last executing test programs: 2m34.904024588s ago: executing program 1 (id=657): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8f2ffffb702000008000000b50200000000000085000000cb00000095ee000000000000628e8349ddaf492068bd28384da330899d54564110e0e20ddec4f6b458bc865540edb787da0c741da2118deb234b36ef6b9c6f6ce58d5c42e46e0a6dcd9b7b43f8a955fb0498c56878c4be0e3cdbdce4c1b0b1c12d5f116231fd535edfa6f94fb045664f34cff37561e19567f5c9cfcd853a843202a2cf5be1ab78baa201a5f3ef78e87eb068014446a34c62b7d33376ac4d29bc1fbb4970bb64dad1d7808f10f1fc5338377d063e0c70d52eed8f39a72612d3db2b5e0cddf1f4d46cb2c295dd85ed7a7da22bb7bd28a2b71f1d1ba9"], &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2010000}, 0x21) 2m33.915757795s ago: executing program 1 (id=661): socket(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x80003, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=@deltfilter={0x5df0, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xfff2, 0xfff1}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @filter_kind_options=@f_fw={{0x7}, {0x5d94, 0x2, [@TCA_FW_ACT={0x594c, 0x4, [@m_pedit={0x5948, 0x1c, 0x0, 0x0, {{0xa}, {0x58f4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x413b, 0x6, 0x7, 0x8, 0x3}, 0xc, 0x7, [{0x3, 0x9, 0x70c, 0x0, 0x3}, {0xd3, 0x7, 0x2, 0x3, 0xfffffffc, 0x2e8}, {0x5, 0x2, 0x100, 0x9, 0x9}, {0x212c2159, 0x5, 0x6, 0x4, 0x1d2, 0xffffffff}, {0x4, 0x6, 0x0, 0xc, 0x1, 0x8}, {0x3, 0x8, 0x6, 0x3f84118, 0xffffffff, 0x1}, {0x7, 0x80, 0x6, 0x8, 0x7, 0x2}]}, [{0x9, 0x71a, 0x1, 0x7fffffff, 0x5, 0x6}, {0x10000, 0xff, 0x0, 0x0, 0x6, 0x1f49}, {0x9, 0x0, 0x1, 0x0, 0x9, 0x2}, {0x577, 0x2, 0x264, 0x2, 0x2, 0x6}, {0x400, 0x3, 0x7, 0x8, 0x1, 0x249}, {0x101, 0x5, 0x8, 0x0, 0x7}, {0x2486772, 0x400, 0x8, 0x934a, 0x80000000, 0x40}, {0x4, 0x10001, 0xbc, 0x200, 0x2}, {0x2, 0x7, 0x0, 0x4, 0x3a, 0x4a6d}, {0xfff, 0x8, 0xfff, 0xfffffffc, 0x4, 0x4}, {0xd7, 0x54, 0x5, 0x8001, 0x7ff, 0x10}, {0x4, 0x9, 0x2e8000, 0x9, 0x1, 0x5}, {0x400, 0xfff, 0x1968, 0xfffffffe, 0x4000, 0x6}, {0x7fff, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x180c, 0x4, 0x6, 0x10001, 0xb, 0x80000000}, {0x1, 0x400, 0x5, 0x3ff, 0x7fff, 0x4}, {0x0, 0x9, 0x200, 0xba31, 0x5, 0x9}, {0xbf, 0xb, 0x1, 0x72ea, 0x0, 0xd}, {0x80000000, 0x401, 0x8, 0x7f, 0x7f, 0xa}, {0x2, 0xd, 0x6, 0x8, 