @TCA_FLOW_BASECLASS={0x8}, @TCA_FLOW_ACT={0x7a50, 0x9, 0x0, 0x1, [@m_simple={0xe0, 0x17, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, ')\x8a^}!\x00'}, @TCA_DEF_DATA={0xa, 0x3, '[--:^\x00'}]}, {0x9b, 0x6, "76f17cfca2b737f52c2bc850a8716831dcc0978380ef1c4ce48fbb4a7f52e04fa27fa19def337a79c6eeaed67b31425b32b33807b403d89ffc0ee1e4067c6231e6268c3cdeb67c0f6c90810d920b9c1a6a505a1c3e430768077293c24c2b16547243b5cd93db56fb74178ffc83471d136f7a541264306343f34a8679e71fd0d57d388edb476a415b7df0e3f7da43d71ad9cf6854686560"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x6560, 0x8, 0x0, 0x0, {{0xa}, {0x647c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x9, 0x5, 0x20000005, 0x4, 0xffff}, 0xb6, 0xc, [{0x1c000, 0x6, 0x4, 0x9, 0x7, 0xd}, {0x6, 0x933f, 0x100, 0x1, 0x10, 0x4}, {0x4, 0x0, 0x800, 0x8, 0x7, 0x3}]}, [{0x8001, 0x6, 0x2f, 0x10, 0x3, 0x8}, {0x9, 0x20a1ec9, 0xbdb, 0x4, 0xe7, 0x2c}, {0x1, 0xc2, 0xfffffff7, 0x9, 0xb3bb, 0x1}, {0x3, 0x5, 0x7, 0x6, 0x4, 0x6}, {0x4, 0x3, 0xa, 0xd, 0x5190, 0x101}, {0x3, 0x8, 0x4, 0x3, 0x4, 0x400}, {0x81, 0x6, 0x7fff, 0x401, 0x4, 0x2}, {0x1, 0x10, 0x2, 0x7, 0x9, 0xc}, {0x8, 0x6, 0x6, 0x3, 0x2, 0x4}, {0xad, 0x3c4, 0x6, 0x701, 0xd, 0x8}, {0x2, 0xff, 0x200040, 0x2, 0x9, 0x4800}, {0x2, 0x5, 0x9, 0x8, 0x0, 0x51a}, {0x2, 0x4, 0x7fffffff, 0x3, 0x68}, {0x2, 0x7d1, 0x7, 0xb858, 0x4, 0x6eb28a3d}, {0x2, 0x8000, 0x7, 0x6, 0x4, 0xb71c}, {0xffff, 0x3, 0x80000001, 0x800, 0x8, 0x81}, {0x3, 0x8, 0x3, 0x0, 0x7, 0x9}, {0x1, 0x1, 0x275, 0x4, 0x7c, 0x10001}, {0x6e6, 0x2, 0x6, 0x3, 0x0, 0x4a}, {0x8, 0xdf, 0x5, 0xb7f, 0xb6000000, 0x80000001}, {0x0, 0x4, 0x6, 0xf, 0xe, 0x8}, {0x7ff, 0x400, 0x0, 0x80000001, 0x1, 0x10000}, {0x6, 0x3, 0xbf94, 0x80000000, 0x2, 0x5}, {0x4, 0xfffffff8, 0x847, 0x9, 0xfffffc00, 0x800}, {0x5, 0xffffffc0, 0x9, 0x8, 0x8, 0xfffffff9}, {0x4, 0xffffffff, 0x6383, 0x207, 0x3, 0xe6}, {0x0, 0xffffffff, 0x6, 0x8000, 0x8, 0x1ff}, {0x6, 0x8, 0x1ff, 0x101, 0x2, 0x3}, {0x0, 0x410, 0x2ab, 0x481, 0x2, 0x4}, {0xc1f, 0x5, 0xfffffff7, 0x4, 0x1, 0x5}, {0xfff, 0xdb, 0x4, 0x4, 0x5, 0x2d9}, {0x8, 0x4, 0x1, 0x7, 0x1}, {0x0, 0x3ff, 0x5, 0x10000, 0x8, 0x80}, {0x1850, 0x1, 0x2, 0xfe, 0x7ff, 0x2f}, {0x0, 0x7, 0xfffffeac, 0x7, 0x6c, 0x81}, {0x4, 0xfffff801, 0x40, 0xfffffff7, 0x2, 0x100}, {0x1, 0x3, 0xffffffff, 0x8, 0x6, 0x4}, {0x748e611b, 0x0, 0x3f, 0x9, 0x80000001, 0xa53}, {0xffffffff, 0x2, 0x5, 0x6, 0x8, 0x6}, {0x7, 0xd, 0x6, 0xffff03e9, 0x4, 0x101}, {0x1000, 0xa, 0x9, 0xf0d0000, 0x9, 0x9}, {0x9, 0xe, 0x3, 0x800, 0x8, 0x6}, {0x2, 0x400, 0x6, 0x800, 0xfffffffb, 0x10000}, {0xff, 0x80000000, 0xe, 0x1, 0x8}, {0x3, 0xa, 0x4, 0x7, 0x7, 0x10}, {0x36a, 0x2, 0xa53, 0x0, 0xf23, 0x4000}, {0x8, 0x4, 0x9, 0x3, 0x9, 0x3}, {0x4, 0x3, 0x9ee6, 0x4, 0x7}, {0x1ff, 0x1, 0x0, 0x3, 0x9, 0x4}, {0x6, 0x2, 0x9, 0x877, 0x6, 0xb3}, {0x2b, 0x4, 0x81, 0x800, 0x8, 0xffffffff}, {0x1, 0xfffffffc, 0x1, 0x3, 0x40, 0xfffffffa}, {0xd26f, 0xff, 0x401, 0x80010, 0x9, 0x8}, {0x2, 0x3, 0x4, 0x1, 0x5, 0x6}, {0x4800, 0x1, 0x5, 0x9, 0x6, 0x2}, {0x0, 0x6, 0x7, 0x5c1e4ede, 0x3, 0x2}, {0xfffffff9, 0xd495, 0x4, 0x3ff, 0x8, 0x8}, {0x5, 0x81, 0x9, 0x36ea, 0xe43, 0x4}, {0x0, 0x5, 0x9, 0x4, 0x7, 0xbf01}, {0x4d, 0xc2, 0x1, 0x0, 0x81, 0x5}, {0x2, 0x3, 0x4, 0x759a, 0x2, 0x80}, {0x4, 0x2, 0x3, 0x400, 0x6, 0xac9}, {0xfffffff7, 0x2, 0x0, 0xa3b, 0x817}, {0x20000, 0x0, 0x4, 0x3, 0x3, 0x4}, {0x1, 0x10000, 0x5, 0x6, 0x96, 0x5}, {0xcf, 0x3, 0x6, 0x5, 0x7fff, 0x2}, {0x0, 0x4, 0x3, 0xcfde, 0x0, 0x200}, {0x800, 0x8, 0x2c7, 0xff, 0x10000}, {0xa9a, 0x2, 0x7, 0x0, 0x2}, {0x1, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x9, 0x2, 0x2, 0x6, 0xcd0, 0x4}, {0x8001, 0x8, 0x5, 0x0, 0x8, 0x5}, {0x66, 0x9, 0x10001, 0x1, 0x5, 0x3}, {0x101, 0x4, 0x977d, 0x2, 0x7, 0xeeb}, {0x7fff, 0x1, 0x6, 0x7f, 0x80000001, 0x200}, {0x8, 0x9, 0x6, 0x7, 0x5, 0x51}, {0x8e2, 0xcb, 0x3ff, 0x4, 0x3, 0x4}, {0xfff, 0x5, 0x6, 0xff, 0x4, 0xf}, {0x1ff, 0xa0a, 0x2, 0x1, 0x4, 0xffffffff}, {0x9, 0x7, 0xfffffff9, 0x3, 0x7, 0x388}, {0x7ff, 0xa9, 0x2, 0x0, 0xb, 0x3a}, {0x8, 0x1, 0xba9, 0x3285, 0x3, 0x1}, {0x2089f126, 0x5, 0x0, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x4, 0x2, 0x7, 0x4}, {0x6, 0xe23d, 0x3, 0x1, 0xc, 0x81}, {0x80000001, 0x7f, 0x2e, 0xb, 0x8001, 0x4}, {0x6, 0x8000, 0x80000000, 0x6, 0x5, 0x8000}, {0x9ef, 0x7, 0x8da, 0x80000000, 0xfffff337, 0x8576}, {0xad, 0x10001, 0x2, 0x8000, 0x13a, 0xd19}, {0x1, 0x80000000, 0x1, 0x5, 0xde, 0x2}, {0x7fffffff, 0xf2, 0xaa6, 0xfffffff8, 0xf1c3, 0xa4e}, {0x2, 0x2137, 0xa, 0x5, 0x3ff, 0x200}, {0x6, 0x4, 0xc9ac, 0x6, 0x8}, {0xae62, 0x100, 0x0, 0x3, 0x7605, 0x7}, {0x7, 0x2, 0x7, 0x4, 0x1, 0xfffff554}, {0x1, 0x5, 0x7, 0x5, 0x3, 0x91a3}, {0x8, 0x3, 0x5, 0xfffffffe, 0x6, 0x7}, {0x7, 0xffff, 0x4, 0x5, 0x86a, 0x5}, {0x8, 0x0, 0x8, 0xf8b1, 0x10000, 0xae8}, {0x9, 0x80000000, 0xff, 0x7f, 0xfffffffa, 0x3ff}, {0x0, 0x0, 0xe92b, 0x7, 0xe, 0x3}, {0x3, 0x8e05, 0x7f, 0x2, 0xfffffffd, 0x10001}, {0x5, 0x4, 0x2, 0x0, 0xba9, 0xb}, {0x1, 0x6, 0xf, 0x7fffffff, 0x8663, 0x8}, {0x8, 0x4, 0xfff, 0x1, 0xe42214, 0x80000001}, {0x7, 0x2, 0x9a9d, 0x4, 0x2, 0x6}, {0x1, 0x401, 0x8, 0x200, 0x3ff, 0x2}, {0x6, 0x7, 0x7, 0x6, 0x5, 0x80000001}, {0x2a, 0x80, 0x3, 0x7, 0x64bb, 0x8000}, {0x8000, 0x6, 0xfffffff9, 0x7, 0x8001, 0xb}, {0x59, 0x101, 0x4, 0x1290ffb5, 0x1000, 0x5}, {0x2, 0x9, 0x6, 0x2, 0x1000, 0x2}, {0x5af6, 0x5, 0xf7, 0x10001, 0x2, 0x8}, {0x0, 0x1ff, 0x9, 0x7, 0x1, 0x1}, {0x9, 0x101, 0x1, 0x8, 0x40000, 0x7fff}, {0x100, 0x9, 0x7fff, 0x240000, 0x7, 0x9}, {0x1, 0x7f, 0x0, 0x3, 0x2}, {0x2, 0x9b, 0x5, 0x401, 0x11bc, 0x2}, {0x1, 0x8, 0x6, 0x7fffffff, 0x1, 0x1f5a}, {0x9, 0x7, 0x0, 0x7, 0x7fffffff, 0x1}, {0x4, 0xd4, 0x8, 0x1, 0xaa7, 0x2}, {0xfffffff8, 0x6, 0x7, 0xcf2, 0xfffffffc, 0x3}, {0x8, 0xfffffffb, 0xffff, 0x7, 0x2, 0xfffffffb}, {0xcda, 0x2, 0x6, 0x7fffffff, 0xc, 0x6}, {0xc, 0x6, 0x865, 0x8, 0xd, 0x2000}, {0x5, 0x40, 0x3, 0xc6e, 0x17, 0x8}, {0x9, 0x5, 0x4, 0x8c, 0x7, 0x6}, {0x2, 0x9, 0x0, 0x200, 0x1, 0x5}], [{0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0xe, 0x1}, {0x5}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {}, {}, {0x3}, {0x5}, {0x1, 0x1}, {0x2}, {0x159187d4e9d7b0ef, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x4b7d20bf166d4a31}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x41cbe7adcf1036e8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x2b, 0x6, 0x3, 0x3, 0x8}, 0x8, 0xa, [{0x2, 0x7f, 0x7, 0xf, 0x32c, 0x3}, {0x6fbfcbfd, 0x3, 0x101, 0x2, 0x5, 0x9}, {0x7, 0x0, 0xd6, 0x0, 0x5, 0x8ea}, {0xfffffff9, 0xe9d7, 0x2, 0x7, 0x10000, 0xffff2cc0}]}, [{0xba73, 0x10000000, 0x9, 0x4, 0x6507, 0x4}, {0xcfa, 0x9, 0x4, 0x100, 0x1, 0x80000001}, {0x8, 0x200, 0x4, 0x10001, 0x4, 0x4}, {0x2344, 0x0, 0x3af, 0x8, 0x0, 0x8000}, {0xc, 0x9, 0xf, 0x0, 0x7, 0x5}, {0x1, 0x401, 0xa87, 0x5, 0x9, 0x7}, {0x6, 0x2, 0x5, 0x800, 0xb1, 0xffff0001}, {0x0, 0x5000000, 0x6, 0x5, 0x9}, {0xcaf, 0x0, 0x8434, 0x8, 0x7d02, 0x8}, {0x10, 0x3, 0x4, 0xffffff81, 0x7f, 0x8}, {0x7, 0xffff, 0x2, 0x7, 0x8000, 0x3}, {0x1, 0xffff, 0x2, 0x3, 0x0, 0x800}, {0x8, 0x7fffffff, 0xa, 0x1ff, 0x4, 0x10000}, {0x8, 0x7fff, 0x2, 0x7fffffff, 0x5}, {0x5, 0x7fff, 0xa536, 0x2, 0x59, 0xb}, {0x0, 0x1f0, 0xfffffffe, 0x0, 0x745, 0x6}, {0x81, 0x8, 0x4, 0x8000, 0xfffffff9, 0x9cfd}, {0xffffff81, 0x8, 0x0, 0x101, 0x7ff, 0x6}, {0x5, 0x10001, 0x800, 0x7, 0x80000000, 0x5}, {0x7, 0x20000000, 0x6, 0xfffffff2, 0x5, 0x40}, {0x0, 0x5b0cf665, 0x80, 0x432, 0xfff, 0x100}, {0xff, 0x6, 0x81, 0x3, 0x1, 0xd7a}, {0x8, 0x3, 0x800, 0x1, 0x3119, 0x5}, {0x8, 0x10000, 0x3, 0x4, 0x1000, 0xfffff7e5}, {0xdd4, 0xd63, 0x7, 0xb, 0xbe0000, 0x9}, {0x6c, 0xd6, 0xf0ae, 0x9, 0x401, 0x2}, {0x2739, 0xfffff27a, 0x484b, 0x4, 0x3, 0x9}, {0x200, 0x1c62, 0xfffff800, 0xffff, 0x1000, 0x7fff}, {0x4, 0x2, 0x6, 0x5700, 0xe, 0xffffffff}, {0x6, 0x6, 0x8, 0x1, 0x5, 0x1}, {0x9, 0x7, 0x7fffffff, 0xb4, 0xffff0001, 0x3}, {0x1, 0x2, 0x7ff, 0x6, 0x6f4, 0x2}, {0x7, 0x2, 0x5, 0x8, 0x6, 0x9}, {0x2, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x1, 0xa7df, 0x7, 0x1, 0x6, 0x8}, {0x0, 0x4, 0x8, 0x8, 0x10000, 0x7f}, {0x1, 0x7, 0x8, 0x8b, 0x7, 0x1}, {0x3, 0x7, 0x7895, 0x0, 0xfffffffe, 0x6}, {0x8, 0x5, 0xaa, 0x0, 0x0, 0x5}, {0x4, 0xe, 0x5, 0x6, 0x5, 0x3}, {0x3, 0x8001, 0x0, 0x5, 0x7, 0xffff0f71}, {0x2, 0xfffffffc, 0xd, 0x86f8, 0xb, 0x8}, {0x5, 0x9, 0x10000, 0x1, 0xfffffff1, 0xa1}, {0x9f, 0x23be, 0x4, 0x5, 0x5, 0x9}, {0x100, 0x8, 0x771de5ca, 0xfffffffa, 0x8, 0x5}, {0x1, 0x3, 0xc75, 0x5, 0x0, 0x2}, {0x0, 0x1, 0xf8cc, 0x1, 0x101, 0xf}, {0xe97, 0x0, 0x1, 0x293, 0xfff, 0x7}, {0xd7d, 0x6, 0x3, 0xcd3c, 0xe9, 0x100}, {0x4, 0x5, 0xa3, 0x5, 0x5, 0x3}, {0x8dd, 0xb, 0x2, 0x1000, 0x3, 0x80000001}, {0x2, 0x9, 0x4, 0x5, 0x1, 0x7}, {0x1000, 0xf, 0x7, 0x80000001, 0x10, 0xfffffffd}, {0x7f, 0x0, 0x970d, 0x8001, 0x81}, {0x2, 0x6548, 0x3ff, 0xff, 0x800, 0x1000}, {0x0, 0x3, 0x1, 0x400, 0x94a, 0x4}, {0x4, 0xe2, 0x7d, 0x4, 0x4bf7d68a, 0x8001}, {0x2, 0x5, 0x6, 0x0, 0x5, 0x6}, {0xffffffff, 0x85, 0x79b, 0xe, 0x7f, 0x80000001}, {0x4ab904de, 0x9, 0x6ca, 0xdf6, 0x400, 0x3}, {0x2, 0xa1d, 0xeb9c, 0xffffff01, 0x0, 0xb}, {0x6b9b, 0x1, 0xff, 0x5, 0x1, 0x5}, {0x9, 0x4a8, 0x9, 0x6, 0x255}, {0x2, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x2, 0x1, 0xf0b, 0x8, 0x0, 0x7}, {0x9, 0x8, 0x6, 0x4, 0x0, 0x757}, {0x7, 0x2, 0x1f40, 0x80, 0x2, 0x401}, {0x2d0, 0x9f1f, 0x7fff, 0x40, 0xff, 0x4}, {0x10001, 0x0, 0x4, 0x2, 0x4, 0x81}, {0x51e, 0x6, 0x6, 0x9, 0x80000000, 0x1}, {0x1, 0x6, 0xfffffffe, 0x3a, 0x8, 0x9}, {0x4, 0xffffffff, 0x20, 0xe2, 0xa32, 0x100}, {0x6, 0x0, 0x1, 0x1, 0x6, 0xd}, {0x6f, 0x6, 0x64, 0xfffffffd, 0x43, 0x6}, {0x3, 0x6, 0x7, 0x311, 0x2, 0x7}, {0x80000000, 0x8de, 0x6, 0xc, 0x8, 0xd}, {0x0, 0x1, 0x4, 0xb, 0xf2e, 0x1a9}, {0x8000, 0xd, 0xfffff000, 0x0, 0x2, 0x2}, {0x2, 0x9, 0x3ad, 0x8, 0x2, 0x3}, {0x70d1d3af, 0x3, 0x1, 0x3, 0x2, 0x44ad73a4}, {0xe, 0x8, 0x1, 0x3454, 0x7, 0x487}, {0x6, 0x6, 0x6b9, 0x0, 0xe5, 0xac}, {0x1ff, 0x9, 0x2, 0xd, 0x5a4, 0x2}, {0x0, 0x0, 0xffffffff, 0x867a, 0x6, 0x3}, {0x2, 0x5, 0x8, 0xffffffff, 0x1, 0x6}, {0x4, 0x8, 0x101, 0x3, 0x2, 0x3}, {0x2, 0x50000, 0xb2ba, 0x4, 0x4, 0x9}, {0x5, 0xffffffff, 0x1, 0x2d, 0xb3d, 0x5}, {0xf, 0x1, 0x7ff, 0xa67, 0xfff, 0xf6}, {0x2d28, 0x3, 0x5, 0x101, 0x1, 0x4}, {0x10, 0x3, 0x1, 0x3, 0x0, 0x2}, {0x4, 0x101, 0x800, 0xe3a, 0xfff, 0x5}, {0x3, 0xb, 0xffffff81, 0x9, 0x5, 0x4}, {0x3, 0x400, 0x7fffffff, 0x80000000, 0xc9, 0x2}, {0x32, 0x8, 0x5, 0xffffffbb, 0x40, 0x1ff}, {0x7, 0x7, 0xffffffff, 0xffff, 0xffffffff, 0x9}, {0x62, 0x7ff, 0x1, 0x4, 0x7}, {0x3, 0x7, 0x8, 0x535a, 0xd, 0x5}, {0x4, 0x6, 0x2, 0xfffffffa, 0x9, 0x2}, {0x400, 0x8, 0x5, 0x200, 0x3, 0xe79}, {0x100, 0x7, 0x9, 0x9f, 0x10000, 0x6}, {0x8784, 0x8, 0x4b99, 0x7fff, 0x446, 0xc3d1}, {0x3ff, 0x6, 0x8, 0xffffffff, 0x7, 0x1}, {0xf8d4, 0xf, 0x0, 0x4, 0x9, 0x7ff}, {0xd, 0x8, 0x6, 0x0, 0x8, 0x3}, {0xcc, 0x3cbacd32, 0x3, 0x1, 0x3, 0x214}, {0x4, 0x8, 0xf, 0xfffffffd, 0xffff, 0x201}, {0x2, 0x5, 0x4, 0x4, 0x0, 0x6}, {0x100, 0x89, 0x0, 0x0, 0x3, 0x8}, {0x5, 0xf, 0x3, 0x2, 0x27a, 0x9}, {0x0, 0x848, 0x1, 0x40000000, 0x7, 0x4}, {0x1, 0x3, 0x8, 0x5, 0x3, 0x8001}, {0xcf5, 0x6, 0x4, 0xfffffffa, 0x0, 0x1}, {0x3, 0x40, 0xf, 0x4, 0x7f, 0x2}, {0xfffffffb, 0x3, 0x5, 0x7, 0x6, 0x1}, {0x1, 0xc0, 0xfffffffa, 0xf, 0x1, 0xfe8}, {0x3, 0x2c46bd63, 0xffff0001, 0x4, 0x49b, 0xffff}, {0x9, 0x4, 0x6, 0x2, 0x1, 0x7}, {0x9, 0x1, 0xff, 0x0, 0x1, 0x2}, {0x5, 0x1000, 0xfffffff1, 0xc, 0xfffffff7, 0x4}, {0x4, 0x8, 0x0, 0x4, 0x9, 0xf}, {0x8, 0x9, 0x5, 0x5, 0xb, 0x4}, {0x4, 0x7, 0x1, 0x80, 0x1, 0xa}, {0x8001, 0x7, 0x6, 0x477e, 0x7, 0x5}, {0x24d2, 0xfff, 0x5, 0x63ac, 0xe3, 0x2}, {0x11aa, 0x8, 0x3, 0x401, 0xffff, 0xa}, {0xf, 0x0, 0x2, 0x8, 0x7ff, 0x4}, {0x0, 0x0, 0x8, 0x4, 0x2, 0x5}], [{0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x2}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x55b61bd2d4264134, 0x1}, {0xe68aac4d86a0b32e, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x2}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x5a, 0x4}, 0x1, 0x0, [{0x0, 0x7, 0x3, 0x2, 0x5b74e33b, 0xd7}, {0x7fff, 0x40, 0x7, 0x80000000, 0x400000, 0x8}, {0x7, 0x7, 0x9, 0x1, 0x2, 0x56d5}, {0x6369000, 0xff, 0x6, 0xd5, 0x5, 0x1}, {0x101, 0x2, 0xfd29, 0x7e68, 0x7, 0x7}]}, [{0x9, 0x8, 0xfff, 0xb5, 0x6, 0x2}, {0x2, 0x3, 0x2, 0x5, 0x8, 0xc}, {0x6, 0xc, 0xb37b, 0x0, 0x3, 0x40}, {0xa, 0x1, 0x2, 0x5, 0x3ff, 0x8001}, {0x81, 0x8, 0xbaa7, 0x3, 0xad78, 0x8}, {0x10000, 0x79, 0x3, 0x87, 0x2, 0xa5a}, {0x129, 0x6, 0x6, 0xc, 0x8, 0x4}, {0x0, 0x3, 0x6, 0x3, 0x1, 0x7}, {0x0, 0x9, 0x1, 0x6}, {0x8, 0x2, 0x280, 0x1, 0x7, 0x9552}, {0x1, 0x9, 0x2, 0x100, 0x3, 0x5}, {0x8001, 0x7, 0x289f, 0x7, 0x7ff, 0x8}, {0x5, 0x6, 0x7, 0x899, 0x8, 0x4}, {0x7, 0x7ad8, 0x2, 0x81, 0x9, 0x4}, {0x3ff, 0xfb, 0xffffffff, 0x2, 0x6, 0x2}, {0x3, 0x5, 0x897, 0x3, 0x9, 0x4}, {0x7, 0x1, 0x401, 0x5, 0x8, 0x3}, {0x8000, 0x3, 0xfffffffa, 0x3, 0x80000000, 0x8}, {0x5, 0x7, 0x43, 0xd, 0x8, 0x5}, {0xbf2c, 0xad, 0x6, 0x4, 0xa3, 0x8}, {0x1, 0x6, 0x7, 0xa, 0x8, 0xfffffff8}, {0xe1, 0xa9, 0x1, 0x9, 0x8000, 0x9}, {0x494d, 0x0, 0x4, 0x2b3, 0x3, 0x7}, {0x8f, 0x4, 0x8, 0x40, 0x7, 0x3}, {0x80000000, 0x4, 0x200, 0x0, 0x1, 0x2}, {0x8, 0x1, 0x1, 0xe2, 0x10, 0x1}, {0x2, 0x3, 0x8, 0x1c, 0xfffffff8, 0x1}, {0x1, 0x1000, 0x6, 0xd, 0x9, 0xb5b}, {0x2, 0x3, 0x666, 0xd8, 0x9, 0xfffffff9}, {0x5, 0x3, 0x4, 0x8, 0x2, 0x1}, {0x4, 0x200, 0x8, 0x9, 0xcc, 0x4}, {0x8, 0x3, 0xacb, 0x40, 0x9, 0x4c}, {0x5, 0x7, 0x2, 0x80000000, 0x5, 0x5}, {0x6, 0x2, 0x7, 0x7, 0x7, 0x9}, {0x6, 0x8000, 0x1, 0x10001, 0xfc28, 0x29}, {0x6, 0xe, 0xe, 0xc, 0xb, 0x80000000}, {0x0, 0x23983be0, 0x3, 0x4e7, 0x0, 0x101}, {0x8, 0x9, 0x7, 0x7, 0x7, 0x7}, {0x0, 0xe28a, 0x40, 0xffff, 0x10001, 0x9}, {0x7, 0xff, 0x6, 0x3, 0x8, 0x2}, {0x5, 0x7, 0x3, 0x3, 0xb98, 0x8}, {0x5, 0x10001, 0x7, 0x8, 0x6, 0xc}, {0x8, 0xda43, 0x5, 0xc0, 0x7, 0x401}, {0x9, 0x18f, 0x8, 0x3, 0x4, 0x99}, {0x3, 0x10000, 0x4, 0x40, 0xc5, 0x31afc611}, {0x2, 0x1, 0xbe29, 0x200, 0x101}, {0xd3b, 0x9, 0x7, 0x6, 0x6, 0x7}, {0x10000, 0x6, 0x1, 0x7, 0x10, 0x5}, {0x4, 0x3, 0x8, 0x8, 0x7ff, 0x9c}, {0x7fffffff, 0x4, 0x1, 0xfff, 0x0, 0x101}, {0x0, 0x1, 0x0, 0xd4, 0x5, 0x6}, {0xffff, 0x44a207cb, 0x1be4, 0x7, 0xfffffffe, 0x7}, {0x4, 0x1, 0xffff, 0x5, 0x3, 0x2}, {0x9, 0x5, 0xebc, 0x8, 0x4, 0x3}, {0x6, 0x5d09, 0xfb6, 0x6, 0x800, 0x6}, {0x8, 0xcf3f, 0x3, 0x7fffffff, 0x4, 0xb0}, {0xe, 0x36e, 0x4, 0x7, 0xfffffffe, 0xe}, {0x8, 0x1, 0xc, 0xdd5, 0x1, 0x3ff}, {0x0, 0xcc, 0x7, 0x7ff, 0x0, 0x40}, {0x3, 0x6, 0x2, 0xe517, 0xfb, 0x3ff}, {0x7ff, 0x0, 0x0, 0x6, 0x1, 0x8}, {0x2, 0x9, 0x101, 0x3, 0xffff, 0xe732}, {0x6, 0x4, 0x34, 0x5, 0x9d6, 0x1}, {0x7ff, 0x0, 0x8000, 0x5, 0xc, 0xfffffffa}, {0x6, 0x3ff, 0x7, 0x5, 0x3, 0x7}, {0x0, 0x32c22f07, 0xfff, 0xc, 0xfda8, 0xd}, {0x80000001, 0x5, 0x3, 0x4, 0x9f, 0x1}, {0x7a, 0x6, 0x461b79fb, 0x1, 0x1, 0xfff}, {0x8, 0x10000, 0x2, 0x1, 0x8, 0x7fffffff}, {0x4, 0x3, 0xfffffffb, 0xb, 0x2, 0xc0}, {0x6, 0x2, 0xb0e9, 0x4, 0x9, 0x3}, {0x2, 0x4, 0x10, 0xfffeffff, 0x2, 0x5}, {0x6, 0x2, 0x7, 0x5}, {0xb, 0x0, 0x6, 0x101, 0xfffffff8, 0x5}, {0x800, 0x6, 0x3, 0x3, 0x0, 0x4}, {0x9, 0xd9, 0x3ff, 0x6, 0x5, 0x5}, {0x2a6, 0x6, 0x5e66, 0x1, 0x6, 0x5967}, {0x1, 0x8, 0x2, 0x7, 0x3, 0x1000}, {0x480000, 0x1, 0xffff9d4f, 0x7, 0x3, 0x9}, {0xd, 0xe623, 0xf, 0xf, 0xa0000000, 0x9}, {0x5, 0x3, 0x5, 0x9, 0x2, 0x5}, {0x5, 0x1, 0xff, 0x2a4b, 0x0, 0xdb040be3}, {0x72b5f2dd, 0x1, 0x7, 0xd5eb, 0x9, 0xfffff18a}, {0x8, 0xfff, 0x9, 0x5, 0x7, 0x8000}, {0x5f, 0x3, 0x1, 0x8, 0x0, 0xd}, {0xfff, 0x3, 0x1000, 0xb, 0x4, 0xb}, {0x2, 0x1, 0x7, 0x8, 0x1, 0x2}, {0xffff, 0x9, 0x80, 0x6, 0x4, 0x1}, {0x8, 0x7, 0x5, 0x950, 0x6c3, 0x9}, {0xbf9, 0xc1c, 0xa, 0x1, 0x1, 0x1}, {0x200, 0x1, 0xffffffe3, 0x80, 0x300, 0x6}, {0xa, 0x8, 0x8, 0x4, 0xffff, 0x1}, {0xc0, 0x4, 0x1, 0x1ff, 0x1, 0x2}, {0xab0, 0x1b4, 0x7, 0x2, 0x9, 0xe}, {0x6, 0x8, 0xd7, 0x6, 0xa, 0x80000001}, {0x6, 0x7, 0x7, 0x6, 0x4, 0xb34}, {0x7, 0x400, 0x38400000, 0x8, 0x81, 0x8}, {0x8000, 0x5, 0xfffffff8, 0x1, 0x2406}, {0x9, 0x3, 0x7, 0x8, 0xadc}, {0x8b7b, 0x4, 0x80, 0x941, 0x4, 0xfffffffe}, {0xffffffff, 0x89f1, 0x4, 0xf, 0x4, 0xa6}, {0xfffffffe, 0x1, 0x9, 0x64a, 0xfffffff7, 0x8}, {0x8, 0xc00000, 0x4, 0x5, 0x9, 0x2}, {0xfffffff4, 0x8000, 0x910, 0x2, 0x1, 0x40}, {0x1, 0x80, 0xffffffff, 0x1000, 0x7f, 0x200}, {0x4, 0x0, 0x9, 0x2, 0x80, 0x490518aa}, {0xd2, 0x717, 0x9, 0x101, 0xb, 0xfffffffe}, {0x1ff, 0x3854, 0x5197, 0x1, 0x9, 0x6}, {0x4, 0x8, 0x0, 0x6, 0x1, 0x9f3d}, {0x2, 0xffff0207, 0xffffb82d, 0x7, 0x6, 0x6}, {0x5, 0x7ff, 0x80000000, 0x8000, 0x3, 0xb404}, {0xffff, 0x0, 0xb6, 0x7, 0x9, 0x8b}, {0x80, 0x0, 0x8, 0x3, 0x2, 0xbec}, {0x100, 0x3, 0x5, 0x5, 0x2454, 0x10}, {0x5, 0x7ff, 0xfffffff1, 0x3, 0xe, 0xfffff302}, {0x5, 0x182f9ab1, 0xffff, 0xe, 0x1, 0x4}, {0xfffffff9, 0xf, 0x582, 0x8be, 0xdd8a, 0x4}, {0x6, 0x7ff, 0x5, 0x9, 0xc9, 0x401}, {0x7, 0x8000, 0x9, 0x90, 0x2, 0x80000001}, {0x2, 0xffffff52, 0x6, 0x6, 0xcc, 0x8}, {0x2, 0x40000, 0x9, 0x7, 0x9, 0x1}, {0x5, 0x1, 0xb, 0x1, 0x5, 0x9}, {0xfff, 0x4, 0x8, 0x0, 0x6d8c, 0x4}, {0x1, 0x4, 0x8, 0x5, 0x1, 0x7}, {0x10001, 0x5, 0x6, 0xd92, 0x1, 0x200}, {0x4, 0x65ad, 0x9, 0x4, 0x8, 0x9}, {0x4, 0xb1, 0xc, 0x2d9, 0x9, 0xffffff01}, {0x81, 0x1, 0xffff8000, 0x0, 0x7, 0x7f}], [{0x4}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x77511b760921ab43}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0xe59a370a479e18a2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1}, {0x475e21512cabc398, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x8c5, 0x10001, 0x20000000, 0x238, 0x5}, 0x2, 0xa9, [{0x401, 0x1, 0x7, 0x8, 0x101}]}, [{0x9, 0x101, 0x14c, 0x7fff, 0xff}, {0x8, 0x5, 0x57, 0x5, 0xcbcf, 0xfffffff7}, {0x8, 0x6, 0x37cf, 0x2, 0x0, 0x3}, {0x5, 0x13b, 0x204, 0x261, 0x7, 0x965}, {0x5, 0x2, 0x7fffffff, 0x7, 0x1, 0xa63}, {0x8000, 0xfffffffa, 0x5, 0xc1, 0x7fffffff, 0x80000000}, {0xd89e, 0x1, 0x800, 0x3, 0xfffffff8}, {0x4, 0x6, 0x10, 0x7fffffff, 0x2, 0x7}, {0x9e, 0x3, 0xd, 0x1, 0x69f7, 0x8}, {0xa, 0x3, 0x46, 0x9, 0x5e, 0x3}, {0x6, 0x7, 0x6, 0x2, 0xf3, 0x9}, {0x5, 0x4, 0x2, 0x6, 0x7, 0xf}, {0x5, 0x9, 0x401, 0x5c3, 0x8000000, 0x7fff}, {0x3, 0xab, 0xfffffffb, 0x0, 0x3}, {0x2, 0x2, 0x7fff, 0x8, 0x9, 0x7}, {0xb5, 0xfffffffd, 0x3, 0x1, 0xffff0001, 0xc}, {0x62aa, 0x5, 0x3, 0x8, 0xfffffff8, 0x3190}, {0x9, 0x3, 0x1, 0x13, 0x3, 0x1}, {0x1, 0x1ff, 0x8, 0xfffffffe, 0x1, 0xfffffffb}, {0x3, 0x7, 0xb, 0x2f, 0x14, 0xcc4}, {0x3, 0x1, 0x1, 0x0, 0x8f, 0x8}, {0x3ff, 0x68b, 0x7fff, 0x2, 0x9, 0x1}, {0x100, 0x200, 0x8, 0x6, 0xfffeffff, 0x800000}, {0xd, 0x623a3e96, 0x8, 0x3, 0x2, 0x7}, {0xed, 0x7, 0x8, 0x0, 0x10000, 0xe66}, {0x200, 0xfffffffd, 0x9, 0x400, 0x0, 0x3}, {0x6, 0x1, 0x3, 0x5, 0x3ff, 0x1000}, {0x1, 0x9, 0x9, 0x9, 0x7, 0x1000}, {0x0, 0x25ac, 0xfffffffd, 0xf, 0x1, 0x10001}, {0xd, 0x9, 0x5, 0x7, 0x47d, 0x1}, {0x4, 0x4, 0x7fffffff, 0x1, 0x5, 0x8}, {0x4, 0x4, 0x4000000, 0x401, 0xcf, 0x7fff}, {0x0, 0x204, 0x7, 0x8e10, 0x0, 0x1000}, {0x8001, 0x8, 0x9, 0x17, 0x93b3, 0x7}, {0x6, 0x6, 0x1, 0x8, 0x3, 0x10001}, {0xfffffff7, 0x8, 0x9, 0x4, 0x0, 0x3}, {0x4, 0x0, 0xfffffac0, 0x2e5, 0x5, 0xfffffffd}, {0x800, 0x9, 0xd, 0x0, 0x1, 0x4}, {0x1, 0xb, 0x7ff, 0x0, 0x10001, 0xc}, {0x400, 0x7, 0x2, 0x6, 0xffffffff, 0x91}, {0x2, 0x3, 0x100, 0x800, 0x5, 0x958}, {0x1, 0x9, 0x0, 0x52c, 0x4, 0xfffff250}, {0xc63, 0x3, 0x5, 0x5, 0x2b, 0xf}, {0xffffffde, 0x0, 0x0, 0x6, 0x7, 0x401}, {0x401, 0x8001, 0x0, 0x56, 0x3, 0x8}, {0x8, 0x9, 0x8, 0x401, 0x3, 0x2}, {0x7e64, 0x3, 0x7d44, 0x4, 0xc306, 0xffff8001}, {0x0, 0x401, 0xaa17, 0x2, 0xffffffff, 0xffffffff}, {0xfffffff2, 0x0, 0x9, 0xfe3c, 0xff, 0x8}, {0x1, 0x10001, 0x3, 0x6, 0x400, 0x3}, {0x1, 0x7ff, 0x5, 0xe634, 0x6, 0x80}, {0x2, 0x6c, 0xe2, 0x2, 0x7, 0x1000}, {0x63e0, 0x3, 0x45dd9b5e, 0x3, 0x8000, 0x6}, {0x1, 0x6, 0x6, 0x800, 0x0, 0x8}, {0x7, 0x4, 0x9, 0x4, 0x5}, {0x2, 0x6, 0x7, 0x6, 0xf0, 0xfffffffd}, {0x7f, 0x2, 0xc7, 0x8, 0x6, 0x8001}, {0x7adaa5b4, 0x10, 0x8, 0x1ff, 0x49, 0x3}, {0xa, 0xabf8, 0x8, 0xfffffffa, 0x74aa}, {0x3, 0x1000, 0x8000, 0x2, 0x6}, {0x9, 0x3, 0x0, 0x9, 0xfffffffb, 0x1}, {0x2, 0x9, 0x8, 0xae, 0x80, 0x886e}, {0x76fe, 0x8001, 0x1, 0x390, 0x8000, 0x6}, {0x9, 0x3ff, 0x1, 0xa1a9, 0x0, 0x98f5}, {0x100, 0xd, 0x1000, 0x5, 0x0, 0x9}, {0xfffffff5, 0x9, 0x6, 0xfffffffa, 0x2, 0xf}, {0x101, 0x400, 0x0, 0x7fff, 0xffff, 0x2}, {0x8, 0x4, 0x5, 0x2, 0x7901, 0x4b4d}, {0xfffffffc, 0x52, 0x6, 0x4, 0xc7, 0xd}, {0x2, 0x3, 0x1, 0x8, 0xe, 0xa}, {0xfae7, 0xfffffffc, 0x4, 0x1b86, 0xcd2, 0x1800000}, {0x1, 0x4, 0xc, 0x240000, 0x10, 0x6}, {0x4, 0x8, 0x100, 0xffff8b3e, 0x80, 0x96d}, {0x5, 0x6, 0x0, 0x3ff, 0x0, 0x2}, {0x8000, 0x3, 0x10, 0x8, 0xc5bb, 0x1cb0}, {0x7ff, 0x6, 0x7, 0x5, 0x10, 0x3d1}, {0x6, 0xc, 0x0, 0x8, 0x9, 0xcd}, {0x3, 0x6, 0x4, 0xfffff000, 0x2, 0x8}, {0xb31, 0x9, 0x1, 0x4, 0x8, 0x9}, {0xfffffffe, 0xfffffe10, 0x0, 0x9, 0x2, 0x7061}, {0x23, 0x4, 0xff, 0x401, 0x100, 0x3}, {0x3, 0x7, 0x2, 0xf, 0x9, 0xfff}, {0x5, 0x6, 0x86, 0x80000001, 0xa, 0x6}, {0x3, 0x800, 0xa, 0x1, 0x3, 0x7}, {0x400, 0xffff7fff, 0x0, 0x6, 0x80, 0x40}, {0xfff, 0x100, 0x4, 0xbe0, 0x6}, {0x195, 0x10001, 0xee34, 0x6, 0xffff68b0}, {0xb8, 0xc420, 0x9, 0xe, 0x4, 0x1}, {0x40, 0x5, 0x2, 0x400, 0x1, 0x4}, {0x7, 0x3, 0x1, 0x887c, 0x7, 0x7f}, {0x619063b8, 0x10001, 0x5d7, 0x2, 0xffff, 0x8}, {0x8, 0x0, 0x8, 0x7, 0x5, 0x10001}, {0x0, 0x1, 0x7f, 0x3, 0x9}, {0xfffffff8, 0x9, 0xe8b9, 0x7fffffff, 0x7800}, {0xeeac, 0x8, 0x3cc, 0x5, 0x1, 0x8a56}, {0x8, 0x7f, 0x8000, 0x7ae9, 0x2, 0x7}, {0x8756, 0x80000000, 0x9, 0x82a, 0x94b7, 0x400}, {0x72, 0x8, 0x4, 0x3, 0x8, 0xeea}, {0x6, 0x756, 0x5, 0x2, 0x2, 0x1}, {0x8, 0x7, 0x0, 0x8a4b, 0x3, 0x678}, {0x0, 0x8, 0x0, 0x0, 0x7, 0xa}, {0x7, 0x2, 0x9, 0x0, 0x8, 0x9}, {0x1, 0x30, 0x3, 0x5, 0x7ff, 0xfffffffe}, {0xff, 0x26, 0x9, 0x7, 0x7fffffff, 0x3}, {0x0, 0x9b, 0xe, 0x3, 0xffff9e9f, 0x2}, {0x9, 0xd, 0xff, 0x9, 0x5, 0x2}, {0x7, 0xa, 0x2, 0xffffffeb, 0x7fff, 0x80000000}, {0xd, 0x6, 0x4, 0x13eee18f, 0x93, 0x6}, {0x4, 0x3, 0x11d1, 0xaeb2, 0x0, 0x2}, {0xc, 0x8, 0x5, 0x4b, 0xd1e, 0x8}, {0x8, 0xae4, 0x2, 0x854, 0x0, 0x5}, {0x69, 0xffffff80, 0x0, 0x5, 0x1, 0x7fffffff}, {0x6, 0x3ff, 0x10, 0x9, 0x80, 0x1}, {0x7, 0x872, 0x1, 0x0, 0x1, 0x2}, {0x8, 0x7, 0x1fc, 0xd0, 0x6}, {0xe, 0xfffffff9, 0x34, 0x7, 0x6, 0x9}, {0x4, 0x2, 0xf55, 0x7, 0x1000, 0x1}, {0x200, 0x6, 0x9, 0x8, 0x80000001, 0xffffffff}, {0x6, 0xff, 0x8, 0x7, 0x2, 0x2}, {0x6, 0x5, 0x3, 0x0, 0x7fffffff, 0x6}, {0x9, 0x9, 0x1, 0x5, 0x6, 0x24}, {0x0, 0x8, 0xe6b, 0x5, 0x2, 0x9}, {0x9, 0x8, 0x8, 0x1, 0x7f, 0x8}, {0x7, 0x9, 0xc0, 0x9, 0x4, 0x81}, {0x2, 0x14, 0x1, 0xe8b, 0x1000, 0xd}, {0x6, 0x6, 0x5, 0xf04, 0x8, 0x5}, {0x401, 0x10001, 0x2, 0x413, 0x1, 0x6}, {0x1, 0x4, 0x6, 0x6, 0x6, 0xa19c}], [{0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0xc}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {}, {0x1}, {0x6, 0x1}, {0x3}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {}, {0x2}, {0x5, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x5}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x8, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4c, 0x0, 0x0, 0x8, 0x101}, 0x8, 0xa6, [{0x4, 0xf, 0x9, 0xfffff271, 0x8, 0x8001}, {0x7, 0x80, 0x7, 0x7, 0xfff, 0x8000}, {0x7, 0x1, 0xfffffff7, 0x1, 0x8, 0x47d}]}, [{0x3, 0x1, 0x3, 0x74a, 0xfffffff7, 0x8}, {0xe94, 0x11, 0xfffffffd, 0x8, 0x3, 0x90c}, {0x2, 0x3217bf18, 0x4, 0x7, 0xc9a6, 0x5c94}, {0x10, 0x1, 0x7f, 0x3, 0x2, 0x2}, {0x100, 0x3, 0x18600, 0x0, 0x5, 0x7}, {0x0, 0x0, 0xf306, 0x6, 0x1814}, {0x9, 0x1, 0x2, 0xf0000000, 0x9, 0x8}, {0x2, 0x6, 0x5fb, 0x7, 0x1, 0x3}, {0x7fff, 0x5, 0x8, 0x98d, 0x8, 0x1}, {0x8e, 0x7, 0x200, 0x9, 0x5, 0x7}, {0x2, 0x92e, 0x0, 0xf, 0x3, 0xa8}, {0x2, 0x2, 0x3ffc, 0x6, 0x7f, 0x3}, {0x8001, 0x5, 0x7, 0x22b, 0x9, 0x5}, {0x33b, 0x5, 0x6, 0x5, 0x9, 0xc1a}, {0x6, 0xa, 0x5, 0x249, 0xf, 0x4}, {0x3, 0x3a4f, 0x2, 0x6, 0x0, 0xff}, {0x6, 0x8, 0xd649, 0x1, 0x7, 0x8}, {0x3, 0x7f, 0xd, 0x8, 0x200, 0x1}, {0x8, 0x2, 0x5, 0xf, 0xff1d}, {0x1, 0x0, 0x7, 0xf, 0xc, 0x2}, {0x9, 0x724a, 0x5, 0x4, 0xc, 0x2}, {0xfff, 0x1, 0x665, 0x8, 0x65, 0x5a50}, {0x0, 0x3, 0x4, 0x18, 0x7fff, 0x240}, {0x6, 0x7, 0x10000, 0x6, 0x800, 0x10}, {0x5, 0x8, 0xfffffbff, 0x1, 0x3, 0x9}, {0x2, 0x6, 0x2, 0xfffffff8, 0x8, 0xffffffcc}, {0x1b0a, 0x6, 0x4, 0x40e7, 0x48381c23, 0x3}, {0x3, 0x9, 0x0, 0x6, 0x8, 0x1}, {0xfab5, 0x7fffffff, 0xb8fd, 0x22, 0x9, 0x95}, {0x5, 0x2, 0x21566850, 0x9, 0xe}, {0xe7, 0x5, 0x1, 0x81, 0xc9, 0x7}, {0x2, 0x6, 0x80000000, 0x1000000, 0x6, 0x2443}, {0x91c, 0x1ff, 0x7ff, 0xb36, 0x6, 0x9}, {0x5, 0x4, 0x2, 0x1, 0x9f31, 0x4}, {0x9, 0x4, 0x40, 0x5, 0xfff, 0xe19}, {0x2, 0x6, 0x9a, 0x6ab695de, 0x13, 0x80000001}, {0x2, 0x6, 0x8, 0x9, 0x8000, 0xfffffff1}, {0x7fff, 0x5, 0x400, 0x3, 0x4, 0x2}, {0x0, 0x400, 0x6, 0x5, 0x88, 0x8}, {0x0, 0x4, 0x40, 0xff, 0x1}, {0xfffffff9, 0x2, 0x7f, 0xb0, 0x7, 0x2}, {0x9, 0x1, 0x7720, 0x9, 0xff, 0x5}, {0x2, 0x80a, 0xe, 0x80000001, 0x4, 0xe}, {0xfbd, 0xc4, 0x5, 0x64, 0x8001, 0xc}, {0x5, 0x2, 0x5, 0xaf, 0x10c}, {0x3, 0xfff, 0xfffffffc, 0x5, 0x80000000, 0x8000}, {0x6, 0x2, 0x7, 0x101, 0x8, 0x6}, {0x0, 0xe, 0x5, 0x2, 0x5d, 0x9550def}, {0x7, 0x1, 0x2, 0xfffffff8, 0xf, 0x1290}, {0x5, 0x7, 0xffffff3b, 0x2, 0x7}, {0x2, 0x3, 0xd5b8, 0x9, 0x86, 0x8}, {0x4, 0x7fffffff, 0x1000, 0xd4, 0x800, 0xe}, {0x5, 0x0, 0x1000, 0x6, 0x8, 0x4}, {0xf, 0x3, 0x6, 0x8, 0x1}, {0x2, 0x8, 0x5, 0x7c, 0x3d9, 0xff}, {0x81, 0xffffff81, 0x400, 0x3, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x23b9, 0x4}, {0x4, 0x9, 0x3, 0x5, 0x8, 0x7}, {0x99f7, 0x5, 0x9, 0x1, 0x7a37, 0x10001}, {0xff, 0xffffffff, 0x9889, 0x6c44, 0x8, 0x4}, {0xfff, 0x7, 0x9, 0x3, 0x80, 0xd62}, {0x7, 0x1ff, 0x6, 0x85, 0x9, 0x5}, {0x252, 0xca, 0x3, 0x10, 0x542, 0x80000001}, {0xf8e, 0x100, 0x2, 0x1, 0xfffffff0, 0x4}, {0x10b4, 0x7, 0x5, 0x80000001, 0x80000000, 0x4}, {0xce, 0x8, 0x5, 0x7, 0xc3, 0x5}, {0x2, 0xffffff9f, 0x0, 0x8, 0x401, 0x2}, {0xa2bb, 0x1, 0x57, 0x400, 0x400, 0x8001}, {0x3, 0x3ff, 0x3, 0x7, 0x8, 0x3}, {0x5, 0x7, 0x9, 0x1, 0x7f, 0x8}, {0x8001, 0x0, 0x6, 0x8, 0x7fffffff, 0x3fe}, {0x4, 0x1, 0x2, 0x10000, 0x10001, 0x8}, {0x4, 0x16, 0x3a6, 0x2, 0x5}, {0x4, 0x6, 0x7, 0xeb08, 0x101, 0x3}, {0x8, 0xf0, 0x400, 0xcc0, 0x1ff, 0xb540}, {0xfffffff7, 0x26, 0x5, 0xc98, 0x4eb014b5, 0x1}, {0x3, 0x144, 0x20e8, 0x2, 0xa4, 0x1}, {0x5, 0x80, 0x641f, 0x7ff, 0x0, 0x1}, {0x6e, 0x7, 0x444, 0x9, 0x9, 0x3}, {0xfffffffc, 0x7fffffff, 0x3, 0x33169c15, 0x4, 0xe05}, {0x400, 0x10000, 0x1, 0x7, 0x7, 0x9}, {0x7b, 0x400, 0x9, 0x6, 0x6, 0x7fff}, {0x6, 0x80, 0x2, 0xac5d, 0x8, 0x4a258a3f}, {0xe072, 0x6, 0x80000001, 0x7, 0x0, 0x38}, {0xa09a, 0x2, 0xfffff801, 0xa, 0x7, 0x8}, {0x14, 0x8, 0x3ff, 0x0, 0x7, 0x2}, {0x5, 0x6, 0x7f, 0x7f, 0x1, 0x9}, {0x2, 0x6, 0x6, 0x10000, 0xf67, 0xdc1}, {0x3581, 0x9, 0x0, 0xfffffff7, 0x3, 0x4}, {0x1ff, 0x8001, 0x1, 0x1e72, 0x800, 0x8}, {0x5b, 0x4, 0x0, 0xf3e, 0x6, 0x4}, {0x10, 0x0, 0x5, 0x1b6c000, 0x80000000, 0x3}, {0x2, 0x1ff, 0x2, 0x4, 0x4, 0xfffffff7}, {0x3, 0x7, 0xffffffff, 0x7, 0xfff, 0x4}, {0x80000000, 0x8, 0xf23, 0x0, 0x80000000, 0xfffffff6}, {0x400, 0x7ff, 0x5f29, 0xbcd, 0x1, 0x5}, {0x2, 0x800, 0x100, 0x7, 0x54ee2c7d, 0x8}, {0x4aaf, 0x80000000, 0xce, 0x10, 0x0, 0x1}, {0xf57b, 0x1, 0xfffff23c, 0x7, 0x200, 0x4}, {0x5, 0x9, 0xfffffffa, 0x0, 0xffffffff, 0x4}, {0x3, 0xc, 0x8, 0xe4c, 0x4, 0xb}, {0x2, 0xb, 0x6, 0x9, 0x3, 0x200}, {0xd9b, 0x9, 0x2, 0xfffffffd, 0x7, 0x5}, {0x2, 0x8, 0xe513, 0x5, 0x7, 0x3}, {0x3, 0x40, 0x6, 0x7, 0x8, 0xfffffffe}, {0x81, 0x924, 0x1000, 0x7, 0x2a, 0x5ee}, {0x2c3f87c9, 0x1ff, 0x8a0, 0x8, 0x8, 0x3ff}, {0x8, 0x8000, 0x8, 0x5, 0x4, 0x8001}, {0x4, 0x5, 0x7, 0x0, 0x5, 0x8}, {0x1, 0x0, 0x7ff, 0x400, 0x4, 0xfffffff8}, {0x3, 0x400000, 0x7, 0x8, 0x1, 0x1ff}, {0x3, 0x80000001, 0x4, 0x2, 0x2, 0x3ff}, {0x6, 0x4, 0xa, 0x2, 0x6, 0xa}, {0xfffffffd, 0x4, 0x8, 0x40, 0x6, 0x5}, {0x4, 0x0, 0x7ff, 0x10001, 0x800, 0x7}, {0x3, 0x4, 0xffff, 0x710, 0x1, 0x92d}, {0x7fffffff, 0x8, 0x9, 0xfffffff8, 0x80, 0xfffffbff}, {0x8, 0xeb, 0x3e2a, 0x3, 0xfffffffc, 0x6}, {0x0, 0x1, 0x1000, 0x180f, 0x2}, {0xfb9b, 0x7, 0x8000, 0xa586, 0x8, 0x40}, {0x15e916e2, 0x5, 0x9, 0xb, 0x5}, {0x2, 0x401, 0x9, 0x49, 0x4, 0x10001}, {0xdf2, 0x6, 0x40000, 0x1000, 0xe, 0x5}, {0x8001, 0xab0, 0xffff, 0x100, 0xff, 0x7ff}, {0x42, 0x8, 0x1000, 0x862, 0xfffffffc, 0x4}, {0x7000, 0x7ff, 0xa, 0x8, 0xffff, 0x200}, {0x81, 0x5, 0xd1, 0x200, 0x6, 0x9}, {0x4, 0xc, 0xc, 0xe, 0x4b9f98cb, 0x5}], [{0x1, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3210eb1a1c755bcf}, {0x4}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x8f23936762b40b8, 0x1}, {0x0, 0x1}, {0x5}, {0xc22ffd806064e725, 0x1}, {0x3}, {}, {0x5}, {0x4, 0x6fea6be10b04bd90}, {0x2}, {0x2}, {0x2}, {0x3}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x2}, {0x3, 0x2}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x2, 0x3, 0x0, 0x6}, 0x8, 0x1}, [{0xffffffff, 0x9, 0x36, 0x200, 0x7, 0x6}, {0xfe000000, 0x80, 0x5, 0x100, 0x8, 0x39}, {0x80000000, 0x452, 0x50f4, 0x401, 0x2, 0x503}, {0x1, 0x1, 0x2, 0x2e9, 0x8, 0xfffffbff}, {0x6, 0x80000000, 0xd6, 0x1ff, 0xce, 0x3}, {0x1, 0xf5b, 0x6, 0x3, 0x8, 0x3}, {0xff, 0x6bc, 0x2, 0x1, 0x6, 0x3ff}, {0x1dafb7f, 0x2, 0x1, 0x9, 0x9, 0x1}, {0xffffffff, 0x8, 0x0, 0xc1, 0x1000, 0xc}, {0x6, 0x4, 0x3, 0x0, 0x400, 0x4}, {0x4, 0x1, 0xc79, 0x5, 0x7, 0x749}, {0x42, 0x799, 0x2e0d6902, 0x5, 0x7, 0x8001}, {0x1, 0x80000001, 0x6, 0x4, 0xa58, 0x4}, {0x800, 0x3d2, 0x5, 0xfffffff8, 0xf5, 0x4}, {0xdf3, 0xff, 0xffffffff, 0x1e, 0x4, 0x7}, {0xa2, 0x200, 0x4, 0x7, 0x0, 0x2}, {0x103, 0x6, 0x800, 0x200, 0x400, 0xac10}, {0x4, 0x4, 0x9, 0x200, 0x1, 0x5}, {0x101, 0x0, 0xbc0, 0x7fb7, 0x766, 0xfffffffa}, {0x0, 0xd, 0x7fa, 0x5e3c9612, 0x80000000, 0x80}, {0xffffffff, 0x0, 0x3ff, 0x0, 0x2, 0x7}, {0xae0, 0xffff, 0x7, 0x6, 0x2, 0x74}, {0xfff, 0x7, 0xd, 0x6, 0x5}, {0x7fff, 0xfffffff7, 0x6, 0xee18, 0x8, 0x7}, {0xc4, 0xfff, 0x401, 0xfffffff0, 0x8001, 0x9}, {0x1, 0x3, 0x280, 0x100}, {0x2, 0xfffffff7, 0x2, 0x22e4, 0xa, 0x7c}, {0xfff, 0x4, 0xffffff67, 0x2, 0xa, 0x4}, {0x7, 0x6, 0x7, 0x7f, 0x6, 0xff}, {0x1, 0x7fffffff, 0x5, 0x22d, 0x7, 0xffffffdb}, {0xfffffffd, 0xdd, 0x4, 0x3be, 0x6, 0x6}, {0x0, 0x4, 0x2, 0x3, 0x28d3, 0x101}, {0x1000, 0xfff, 0x0, 0x98, 0x5, 0x5}, {0xffffffff, 0xc481, 0xfffffffd, 0x3ff, 0x9, 0x4cc}, {0x1, 0x6, 0x9, 0x654, 0x2}, {0x213, 0x2ee, 0xe56, 0x36, 0x81}, {0x4, 0x3, 0x3, 0x0, 0x0, 0x3}, {0x3, 0xd, 0x2, 0xfffffff0, 0x8, 0x4}, {0x8, 0x10, 0x6, 0xd, 0x14d, 0x62}, {0xffff, 0x9, 0x2, 0x8, 0x7, 0x7f}, {0x1c64522f, 0x2, 0x8b, 0xf8, 0x5, 0x8}, {0xf7, 0x7fffffff, 0xfffffffc, 0x45ae9805, 0xe8b, 0x4}, {0x6, 0x7, 0x1, 0x2, 0x70a, 0x2}, {0x1, 0x6, 0x1ff, 0x2e6, 0xffffff7f, 0x9}, {0x3, 0x9, 0x1, 0x8, 0x19aa, 0xd}, {0x80000001, 0x6, 0x8, 0xcf9f, 0x88, 0x8}, {0x81, 0x9, 0x9, 0xf, 0x8, 0x8}, {0x45b5, 0x2, 0x7, 0x0, 0xfffffff9, 0x5}, {0x8, 0x7, 0x3, 0x1, 0x0, 0x7e}, {0x1e, 0x7, 0x4, 0xf, 0x8747, 0x2b}, {0x7e4, 0x0, 0x9, 0x6, 0x8, 0x9}, {0x5, 0x9, 0x5, 0x8c, 0x4, 0x7}, {0x80000001, 0x4, 0x7, 0xb161, 0x7ff, 0x77}, {0x0, 0x3, 0xddd, 0x7, 0x4, 0xb026}, {0xce6, 0xfffffffd, 0x9, 0x7, 0xe2, 0x7}, {0x8, 0x5, 0xfffffffd, 0x22, 0x3, 0xd}, {0x7fffffff, 0x3, 0x5, 0x5, 0x9, 0xffffffff}, {0x0, 0x633, 0x9, 0x0, 0x6, 0x151}, {0x63b7c2fc, 0x3, 0x401, 0x9, 0x2, 0x7ff}, {0x7e77, 0x91, 0x5a8127c6, 0x96, 0x7, 0x4}, {0x4, 0x9, 0x8, 0x7, 0xfffffffb, 0x5}, {0x4, 0x0, 0x8, 0x6, 0x7, 0x3}, {0x1056, 0x5, 0x8, 0x84, 0x80000001, 0x6}, {0x3, 0x2, 0x4, 0x4, 0x3, 0x5}, {0xd0, 0xfffff594, 0x3, 0x9, 0x5, 0xffffffff}, {0x9, 0x6, 0x875f, 0x9837, 0x3ff, 0x3}, {0x3, 0x8000, 0x9, 0x7, 0x5}, {0xf5, 0x0, 0x6df, 0x4, 0x1, 0xe8}, {0x3, 0x9, 0xffff, 0x3, 0xc8}, {0x9, 0x80000001, 0x0, 0x4f4d, 0x4}, {0x7, 0xd7a, 0x6, 0x10, 0x4, 0x1}, {0x1, 0xa84, 0x3, 0x0, 0x6, 0x1}, {0x2, 0x3, 0x9, 0x135c, 0x5, 0x6}, {0xed, 0x2, 0x9, 0x8d, 0xfffffff9, 0x5f}, {0x1, 0x5508549e, 0x8, 0x8, 0x101, 0x1}, {0x4, 0x0, 0x6, 0xfffffffb, 0x0, 0x2}, {0x4, 0x200, 0x5, 0x9, 0xa603, 0x7080}, {0x5, 0x6, 0x9, 0x1, 0x4, 0x2}, {0x7fff, 0x7ff, 0x1, 0xfffffffe, 0x2, 0x2}, {0xc171, 0x0, 0x8, 0x5, 0x1, 0x1}, {0x3, 0x9, 0x3, 0x9, 0x3, 0xe}, {0x2, 0x7f, 0xd887, 0x6, 0x4, 0x3}, {0x1, 0xc, 0x1, 0xea, 0x5, 0x8}, {0x6, 0x3, 0x7ff, 0x8001, 0x5, 0x4}, {0x7, 0x100, 0x1501, 0x7, 0x1, 0xfffffe57}, {0x7, 0x9, 0x200, 0x401, 0x9, 0x3}, {0xfff, 0x5, 0x4, 0xffffffc3, 0x5, 0x9}, {0x1, 0x3, 0x4, 0x9, 0x6, 0x8}, {0xfffffe01, 0x3, 0x3, 0xd, 0x2, 0x80000000}, {0x1, 0x10000, 0xfffffce2, 0x9, 0xb608, 0x2}, {0x2, 0x5, 0x6, 0x1, 0x1, 0xa}, {0x679, 0x3, 0x1000, 0x0, 0x5, 0x401}, {0xfffffff8, 0x2, 0x4, 0x7, 0x40, 0x1}, {0x1, 0x8, 0x30000000, 0x100, 0x1, 0x6}, {0x0, 0x2, 0xfffffffc, 0xff, 0x6, 0x5}, {0x922, 0xb8ef, 0x4, 0x3, 0x8}, {0x330, 0xf8, 0x7, 0x9, 0x0, 0xffff}, {0x4, 0x8, 0x0, 0x2400000, 0xf, 0x7fffffff}, {0x6, 0x1, 0x4, 0x1, 0x4, 0x7}, {0x7fffffff, 0x670e, 0x8, 0x3, 0x400000, 0xfffffff7}, {0x7248, 0x5, 0xffffcc89, 0xc, 0x5, 0xfffffff8}, {0xb1, 0x4df80000, 0x5, 0x9, 0xcefc, 0x7}, {0x7, 0x5, 0xfffffff7, 0x7, 0x0, 0x9}, {0x8, 0x400, 0x1, 0x4, 0x10, 0x9}, {0x1, 0x0, 0xd, 0x3, 0x8, 0x5}, {0xc, 0x8, 0x0, 0xffff9fbd, 0x8000, 0x1}, {0x40, 0x0, 0x1, 0x22, 0xfffffffb, 0x80000000}, {0x7ff, 0x3ff, 0x4, 0x8, 0xfffffffd, 0x4}, {0x9, 0x8ba0, 0x40, 0x6, 0x800, 0x7a61ec28}, {0x3, 0x2, 0xed, 0x6, 0x6, 0xbb0}, {0x10000, 0xf0c, 0xc, 0xb, 0x7fff, 0x4eb}, {0x5a99, 0x7f, 0x5, 0x716, 0x7fffffff, 0x376ab3a5}, {0x3ff, 0xd, 0x418, 0x0, 0x81, 0x7}, {0x6582, 0xf, 0x9, 0x100, 0x1ff, 0x8}, {0x479, 0x9, 0x8, 0x6, 0x2, 0x8}, {0x5, 0xb65d, 0x6, 0x1000, 0x0, 0x80000000}, {0xc7, 0x3, 0x7, 0x5, 0x0, 0x80000000}, {0x4, 0x8, 0x0, 0x95d, 0x261d, 0x3}, {0x42, 0xfffffff8, 0x0, 0x1}, {0x7, 0xeeb, 0x0, 0x829, 0x324e, 0x1}, {0xffffffff, 0x1, 0x6, 0x3, 0xfffffffb}, {0x9, 0x5, 0x0, 0x7, 0x3, 0x1}, {0xfffffff8, 0x5, 0x27ad, 0x9, 0x1, 0x9}, {0xd, 0x6, 0x60, 0x6, 0x9}, {0x1, 0x8000, 0x6, 0x5, 0x9, 0x9}, {0x4, 0x1, 0x69c1, 0x8001, 0x53, 0x2000}, {0x3, 0x3, 0x3, 0xfffffffe, 0x3, 0xfffffe01}, {0x6, 0x4, 0x8001, 0x101, 0xfffffffe, 0xffffffff}], [{0x0, 0x1}, {0x1}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {}, {0x2f10d0b0cedf1564, 0x1}, {0x4}, {0x2}, {0x2}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6cf5f45e78751a63, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x56e35d04f402b90a}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x7}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x0, 0x10001, 0x7, 0x7fff, 0x3}, 0x4c, 0xb, [{0x9, 0xd, 0x2, 0x80000000, 0x0, 0x2}]}, [{0xd8, 0x1, 0x6, 0x10001, 0x134}, {0x1, 0xf67, 0x9, 0x0, 0xd, 0x9}, {0x1, 0x1, 0xfffffff8, 0x8, 0x4, 0x4}, {0x7, 0xc43, 0x8, 0x6, 0x2, 0x5}, {0x0, 0x81ef, 0x7f, 0x423b, 0x5, 0xe1}, {0xffffffff, 0xffffffff, 0x1, 0x7}, {0x7, 0x5, 0x10000, 0x2, 0x10001, 0x35}, {0x0, 0x8c8, 0x4, 0x0, 0x1, 0xf4}, {0x7, 0x5, 0x80, 0xb, 0x4, 0x7fffffff}, {0x3ba0, 0x7, 0x9f14, 0x1, 0x2, 0x91e3}, {0xbc, 0x80, 0xfffffffd, 0x6, 0x5, 0x80}, {0xffffff81, 0x2, 0x101, 0x7, 0x9, 0xffff8001}, {0x8, 0xf26d, 0x1000, 0x506c, 0x100, 0xfffff7ec}, {0x3, 0x1, 0xffffffa4, 0xb75, 0x7, 0xad9}, {0x5, 0xdb1, 0x0, 0x2, 0x9c, 0x2}, {0x6c5, 0x1, 0x7f9, 0x29b, 0x6, 0x1000}, {0x2, 0x5, 0x1000, 0x3, 0x4, 0x7}, {0x3, 0xff, 0x400, 0x2, 0x4}, {0x9, 0xa, 0xd67, 0x4c42d2cb, 0x800, 0x8}, {0x0, 0x4, 0x3, 0x8, 0xc7, 0x8}, {0x1ff, 0x3, 0x0, 0x5, 0x2, 0x4}, {0x2, 0x7, 0x2f8, 0x2, 0x5, 0xfffffffb}, {0x6, 0x8ada, 0x80000000, 0x4, 0x3ff}, {0x0, 0x200, 0x3, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x5, 0x5, 0x10, 0x800}, {0xc1b, 0xff, 0xffffffff, 0x7f, 0xcda3, 0x3}, {0x8001, 0x8, 0x1, 0x4, 0xfffffdf6, 0x9}, {0x9, 0x3ec5b421, 0x6, 0x1ff, 0x10001}, {0x6, 0x1, 0x7, 0xffff, 0x8, 0x400}, {0x800, 0x1, 0x8, 0x38, 0xffff, 0x2}, {0x401, 0xfffffbff, 0x6, 0x6, 0x2, 0x5}, {0x8, 0x5, 0x3, 0x3, 0xa, 0x5}, {0x9, 0x5, 0xc172, 0x640fab4b, 0x80}, {0xfffff801, 0x9, 0xf, 0xed1e, 0x7, 0x2}, {0x6, 0x7ff, 0x6, 0x200, 0x7e97, 0xfff}, {0x3, 0x8000, 0x6564, 0x4, 0xfffffff8, 0xc9a6}, {0x8, 0x0, 0x100, 0x2, 0xc, 0x2}, {0x7, 0x2, 0x153b, 0x5, 0x9, 0x2}, {0xfffffff9, 0x9, 0xb, 0xe1c, 0x9, 0x8}, {0xae3, 0xae16, 0x12, 0x0, 0x3, 0x4}, {0x3, 0x2, 0x0, 0x80b8, 0x4, 0x6}, {0x6, 0xffffffff, 0x3, 0x4, 0x4ee5, 0x6}, {0x2, 0x5, 0x1000, 0x8, 0xfffffffe, 0xb0}, {0x4, 0x3, 0x972, 0x966, 0x6, 0x6}, {0xffffffff, 0x6, 0x2, 0x3, 0x8, 0xffffffff}, {0x8, 0x6, 0xff, 0xfeeb, 0x81, 0x3}, {0xa, 0x7, 0x5, 0x2, 0x4, 0x2}, {0x6, 0xfff, 0x80000001, 0x0, 0x5, 0x9}, {0x7fc, 0x3, 0x81, 0x3fa, 0x7fff, 0x6}, {0x3, 0x7, 0x1, 0x6de, 0x7, 0x1}, {0x0, 0x9, 0x5, 0x80000001, 0x0, 0x3}, {0x9, 0xcfbd, 0x100, 0x9, 0xa, 0x3}, {0xea36, 0x7, 0x79, 0x7, 0x0, 0x5}, {0x3, 0x8, 0x3, 0x97e, 0x2400, 0x2}, {0xf, 0x6, 0x2, 0xfffffff8, 0xa3, 0x4}, {0x4, 0x1c48, 0x0, 0x6, 0x0, 0x2}, {0x9, 0x4, 0x5, 0x9ad2, 0x10001, 0x3ff}, {0x9, 0x4, 0x7, 0x6, 0x3, 0xcbc}, {0x7, 0x1, 0x7, 0x4, 0x1000, 0x661}, {0x2, 0x6, 0x155, 0x10001, 0x9, 0x2}, {0x5, 0x71c8, 0x5, 0x8ab, 0x5, 0xffffffff}, {0x0, 0x7, 0x1000, 0xaf5, 0x8, 0x5}, {0x7, 0x2, 0x3, 0x8001, 0x80000000, 0x4}, {0xffff, 0xfffffe01, 0x8, 0x6, 0x29edda77, 0x9}, {0x7, 0x8, 0x6, 0xff, 0x10001, 0x3}, {0xb, 0x7744, 0x0, 0x4, 0x3ff, 0xe}, {0x3, 0x6, 0x8, 0x3, 0xa5, 0xc}, {0x1, 0x4, 0x1, 0x10, 0x2, 0x7}, {0x3, 0x6, 0x7fff, 0x3, 0x8}, {0x8, 0xf7b, 0x2bf, 0xfffffbf2, 0x6, 0x3}, {0x7, 0xa8d7, 0xa, 0x9, 0x5d7, 0x400}, {0x4, 0x8, 0xfffffff9, 0x4, 0x2, 0x9}, {0x4, 0xfffffff2, 0x9, 0x5, 0x80000000, 0x3}, {0x7, 0xfffffff9, 0x8001, 0x6, 0x4, 0x36d}, {0x2, 0x4, 0xcb, 0x1, 0x4d, 0x7}, {0x8, 0x9, 0x7, 0xfffffff5, 0x2, 0x10}, {0x3, 0x93, 0x5, 0x9, 0x7, 0x9}, {0x8, 0xe, 0x3ff, 0xc, 0xe, 0x3}, {0x1, 0x100, 0x2, 0xe, 0x58ed, 0x80}, {0xbf, 0x85d9, 0xff, 0x9, 0x0, 0x8000}, {0x9, 0x10000, 0x2, 0x100, 0x6}, {0x3, 0x8, 0x10001, 0x8, 0x1, 0x63}, {0x2, 0x2, 0x7, 0x6, 0x401, 0x8}, {0x9, 0x9, 0x5, 0xfffffff5, 0x10001, 0x643}, {0x3, 0x0, 0x3, 0x405, 0x5db9, 0xb}, {0x44, 0x10001, 0x5, 0x3, 0x6, 0x8000}, {0x4, 0x8, 0x7, 0xdf, 0x9, 0x8001}, {0x1, 0x2, 0x3, 0x7ff, 0x28e, 0x9}, {0x40, 0xb, 0x1, 0x5, 0x8, 0x9}, {0xfff, 0x401, 0x1, 0x7, 0x6, 0x6}, {0x3, 0x7, 0x2e, 0x742, 0x8, 0x7}, {0x9, 0xfffffffa, 0x80000001, 0x8de, 0xe4, 0x5}, {0x5, 0xd, 0x0, 0x3, 0x0, 0xfffffff8}, {0x8401, 0x8f6, 0x9, 0x6b, 0x80, 0x7}, {0x8, 0x41532b1c, 0x5, 0x4, 0x6, 0x8}, {0x5, 0x8, 0x7ff, 0xde32, 0x0, 0x5}, {0x1, 0x4, 0x4, 0x37ea221d, 0x4, 0x8}, {0x3ff, 0x4, 0x7, 0x9, 0x7ff, 0x4}, {0x9, 0xf, 0x8, 0x7, 0x80000001, 0x9e}, {0x8, 0x62f4, 0x6, 0xf, 0x0, 0x5}, {0x3, 0x200, 0xffffffb2, 0x0, 0x0, 0xf64}, {0x119a0000, 0x9, 0x18f, 0x1, 0x4, 0x17bd}, {0xd19, 0xffffffff, 0x2, 0x18, 0x9fd, 0xe}, {0x9, 0x3, 0x7f, 0x0, 0x8, 0x2}, {0x3, 0x401, 0x1, 0x4, 0x3, 0x3}, {0x862c, 0x80, 0x9, 0x2, 0xe, 0xffe00000}, {0xb74, 0x3, 0x1, 0x6, 0x744f, 0xd}, {0x2, 0x1, 0x7, 0x1000, 0x3, 0x2}, {0x4, 0x8, 0x1, 0x3, 0x1, 0x2}, {0x800, 0x3, 0x9, 0x4, 0xc4, 0x7}, {0x2, 0x1, 0xb, 0x1, 0x4, 0x1000}, {0x9, 0x1000, 0x6, 0x7, 0x1, 0x6e}, {0x7, 0x8, 0x3, 0x7fff, 0x77fe, 0x8}, {0x1, 0x4, 0x1, 0x87, 0x8001, 0xf}, {0x5, 0x100, 0xf73, 0x2, 0x8}, {0x0, 0x9, 0xfffff03e, 0x2, 0x6, 0xf}, {0x80, 0x7ff, 0x0, 0xacb, 0x6, 0x3}, {0x0, 0xec05, 0x1, 0x8, 0x7fffffff}, {0x2, 0x9, 0xfffffff8, 0x6, 0xffffffff}, {0x1, 0x7f, 0x3ff, 0xe, 0x738a7daa, 0x1}, {0x200, 0x4, 0x101, 0x48, 0x3, 0x3}, {0x1000, 0xfff, 0xaa6, 0x80000000, 0x2, 0x6}, {0x9, 0x80, 0x1, 0x8a1, 0x0, 0x100}, {0x8001, 0xcc4b, 0xda8, 0x3, 0x3, 0x1}, {0xc, 0x5, 0x9, 0x7, 0x3, 0x512b}, {0x1, 0x8, 0xe, 0xf78d, 0x7, 0x5}, {0xfffffff3, 0x2, 0x400, 0x2, 0x80, 0x6}, {0x6, 0xa9, 0x8a, 0x7, 0x1ff, 0x401}], [{0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {}, {0x5}, {0x5}, {0x4}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x14b916b060b568bb, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x7, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0xdf712e9370b3aac, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x4f3677799dbe0d6b}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x8f8d3ccdf9479beb}]}}]}, {0xb9, 0x6, "96dfd9fa6702daea666fc8cccc9863bbe7f419356b48d9cf7bb38a24f6d8a837046e560dbf27d0c7df54907297010f1fead8af67a26b1ce84aeae6a654b999c90bdeef8bfd0b11d74145c49945c0f3352261ae56f51033cfd31ec68f78334bc84484f32c60c08c1183c5ecfd6d3c6934b7d8d8f33ae64296e297912ffe1649efd59e87a01ef6f65fd778aab48d71f620c3f2aba459824e3ebd29fd34f9c2dfac0176c14e9d3f2a549a17b7f88752b90599806cc708"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xe8, 0x15, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5e0}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1ff, 0x6, 0x7, 0x269}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x9}}, @TCA_SKBEDIT_MARK={0x8}]}, {0x72, 0x6, "282707ecc361c26249d7c42b2201324881fa1da5ad3c2c2d7ae3eb872e86e20c448726c572b920482b747a588b6e3c0192675bb13c32b8fe0ef78217cd683288e6e4edfffc8196ba557b807d909bba45070a0cda6759cac8647318cbb8b3efcc8a012b7654ac0c0218e38e825f03"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x19c, 0x17, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1606, 0x7, 0x10000000, 0x6, 0xfff}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x5, 0x10001}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb06c, 0x839, 0x5, 0x2, 0x3}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x8, 0x4, 0x1c000}, 0x4d}}]}, {0xfd, 0x6, "60f76a1092b6ab89c6be36c749f622f9a420e8f30cead431fe5cc09769c87a816199c0a4d6e5464955c57085f00cfe7789124af46099b65b63f728175e567dc9bb649d2893e23faff861c3cc0859af796409da0987aac95907bd7c13c35bcb5b3b001759b6ad13f089b37249d964aa202938fb199912b4fde163327bcf29fb3d9849a94601134748a5be3415e502503abda886dd808c6b8f32cb38633c06cbc0f67992935ca8a6decbca1053fbc24d213c69623f5a9f3410d003a58d962519781fab18822148abc1bf1bbebb9eb9aa92e274cc4aaec959e42fbc8c1c0ff672e6e1249a59c0ba8bfdfb91c62b006bc7fa94516eded1b963df6c"}, {0xc}, {0xc, 0x8, {0x2, 0x529a98f49966cc1b}}}}, @m_gact={0x1078, 0xf, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x71d, 0x0, 0xfffffffa, 0xfe4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffe4, 0x4, 0xffffffffdffffff8, 0x7ef, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x7, 0x8, 0x0, 0xd}}]}, {0x1004, 