0x40, 0x3}, {0x92, 0x6, 0x8000, 0x5, 0x5, 0x5}, {0x4, 0x4, 0x9, 0x7f, 0xb56, 0x1455}, {0x6, 0x80000001, 0x0, 0x9, 0x80000001, 0x5}, {0x1, 0xfffffffe, 0x9, 0x1, 0x5, 0xd}, {0xcb2c, 0x2, 0xfb, 0x8, 0x54ee, 0x59b8ffe4}, {0x4, 0xffffffee, 0xb05, 0x4, 0x81, 0x2}, {0x9, 0x9, 0x3, 0xb8fa, 0xfffffffe, 0x5}, {0x3, 0x800, 0xffff, 0xff, 0x1000, 0x6}, {0x3ff, 0x1, 0xdb, 0x9, 0x1, 0x1ff}, {0xfffff3d2, 0x3, 0xff, 0x1, 0x6, 0x8}, {0xffff8001, 0x8, 0x9, 0x6137, 0x101, 0xa6}, {0x3, 0x9, 0x7, 0x80, 0x3, 0x80000001}, {0x6, 0x8, 0x4, 0xa, 0xa6, 0x6}, {0x298d8965, 0x7, 0xffffffba, 0x0, 0x9, 0x7}, {0x5, 0xa, 0xffff, 0x10001, 0x9, 0xffffa0d8}, {0x6, 0x3, 0x300000, 0x1, 0x1, 0xfffffc11}, {0xff, 0x7c, 0x1, 0xd, 0x0, 0x6}, {0x2, 0xc, 0x6, 0x9, 0x400, 0x4}, {0x10000, 0x10001, 0xb75, 0x64, 0x0, 0x81}, {0x1, 0x2ca50, 0x6, 0x1, 0x5, 0x7}, {0x10001, 0x650, 0x0, 0x586, 0xad, 0xfffffffd}, {0x8000, 0x1ff, 0x2, 0x0, 0xffffffff, 0x401}, {0x1, 0x100, 0x8, 0x993, 0xb4, 0x9}, {0x9, 0xe20, 0x5, 0x7, 0xdcc, 0x7}, {0x7, 0x8000, 0x3, 0x9, 0x7, 0x8}, {0x8, 0xf, 0x2, 0x8000, 0x5, 0x148f}, {0x5, 0x8, 0x9, 0x10001, 0x0, 0x9}, {0x6, 0x4, 0x6, 0x42ad, 0x4, 0x2}, {0x5, 0x3, 0x4d, 0xc, 0x2}, {0xd89c, 0x1000, 0x8, 0x6, 0x8, 0x7}, {0xf, 0xffff, 0x8001, 0xfffffff9, 0x4, 0x9}, {0xd, 0x25, 0xdd10, 0x80000001, 0xfffffffc, 0x9}, {0x7fff, 0x6, 0xffffffff, 0x1000, 0x1b09, 0x2d4}, {0x7e5, 0x6, 0x7f, 0x8, 0x5, 0x6}, {0x1, 0x4, 0x2, 0x8, 0x9, 0x1}, {0x6, 0x1ff, 0x3, 0xe, 0xf, 0x6}, {0xfffffffa, 0x6, 0x98, 0x4, 0x3}, {0x7fffffff, 0x7, 0x7, 0x7fffffff, 0x4, 0x4}, {0x6, 0x8, 0x5, 0x138, 0x9, 0x1}, {0x71, 0xd8, 0x5, 0x15, 0x8, 0x275}, {0x5, 0x80000000, 0x3, 0x6, 0x16a, 0x4}, {0x40000000, 0x1ff, 0xa, 0x8, 0x7}, {0x5, 0xa7b4, 0x9, 0x2, 0x8000, 0x1ff}, {0xc19, 0x1ff, 0x400, 0x21524ba7, 0x6, 0x8}, {0xa, 0x21426f6c, 0x4, 0x6, 0x7, 0x6}, {0xffff, 0x8, 0xc00, 0x1, 0x9, 0x8}, {0x10000, 0x1c0, 0x0, 0x100, 0x7, 0x4}, {0x1be, 0xb1, 0x40, 0x236, 0x5, 0x1c7}, {0x89, 0x2, 0x7f, 0x9, 0x0, 0xfffffaeb}, {0x8, 0x10000, 0x401, 0x5, 0x5, 0xb}, {0x1e, 0x631a, 0x8, 0x80, 0x400, 0x80}, {0xa37e, 0x8, 0x21de, 0xb158, 0x3010, 0x5}, {0x10, 0x64, 0x101, 0x5, 0x4, 0x7}, {0x7, 0x9, 0x7, 0x0, 0x10, 0x8001}, {0x7, 0xd31b, 0x200, 0x1, 0x2, 0x9}, {0x0, 0x6, 0x80, 0x8, 0x2, 0x10000}, {0x3, 0x7, 0x4, 0x0, 0x5, 0x40}, {0x1, 0x8, 0xd, 