0x6, "c5f2b5dbd255e7a775134701bcdf474be5b60aff726aecd85dfb79ce01a0ee2503f9b2980612ccc106406a08c5913b5a1e439d847237f9ab5fe2b101acdd3fbffd94115ed6896a5f87ff2a53a89fccb6aaab26f4217dcbc607f0c035d2341deff196c61ba5e3ea767767a7a4973cbe88f3c5e5fc1a9c322757ea3593fa393957fcc9214b0d146f4f27bc078ceea8986ffbb8c7ae4b90e0cb19e5fabc3f887cb753c2e17100a882f9ed95988f332aa81f703d48bbf6f36bf74bc089a3df28390840f687e551c59ee499fc1abccfee10b3fa25bc55e0c6f376c6335205104e61fcf4b72dd1bd6b3058473d03c4da3b3edf6e1aa7c21ee177aa23ebe3d70858cda1c582bb4b0003de89f520c40b24a181ad3edc500b589b104b449da729416cd8a90fb2bf64aeebcff6b2678323975aa8aba217bd0d63624eccd960f6181cb61beecd681c022e936131a6787bc3b5aabfa3f179633a5a1321b308cd013d9af1448aebc09129445c3b734de5704da16267e92854d2cce765d964090bc3504a7608889946c1a74a3cd89c899645d5c70a093cfd895f466585341a67aade4f37af68b32eb7578059dd7355976494c31624b8394370d1d8e4e789a6944656521a312539e59c3db383f087bd6529924206bf95603ef800835818124a0b9f843415545fb3ede61abf5d2c33472905217b91692819f89b4064f74e8dfc801cf4727112b613005ad512bce2e4d3608a3df6e97c1c0653bd36323b0bbfefc20587dfc52327591fc07e1d9ed7f7330b93026cc4802ac88de94d30f0e64a18ed8c6c8c631a092aea9cbb1d2374c595d9cb210590f80b18ba0c6aa856a53e8c9518e6c1e26cc18495a754369041bb96c74fcfbe1ce23d2a40f5bf03933134986fc6b472ed8f886be2daecd9dfb327e0a4741388e185d027cb37cb34df43e7377f3a98f1b207ca06d00ee836d0cfe5bb1a92fd87ef0366135f54ab78fe24a47b45579a67f83313a9d0098c76bbcf5d010d3beaed8fd8b919ffcb99584fb618dea89bbc8d7b3f16912a5f430e97c7673a06122b72ddaec35b6cb59565503ef74d2d23c261030e207cdbda0d400c79487b9118ab289c193127504816cb0528d92f93e92d1d1f22855cfddba287f7d9ef58ecddc157cdd5d7217fdc155fe3914ebe675d9813ba267c1f7fbabb0a9b203e9256f15147c8a2fa7845915ed9fe9a1ee980bda22a5e5e9ad09b76576aab342f33ac5a230b626419ff60e6b2add1a08cff336e79112af48b4cddff5a6eee6328e700f2e94bcc953b2a82a0e7503b2e8000409a8c303efd749d90e739fac740758eb0fafe4d9c71aabc803449424af182ed891bcf9878348e51d3f07df0d43a98f160b6a43bc95f1d3bfea3d673dc9533660cd08c356398605360c172e4942852a175ed708497857b131b8aa6a894cbe2cfe4e46263224662f112c335ee43c4938fb1c2e7d885bc4764ecacb2f2279620dcc1e76bc559c25217c48efc99bc8de63f58262c34dcb483c354fd5efa9f0a23fbf87111d7ab2d89c408999c738b16d877c489d82a7ce33f75bbc01eb259291dbfae4b63c2597fb6fad21aa41bbbe26e7f73bdb38ba67a65ed8dd1a993766b24f138343ae92e8abe39bfdf035085c9d4979236da3e9155bd18362a304a55397b15736d7f4d66d6c025c73dbd0bc500c359cc61a01d294a162fa9fa908fa006cd0ba697bce1b95df53f63d56ad98405874a3d59d9ec7ab55ecf4793f4112109d208b8142892cb51caff16eb7cb6260375d8da20596dbb34c02c8a2cf552277c5fd1dc0ddf238b628c4c2203c076787986fc61e26b52668859c146be3c3413e73fd9e64c29df0c9966176e79236ec184982e18acd5fa9e13dc52e25ee74c4fd46b8eda15b3a873f345ad22970cf5c206442a0e23e4ef866f88f6799dfeecb28363069b86eadc389d601b4fc8002b2ca2a4afd75a7400db8ba60743e8e6a94495120269a1dad3ae2cd662c83058a06c65c411cefa8b07bf06ac3d15d53ee7e1d3883cf52b4995650e743cd3f135cc6b94cbd207c5b447f0614e05b72617bca6e3ea43176e8cff7cc31bb1a601653cc4cf3a7a66caa21f45d35d562515823c791104bbb8b66a03e106023ccfa102e27449f0d3faa260f528077c4da0fe3bb8e4a704b5736751976b30d15014c326bd939d0a10ccdb5b7b94351e0c806b460a67fa661017307ae486f5da2db2c4ae116eabd99f8f8b88f33e29d464ba44ecff04f5eba4ffa4e23993fe663c1355427c74a276e07b4a994a2def076137c940a0c1a4d5290e70860635e8619bb9af8b41b0461215c9825f6f987f014dc702ba28c14d7e66974320cdc32ea36b953f82a2362ad46b2895d5b78731f02a60272bf8ab8f61bc82e0d2373448cab4d6b149cafdba4b4cc5cd55c579a5832ffdf2a48ff588537a1d6a870ec6a65c21205b42d39e14625d01cafa3379e2b1a8834f94dba7e8c172aea0b3d1aa040c1d35296608054ea897f193f4fc599e1f386700eb571cf05f644079efc6cbe82c438a5d0900b9a800d01714857ae1815f7b4aa453c7c360a8b1a789bc15d98a7581e1ea44cb10ef44a469f11df59ae5c521c0a6d6cf1a41b491b3b71e53440829eb5037fa130379cdc5c558129d6d532bf06809a869f8d37452ee5b6d25adb93c2965f83fb81a48a1360b7ac2ed8f8faaa759f6e49f29ef1ff962f2616c09ff976fc6ea707cac5a7b97126c3ebee19f8086c97d8bd277a2b9ae80db3d49aacdde13c26d1deefeefb96fe066d058a6bc3e4452d59dfc4d61c1e6d3afa98d63d9c0d2f8fd1dd13199372bd5916b63996dad9f0a06058668b016cbffdc9da95f50447ad9dcf000416bf9906d3aa772d7564122f3741048db8e8b9ec23b29590acedbf32a9dcc56ece8c36629f4c1df281aeee469a219afe4a3eb173fa313013efc33057db0e01796fdda0e7b49a902e837e09b966426bedc14abfd5ad4f5fefb9c2195c2c3894a190b15ae3313ad465bc055cae98befdfba072f412d16f07dcd3fa33fb38fc63b0703e3412d49d6025bcbc5bc94ab03a7b38158b967855f49e36abc5c6c0707534b028eaf85eae59f96dd6352b4b2ea747198fe7a3cf4a6d1bd47db94db0bf90075ed8335f91a266b39b12e16dc030ede93d319c8df666d05400757f8f4de174e425f778a68321f420d642687d4b225df1eb000ce6ff55f2e913cd843df8ca93cb13d1c3e61d59325da4f7ba5a205d49b90a2287c704071dcbba20b18d33c3e0e0227db506b1800a3ff8efed8e5ce2cc2df4062e0d1b1028786843b0e40ac75b8c34701ede23ad78de3f0a5b654118b8700587089ae2f1b5306f55416c5fd6c2c0d85ac9d914fd04e9d1bd58995ae1ba53b7970552823da792e8804e028f28ca987bbd84755b290d2ff2dbbeee406568a9cb0b48bcbea5eb08cd14ca7a7d9761396f825c2aa847bf92ea88b7d0342d72295ff944267a33e2aa8c0c9b38aafc5edee3f5ec4d34f921424e838449d8475f2d3ea407190673fd32475db930f1bbc2827340a2443a254fc95eaafb1efd87d403e6259da7dca9f2841a5d4ed72452fd2399a47123badb340ce12c2a1c06b5f20de6aeb9c199f1f3df3b9623e12bff3d28b4a1108e240981899fae65dee71398c70c40dae0015a6647cbf60f6d603a05d5c166b38723d149cf4332345154632de69da1300c980e336de286a7f934412ccf3f9e8dec356a2f2aa4817478ad54548bb98236fd8baa9db1d790eff266104078dfee09949e90302931d6c6e8342a2714c73d317eb69b4cecf3233389ec41eed8876bf30d575ec47e76d6ce30cce97522842f67f96a0837796503e4e408d8df12daaadc75614e999ebfe8ab23f798e80f41d808bdac3cd6054c828ecd464bf7cf5b72b6eba67699a9eea32703f12c270a97fee71aaa2eb376751471cb8f62cc842cc11dec463693506a5f7889f5cb9a06b38158407e27f7088aaa69eadba6bd40d61a0e5b6400a58ef22d03e42209e86a6a412f16e4f46d920f1f3da3c05c07bece74f76e12058b4c8a34635a9fce3be0e5ce5da2dd16ba5d8cd7702d2be82e41b851874d65ca6bd8659ce0d8467e0a36f1b76591e35325e95b561eb84c9e4486f96e98e87d95da86a1b51f4ce5223e347f0dfb14b4c718986ce2cad1af8fa65b84d60b552c2f698be75e9884a2a4c1e46f8006d5ff0c9f33d3b8432e078faa5d7d4df87ce67ee21926cd9d3fc5b32c96a9effd5eb308d1821efdfb2a4cc23153bcc64d63e6a96cc8e0fb60cf32bee5b2daa42f7581917f66beb92d949b6265969cf4299f6259c1ae0f2cf4b5e8f19c1c8d60f7981038d12f5cf5981376549a8dfc9fce9d39af6a459c0ee442322ac3fbf4ed2304df6132fcecab6df5afe49c5bbb0c85594c34cdbc4d0a2e2b3ba45fede45c1cc4080499a599d90b97ad8ce1d59556e2188e11239b79b6f376e32de614f07223214f59a9977e997e1cc783a6bed8023589ab64ecc587b134f5dbd55540c7d44eaa42e3dda67ca1227f76eb07ffab32851ee5fe866bdaa1441f34dd76440cb4e293635f8d4c029f47ccd5cf640182ed6c3c402e3733b55830f0726c0b53dfb43b84278430b9aa16bff350163c0c74a3849bfee3321358e5d62f4473d6f890ee44f3ff23965ffc14755d0111876d2ecda176c4561ff64d8ce9ea7e1094e9c5f4ed8397a9c336a1e410fd8ec81466b759e658d6b9d78117f8299fbc5e53ec56054d6aca0fa4a6c81acc3a8e29fa2f6ebbc8d97b791b219003af5f21d6ff345aa2272f87ffbb32d0bec5bd9df8288cbf023862faab5503f51253015347939556fda760307529ae35e3a1cf2d906ecc2efedd9731e4d89bb4728d9026affe00fff7192a8e0906ebd4c5650551d39413c5bf4260bfce2067eae00bb24da2dbedce08e56235a05c13335ade6007631f3ea58402486dcf37f2e8f3679e4ad00655b8e88f5f9f76078299c4107d9ec6e304c2789cb91a020ad27ec953a5259e5abb1a6fc83953078b9ef613b785befadf5bde9c43712368af8dae84a927f1d2f5f6fd25a3a0835389f3be90aaf17a286e1227ce71d3f289c2f9f43f23d6b0bb5ebe56b4b89961b83bf68f03227661edb210b2a369241426c895a238ea0ee973ecc4c39e214a7afaefc9dabda84ac1977d8c287431998959adca6fc574aebf2a04b5fda69a48abdbdab2099d25d965fdc58035258ad11faabab5bd2a25e3f9e18c63a95203ad0864d1b54712782d84b2fbb91d8550556f4bc543e5f2e0a0a9b1b1886fd2835a654963ca30e677a94f3f887144b0117383594bc5da26d1b18ded780fa0d8b541a21756b68c57003f11e19ede67fe722ab47c3b9f43dec9ec52e407bae91112ef9cf7a877839148da903d9e05fdaf8ebe27d96366304a32fc53354edc10b13fa6c0b0b4b22cf6517ef765d488d46961e3ceba973f5bef812d5d858c4dc66342995833436d00b43273fcfcc7c361db40a78c93cb94ec653266ea38e642ff07a75857ba86c4ba2785eb1070d11b826504f5909ae12d56c4a8265b6671338115f7c9434c804fae70c2f366c390cc0fd40f70f2836ce2ba233ce237c9ea2b95729044d0c44182d08954b40df400eb1f623b8f16139671c8f671aa0473e7465b44b4e8551a8e95f2aba07ea8d23e708aa8458e05ca5d68dc93f7daf0d2c4df6eec1041e8ad0781b98bf5ff41fca9a70e8e6fe7367ab30b2909f736df1ff28ec58128f033bb681054b8d42bcff707cd7a2b71c2adcd5f83578f53868d6c1b5c0ed311b46e73fc96b11eba3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x110, 0x1c, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x7, 0x3, 0x9, 0x7}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0xd, 0x0, 0x72cb}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7fff, 0x2, 0x3, 0x2, 0xb}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x8b03, 0x35, 0x7, 0x3}, {0x3, 0x5, 0x4, 0xe}, {0x108, 0x9, 0x0, 0x8}, {0xed, 0xb, 0xf8, 0x5}, {0x7, 0x0, 0x1, 0x9}]}]}, {0x6d, 0x6, "50dba49c6cd82c04827c78214bd1554abb4bcbf3ff4b5c3a68dedcc239bd37e7d7da565910fdd58b003fbeb735fe942a95443da89436f3ef985a05da571b1e83c7d127e631beb904e16a085a5762ed9497b75b9652baad236eda29f3c37a319d442e059da8f4f3f039"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x7a9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) kernel console output (not intermixed with test programs): er this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.160591][T16447] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 833.280759][T16449] netlink: 'syz.1.2230': attribute type 10 has an invalid length. [ 833.289103][T16449] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2230'. [ 833.410701][T16449] team0: entered promiscuous mode [ 833.415990][T16449] team_slave_0: entered promiscuous mode [ 833.434932][T16449] team_slave_1: entered promiscuous mode [ 833.459156][T16449] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.471555][T16449] batman_adv: batadv0: Interface activated: team0 [ 833.478363][T16449] batman_adv: batadv0: Interface deactivated: team0 [ 833.493335][T16449] batman_adv: batadv0: Removing interface: team0 [ 833.501955][T16449] bridge0: port 3(team0) entered blocking state [ 833.513163][T16449] bridge0: port 3(team0) entered disabled state [ 833.539687][T16449] team0: entered allmulticast mode [ 833.549651][T16449] team_slave_0: entered allmulticast mode [ 833.585268][T16449] team_slave_1: entered allmulticast mode [ 833.616479][T16449] bridge0: port 3(team0) entered blocking state [ 833.623542][T16449] bridge0: port 3(team0) entered forwarding state [ 834.514271][T16469] loop1: detected capacity change from 0 to 64 [ 834.550589][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 834.637566][T16176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 834.769566][T16469] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2233'. [ 834.794037][T16176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 834.827648][T16176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 834.911193][T16176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 834.981211][T16458] loop0: detected capacity change from 0 to 32768 [ 835.035174][T16458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2231 (16458) [ 835.066973][T16458] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 835.077809][T16458] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 835.086993][T16458] BTRFS info (device loop0): using free-space-tree [ 835.477720][T16176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.508030][T16458] xt_NFQUEUE: number of total queues is 0 [ 835.579374][T16458] 9pnet_fd: Insufficient options for proto=fd [ 835.596435][T16176] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.640363][T16502] FAULT_INJECTION: forcing a failure. [ 835.640363][T16502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.702949][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.710310][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.727883][T16502] CPU: 1 UID: 0 PID: 16502 Comm: syz.4.2238 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 835.738186][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 835.748358][T16502] Call Trace: [ 835.751668][T16502] [ 835.754624][T16502] dump_stack_lvl+0x241/0x360 [ 835.759438][T16502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.764691][T16502] ? __pfx__printk+0x10/0x10 [ 835.769423][T16502] ? __pfx_lock_release+0x10/0x10 [ 835.774752][T16502] ? vfs_write+0x7c4/0xc90 [ 835.779223][T16502] should_fail_ex+0x3b0/0x4e0 [ 835.784159][T16502] _copy_from_user+0x2f/0xe0 [ 835.788787][T16502] get_timespec64+0x97/0x280 [ 835.793551][T16502] ? __pfx_get_timespec64+0x10/0x10 [ 835.798887][T16502] __x64_sys_recvmmsg+0x140/0x250 [ 835.804640][T16502] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 835.810217][T16502] ? do_syscall_64+0x100/0x230 [ 835.814988][T16502] ? do_syscall_64+0xb6/0x230 [ 835.819669][T16502] do_syscall_64+0xf3/0x230 [ 835.824269][T16502] ? clear_bhb_loop+0x35/0x90 [ 835.829022][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.834907][T16502] RIP: 0033:0x7fd121d75a19 [ 835.839322][T16502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.859058][T16502] RSP: 002b:00007fd1217ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 835.867457][T16502] RAX: ffffffffffffffda RBX: 00007fd121f03f60 RCX: 00007fd121d75a19 [ 835.875441][T16502] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 835.883961][T16502] RBP: 00007fd1217ff0a0 R08: 0000000020003700 R09: 0000000000000000 [ 835.892531][T16502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.901241][T16502] R13: 000000000000000b R14: 00007fd121f03f60 R15: 00007ffe5f4e3f78 [ 835.909535][T16502] [ 835.935022][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.942250][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.014117][T15548] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 836.024925][T16513] netlink: 'syz.1.2240': attribute type 3 has an invalid length. [ 836.123300][T16513] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 836.168048][ T5120] libceph: connect (1)[c::]:6789 error -101 [ 836.174702][ T5120] libceph: mon0 (1)[c::]:6789 connect error [ 836.189597][ T5120] libceph: connect (1)[c::]:6789 error -101 [ 836.198255][ T5120] libceph: mon0 (1)[c::]:6789 connect error [ 836.463198][ T46] libceph: connect (1)[c::]:6789 error -101 [ 836.485532][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 836.682381][T16531] netlink: 'syz.4.2243': attribute type 10 has an invalid length. [ 836.710615][T16508] ceph: No mds server is up or the cluster is laggy [ 836.806735][T16531] bridge0: port 4(team0) entered disabled state [ 836.899849][T16531] team0: left allmulticast mode [ 836.923181][T16531] team_slave_0: left allmulticast mode [ 836.930198][T16531] team_slave_1: left allmulticast mode [ 836.937167][T16531] team0: left promiscuous mode [ 836.963945][T16531] team_slave_0: left promiscuous mode [ 836.969927][T16531] team_slave_1: left promiscuous mode [ 836.970324][T16533] loop1: detected capacity change from 0 to 4096 [ 836.976339][T16531] bridge0: port 4(team0) entered disabled state [ 836.998575][T16533] ntfs3: Unknown parameter '0xffffffffffffffff' [ 837.044386][T16531] batman_adv: batadv0: Adding interface: team0 [ 837.066132][T16531] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.117398][T16531] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 837.194323][T16176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.239331][T16534] netlink: 'syz.4.2243': attribute type 10 has an invalid length. [ 837.281438][T16534] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2243'. [ 837.313041][T16534] team0: entered promiscuous mode [ 837.329867][T16534] team_slave_0: entered promiscuous mode [ 837.336626][ T54] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 837.352071][T16534] team_slave_1: entered promiscuous mode [ 837.537906][T16534] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.548561][T16534] batman_adv: batadv0: Interface activated: team0 [ 837.560278][T16534] batman_adv: batadv0: Interface deactivated: team0 [ 837.586247][T16534] batman_adv: batadv0: Removing interface: team0 [ 837.681086][T16534] bridge0: port 4(team0) entered blocking state [ 837.719437][T16534] bridge0: port 4(team0) entered disabled state [ 837.777292][T16534] team0: entered allmulticast mode [ 837.812277][T16534] team_slave_0: entered allmulticast mode [ 837.851375][T16534] team_slave_1: entered allmulticast mode [ 837.907004][T16534] bridge0: port 4(team0) entered blocking state [ 837.913575][T16534] bridge0: port 4(team0) entered forwarding state [ 838.557237][ T54] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 838.708618][T16176] veth0_vlan: entered promiscuous mode [ 838.749223][T16176] veth1_vlan: entered promiscuous mode [ 838.789523][T16563] loop3: detected capacity change from 0 to 256 [ 838.842107][T16563] FAT-fs (loop3): bogus sectors per cluster 0 [ 838.848824][T16563] FAT-fs (loop3): Can't find a valid FAT filesystem [ 838.855693][T16176] veth0_macvtap: entered promiscuous mode [ 838.905903][T16176] veth1_macvtap: entered promiscuous mode [ 839.006117][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.062184][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.111181][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.155231][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.166825][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.194415][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.220510][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.245930][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.281954][T16176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.340884][ T5121] Bluetooth: hci3: command 0x0406 tx timeout [ 839.367680][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.410010][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.457071][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.490603][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.538195][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.565981][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.595161][T16176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.621570][T16533] loop1: detected capacity change from 0 to 40427 [ 839.623294][T16176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.663669][T16533] F2FS-fs (loop1): Invalid log sectorsize (2) [ 839.672195][T16176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.698466][T16533] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 839.752234][T16176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.752333][T16533] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 839.793336][T16176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.841660][T16176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.874125][T16176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.022102][T16596] netlink: 'syz.3.2254': attribute type 3 has an invalid length. [ 840.213457][T16596] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 840.322914][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.376088][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.396965][T12507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.429472][T12507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.509655][T16608] FAULT_INJECTION: forcing a failure. [ 840.509655][T16608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 840.527200][T16608] CPU: 1 UID: 0 PID: 16608 Comm: syz.1.2255 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 840.537312][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 840.547393][T16608] Call Trace: [ 840.550695][T16608] [ 840.553643][T16608] dump_stack_lvl+0x241/0x360 [ 840.558445][T16608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.563866][T16608] ? __pfx__printk+0x10/0x10 [ 840.568624][T16608] should_fail_ex+0x3b0/0x4e0 [ 840.573351][T16608] prepare_alloc_pages+0x1da/0x5d0 [ 840.578509][T16608] __alloc_pages_noprof+0x166/0x6c0 [ 840.583744][T16608] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 840.589809][T16608] ? validate_chain+0x11e/0x5920 [ 840.594974][T16608] ? __pfx_validate_chain+0x10/0x10 [ 840.600568][T16608] alloc_pages_mpol_noprof+0x3e8/0x680 [ 840.606623][T16608] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 840.613216][T16608] vma_alloc_folio_noprof+0x12e/0x230 [ 840.618966][T16608] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 840.625055][T16608] folio_prealloc+0x31/0x170 [ 840.629706][T16608] handle_pte_fault+0x252d/0x6eb0 [ 840.634856][T16608] ? mark_lock+0x9a/0x360 [ 840.639398][T16608] ? __pfx_handle_pte_fault+0x10/0x10 [ 840.645865][T16608] ? reacquire_held_locks+0x3eb/0x690 [ 840.651274][T16608] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 840.657391][T16608] ? __pfx_reacquire_held_locks+0x10/0x10 [ 840.663281][T16608] handle_mm_fault+0xff1/0x19a0 [ 840.668453][T16608] ? __pfx_handle_mm_fault+0x10/0x10 [ 840.674032][T16608] ? lock_vma_under_rcu+0x592/0x6e0 [ 840.679254][T16608] ? exc_page_fault+0x113/0x8c0 [ 840.684240][T16608] exc_page_fault+0x459/0x8c0 [ 840.688963][T16608] asm_exc_page_fault+0x26/0x30 [ 840.693913][T16608] RIP: 0033:0x7f7ed8c422cb [ 840.698332][T16608] Code: 00 00 00 48 8d 3d 6d 18 19 00 48 89 c1 31 c0 e8 cb 67 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d a1 18 19 00 48 89 34 24 48 8b 14 24 48 8b [ 840.718293][T16608] RSP: 002b:00007f7ed9b8cfc0 EFLAGS: 00010206 [ 840.724532][T16608] RAX: 0000000000000000 RBX: 00007f7ed8f03f60 RCX: 0000000000000000 [ 840.732674][T16608] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000200000c0 [ 840.740734][T16608] RBP: 00007f7ed9b8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 840.748869][T16608] R10: 00000000200000c0 R11: 0000000000000000 R12: 0000000000000001 [ 840.756832][T16608] R13: 000000000000000b R14: 00007f7ed8f03f60 R15: 00007fff0decec88 [ 840.764949][T16608] [ 840.803876][T16611] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2257'. [ 840.815174][T16608] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 