0xffff, 0x380, 0xa}, {0xff, 0x2, 0x3, 0x0, 0x9, 0x6}, {0x53, 0x7fff, 0x2, 0xfffffff8, 0x5, 0x1000}, {0xfffffff7, 0x50d, 0x4, 0x0, 0x2376}, {0x8, 0xf, 0x10000, 0xe, 0x7, 0x4}, {0xaae, 0x6, 0x1ff, 0xffff0000, 0x6, 0x1ff}, {0x5, 0x1, 0x6, 0x7, 0x10000, 0x2}, {0x0, 0xf, 0xb, 0x4, 0x9, 0x7}, {0x1, 0x8, 0x9, 0x68d8, 0x3f30}, {0x3, 0xfffffffb, 0x8000, 0x9, 0x7, 0x4}, {0xe, 0x9, 0xffffffff, 0x6, 0x2, 0x1}, {0x6, 0x5, 0x6305, 0x4, 0x3, 0x7}, {0x7e, 0x9, 0x5, 0x7, 0x690, 0xd93e}, {0xd18, 0x2aa44ea4, 0x401, 0x2, 0x2, 0x600000}, {0xffff, 0x8, 0x6, 0x1f88, 0x9, 0xffffffff}, {0x13f2, 0xdeb, 0xffff4a4c, 0x9, 0x7, 0xffff}, {0x2d, 0x71a6, 0xfa, 0x5, 0xbd, 0x1}, {0x8, 0xe, 0x4, 0xb, 0x45e}, {0x6, 0x4, 0xc4, 0x0, 0xee, 0x9}, {0x4a1, 0x5c, 0x7ff, 0x6111, 0x7f, 0xf}, {0x1, 0x6, 0x9a, 0x9, 0xc1, 0x4}, {0x2, 0x7, 0x1e, 0x5, 0x8001}, {0x2, 0x4, 0x7f, 0x4, 0x3, 0x3}, {0xffffff81, 0x7fffffff, 0x2, 0x1000, 0xfffffffb, 0x2}, {0xf, 0x7, 0x8, 0x0, 0x6, 0x8}, {0x7, 0x4, 0x1, 0x81, 0x3, 0x7}, {0x6cc, 0x3, 0x7fffffff, 0x2, 0x16b8, 0x2}, {0x3ff, 0x7, 0x3, 0xc, 0x8ce, 0x6}, {0x8000, 0x194eed75, 0x101, 0x5, 0x8, 0x768c}, {0x7, 0x9, 0x8, 0x4, 0x80000000, 0x5798}, {0x0, 0x3d8, 0x3, 0x9, 0x2, 0x7}, {0x4, 0x7ff, 0x1, 0xbc, 0x6, 0x8}, {0x0, 0x9, 0x20a1, 0x1000, 0x8, 0x2}, {0x3, 0x5, 0x4, 0x8, 0x7, 0x5}, {0xe, 0x80000000, 0x3c60, 0xffffffff, 0x7, 0x2}, {0x1739, 0x0, 0x1, 0x3, 0x3, 0x79}, {0x7, 0xd88d, 0x2, 0x10000, 0x3, 0x7ff}, {0xfffffff5, 0xffff1bbe, 0x9, 0x7fffffff, 0xffff, 0x4}, {0xffff8001, 0x8, 0xf9, 0xf, 0x4, 0x6}, {0x800, 0x9, 0x8, 0x4, 0xb1cf, 0x2}, {0x1, 0x7fff, 0x0, 0x8, 0x3, 0x1ff}, {0x4, 0xffff, 0x2a, 0x5, 0x368, 0x400}, {0x7, 0x2c, 0xfff, 0x2, 0x4f7b, 0x9}, {0xffff, 0x1, 0x7, 0x3, 0x400, 0x6}, {0x7, 0xd0bb, 0x3ff, 0xe, 0x3, 0xff}, {0x4b, 0x3, 0x7, 0x10, 0x8, 0x5}, {0x200, 0x2, 0xfffffe24, 0x9, 0x1, 0xc}, {0xb, 0x2, 0x0, 0xfff, 0xd, 0x9ede}, {0x0, 0x2, 0x6, 0x10000, 0x8, 0x1}, {0x5, 0x47000000, 0x3, 0x3, 0x1, 0x1000}, {0x7f, 0x3, 0xb, 0x9, 0x3, 0x1}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x7}, {0x4, 0x1}, {0x2}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0xc2a2266943ef4d54, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x36f70557c1684c1c}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {}, {0x5, 