840.839042][T16611] 0·: renamed from hsr_slave_1 (while UP) [ 840.910535][T16611] 0·: entered allmulticast mode [ 840.941793][T16611] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 841.036314][ T5121] Bluetooth: hci2: unexpected event 0x0e length: 1 < 3 [ 841.155553][T16623] netlink: 'syz.4.2258': attribute type 10 has an invalid length. [ 841.184185][ T5121] Bluetooth: hci1: command 0x0406 tx timeout [ 841.236120][T16623] bridge0: port 4(team0) entered disabled state [ 841.297384][T16623] team0: left allmulticast mode [ 841.318960][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 841.324754][T16623] team_slave_0: left allmulticast mode [ 841.374618][T16623] team_slave_1: left allmulticast mode [ 841.396710][T16623] team0: left promiscuous mode [ 841.427480][T16623] team_slave_0: left promiscuous mode [ 841.444484][T16623] team_slave_1: left promiscuous mode [ 841.446117][T16633] FAULT_INJECTION: forcing a failure. [ 841.446117][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 841.456530][T16623] bridge0: port 4(team0) entered disabled state [ 841.484100][T16623] batman_adv: batadv0: Adding interface: team0 [ 841.513268][T16633] CPU: 0 UID: 0 PID: 16633 Comm: syz.1.2261 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 841.523389][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 841.523750][T16623] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.534145][T16633] Call Trace: [ 841.534162][T16633] [ 841.534172][T16633] dump_stack_lvl+0x241/0x360 [ 841.534209][T16633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.534233][T16633] ? __pfx__printk+0x10/0x10 [ 841.534259][T16633] ? fs_reclaim_acquire+0x93/0x140 [ 841.534281][T16633] ? __pfx___might_resched+0x10/0x10 [ 841.534307][T16633] should_fail_ex+0x3b0/0x4e0 [ 841.534336][T16633] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 841.534359][T16633] should_failslab+0xac/0x100 [ 841.534400][T16633] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 841.534423][T16633] __kmalloc_noprof+0xd8/0x400 [ 841.534446][T16633] ? kfree+0x4e/0x360 [ 841.534473][T16633] tomoyo_realpath_from_path+0xcf/0x5e0 [ 841.534508][T16633] tomoyo_path_number_perm+0x23a/0x880 [ 841.534534][T16633] ? tomoyo_path_number_perm+0x208/0x880 [ 841.534554][T16633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 841.645997][T16633] ? __fget_files+0x29/0x470 [ 841.651035][T16633] ? __fget_files+0x3f6/0x470 [ 841.655708][T16633] ? __fget_files+0x29/0x470 [ 841.660704][T16633] security_file_ioctl+0x75/0xb0 [ 841.665826][T16633] __se_sys_ioctl+0x47/0x170 [ 841.670684][T16633] do_syscall_64+0xf3/0x230 [ 841.675455][T16633] ? clear_bhb_loop+0x35/0x90 [ 841.680134][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.686123][T16633] RIP: 0033:0x7f7ed8d75a19 [ 841.691133][T16633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.711281][T16633] RSP: 002b:00007f7ed9b8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.719989][T16633] RAX: ffffffffffffffda RBX: 00007f7ed8f03f60 RCX: 00007f7ed8d75a19 [ 841.728145][T16633] RDX: 0000000020000000 RSI: 00000000c2604110 RDI: 0000000000000003 [ 841.736224][T16633] RBP: 00007f7ed9b8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 841.744555][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.752528][T16633] R13: 000000000000000b R14: 00007f7ed8f03f60 R15: 00007fff0decec88 [ 841.760794][T16633] [ 841.771020][T16633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 841.801426][T16623] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 841.829605][T16626] netlink: 'syz.4.2258': attribute type 10 has an invalid length. [ 841.966107][T16626] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2258'. [ 841.994405][T16626] team0: entered promiscuous mode [ 841.999930][T16626] team_slave_0: entered promiscuous mode [ 842.066299][T16626] team_slave_1: entered promiscuous mode [ 842.075365][T16626] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.099298][T16626] batman_adv: batadv0: Interface activated: team0 [ 842.110578][T16626] batman_adv: batadv0: Interface deactivated: team0 [ 842.117351][T16626] batman_adv: batadv0: Removing interface: team0 [ 842.150325][T16626] bridge0: port 4(team0) entered blocking state [ 842.184988][T16626] bridge0: port 4(team0) entered disabled state [ 842.203298][T16626] team0: entered allmulticast mode [ 842.208648][T16626] team_slave_0: entered allmulticast mode [ 842.241039][T16626] team_slave_1: entered allmulticast mode [ 842.275597][T16626] bridge0: port 4(team0) entered blocking state [ 842.282192][T16626] bridge0: port 4(team0) entered forwarding state [ 842.461836][ T2446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.529565][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 842.690769][ T2446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.870009][T16668] FAULT_INJECTION: forcing a failure. [ 842.870009][T16668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.901145][T16668] CPU: 1 UID: 0 PID: 16668 Comm: syz.1.2265 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 842.911394][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 842.921825][T16668] Call Trace: [ 842.925217][T16668] [ 842.928176][T16668] dump_stack_lvl+0x241/0x360 [ 842.932985][T16668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.938299][T16668] ? __pfx__printk+0x10/0x10 [ 842.943003][T16668] ? __pfx_lock_release+0x10/0x10 [ 842.948233][T16668] ? vfs_write+0x7c4/0xc90 [ 842.952678][T16668] should_fail_ex+0x3b0/0x4e0 [ 842.957602][T16668] _copy_from_user+0x2f/0xe0 [ 842.962500][T16668] __sys_bpf+0x1a4/0x810 [ 842.966775][T16668] ? __pfx___sys_bpf+0x10/0x10 [ 842.971746][T16668] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 842.977734][T16668] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 842.984066][T16668] ? do_syscall_64+0x100/0x230 [ 842.988918][T16668] __x64_sys_bpf+0x7c/0x90 [ 842.993739][T16668] do_syscall_64+0xf3/0x230 [ 842.998258][T16668] ? clear_bhb_loop+0x35/0x90 [ 843.002940][T16668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.008835][T16668] RIP: 0033:0x7f7ed8d75a19 [ 843.013506][T16668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.034033][T16668] RSP: 002b:00007f7ed9b8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 843.043165][T16668] RAX: ffffffffffffffda RBX: 00007f7ed8f03f60 RCX: 00007f7ed8d75a19 [ 843.051234][T16668] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a [ 843.059227][T16668] RBP: 00007f7ed9b8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 843.067226][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.075203][T16668] R13: 000000000000000b R14: 00007f7ed8f03f60 R15: 00007fff0decec88 [ 843.083186][T16668] [ 843.090719][T16672] loop4: detected capacity change from 0 to 64 [ 843.090750][ T2446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.212437][ T54] Bluetooth: hci2: command tx timeout [ 843.245203][T16644] loop0: detected capacity change from 0 to 32768 [ 843.254993][T16644] jfs: Unrecognized mount option "nointegr×6ity" or missing value [ 843.365745][T16644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'. [ 844.073047][ T2446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.163082][T16676] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 844.171215][T16676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2267'. [ 844.917794][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.932300][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.944932][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.966860][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.998354][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 845.007077][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.043694][T16692] loop4: detected capacity change from 0 to 1024 [ 845.053389][T16692] EXT4-fs (loop4): Test dummy encryption mode enabled [ 845.061082][T16692] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 845.129812][T16689] loop0: detected capacity change from 0 to 512 [ 845.130850][T16692] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 845.165557][T16694] FAULT_INJECTION: forcing a failure. [ 845.165557][T16694] name failslab, interval 1, probability 0, space 0, times 0 [ 845.240263][T16694] CPU: 0 UID: 0 PID: 16694 Comm: syz.1.2271 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 845.250403][T16694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 845.260490][T16694] Call Trace: [ 845.263811][T16694] [ 845.265909][T16683] lo speed is unknown, defaulting to 1000 [ 845.266744][T16694] dump_stack_lvl+0x241/0x360 [ 845.277198][T16694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 845.282450][T16694] ? __pfx__printk+0x10/0x10 [ 845.287083][T16694] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 845.293626][T16694] ? __pfx___might_resched+0x10/0x10 [ 845.298947][T16694] should_fail_ex+0x3b0/0x4e0 [ 845.303660][T16694] should_failslab+0xac/0x100 [ 845.308378][T16694] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 845.315192][T16694] ? nvmf_dev_write+0x10b/0x2f80 [ 845.320455][T16694] memdup_user_nul+0x2f/0x100 [ 845.325359][T16694] nvmf_dev_write+0x10b/0x2f80 [ 845.330339][T16694] ? __pfx_lock_acquire+0x10/0x10 [ 845.335395][T16694] ? aa_file_perm+0x137/0xf60 [ 845.340395][T16694] ? __pfx_lock_release+0x10/0x10 [ 845.345568][T16694] ? aa_file_perm+0x137/0xf60 [ 845.351280][T16694] ? aa_file_perm+0x3ef/0xf60 [ 845.356073][T16694] ? __pfx_nvmf_dev_write+0x10/0x10 [ 845.362273][T16694] ? __pfx_lock_acquire+0x10/0x10 [ 845.367690][T16694] ? __pfx_aa_file_perm+0x10/0x10 [ 845.374088][T16694] ? mark_lock+0x9a/0x360 [ 845.378661][T16694] ? __lock_acquire+0x1384/0x2050 [ 845.384091][T16694] ? end_current_label_crit_section+0x14e/0x180 [ 845.390633][T16694] ? common_file_perm+0x1a6/0x210 [ 845.395696][T16694] ? bpf_lsm_file_permission+0x9/0x10 [ 845.401193][T16694] ? security_file_permission+0x7f/0xa0 [ 845.406956][T16694] ? rw_verify_area+0x1d2/0x6b0 [ 845.412018][T16694] ? __pfx_nvmf_dev_write+0x10/0x10 [ 845.417533][T16694] vfs_write+0x2a2/0xc90 [ 845.421820][T16694] ? __pfx_vfs_write+0x10/0x10 [ 845.426637][T16694] ? __fget_files+0x29/0x470 [ 845.432743][T16694] ? __fget_files+0x3f6/0x470 [ 845.437620][T16694] ? __fget_files+0x29/0x470 [ 845.442277][T16694] ksys_write+0x1a0/0x2c0 [ 845.446700][T16694] ? __pfx_ksys_write+0x10/0x10 [ 845.451853][T16694] ? do_syscall_64+0x100/0x230 [ 845.456662][T16694] ? do_syscall_64+0xb6/0x230 [ 845.461565][T16694] do_syscall_64+0xf3/0x230 [ 845.466101][T16694] ? clear_bhb_loop+0x35/0x90 [ 845.470809][T16694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.476898][T16694] RIP: 0033:0x7f7ed8d75a19 [ 845.481339][T16694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.501519][T16694] RSP: 002b:00007f7ed9b6d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.510055][T16694] RAX: ffffffffffffffda RBX: 00007f7ed8f04038 RCX: 00007f7ed8d75a19 [ 845.518144][T16694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 845.526321][T16694] RBP: 00007f7ed9b6d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 845.534333][T16694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.542417][T16694] R13: 000000000000006e R14: 00007f7ed8f04038 R15: 00007fff0decec88 [ 845.550608][T16694] [ 845.579075][ T2446] bridge_slave_1: left allmulticast mode [ 845.598661][ T2446] bridge_slave_1: left promiscuous mode [ 845.640731][ T2446] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.661763][T16689] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2269: bg 0: block 131: padding at end of block bitmap is not set [ 845.686102][ T2446] bridge_slave_0: left allmulticast mode [ 845.724103][ T2446] bridge_slave_0: left promiscuous mode [ 845.729910][ T2446] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.747645][T16689] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 845.786979][T16689] EXT4-fs (loop0): 1 truncate cleaned up [ 845.806589][T16689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.150662][ T927] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 846.163623][T16723] FAULT_INJECTION: forcing a failure. [ 846.163623][T16723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.200931][T16723] CPU: 1 UID: 0 PID: 16723 Comm: syz.3.2274 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 846.210995][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 846.221259][T16723] Call Trace: [ 846.224564][T16723] [ 846.227514][T16723] dump_stack_lvl+0x241/0x360 [ 846.232212][T16723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.237569][T16723] ? __pfx__printk+0x10/0x10 [ 846.242232][T16723] ? __pfx_lock_release+0x10/0x10 [ 846.247356][T16723] ? vfs_write+0x7c4/0xc90 [ 846.251802][T16723] should_fail_ex+0x3b0/0x4e0 [ 846.256509][T16723] _copy_from_user+0x2f/0xe0 [ 846.261116][T16723] get_timespec64+0x97/0x280 [ 846.265838][T16723] ? __pfx_get_timespec64+0x10/0x10 [ 846.271043][T16723] __x64_sys_recvmmsg+0x140/0x250 [ 846.276354][T16723] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 846.282297][T16723] ? do_syscall_64+0x100/0x230 [ 846.287946][T16723] ? do_syscall_64+0xb6/0x230 [ 846.293159][T16723] do_syscall_64+0xf3/0x230 [ 846.297660][T16723] ? clear_bhb_loop+0x35/0x90 [ 846.302604][T16723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.308596][T16723] RIP: 0033:0x7f1791975a19 [ 846.313015][T16723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.332888][T16723] RSP: 002b:00007f17926f6048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 846.341402][T16723] RAX: ffffffffffffffda RBX: 00007f1791b04038 RCX: 00007f1791975a19 [ 846.349604][T16723] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 846.358026][T16723] RBP: 00007f17926f60a0 R08: 0000000020003700 R09: 0000000000000000 [ 846.366212][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.375075][T16723] R13: 000000000000006e R14: 00007f1791b04038 R15: 00007ffe9de5ada8 [ 846.384130][T16723] [ 846.424138][T16727] loop1: detected capacity change from 0 to 1024 [ 846.475667][T16727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.537654][ T927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 846.559591][ T927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 846.581138][ T927] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 846.610531][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 846.628988][ T927] usb 1-1: SerialNumber: syz [ 846.653232][ T927] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 846.683932][ T927] usb-storage 1-1:1.0: USB Mass Storage device detected [ 846.704931][ T927] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 846.735642][ T927] scsi host1: usb-storage 1-1:1.0 [ 847.100755][ T54] Bluetooth: hci0: command tx timeout [ 847.256231][T16727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2275'. [ 847.333515][ T2446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.335446][T16689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.373741][ T2446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.382442][T16689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.398690][ T2446] bond0 (unregistering): Released all slaves [ 847.608840][ T46] usb 1-1: USB disconnect, device number 19 [ 847.945957][T16764] netlink: 'syz.4.2277': attribute type 10 has an invalid length. [ 848.003492][T16764] bridge0: port 4(team0) entered disabled state [ 848.030563][T16764] team0: left allmulticast mode [ 848.035828][T16764] team_slave_0: left allmulticast mode [ 848.042217][T16764] team_slave_1: left allmulticast mode [ 848.049320][T16764] team0: left promiscuous mode [ 848.062136][T16764] team_slave_0: left promiscuous mode [ 848.094832][T16771] loop1: detected capacity change from 0 to 64 [ 848.110659][T16764] team_slave_1: left promiscuous mode [ 848.183616][T16764] bridge0: port 4(team0) entered disabled state [ 848.256539][T16764] batman_adv: batadv0: Adding interface: team0 [ 848.312532][T16764] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.340272][T16764] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 848.359873][T15548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.398681][T16765] netlink: 'syz.4.2277': attribute type 10 has an invalid length. [ 848.408427][T16765] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2277'. [ 848.429101][T16765] team0: entered promiscuous mode [ 849.138836][T16765] team_slave_0: entered promiscuous mode [ 849.157742][ T54] Bluetooth: hci3: unexpected event 0x0e length: 1 < 3 [ 849.159048][T16765] team_slave_1: entered promiscuous mode [ 849.180533][ T54] Bluetooth: hci0: command tx timeout [ 849.214962][T16765] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.247152][T16765] batman_adv: batadv0: Interface activated: team0 [ 849.269781][T16765] batman_adv: batadv0: Interface deactivated: team0 [ 849.279578][T16765] batman_adv: batadv0: Removing interface: team0 [ 849.294770][T16765] bridge0: port 4(team0) entered blocking state [ 849.304281][T16765] bridge0: port 4(team0) entered disabled state [ 849.315971][T16765] team0: entered allmulticast mode [ 849.325161][T16765] team_slave_0: entered allmulticast mode [ 849.336420][T16765] team_slave_1: entered allmulticast mode [ 849.348897][T16765] bridge0: port 4(team0) entered blocking state [ 849.349280][T16781] loop0: detected capacity change from 0 to 512 [ 849.356337][T16765] bridge0: port 4(team0) entered forwarding state [ 849.412031][T16781] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 849.423005][T16767] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2279'. [ 849.451647][T16767] 0·: renamed from hsr_slave_1 (while UP) [ 849.471875][T16767] 0·: entered allmulticast mode [ 849.489022][T16767] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 849.545474][T16775] netlink: 'syz.1.2280': attribute type 10 has an invalid length. [ 849.553515][T16775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2280'. [ 849.563296][T16775] bridge0: port 4(gretap0) entered blocking state [ 849.569906][T16775] bridge0: port 4(gretap0) entered disabled state [ 849.576574][T16775] gretap0: entered allmulticast mode [ 849.583043][T16775] gretap0: entered promiscuous mode [ 849.590989][T16775] bridge0: port 4(gretap0) entered blocking state [ 849.597675][T16775] bridge0: port 4(gretap0) entered forwarding state [ 849.623162][T16781] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2282: iget: bad extended attribute block 19 [ 849.658942][T16781] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2282: couldn't read orphan inode 15 (err -117) [ 849.763296][T16781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.806896][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 850.068617][T12747] libceph: connect (1)[c::]:6789 error -101 [ 850.070308][T16683] chnl_net:caif_netlink_parms(): no params data found [ 850.080617][T12747] libceph: mon0 (1)[c::]:6789 connect error [ 850.363429][T12747] libceph: connect (1)[c::]:6789 error -101 [ 850.373170][T12747] libceph: mon0 (1)[c::]:6789 connect error [ 850.385847][T15548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.882923][T16683] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.892885][T12747] libceph: connect (1)[c::]:6789 error -101 [ 850.907241][T16683] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.921577][T12747] libceph: mon0 (1)[c::]:6789 connect error [ 850.937786][T16683] bridge_slave_0: entered allmulticast mode [ 850.969235][T16683] bridge_slave_0: entered promiscuous mode [ 850.981729][T16792] ceph: No mds server is up or the cluster is laggy [ 851.009014][ T2446] hsr_slave_0: left promiscuous mode [ 851.015023][T16812] loop4: detected capacity change from 0 to 1024 [ 851.024115][ T2446] hsr_slave_1: left promiscuous mode [ 851.030976][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.052809][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.061715][T16812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.133204][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.138407][T16812] FAULT_INJECTION: forcing a failure. [ 851.138407][T16812] name failslab, interval 1, probability 0, space 0, times 0 [ 851.161186][T16812] CPU: 0 UID: 0 PID: 16812 Comm: syz.4.2288 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 851.171569][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 851.182352][T16812] Call Trace: [ 851.185840][T16812] [ 851.188812][T16812] dump_stack_lvl+0x241/0x360 [ 851.189166][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 851.193504][T16812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 851.193536][T16812] ? __pfx__printk+0x10/0x10 [ 851.193564][T16812] ? fs_reclaim_acquire+0x93/0x140 [ 851.193585][T16812] ? __pfx___might_resched+0x10/0x10 [ 851.193612][T16812] should_fail_ex+0x3b0/0x4e0 [ 851.193642][T16812] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 851.206123][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.209640][T16812] should_failslab+0xac/0x100 [ 851.243315][T16812] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 851.249069][T16812] __kmalloc_noprof+0xd8/0x400 [ 851.254011][T16812] ? kfree+0x4e/0x360 [ 851.258146][T16812] tomoyo_realpath_from_path+0xcf/0x5e0 [ 851.260602][ T54] Bluetooth: hci0: command tx timeout [ 851.263910][T16812] tomoyo_path_perm+0x2b7/0x740 [ 851.274232][T16812] ? tomoyo_path_perm+0x287/0x740 [ 851.279282][T16812] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 851.284811][T16812] ? __fget_files+0x29/0x470 [ 851.289694][T16812] security_inode_getattr+0xd8/0x130 [ 851.295206][T16812] vfs_getattr+0x45/0x430 [ 851.299561][T16812] do_statx_fd+0x122/0x450 [ 851.304005][T16812] ? __pfx_do_statx_fd+0x10/0x10 [ 851.307102][T16797] loop1: detected capacity change from 0 to 40427 [ 851.308981][T16812] __se_sys_statx+0x153/0x2b0 [ 851.320307][T16812] ? __pfx___se_sys_statx+0x10/0x10 [ 851.325558][T16812] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 851.331572][T16812] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 851.337947][T16812] ? do_syscall_64+0x100/0x230 [ 851.342753][T16812] ? __x64_sys_statx+0x20/0xc0 [ 851.345069][T16797] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 851.347561][T16812] do_syscall_64+0xf3/0x230 [ 851.359964][T16812] ? clear_bhb_loop+0x35/0x90 [ 851.364769][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.370445][T16797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 851.371498][T16812] RIP: 0033:0x7fd121d75a19 [ 851.384105][T16812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.392026][T16797] F2FS-fs (loop1): invalid crc value [ 851.403719][T16812] RSP: 002b:00007fd1217ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 851.403752][T16812] RAX: ffffffffffffffda RBX: 00007fd121f03f60 RCX: 00007fd121d75a19 [ 851.403767][T16812] RDX: 0000000000001000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 851.403779][T16812] RBP: 00007fd1217ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 851.403791][T16812] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 851.403803][T16812] R13: 000000000000000b R14: 00007fd121f03f60 R15: 00007ffe5f4e3f78 [ 851.403833][T16812] [ 851.446202][T16812] ERROR: Out of memory at tomoyo_realpath_from_path. [ 851.526205][T16797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 851.546938][T12541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.595925][ T2446] veth1_macvtap: left promiscuous mode [ 851.640521][ T2446] veth0_macvtap: left promiscuous mode [ 851.657501][ T2446] veth1_vlan: left promiscuous mode [ 851.668282][ T2446] veth0_vlan: left promiscuous mode [ 851.679424][T16797] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 851.689850][T16797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 851.771573][T16818] loop3: detected capacity change from 0 to 2048 [ 851.951952][T16818] loop3: detected capacity change from 0 to 512 [ 851.994772][T16818] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 852.657514][ T927] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 852.884137][ T927] usb 4-1: Using ep0 maxpacket: 8 [ 852.919945][ T927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.969367][ T927] usb 4-1: string descriptor 0 read error: -22 [ 852.980745][ T2446] team0 (unregistering): Port device team_slave_1 removed [ 852.990692][ T927] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 852.999903][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.013778][ T927] usb 4-1: config 0 descriptor?? [ 853.124545][ T2446] team0 (unregistering): Port device team_slave_0 removed [ 853.340796][ T54] Bluetooth: hci0: command tx timeout [ 854.037248][T16683] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.046907][T16683] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.058999][T16683] bridge_slave_1: entered allmulticast mode [ 854.074995][T16683] bridge_slave_1: entered promiscuous mode [ 854.228417][T16846] netlink: 'syz.4.2293': attribute type 10 has an invalid length. [ 854.252030][T16846] bridge0: port 4(team0) entered disabled state [ 854.278617][T16846] team0: left allmulticast mode [ 854.286218][T16846] team_slave_0: left allmulticast mode [ 854.298133][T16846] team_slave_1: left allmulticast mode [ 854.312770][T16846] team0: left promiscuous mode [ 854.324502][T16846] team_slave_0: left promiscuous mode [ 854.338720][T16846] team_slave_1: left promiscuous mode [ 854.350993][T16846] bridge0: port 4(team0) entered disabled state [ 854.388405][T16846] batman_adv: batadv0: Adding interface: team0 [ 854.408422][T16856] loop0: detected capacity change from 0 to 512 [ 854.417106][T16846] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.459325][T16846] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 854.488402][T16847] netlink: 'syz.4.2293': attribute type 10 has an invalid length. [ 854.500040][T16847] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2293'. [ 854.511171][T16847] team0: entered promiscuous mode [ 854.513575][T16856] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2296: casefold flag without casefold feature [ 854.517568][T16847] team_slave_0: entered promiscuous mode [ 854.536808][T16856] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2296: couldn't read orphan inode 15 (err -117) [ 854.551193][T16856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.578811][ T29] audit: type=1800 audit(1721168494.847:1019): pid=16856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2296" name="file1" dev="loop0" ino=19 res=0 errno=0 [ 854.580827][T16847] team_slave_1: entered promiscuous mode [ 854.622894][T16847] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.629850][T16847] batman_adv: batadv0: Interface activated: team0 [ 854.657366][T15548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.675664][T16847] batman_adv: batadv0: Interface deactivated: team0 [ 854.695887][T16860] loop1: detected capacity change from 0 to 64 [ 854.918602][T16847] batman_adv: batadv0: Removing interface: team0 [ 855.687928][T16847] bridge0: port 4(team0) entered blocking state [ 855.700723][T16847] bridge0: port 4(team0) entered disabled state [ 855.722657][T16847] team0: entered allmulticast mode [ 855.740595][T16847] team_slave_0: entered allmulticast mode [ 855.755884][T16847] team_slave_1: entered allmulticast mode [ 855.766295][T16847] bridge0: port 4(team0) entered blocking state [ 855.772921][T16847] bridge0: port 4(team0) entered forwarding state [ 855.791600][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'. [ 855.835796][T16683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.854888][T16865] netlink: 'syz.1.2295': attribute type 10 has an invalid length. [ 855.863512][T16865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2295'. [ 855.995172][T16683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.042288][ T927] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 856.081797][ T927] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 856.095344][ T927] dib0700: firmware download failed at 7 with -22 [ 856.142225][ T927] usb 4-1: USB disconnect, device number 31 [ 856.258697][ T54] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 856.296076][T16872] loop4: detected capacity change from 0 to 4096 [ 856.318901][T16683] team0: Port device team_slave_0 added [ 856.350265][T16683] team0: Port device team_slave_1 added [ 856.392213][T16880] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 856.526608][T16883] loop3: detected capacity change from 0 to 128 [ 856.530026][T16683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.559541][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.619698][T16883] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.2303: iget: checksum invalid [ 856.673671][T16683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.733412][T16683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.746421][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.791593][T16683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.798323][T16883] EXT4-fs (loop3): get root inode failed [ 856.864592][T16883] EXT4-fs (loop3): mount failed [ 856.963743][T16883] loop3: detected capacity change from 0 to 64 [ 856.998274][T16895] loop0: detected capacity change from 0 to 128 [ 857.142956][T16883] overlayfs: upper fs needs to support d_type. [ 857.217070][T16683] hsr_slave_0: entered promiscuous mode [ 857.267872][T16683] hsr_slave_1: entered promiscuous mode [ 857.295966][T16883] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 857.343020][T16883] overlayfs: failed to set xattr on upper [ 857.375883][T16883] overlayfs: ...falling back to redirect_dir=nofollow. [ 857.397296][T16902] cgroup: fork rejected by pids controller in /syz4 [ 857.414966][T16883] overlayfs: ...falling back to index=off. [ 857.436018][T16883] overlayfs: ...falling back to uuid=null. [ 857.464242][T15548] VFS: Lookup of '. ' in vfat loop0 would have caused loop [ 857.501800][T15548] VFS: Lookup of '. ' in vfat loop0 would have caused loop [ 858.004948][T16916] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 858.046237][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 1032 [ 858.046689][T16916] bridge0: port 3(team0) entered disabled state [ 858.085969][T16916] team0: left allmulticast mode [ 858.092097][T16916] team_slave_0: left allmulticast mode [ 858.105995][T15447] Trying to free block not in datazone [ 858.108898][T16916] team_slave_1: left allmulticast mode [ 858.113939][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 858.130237][T15447] Trying to free block not in datazone [ 858.135937][T15447] Trying to free block not in datazone [ 858.142379][T15447] Trying to free block not in datazone [ 858.147868][T15447] Trying to free block not in datazone [ 858.155618][T15447] minix_free_block (loop3:6): bit already cleared [ 858.163062][T15447] Trying to free block not in datazone [ 858.168701][T15447] Trying to free block not in datazone [ 858.175326][T16916] team0: left promiscuous mode [ 858.180306][T16916] team_slave_0: left promiscuous mode [ 858.188643][T16916] team_slave_1: left promiscuous mode [ 858.202375][T16916] bridge0: port 3(team0) entered disabled state [ 858.247952][T16916] batman_adv: batadv0: Adding interface: team0 [ 858.279982][T16916] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.407885][T16916] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 858.505975][T16915] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 858.548733][T16915] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2310'. [ 858.596792][T16915] team0: entered promiscuous mode [ 858.611979][T16915] team_slave_0: entered promiscuous mode [ 858.670916][T16915] team_slave_1: entered promiscuous mode [ 858.682353][T16915] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.689347][T16915] batman_adv: batadv0: Interface activated: team0 [ 858.720520][T12723] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 858.728502][T16915] batman_adv: batadv0: Interface deactivated: team0 [ 858.740488][T16915] batman_adv: batadv0: Removing interface: team0 [ 858.761280][T16915] bridge0: port 3(team0) entered blocking state [ 858.767759][T16915] bridge0: port 3(team0) entered disabled state [ 858.790600][T16915] team0: entered allmulticast mode [ 858.797556][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 858.811481][T16915] team_slave_0: entered allmulticast mode [ 858.813680][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 858.828154][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 858.830537][T16915] team_slave_1: entered allmulticast mode [ 858.850714][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 858.858878][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 858.860310][T16915] bridge0: port 3(team0) entered blocking state [ 858.872579][T16915] bridge0: port 3(team0) entered forwarding state [ 858.881204][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 858.927949][T12723] usb 4-1: Using ep0 maxpacket: 8 [ 858.947247][T12723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 858.964537][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 858.977594][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 858.987324][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 858.998546][T12723] usb 4-1: string descriptor 0 read error: -22 [ 859.006097][T12723] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 859.016192][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 859.024865][T12723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.043492][ T5121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 859.052729][T12723] usb 4-1: config 0 descriptor?? [ 859.063370][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 859.293319][T16929] overlayfs: failed to clone upperpath [ 859.309623][ T2482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.424460][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2311'. [ 859.462365][T16929] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2315'. [ 859.485421][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'. [ 859.574410][ T2482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.653205][T12723] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 859.677796][T12723] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 859.686723][T12723] dib0700: firmware download failed at 7 with -22 [ 859.741322][T12723] usb 4-1: USB disconnect, device number 32 [ 859.794607][T16923] lo speed is unknown, defaulting to 1000 [ 859.889534][ T2482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.099529][ T54] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 860.151270][ T2482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.187006][T16925] lo speed is unknown, defaulting to 1000 [ 860.586401][T16683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 860.618397][T16959] loop1: detected capacity change from 0 to 256 [ 860.640008][T16959] msdos: Unknown parameter '' [ 860.659495][T16683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 860.678956][T16683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 860.762609][T16683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 860.940809][ T54] Bluetooth: hci2: command tx timeout [ 861.137998][ T2482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.181347][ T54] Bluetooth: hci4: command tx timeout [ 861.322739][T16982] loop3: detected capacity change from 0 to 256 [ 861.537887][ T2482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.715308][T16982] syz.3.2323: attempt to access beyond end of device [ 861.715308][T16982] loop3: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 861.766100][ T2482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.882817][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 861.949901][ T2482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.012153][T16995] netlink: 'syz.1.2324': attribute type 10 has an invalid length. [ 862.052547][T16995] bridge0: port 3(team0) entered disabled state [ 862.081879][T16995] team0: left allmulticast mode [ 862.086890][T16995] team_slave_0: left allmulticast mode [ 862.104085][T16995] team_slave_1: left allmulticast mode [ 862.112286][T16995] team0: left promiscuous mode [ 862.119367][T16995] team_slave_0: left promiscuous mode [ 862.125972][T16995] team_slave_1: left promiscuous mode [ 862.142519][T16995] bridge0: port 3(team0) entered disabled state [ 862.163217][T16995] batman_adv: batadv0: Adding interface: team0 [ 862.190809][T16995] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.247444][T16995] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 862.289056][T17001] netlink: 'syz.1.2324': attribute type 10 has an invalid length. [ 862.309459][T17001] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2324'. [ 862.332795][T17001] team0: entered promiscuous mode [ 862.337883][T17001] team_slave_0: entered promiscuous mode [ 862.368238][T17001] team_slave_1: entered promiscuous mode [ 862.405354][T17001] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.417424][T17001] batman_adv: batadv0: Interface activated: team0 [ 862.435925][T17001] batman_adv: batadv0: Interface deactivated: team0 [ 862.444808][T17001] batman_adv: batadv0: Removing interface: team0 [ 862.464049][T17001] bridge0: port 3(team0) entered blocking state [ 862.472974][T17001] bridge0: port 3(team0) entered disabled state [ 862.492821][T17001] team0: entered allmulticast mode [ 862.499280][T17001] team_slave_0: entered allmulticast mode [ 862.513647][T17001] team_slave_1: entered allmulticast mode [ 862.538790][T17001] bridge0: port 3(team0) entered blocking state [ 862.545416][T17001] bridge0: port 3(team0) entered forwarding state [ 862.556172][T16923] chnl_net:caif_netlink_parms(): no params data found [ 862.900843][T16925] chnl_net:caif_netlink_parms(): no params data found [ 863.020587][ T54] Bluetooth: hci2: command tx timeout [ 863.026550][ T29] audit: type=1326 audit(1721168503.297:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.110053][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 863.117320][ T29] audit: type=1326 audit(1721168503.337:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.189668][T17036] loop3: detected capacity change from 0 to 1024 [ 863.205328][T17036] hfsplus: invalid catalog btree flag [ 863.211449][T17036] hfsplus: failed to load catalog file [ 863.260781][ T54] Bluetooth: hci4: command tx timeout [ 863.304863][ T29] audit: type=1326 audit(1721168503.337:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.340637][ T29] audit: type=1326 audit(1721168503.337:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.376496][ T29] audit: type=1326 audit(1721168503.337:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.420628][ T29] audit: type=1326 audit(1721168503.337:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.454231][T16683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.494841][ T29] audit: type=1326 audit(1721168503.337:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.526691][T17044] loop3: detected capacity change from 0 to 64 [ 863.532680][ T29] audit: type=1326 audit(1721168503.337:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.566344][ T29] audit: type=1326 audit(1721168503.337:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.608153][ T29] audit: type=1326 audit(1721168503.337:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.3.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 863.713196][T17029] loop1: detected capacity change from 0 to 32768 [ 863.759870][T17029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2327 (17029) [ 863.777278][T16923] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.793633][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.822694][T16923] bridge_slave_0: entered allmulticast mode [ 863.838208][T16923] bridge_slave_0: entered promiscuous mode [ 863.864138][ T2482] bridge_slave_1: left allmulticast mode [ 863.879903][ T2482] bridge_slave_1: left promiscuous mode [ 863.887069][ T2482] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.891958][T17029] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 863.914363][T17029] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 863.924399][ T2482] bridge_slave_0: left allmulticast mode [ 863.928303][T17029] BTRFS info (device loop1): using free-space-tree [ 863.930262][ T2482] bridge_slave_0: left promiscuous mode [ 863.964363][ T2482] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.090047][ T2482] team0: left allmulticast mode [ 864.137689][ T2482] team_slave_0: left allmulticast mode [ 864.197180][ T2482] team_slave_1: left allmulticast mode [ 864.267415][ T2482] bridge0: port 4(team0) entered disabled state [ 864.453595][ T2482] gretap0: left allmulticast mode [ 864.546252][ T2482] gretap0: left promiscuous mode [ 864.560085][ T2482] bridge0: port 3(gretap0) entered disabled state [ 864.609518][ T2482] bridge_slave_1: left allmulticast mode [ 864.642823][ T2482] bridge_slave_1: left promiscuous mode [ 864.665976][ T2482] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.726833][ T2482] bridge_slave_0: left allmulticast mode [ 864.741056][ T2482] bridge_slave_0: left promiscuous mode [ 864.766861][ T2482] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.912615][T15097] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 865.018889][ T5159] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 865.107285][ T54] Bluetooth: hci2: command tx timeout [ 865.283390][ T5159] usb 4-1: New USB device found, idVendor=05ac, idProduct=9f41, bcdDevice=94.fc [ 865.304502][ T5159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.332007][ T5159] usb 4-1: Product: syz [ 865.349333][ T5159] usb 4-1: Manufacturer: syz [ 865.351008][ T54] Bluetooth: hci4: command tx timeout [ 865.358347][ T5159] usb 4-1: SerialNumber: syz [ 865.409887][ T5159] usb 4-1: config 0 descriptor?? [ 865.428457][ T5159] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 865.596341][T17071] netlink: 420 bytes leftover after parsing attributes in process `syz.1.2333'. [ 866.312521][ T5159] usb 4-1: USB disconnect, device number 33 [ 867.152938][ T5159] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 867.190524][ T54] Bluetooth: hci2: command tx timeout [ 867.195922][ T2482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.209466][ T2482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.223914][ T2482] bond0 (unregistering): Released all slaves [ 867.350553][ T5159] usb 4-1: Using ep0 maxpacket: 8 [ 867.394247][ T5159] usb 4-1: unable to get BOS descriptor or descriptor too short [ 867.407274][ T5159] usb 4-1: string descriptor 0 read error: -22 [ 867.414580][ T5159] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 867.425350][ T5159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.436527][ T5159] usb 4-1: config 0 descriptor?? [ 867.441698][ T54] Bluetooth: hci4: command tx timeout [ 867.456252][ T2482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.470757][ T2482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.483182][ T2482] bond0 (unregistering): Released all slaves [ 867.516250][T16923] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.530929][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.538405][T16923] bridge_slave_1: entered allmulticast mode [ 867.547791][T16923] bridge_slave_1: entered promiscuous mode [ 867.864557][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2334'. [ 867.914528][T16923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.946114][T16923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.994848][T16683] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.080627][T16925] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.099870][ T5159] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 868.112131][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.119424][T16925] bridge_slave_0: entered allmulticast mode [ 868.139654][ T5159] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 868.152037][T16925] bridge_slave_0: entered promiscuous mode [ 868.168024][ T5159] dib0700: firmware download failed at 7 with -22 [ 868.195716][ T5159] usb 4-1: USB disconnect, device number 34 [ 868.308039][T16925] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.325324][T16925] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.352828][T16925] bridge_slave_1: entered allmulticast mode [ 868.373621][T16925] bridge_slave_1: entered promiscuous mode [ 868.395563][T16923] team0: Port device team_slave_0 added [ 868.454581][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.462045][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.577069][T16923] team0: Port device team_slave_1 added [ 868.663350][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.670576][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.691778][T16925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.716200][T16925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.740955][ T54] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 868.781374][T17103] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 868.810176][T17103] bridge0: port 3(team0) entered disabled state [ 868.836695][T17103] team0: left allmulticast mode [ 868.842449][T17103] team_slave_0: left allmulticast mode [ 868.863726][T17103] team_slave_1: left allmulticast mode [ 868.869377][T17103] team0: left promiscuous mode [ 868.872315][T17107] loop3: detected capacity change from 0 to 256 [ 868.875053][T17103] team_slave_0: left promiscuous mode [ 868.886832][T17103] team_slave_1: left promiscuous mode [ 868.892896][T17103] bridge0: port 3(team0) entered disabled state [ 868.904025][T17103] batman_adv: batadv0: Adding interface: team0 [ 868.904874][T17107] vfat: Bad value for 'tz' [ 868.910682][T17103] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.960668][T17103] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 868.989799][T17104] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 869.003323][T17104] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2336'. [ 869.014940][T17104] team0: entered promiscuous mode [ 869.021403][T17104] team_slave_0: entered promiscuous mode [ 869.027382][T17104] team_slave_1: entered promiscuous mode [ 869.053064][T17104] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.100443][T17104] batman_adv: batadv0: Interface activated: team0 [ 869.110091][T17104] batman_adv: batadv0: Interface deactivated: team0 [ 869.129414][T17104] batman_adv: batadv0: Removing interface: team0 [ 869.147586][T17104] bridge0: port 3(team0) entered blocking state [ 869.159930][T17104] bridge0: port 3(team0) entered disabled state [ 869.186687][T17104] team0: entered allmulticast mode [ 869.195729][T17104] team_slave_0: entered allmulticast mode [ 869.205491][T17104] team_slave_1: entered allmulticast mode [ 869.239550][T17104] bridge0: port 3(team0) entered blocking state [ 869.245988][T17104] bridge0: port 3(team0) entered forwarding state [ 869.383899][T16923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.394924][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.432723][T16923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.446268][T16923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.453946][T16923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.461019][T17109] FAULT_INJECTION: forcing a failure. [ 869.461019][T17109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.482059][T16923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.560267][T17109] CPU: 1 UID: 0 PID: 17109 Comm: syz.1.2338 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 869.570564][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 869.580739][T17109] Call Trace: [ 869.584028][T17109] [ 869.588098][T17109] dump_stack_lvl+0x241/0x360 [ 869.592810][T17109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.598138][T17109] ? __pfx__printk+0x10/0x10 [ 869.602751][T17109] ? __pfx_lock_release+0x10/0x10 [ 869.607917][T17109] ? __mutex_unlock_slowpath+0x21d/0x750 [ 869.613741][T17109] should_fail_ex+0x3b0/0x4e0 [ 869.618457][T17109] _copy_from_user+0x2f/0xe0 [ 869.623166][T17109] __x64_sys_rt_sigaction+0x153/0x290 [ 869.628548][T17109] ? __pfx___x64_sys_rt_sigaction+0x10/0x10 [ 869.634449][T17109] ? do_syscall_64+0x100/0x230 [ 869.639308][T17109] ? do_syscall_64+0xb6/0x230 [ 869.644073][T17109] do_syscall_64+0xf3/0x230 [ 869.648758][T17109] ? clear_bhb_loop+0x35/0x90 [ 869.653454][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.659350][T17109] RIP: 0033:0x7f7ed8d75a19 [ 869.663845][T17109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.683725][T17109] RSP: 002b:00007f7ed9b8e048 EFLAGS: 00000246 ORIG_RAX: 000000000000000d [ 869.692230][T17109] RAX: ffffffffffffffda RBX: 00007f7ed8f03f60 RCX: 00007f7ed8d75a19 [ 869.700454][T17109] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000011 [ 869.708587][T17109] RBP: 00007f7ed9b8e0a0 R08: 0000000020000000 R09: 0000000000000000 [ 869.716635][T17109] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 869.724599][T17109] R13: 000000000000000b R14: 00007f7ed8f03f60 R15: 00007fff0decec88 [ 869.732664][T17109] [ 869.751679][T17107] loop3: detected capacity change from 0 to 32768 [ 869.764596][T17107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2337 (17107) [ 869.777927][T16925] team0: Port device team_slave_0 added [ 869.795243][T17107] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 869.825496][T17107] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 869.834613][T17107] BTRFS info (device loop3): using free-space-tree [ 869.954539][T16923] hsr_slave_0: entered promiscuous mode [ 870.015057][T16923] hsr_slave_1: entered promiscuous mode [ 870.050543][T16923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.079931][T16923] Cannot create hsr debugfs directory [ 870.125688][T16925] team0: Port device team_slave_1 added [ 870.158021][T17107] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 870.369597][T16925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.557356][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.640619][T16925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.661895][T16925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.680494][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.083507][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.100306][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.114142][T16925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.144896][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 871.144915][ T29] audit: type=1800 audit(1721168511.407:1040): pid=17140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2337" name="bu" dev="loop3" ino=265 res=0 errno=0 [ 871.330642][ T29] audit: type=1804 audit(1721168511.597:1041): pid=17107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2337" name="/newroot/62/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 871.505204][T17151] loop1: detected capacity change from 0 to 1024 [ 871.546968][T17151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 871.564696][ T2482] hsr_slave_0: left promiscuous mode [ 871.591268][T17151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 871.605468][T17151] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6840c01c, mo2=0003] [ 871.614032][ T2482] 0·: left promiscuous mode [ 871.620821][T17151] System zones: 0-1, 3-36 [ 871.642969][T17151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.643092][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.674216][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.693749][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.713715][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.797424][ T2482] hsr_slave_0: left promiscuous mode [ 871.811507][ T2482] 1·: left promiscuous mode [ 871.840356][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.860935][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.884152][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.918179][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.039674][ T2482] veth1_macvtap: left promiscuous mode [ 872.048178][ T2482] veth0_macvtap: left promiscuous mode [ 872.054547][ T2482] veth1_vlan: left promiscuous mode [ 872.060025][ T2482] veth0_vlan: left promiscuous mode [ 872.078052][ T2482] veth1_macvtap: left promiscuous mode [ 872.090915][ T2482] veth0_macvtap: left promiscuous mode [ 872.106941][ T2482] veth1_vlan: left promiscuous mode [ 872.116979][ T2482] veth0_vlan: left promiscuous mode [ 872.218453][T15097] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.456462][T15447] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 872.693964][ T2482] infiniband syz1: set down [ 873.058913][ T29] audit: type=1326 audit(1721168513.327:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17161 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 873.100528][ T29] audit: type=1326 audit(1721168513.357:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17161 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 873.623964][ T2482] team0 (unregistering): Port device team_slave_1 removed [ 873.702937][ T2482] team0 (unregistering): Port device team_slave_0 removed [ 873.736785][ T29] audit: type=1326 audit(1721168514.007:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17161 comm="syz.3.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791975a19 code=0x7fc00000 [ 875.082320][ T5159] libceph: connect (1)[c::]:6789 error -101 [ 875.107792][ T5159] libceph: mon0 (1)[c::]:6789 connect error [ 875.376798][ T5120] libceph: connect (1)[c::]:6789 error -101 [ 875.384065][ T5120] libceph: mon0 (1)[c::]:6789 connect error [ 875.426895][ T2482] team_slave_1 (unregistering): left promiscuous mode [ 875.450992][ T2482] team0 (unregistering): Port device team_slave_1 removed [ 875.534351][ T2482] team_slave_0 (unregistering): left promiscuous mode [ 875.546777][ T2482] team0 (unregistering): Port device team_slave_0 removed [ 875.805703][T17176] ceph: No mds server is up or the cluster is laggy [ 876.240575][ T5159] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 876.442121][ T5159] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.460605][ T5159] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.480801][ T5159] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 876.503506][ T5159] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.520508][ T5159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.528546][ T5159] usb 4-1: Product: syz [ 876.542157][ T5159] usb 4-1: Manufacturer: syz [ 876.546805][ T5159] usb 4-1: SerialNumber: syz [ 876.697334][ T62] smc: removing ib device syz1 [ 876.771221][T17181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 876.790833][ C0] DEBUG: waiting rtnl_mutex for 501 jiffies. [ 876.796886][ C0] task:dhcpcd state:D stack:20672 pid:4770 tgid:4770 ppid:4769 flags:0x00000002 [ 876.807164][ C0] Call Trace: [ 876.810534][ C0] [ 876.813509][ C0] __schedule+0x1800/0x4a60 [ 876.818176][ C0] ? __pfx___schedule+0x10/0x10 [ 876.823098][ C0] ? __pfx_lock_release+0x10/0x10 [ 876.828175][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 876.833741][ C0] ? schedule+0x90/0x320 [ 876.838039][ C0] schedule+0x14b/0x320 [ 876.842290][ C0] schedule_preempt_disabled+0x13/0x30 [ 876.847801][ C0] __mutex_lock+0x6a4/0xd70 [ 876.852491][ C0] ? __mutex_lock+0x527/0xd70 [ 876.857413][ C0] ? devinet_ioctl+0x2ce/0x1bc0 [ 876.862350][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 876.867439][ C0] ? bpf_lsm_capable+0x9/0x10 [ 876.872386][ C0] ? security_capable+0x90/0xb0 [ 876.877399][ C0] ? get_rtnl_holder+0x144/0x190 [ 876.879395][ T5159] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 876.882407][ C0] devinet_ioctl+0x2ce/0x1bc0 [ 876.882449][ C0] ? get_user_ifreq+0x1bb/0x200 [ 876.882480][ C0] inet_ioctl+0x3d7/0x4f0 [ 876.900236][ T5159] cdc_ncm 4-1:1.0: bind() failure [ 876.902432][ C0] ? __pfx_inet_ioctl+0x10/0x10 [ 876.902500][ C0] sock_do_ioctl+0x158/0x460 [ 876.917069][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 876.922271][ C0] ? __pfx_lock_release+0x10/0x10 [ 876.927357][ C0] sock_ioctl+0x629/0x8e0 [ 876.931777][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 876.936065][ T5159] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 876.936649][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 876.949495][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 876.954605][ C0] ? security_file_ioctl+0x87/0xb0 [ 876.959930][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 876.960517][ T5159] cdc_ncm 4-1:1.1: bind() failure [ 876.964835][ C0] __se_sys_ioctl+0xfc/0x170 [ 876.974833][ C0] do_syscall_64+0xf3/0x230 [ 876.979476][ C0] ? clear_bhb_loop+0x35/0x90 [ 876.984264][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.990674][ T5159] usb 4-1: USB disconnect, device number 35 [ 876.990667][ C0] RIP: 0033:0x7f1f0c061d49 [ 876.990698][ C0] RSP: 002b:00007ffc7f2cdc08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.009912][ C0] RAX: ffffffffffffffda RBX: 00007f1f0bf936c0 RCX: 00007f1f0c061d49 [ 877.018394][ C0] RDX: 00007ffc7f2dddf8 RSI: 0000000000008914 RDI: 0000000000000011 [ 877.026946][ C0] RBP: 00007ffc7f2edfb8 R08: 00007ffc7f2dddb8 R09: 00007ffc7f2ddd68 [ 877.035393][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.043453][ C0] R13: 00007ffc7f2dddf8 R14: 0000000000000028 R15: 0000000000008914 [ 877.051522][ C0] [ 877.054587][ C0] DEBUG: waiting rtnl_mutex for 551 jiffies. [ 877.060643][ C0] task:kworker/u8:8 state:D stack:20248 pid:2473 tgid:2473 ppid:2 flags:0x00004000 [ 877.070889][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 877.076935][ C0] Call Trace: [ 877.080235][ C0] [ 877.083258][ C0] __schedule+0x1800/0x4a60 [ 877.087848][ C0] ? __pfx___schedule+0x10/0x10 [ 877.092805][ C0] ? __pfx_lock_release+0x10/0x10 [ 877.098265][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 877.104196][ C0] ? kthread_data+0x52/0xd0 [ 877.108784][ C0] ? schedule+0x90/0x320 [ 877.113143][ C0] ? wq_worker_sleeping+0x66/0x240 [ 877.118306][ C0] ? schedule+0x90/0x320 [ 877.122722][ C0] schedule+0x14b/0x320 [ 877.126921][ C0] schedule_preempt_disabled+0x13/0x30 [ 877.132484][ C0] __mutex_lock+0x6a4/0xd70 [ 877.137058][ C0] ? mark_lock+0x9a/0x360 [ 877.141492][ C0] ? __mutex_lock+0x527/0xd70 [ 877.146225][ C0] ? addrconf_dad_work+0xd0/0x16f0 [ 877.151463][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 877.156536][ C0] ? get_rtnl_holder+0x144/0x190 [ 877.161979][ C0] addrconf_dad_work+0xd0/0x16f0 [ 877.166985][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 877.172652][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 877.179131][ C0] ? process_scheduled_works+0x945/0x1830 [ 877.185259][ C0] process_scheduled_works+0xa2c/0x1830 [ 877.190952][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 877.197025][ C0] ? assign_work+0x364/0x3d0 [ 877.202165][ C0] worker_thread+0x86d/0xd40 [ 877.206813][ C0] ? __kthread_parkme+0x169/0x1d0 [ 877.212467][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.217625][ C0] kthread+0x2f0/0x390 [ 877.221869][ C0] ? __pfx_worker_thread+0x10/0x10 [ 877.227038][ C0] ? __pfx_kthread+0x10/0x10 [ 877.231733][ C0] ret_from_fork+0x4b/0x80 [ 877.236202][ C0] ? __pfx_kthread+0x10/0x10 [ 877.240907][ C0] ret_from_fork_asm+0x1a/0x30 [ 877.245724][ C0] [ 877.248779][ C0] DEBUG: waiting rtnl_mutex for 570 jiffies. [ 877.254873][ C0] task:syz-executor state:D stack:21096 pid:16923 tgid:16923 ppid:16921 flags:0x00000000 [ 877.265181][ C0] Call Trace: [ 877.268496][ C0] [ 877.271514][ C0] __schedule+0x1800/0x4a60 [ 877.276078][ C0] ? __pfx___schedule+0x10/0x10 [ 877.281004][ C0] ? __pfx_lock_release+0x10/0x10 [ 877.286088][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 877.292141][ C0] ? schedule+0x90/0x320 [ 877.296445][ C0] schedule+0x14b/0x320 [ 877.300688][ C0] schedule_preempt_disabled+0x13/0x30 [ 877.306199][ C0] __mutex_lock+0x6a4/0xd70 [ 877.310779][ C0] ? __mutex_lock+0x527/0xd70 [ 877.315504][ C0] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 877.320717][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 877.325799][ C0] ? get_rtnl_holder+0x144/0x190 [ 877.330821][ C0] rtnetlink_rcv_msg+0x6eb/0xd00 [ 877.335791][ C0] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 877.341003][ C0] ? __lock_acquire+0x1384/0x2050 [ 877.346071][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 877.351706][ C0] netlink_rcv_skb+0x1e3/0x430 [ 877.356800][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 877.362458][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 877.367913][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 877.373225][ C0] netlink_unicast+0x7f0/0x990 [ 877.378068][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 877.384334][ C0] ? __virt_addr_valid+0x183/0x530 [ 877.389486][ C0] ? __check_object_size+0x49c/0x900 [ 877.394957][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 877.400224][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 877.405593][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.410970][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 877.417165][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 877.422401][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 877.427729][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 877.433536][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.438866][ C0] __sock_sendmsg+0x221/0x270 [ 877.443679][ C0] __sys_sendto+0x3a4/0x4f0 [ 877.448239][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 877.453382][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 877.459419][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 877.466260][ C0] __x64_sys_sendto+0xde/0x100 [ 877.471910][ C0] do_syscall_64+0xf3/0x230 [ 877.476457][ C0] ? clear_bhb_loop+0x35/0x90 [ 877.481649][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.487680][ C0] RIP: 0033:0x7efc195777ac [ 877.492510][ C0] RSP: 002b:00007ffd2b6f5ab0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 877.501095][ C0] RAX: ffffffffffffffda RBX: 00007efc1a234620 RCX: 00007efc195777ac [ 877.509182][ C0] RDX: 0000000000000054 RSI: 00007efc1a234670 RDI: 0000000000000003 [ 877.517653][ C0] RBP: 0000000000000000 R08: 00007ffd2b6f5b04 R09: 000000000000000c [ 877.526184][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 877.534260][ C0] R13: 0000000000000000 R14: 00007efc1a234670 R15: 0000000000000000 [ 877.542694][ C0] [ 877.545731][ C0] [ 877.545731][ C0] Showing all locks held in the system: [ 877.553858][ C0] 2 locks held by kworker/u8:1/12: [ 877.559010][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 877.572015][ C0] #1: ffffc90000117d00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 877.583200][ C0] 5 locks held by kworker/u8:2/35: [ 877.588708][ C0] 5 locks held by kworker/u8:4/62: [ 877.594127][ C0] 3 locks held by kworker/0:2/1148: [ 877.599348][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 877.610753][ C0] #1: ffffc900043b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 877.621924][ C0] #2: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 877.631034][ C0] 3 locks held by kworker/u8:8/2473: [ 877.631829][T17191] loop3: detected capacity change from 0 to 64 [ 877.636351][ C0] #0: ffff888029b6d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 877.654991][ C0] #1: ffffc90009167d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 877.659261][T17191] hfs: unable to parse mount options [ 877.668010][ C0] #2: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 877.668093][ C0] 5 locks held by kworker/u8:9/2482: [ 877.668111][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 877.700745][ C0] #1: ffffc90009037d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 877.711489][ C0] #2: ffffffff8f5fcad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 877.721178][ C0] #3: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 877.731413][ C0] #4: ffffffff8e337a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 877.741455][ C0] 7 locks held by kworker/u8:11/3598: [ 877.746940][ C0] 1 lock held by dhcpcd/4770: [ 877.751765][ C0] #0: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 877.761000][ C0] 2 locks held by getty/4858: [ 877.765703][ C0] #0: ffff88802a53f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 877.775776][ C0] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 877.786244][ C0] 4 locks held by kworker/1:3/5111: [ 877.791696][ C0] #0: ffff8880157be548 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 877.803204][ C0] #1: ffffc90003777d00 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 877.815288][ C0] #2: ffff88807143d238 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 877.825375][ C0] #3: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 877.835167][ C0] 2 locks held by kworker/u8:0/12507: [ 877.840627][ C0] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 877.852993][ C0] #1: ffffc90012ff7d00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 877.863934][ C0] 1 lock held by syz-executor/16683: [ 877.869326][ C0] #0: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 877.878882][ C0] 1 lock held by syz-executor/16923: [ 877.884234][ C0] #0: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 877.893932][ C0] 2 locks held by syz-executor/16925: [ 877.899765][ C0] #0: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 877.909568][ C0] #1: ffffffff8e33ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 877.920557][ C0] 1 lock held by syz.1.2345/17166: [ 877.925717][ C0] #0: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 877.935809][ C0] 1 lock held by syz.3.2349/17189: [ 877.941002][ C0] #0: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 877.950894][ C0] 1 lock held by syz.3.2349/17190: [ 877.956277][ C0] #0: ffffffff8f609648 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 877.966138][ C0] 1 lock held by syz.3.2349/17191: [ 877.971284][ C0] #0: ffff888078c84420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 877.980587][ C0] [ 877.983013][ C0] ============================================= [ 877.983013][ C0] [ 878.036313][ T5111] lo speed is unknown, defaulting to 1000 [ 878.236684][T16925] hsr_slave_0: entered promiscuous mode [ 878.256007][T16925] hsr_slave_1: entered promiscuous mode [ 878.268657][T16925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.287892][T16925] Cannot create hsr debugfs directory [ 878.502794][T17200] loop3: detected capacity change from 0 to 128 [ 878.602404][T17202] loop1: detected capacity change from 0 to 256 [ 878.609440][T17202] vfat: Bad value for 'tz' [ 878.710632][ T29] audit: type=1804 audit(1721168518.977:1045): pid=17200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2351" name="/newroot/68/file0" dev="fuse" ino=1 res=1 errno=0 [ 878.847805][T16683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.369768][T16683] veth0_vlan: entered promiscuous mode [ 879.508972][T16683] veth1_vlan: entered promiscuous mode [ 879.630010][T17202] loop1: detected capacity change from 0 to 32768 [ 879.695459][T17202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2352 (17202) [ 879.751994][T17202] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 879.813944][T17202] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 879.829241][T16683] veth0_macvtap: entered promiscuous mode [ 879.863558][T16683] veth1_macvtap: entered promiscuous mode [ 879.890035][T17202] BTRFS info (device loop1): using free-space-tree [ 879.915106][T17219] loop3: detected capacity change from 0 to 1024 [ 879.936714][T16683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.947328][T16683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.951684][T17219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 879.959103][T16683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.975356][T16683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.990070][T16683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.005773][T16683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.018018][T16683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.044601][T17219] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 880.053384][T16683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.053408][T16683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.065439][T16683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.087699][T16683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.096590][T16683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.109581][T16683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.119740][T16683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.140840][T17219] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6840c01c, mo2=0003] [ 880.149160][T17219] System zones: 0-1, 3-36 [ 880.169705][T17219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.217589][T17202] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 880.443110][T12507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.471559][T12507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.513000][T15097] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 880.664452][ T2446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.672510][T16923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 880.720536][ T2446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.060665][T16923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 881.103894][T16923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 881.347569][T15447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.541563][T16923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 881.940011][ T2482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.020279][T17254] loop1: detected capacity change from 0 to 40427 [ 882.099039][T17254] F2FS-fs (loop1): invalid crc value [ 882.137771][T17254] F2FS-fs (loop1): Found nat_bits in checkpoint [ 882.161278][T16923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.238700][T17254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 882.252805][T16925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 882.266476][T17254] netlink: 'syz.1.2354': attribute type 11 has an invalid length. [ 882.361882][ T29] audit: type=1804 audit(1721168522.627:1046): pid=17270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2354" name="/newroot/86/file0/bus" dev="loop1" ino=10 res=1 errno=0 [ 882.430318][ T2482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.449516][T16925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 882.466539][T16923] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.486917][T16925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 882.510933][T12747] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.518059][T12747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.552050][T16925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 882.559612][T15097] syz-executor: attempt to access beyond end of device [ 882.559612][T15097] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 882.581932][T15097] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 882.620257][ T2482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.705443][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.712640][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.841401][ T2482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.878212][T17275] loop3: detected capacity change from 0 to 512 [ 882.924495][T17275] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 883.086356][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 883.099288][T17275] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2357: iget: bad extended attribute block 19 [ 883.100753][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 883.130551][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 883.141733][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 883.156144][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 883.163701][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 883.235975][T17275] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2357: couldn't read orphan inode 15 (err -117) [ 883.250430][T17275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.372122][ T2482] bridge_slave_1: left allmulticast mode [ 883.377816][ T2482] bridge_slave_1: left promiscuous mode [ 883.386221][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 883.397012][ T2482] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.436850][ T2482] bridge_slave_0: left allmulticast mode [ 883.444001][ T2482] bridge_slave_0: left promiscuous mode [ 883.450276][ T2482] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.503815][T17285] loop1: detected capacity change from 0 to 512 [ 883.522085][T17285] EXT4-fs: Ignoring removed mblk_io_submit option [ 883.528629][T17285] ext4: Unknown parameter 'rootcontext' [ 883.558939][T17285] vhci_hcd: default hub control req: 8017 v02fe i0000 l0 [ 883.679167][T15447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.749669][T17289] FAULT_INJECTION: forcing a failure. [ 883.749669][T17289] name failslab, interval 1, probability 0, space 0, times 0 [ 883.780507][T17289] CPU: 1 UID: 0 PID: 17289 Comm: syz.1.2360 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 883.790456][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 883.800697][T17289] Call Trace: [ 883.803977][T17289] [ 883.806991][T17289] dump_stack_lvl+0x241/0x360 [ 883.811909][T17289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.817454][T17289] ? __pfx__printk+0x10/0x10 [ 883.822043][T17289] ? fs_reclaim_acquire+0x93/0x140 [ 883.827149][T17289] ? __pfx___might_resched+0x10/0x10 [ 883.832873][T17289] should_fail_ex+0x3b0/0x4e0 [ 883.837556][T17289] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 883.843454][T17289] should_failslab+0xac/0x100 [ 883.848133][T17289] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 883.853843][T17289] __kmalloc_noprof+0xd8/0x400 [ 883.858689][T17289] ? kfree+0x4e/0x360 [ 883.862671][T17289] tomoyo_realpath_from_path+0xcf/0x5e0 [ 883.868228][T17289] tomoyo_path_number_perm+0x23a/0x880 [ 883.873682][T17289] ? tomoyo_path_number_perm+0x208/0x880 [ 883.879302][T17289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 883.885607][T17289] ? __fget_files+0x29/0x470 [ 883.890292][T17289] ? __fget_files+0x3f6/0x470 [ 883.895048][T17289] ? __fget_files+0x29/0x470 [ 883.899633][T17289] security_file_ioctl+0x75/0xb0 [ 883.904571][T17289] __se_sys_ioctl+0x47/0x170 [ 883.909199][T17289] do_syscall_64+0xf3/0x230 [ 883.913789][T17289] ? clear_bhb_loop+0x35/0x90 [ 883.918551][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.924502][T17289] RIP: 0033:0x7f7ed8d75a19 [ 883.929001][T17289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.949301][T17289] RSP: 002b:00007f7ed9b8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.957893][T17289] RAX: ffffffffffffffda RBX: 00007f7ed8f03f60 RCX: 00007f7ed8d75a19 [ 883.965947][T17289] RDX: 0000000020000040 RSI: 00000000400454d9 RDI: 0000000000000003 [ 883.973908][T17289] RBP: 00007f7ed9b8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 883.981870][T17289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.989833][T17289] R13: 000000000000000b R14: 00007f7ed8f03f60 R15: 00007fff0decec88 [ 883.997812][T17289] [ 884.050577][T17289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 884.410706][ T2482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.430577][ T2482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.449404][ T2482] bond0 (unregistering): Released all slaves [ 884.478617][T17291] loop3: detected capacity change from 0 to 32768 [ 884.527081][T16925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.558800][T17291] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 884.599271][T16923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.602226][T17291] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 884.686190][T17291] XFS (loop3): Ending clean mount [ 884.694791][T17291] XFS (loop3): Quotacheck needed: Please wait. [ 884.783198][T17291] XFS (loop3): Quotacheck: Done. [ 884.842804][T16925] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.915641][T17312] loop1: detected capacity change from 0 to 736 [ 884.932033][T17312] iso9660: Unknown parameter '0xffffffffffffffff' [ 884.989335][T17316] loop1: detected capacity change from 0 to 256 [ 884.997338][T17316] vfat: Bad value for 'tz' [ 885.120511][ T2482] hsr_slave_0: left promiscuous mode [ 885.149793][ T2482] hsr_slave_1: left promiscuous mode [ 885.172242][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.179756][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.191555][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.199118][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.239686][ T2482] veth1_macvtap: left promiscuous mode [ 885.257394][ T2482] veth0_macvtap: left promiscuous mode [ 885.260773][ T54] Bluetooth: hci0: command tx timeout [ 885.270677][ T2482] veth1_vlan: left promiscuous mode [ 885.276056][ T2482] veth0_vlan: left promiscuous mode [ 885.281631][T17291] syz.3.2359 (17291) used greatest stack depth: 17296 bytes left [ 885.302139][T15447] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 885.584952][T17316] loop1: detected capacity change from 0 to 32768 [ 885.593988][T17316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2363 (17316) [ 885.656736][T17316] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 885.668402][T17316] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 885.679016][T17316] BTRFS info (device loop1): using free-space-tree [ 885.888894][T17316] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 886.162144][T15097] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 886.619856][ T2482] team0 (unregistering): Port device team_slave_1 removed [ 886.699276][ T2482] team0 (unregistering): Port device team_slave_0 removed [ 887.337506][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.344771][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.352792][ T54] Bluetooth: hci0: command tx timeout [ 887.368863][T17320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2364'. [ 887.431766][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.438962][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.510700][T17279] chnl_net:caif_netlink_parms(): no params data found [ 887.699272][T16923] veth0_vlan: entered promiscuous mode [ 887.720058][T16923] veth1_vlan: entered promiscuous mode [ 887.784934][T16925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.887597][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.915161][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.932037][T17279] bridge_slave_0: entered allmulticast mode [ 887.957888][T17279] bridge_slave_0: entered promiscuous mode [ 888.006445][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.020771][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.035112][T17279] bridge_slave_1: entered allmulticast mode [ 888.057919][T17279] bridge_slave_1: entered promiscuous mode [ 888.144120][T16923] veth0_macvtap: entered promiscuous mode [ 888.181678][T17279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.209811][T17279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.273379][T16923] veth1_macvtap: entered promiscuous mode [ 888.365534][T17279] team0: Port device team_slave_0 added [ 888.396770][T17279] team0: Port device team_slave_1 added [ 888.455088][T17279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.470449][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.530555][T17279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.535151][T17353] loop3: detected capacity change from 0 to 32768 [ 888.549155][T17353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2368 (17353) [ 888.566191][T17353] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 888.572314][T17279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.586872][T17353] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 888.593864][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.596057][T17353] BTRFS info (device loop3): using free-space-tree [ 888.631667][T17279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.647370][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.658798][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.669355][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.680171][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.692394][T16923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.703636][T16925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.729908][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.741340][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.752011][T16923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.768139][T16923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.780010][T16923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.836373][ T29] audit: type=1804 audit(1721168529.107:1047): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2368" name="/newroot/75/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 888.890862][ T29] audit: type=1804 audit(1721168529.127:1048): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2368" name="/newroot/75/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 888.897490][T16923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.920269][ T29] audit: type=1804 audit(1721168529.127:1049): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2368" name="/newroot/75/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 888.958778][ T29] audit: type=1804 audit(1721168529.137:1050): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2368" name="/newroot/75/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 888.980321][T16923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.991781][T16923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.000548][ T29] audit: type=1804 audit(1721168529.137:1051): pid=17353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2368" name="/newroot/75/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 889.000849][T16923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.058401][T15447] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 889.061232][T17279] hsr_slave_0: entered promiscuous mode [ 889.091848][T17279] hsr_slave_1: entered promiscuous mode [ 889.119408][T17377] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2370'. [ 889.179372][ T54] Bluetooth: hci1: unexpected event 0x0e length: 1 < 3 [ 889.209359][ T54] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 889.233654][T17377] 0·: renamed from c1· (while UP) [ 889.272461][T17377] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 889.420823][ T5121] Bluetooth: hci0: command tx timeout [ 889.439923][T17381] lo speed is unknown, defaulting to 1000 [ 889.477156][T17381] lo speed is unknown, defaulting to 1000 [ 889.505073][T17381] lo speed is unknown, defaulting to 1000 [ 889.558459][T16925] veth0_vlan: entered promiscuous mode [ 889.669324][T16925] veth1_vlan: entered promiscuous mode [ 889.760713][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.776507][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.819805][T17381] infiniband syz1: set active [ 889.850259][T17381] infiniband syz1: added lo [ 889.877235][ T5158] lo speed is unknown, defaulting to 1000 [ 889.903364][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.933831][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.962534][T17381] RDS/IB: syz1: added [ 889.966653][T17381] smc: adding ib device syz1 with port count 1 [ 889.988494][T16925] veth0_macvtap: entered promiscuous mode [ 890.006604][T17381] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 890.046353][T16925] veth1_macvtap: entered promiscuous mode [ 890.068461][T17381] lo speed is unknown, defaulting to 1000 [ 890.084081][T16925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.112059][T16925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.155834][T16925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.190715][ T29] audit: type=1326 audit(1721168530.457:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17385 comm="syz.1.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed8d75a19 code=0x7fc00000 [ 890.195691][T16925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.241595][ T29] audit: type=1326 audit(1721168530.457:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17385 comm="syz.1.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7ed8d75a19 code=0x7fc00000 [ 890.269177][T16925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.140436][T16925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.155364][T16925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.182875][ T29] audit: type=1326 audit(1721168531.447:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17385 comm="syz.1.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed8d75a19 code=0x7fc00000 [ 891.203461][T16925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.240522][T16925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.266423][T16925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.290605][T16925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.308838][T16925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.336321][T16925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.348232][T17400] loop1: detected capacity change from 0 to 1024 [ 891.356518][T16925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.370151][ T927] lo speed is unknown, defaulting to 1000 [ 891.389919][T17381] lo speed is unknown, defaulting to 1000 [ 891.392345][T16925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.409899][T16925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.419196][T16925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.434993][T16925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.450831][T17400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.510868][ T5121] Bluetooth: hci0: command tx timeout [ 891.606792][T17381] lo speed is unknown, defaulting to 1000 [ 891.850771][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.859154][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.931617][ T2482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.940359][ T2482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.940547][T17279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 892.002853][T17279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 892.013344][T15097] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.056705][T17279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 892.094592][T17279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 892.276586][T17381] lo speed is unknown, defaulting to 1000 [ 892.361857][ T54] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 892.586061][T17381] lo speed is unknown, defaulting to 1000 [ 892.668431][T17279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.756028][T17279] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.798711][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.805965][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.892019][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.899211][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.949092][T17426] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2381'. [ 892.995447][T17426] 0·: renamed from hsr_slave_1 (while UP) [ 893.026637][T17426] 0·: entered allmulticast mode [ 893.057525][T17426] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 893.126266][ T54] Bluetooth: hci2: unexpected event 0x0e length: 1 < 3 [ 893.155834][T17279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 893.218341][T17279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 893.575218][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.685692][T17279] veth0_vlan: entered promiscuous mode [ 893.724863][T17279] veth1_vlan: entered promiscuous mode [ 893.797948][T17279] veth0_macvtap: entered promiscuous mode [ 893.820422][T17279] veth1_macvtap: entered promiscuous mode [ 893.903239][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.922306][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.942043][T17439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 893.954845][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.985812][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.005531][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.027243][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.039632][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.067885][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.078015][ T29] audit: type=1326 audit(1721168534.347:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc19575a19 code=0x7fc00000 [ 894.078083][ T29] audit: type=1326 audit(1721168534.347:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efc19575a19 code=0x7fc00000 [ 894.176840][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.207037][ T54] Bluetooth: hci3: unexpected subevent 0x0a length: 16 < 30 [ 894.226095][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.278930][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.313813][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.328347][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.368989][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.385167][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.398132][T17279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.413331][T17279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.428572][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.466433][T17279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.493402][T17279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.505570][T17279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.514227][T17456] loop1: detected capacity change from 0 to 128 [ 894.517280][T17279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.662976][ T29] audit: type=1804 audit(1721168534.937:1057): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2390" name="/newroot/102/file0" dev="fuse" ino=1 res=1 errno=0 [ 894.710328][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.720564][ T29] audit: type=1326 audit(1721168534.977:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17440 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc19575a19 code=0x7fc00000 [ 894.770471][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.854605][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.878912][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.887566][T17462] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 894.964726][T17462] batman_adv: batadv0: Adding interface: team0 [ 894.987849][T17462] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.022136][T17462] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 895.067645][T17464] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 895.093425][T17464] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2391'. [ 895.124005][T17464] team0: entered promiscuous mode [ 895.142450][T17464] team_slave_0: entered promiscuous mode [ 895.160141][T17464] team_slave_1: entered promiscuous mode [ 895.180539][ T54] Bluetooth: hci2: command tx timeout [ 895.207802][T17464] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.283423][T17464] batman_adv: batadv0: Interface activated: team0 [ 895.314752][T17464] batman_adv: batadv0: Interface deactivated: team0 [ 895.332164][T17464] batman_adv: batadv0: Removing interface: team0 [ 895.351929][T17464] bridge0: port 3(team0) entered blocking state [ 895.364574][T17464] bridge0: port 3(team0) entered disabled state [ 895.381986][T17464] team0: entered allmulticast mode [ 895.399891][T17464] team_slave_0: entered allmulticast mode [ 895.415954][T17464] team_slave_1: entered allmulticast mode [ 895.442809][T17464] bridge0: port 3(team0) entered blocking state [ 895.449290][T17464] bridge0: port 3(team0) entered forwarding state [ 895.536698][T17471] loop0: detected capacity change from 0 to 4096 [ 895.599177][T17472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.820989][T17481] dummy0: entered promiscuous mode [ 895.829722][T17481] dummy0: left promiscuous mode [ 896.392997][T17493] warning: `syz.3.2402' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 896.480530][T12747] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 896.675767][T12747] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.690472][T12747] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 896.701969][T12747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.746486][T12747] usb 2-1: config 0 descriptor?? [ 896.797403][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.838043][ T54] Bluetooth: hci2: unexpected subevent 0x0a length: 16 < 30 [ 896.971859][T12747] ath6kl: Failed to submit usb control message: -71 [ 896.978562][T12747] ath6kl: unable to send the bmi data to the device: -71 [ 896.990456][T12747] ath6kl: Unable to send get target info: -71 [ 897.009496][T12747] ath6kl: Failed to init ath6kl core: -71 [ 897.028204][T12747] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 897.057341][T12747] usb 2-1: USB disconnect, device number 30 [ 897.128813][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 897.189947][T17503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2405'. [ 897.292056][ T2482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.393636][ T2482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.435665][ T5120] libceph: connect (1)[c::]:6789 error -101 [ 898.447125][ T5120] libceph: mon0 (1)[c::]:6789 connect error [ 898.471347][ T5120] libceph: connect (1)[c::]:6789 error -101 [ 898.479792][ T5120] libceph: mon0 (1)[c::]:6789 connect error [ 898.520479][ T927] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 898.549848][ T2482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.574219][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.588449][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.602860][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 898.614253][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 898.624278][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 898.631652][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 898.661634][T17529] program syz.0.2412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.674669][T17529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 898.720951][ T927] usb 5-1: Using ep0 maxpacket: 8 [ 898.730015][ T927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 898.741123][ T5162] libceph: connect (1)[c::]:6789 error -101 [ 898.742762][ T2482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.758755][ T5162] libceph: mon0 (1)[c::]:6789 connect error [ 898.770293][ T927] usb 5-1: string descriptor 0 read error: -22 [ 898.779349][ T927] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 898.789206][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.801206][ T927] usb 5-1: config 0 descriptor?? [ 898.852445][T17527] lo speed is unknown, defaulting to 1000 [ 898.881351][T17526] ================================================================== [ 898.889462][T17526] BUG: KASAN: slab-use-after-free in handle_mm_fault+0x14f0/0x19a0 [ 898.897463][T17526] Read of size 8 at addr ffff888076fbecb8 by task syz.0.2412/17526 [ 898.905343][T17526] [ 898.907659][T17526] CPU: 0 UID: 0 PID: 17526 Comm: syz.0.2412 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 898.917637][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 898.927699][T17526] Call Trace: [ 898.931079][T17526] [ 898.934011][T17526] dump_stack_lvl+0x241/0x360 [ 898.938786][T17526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.944001][T17526] ? __pfx__printk+0x10/0x10 [ 898.948600][T17526] ? _printk+0xd5/0x120 [ 898.952853][T17526] ? __virt_addr_valid+0x183/0x530 [ 898.958005][T17526] ? __virt_addr_valid+0x183/0x530 [ 898.963143][T17526] print_report+0x169/0x550 [ 898.967676][T17526] ? __virt_addr_valid+0x183/0x530 [ 898.972872][T17526] ? __virt_addr_valid+0x183/0x530 [ 898.977997][T17526] ? __virt_addr_valid+0x45f/0x530 [ 898.983117][T17526] ? __phys_addr+0xba/0x170 [ 898.987639][T17526] ? handle_mm_fault+0x14f0/0x19a0 [ 898.992772][T17526] kasan_report+0x143/0x180 [ 898.997320][T17526] ? handle_mm_fault+0x14f0/0x19a0 [ 899.002450][T17526] handle_mm_fault+0x14f0/0x19a0 [ 899.007437][T17526] ? __pfx_handle_mm_fault+0x10/0x10 [ 899.012740][T17526] ? lock_vma_under_rcu+0x592/0x6e0 [ 899.017957][T17526] ? exc_page_fault+0x113/0x8c0 [ 899.022831][T17526] exc_page_fault+0x459/0x8c0 [ 899.027630][T17526] asm_exc_page_fault+0x26/0x30 [ 899.032580][T17526] RIP: 0033:0x7f45b2f3d52b [ 899.037031][T17526] Code: fa 10 73 2d 83 fa 08 73 46 83 fa 04 73 16 83 fa 01 7c 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 [ 899.056835][T17526] RSP: 002b:00007f45b3ce3038 EFLAGS: 00010246 [ 899.063044][T17526] RAX: 0000000020400000 RBX: 00007f45b3104038 RCX: 0000000000000000 [ 899.071085][T17526] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000020400000 [ 899.080083][T17526] RBP: 00007f45b2fe4e49 R08: 0000000000000004 R09: 0000000000000000 [ 899.088256][T17526] R10: 0000000020400000 R11: 0000000020000040 R12: 0000000000000000 [ 899.096247][T17526] R13: 000000000000006e R14: 00007f45b3104038 R15: 00007ffc32ac7a58 [ 899.104346][T17526] [ 899.104939][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2409'. [ 899.107363][T17526] [ 899.107372][T17526] Allocated by task 17523: [ 899.107384][T17526] kasan_save_track+0x3f/0x80 [ 899.107405][T17526] __kasan_slab_alloc+0x66/0x80 [ 899.107421][T17526] kmem_cache_alloc_noprof+0x135/0x2a0 [ 899.107442][T17526] vm_area_alloc+0x24/0x1d0 [ 899.107460][T17526] mmap_region+0xc3d/0x2090 [ 899.147670][T17526] do_mmap+0x8f9/0x1010 [ 899.152023][T17526] vm_mmap_pgoff+0x1dd/0x3d0 [ 899.156644][T17526] do_syscall_64+0xf3/0x230 [ 899.161224][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.167230][T17526] [ 899.169566][T17526] Freed by task 17521: [ 899.173731][T17526] kasan_save_track+0x3f/0x80 [ 899.178436][T17526] kasan_save_free_info+0x40/0x50 [ 899.183572][T17526] poison_slab_object+0xe0/0x150 [ 899.188707][T17526] __kasan_slab_free+0x37/0x60 [ 899.193494][T17526] kmem_cache_free+0x145/0x350 [ 899.198460][T17526] rcu_core+0xafd/0x1830 [ 899.202733][T17526] handle_softirqs+0x2c4/0x970 [ 899.207519][T17526] __irq_exit_rcu+0xf4/0x1c0 [ 899.212131][T17526] irq_exit_rcu+0x9/0x30 [ 899.216478][T17526] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 899.222135][T17526] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 899.228231][T17526] [ 899.230653][T17526] Last potentially related work creation: [ 899.236391][T17526] kasan_save_stack+0x3f/0x60 [ 899.241112][T17526] __kasan_record_aux_stack+0xac/0xc0 [ 899.246604][T17526] call_rcu+0x167/0xa70 [ 899.250796][T17526] vma_complete+0x98a/0xb60 [ 899.255321][T17526] vma_merge+0x1d9b/0x2690 [ 899.259758][T17526] vma_modify+0xb8/0x350 [ 899.264123][T17526] userfaultfd_release+0x413/0x900 [ 899.269268][T17526] __fput+0x24a/0x8a0 [ 899.270978][ T5120] libceph: connect (1)[c::]:6789 error -101 [ 899.273259][T17526] task_work_run+0x24f/0x310 [ 899.273285][T17526] syscall_exit_to_user_mode+0x168/0x370 [ 899.273310][T17526] do_syscall_64+0x100/0x230 [ 899.279454][ T5120] libceph: mon0 (1)[c::]:6789 connect error [ 899.283753][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.283782][T17526] [ 899.283788][T17526] The buggy address belongs to the object at ffff888076fbec98 [ 899.283788][T17526] which belongs to the cache vm_area_struct of size 184 [ 899.283804][T17526] The buggy address is located 32 bytes inside of [ 899.283804][T17526] freed 184-byte region [ffff888076fbec98, ffff888076fbed50) [ 899.283822][T17526] [ 899.283827][T17526] The buggy address belongs to the physical page: [ 899.283847][T17526] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76fbe [ 899.283864][T17526] memcg:ffff888021d46701 [ 899.283877][T17526] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 899.283902][T17526] page_type: 0xfdffffff(slab) [ 899.372711][T17526] raw: 00fff00000000000 ffff888015eefb40 ffffea0000a6e340 000000000000000b [ 899.381470][T17526] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff888021d46701 [ 899.390657][T17526] page dumped because: kasan: bad access detected [ 899.397151][T17526] page_owner tracks the page as allocated [ 899.403024][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 17257, tgid 17257 (rm), ts 881247847968, free_ts 881245397806 [ 899.421859][T17526] post_alloc_hook+0x1f3/0x230 [ 899.426637][T17526] get_page_from_freelist+0x2ccb/0x2d80 [ 899.432258][T17526] __alloc_pages_noprof+0x256/0x6c0 [ 899.437444][T17526] alloc_slab_page+0x5f/0x120 [ 899.442119][T17526] allocate_slab+0x5a/0x2f0 [ 899.446607][T17526] ___slab_alloc+0xcd1/0x14b0 [ 899.451274][T17526] __slab_alloc+0x58/0xa0 [ 899.455681][T17526] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 899.461128][T17526] vm_area_dup+0x27/0x290 [ 899.465449][T17526] __split_vma+0x1a9/0xc30 [ 899.469861][T17526] do_vmi_align_munmap+0x388/0x18c0 [ 899.475063][T17526] do_vmi_munmap+0x261/0x2f0 [ 899.479738][T17526] __vm_munmap+0x1fc/0x400 [ 899.484144][T17526] elf_load+0x2d8/0x6f0 [ 899.488298][T17526] load_elf_interp+0x443/0xac0 [ 899.493235][T17526] load_elf_binary+0x1a47/0x2680 [ 899.498194][T17526] page last free pid 17257 tgid 17257 stack trace: [ 899.504683][T17526] free_unref_folios+0x103a/0x1b00 [ 899.509788][T17526] folios_put_refs+0x76e/0x860 [ 899.514538][T17526] free_pages_and_swap_cache+0x5c8/0x690 [ 899.520169][T17526] tlb_flush_mmu+0x3a3/0x680 [ 899.524752][T17526] tlb_finish_mmu+0xd4/0x200 [ 899.529334][T17526] exit_mmap+0x44f/0xc80 [ 899.533654][T17526] __mmput+0x115/0x390 [ 899.537711][T17526] exec_mmap+0x680/0x710 [ 899.541948][T17526] begin_new_exec+0x125f/0x1f50 [ 899.546788][T17526] load_elf_binary+0x969/0x2680 [ 899.551633][T17526] bprm_execve+0xaf8/0x1770 [ 899.556127][T17526] do_execveat_common+0x55f/0x6f0 [ 899.561140][T17526] __x64_sys_execve+0x92/0xb0 [ 899.565810][T17526] do_syscall_64+0xf3/0x230 [ 899.570310][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.576206][T17526] [ 899.578518][T17526] Memory state around the buggy address: [ 899.584150][T17526] ffff888076fbeb80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 899.592473][T17526] ffff888076fbec00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 899.600527][T17526] >ffff888076fbec80: fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb [ 899.608653][T17526] ^ [ 899.614551][T17526] ffff888076fbed00: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 899.622878][T17526] ffff888076fbed80: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 899.631106][T17526] ================================================================== [ 899.700701][T17526] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 899.708034][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.0.2412 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 899.717950][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 899.728113][T17526] Call Trace: [ 899.731403][T17526] [ 899.734337][T17526] dump_stack_lvl+0x241/0x360 [ 899.739312][T17526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.744549][T17526] ? __pfx__printk+0x10/0x10 [ 899.749353][T17526] ? preempt_schedule+0xe1/0xf0 [ 899.754235][T17526] ? vscnprintf+0x5d/0x90 [ 899.758756][T17526] panic+0x349/0x870 [ 899.762765][T17526] ? check_panic_on_warn+0x21/0xb0 [ 899.767976][T17526] ? __pfx_panic+0x10/0x10 [ 899.772413][T17526] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 899.778406][T17526] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 899.784733][T17526] ? print_report+0x502/0x550 [ 899.789400][T17526] check_panic_on_warn+0x86/0xb0 [ 899.794326][T17526] ? handle_mm_fault+0x14f0/0x19a0 [ 899.799525][T17526] end_report+0x77/0x160 [ 899.803758][T17526] kasan_report+0x154/0x180 [ 899.808331][T17526] ? handle_mm_fault+0x14f0/0x19a0 [ 899.813432][T17526] handle_mm_fault+0x14f0/0x19a0 [ 899.818622][T17526] ? __pfx_handle_mm_fault+0x10/0x10 [ 899.824148][T17526] ? lock_vma_under_rcu+0x592/0x6e0 [ 899.829334][T17526] ? exc_page_fault+0x113/0x8c0 [ 899.834201][T17526] exc_page_fault+0x459/0x8c0 [ 899.838873][T17526] asm_exc_page_fault+0x26/0x30 [ 899.844548][T17526] RIP: 0033:0x7f45b2f3d52b [ 899.849051][T17526] Code: fa 10 73 2d 83 fa 08 73 46 83 fa 04 73 16 83 fa 01 7c 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 [ 899.868772][T17526] RSP: 002b:00007f45b3ce3038 EFLAGS: 00010246 [ 899.874868][T17526] RAX: 0000000020400000 RBX: 00007f45b3104038 RCX: 0000000000000000 [ 899.883031][T17526] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000020400000 [ 899.891278][T17526] RBP: 00007f45b2fe4e49 R08: 0000000000000004 R09: 0000000000000000 [ 899.900026][T17526] R10: 0000000020400000 R11: 0000000020000040 R12: 0000000000000000 [ 899.908227][T17526] R13: 000000000000006e R14: 00007f45b3104038 R15: 00007ffc32ac7a58 [ 899.916220][T17526] [ 899.919639][T17526] Kernel Offset: disabled [ 899.923960][T17526] Rebooting in 86400 seconds..