0x2}, {0x5}, {}, {0xb1bf2c49983da4b6, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0xd, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x96a626d5240dc92a, 0x1}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x3}, {0x2, 0x18555c4b7d4df55f}, {0x5, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x6, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3107a41ac4554632}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x40, 0x4c, 0xffffffffffffffff, 0xa, 0xfffffff4}, 0x9, 0x0, [{0x1, 0x1, 0x9, 0xf, 0x1, 0x100}, {0x7, 0x5, 0x90a, 0xffffffff, 0x1000, 0x8}, {0x766e3484, 0x5, 0x7fffffff, 0x101, 0x6, 0x2e485cf7}]}, [{0x7, 0x9, 0x8, 0xdcf, 0xc10, 0x80}, {0x6, 0xfffffffd, 0x4, 0x6, 0x84aa, 0x4234c4e8}, {0x9, 0x40, 0x1, 0x3, 0x3, 0x5eba5398}, {0x4, 0x100, 0xd, 0xfffffffd, 0x6, 0x729a}, {0x5, 0x1, 0x9, 0x80000000, 0x3, 0xacb}, {0x1, 0xea, 0x30000, 0x10001, 0x10, 0x10000}, {0x1, 0x59, 0x2, 0x16, 0x3, 0x2}, {0x6, 0x1, 0x7fffffff, 0x0, 0xd, 0x90d}, {0x6, 0x5, 0x4, 0x0, 0x1000, 0xd}, {0x6ae80515, 0xfc, 0x10000, 0x1, 0x7, 0x8}, {0x5, 0x8, 0x8, 0x5, 0x3, 0x8}, {0x52, 0xfffffffa, 0x8, 0x9, 0x4, 0x3}, {0x4, 0xd, 0x4, 0x6a, 0x4, 0x2}, {0x8000, 0x8, 0x10000000, 0x5, 0x7, 0x2}, {0x108c, 0xe915, 0x0, 0x8001, 0x6, 0xffffffff}, {0x68c, 0x101, 0x80, 0x8001, 0x5, 0x8a4}, {0x7, 0x5f8, 0x0, 0x1, 0x1ff, 0x5}, {0xfffffffe, 0x2, 0x5, 0x10001, 0xfffffff7, 0xffffffff}, {0x6e, 0x5, 0x4, 0x5, 0x2, 0x11a}, {0x100, 0x7fff, 0x7, 0x427c, 0x1, 0x8}, {0x6, 0x4, 0x441, 0x8, 0xb38}, {0x0, 0x9, 0x5, 0x8, 0xfffffffa, 0x1}, {0x1c, 0x1, 0x1, 0x10001, 0x5, 0x5}, {0x80, 0x5dd, 0x5, 0x7, 0x3, 0x8}, {0x1000000, 0x8, 0x1, 0x80000001, 0x0, 0x7c}, {0xd, 0x0, 0xffffff7f, 0x4, 0x7ff, 0x9}, {0x8, 0x800, 0x9, 0x8, 0xdf11, 0x4}, {0xab4, 0xfc3, 0x56d, 0x64c, 0x5, 0x632}, {0x6, 0x8, 0x4, 0x94, 0x6, 0x8000}, {0x653, 0x2d9, 0x3, 0x9, 0x80000001, 0xe}, {0x0, 0x8, 0xfff, 0x1, 0x8001, 0x8}, {0x52d7, 0x0, 0x1, 0x6, 0x2, 0x8000}, {0xc, 0x1dbd, 0x4556, 0x1ff, 0x8000, 0x3}, {0x5, 0x0, 0x94, 0x9, 0x7a, 0x8}, {0x1, 0x2823a12a, 0x3, 0x7ff, 0x7, 0xb7d}, {0x6, 0x0, 0x8, 0x5ca, 0x3ff}, {0x5, 0x5, 0xa0000000, 0x9, 0xd74, 0x9}, {0x3ff, 0x8, 0x6, 0x81, 0x7, 0x5}, {0x7, 0x20, 0xe, 0x3c67, 0x81, 0xd}, {0xfffffff8, 0x8, 0x400, 0x3ff, 0x3, 0x8}, {0x3, 0x3, 0x1, 0x7, 0x2, 0x81}, {0x3d149981, 0x5, 0x1, 0x8, 0xffff, 0xf}, {0x8, 0x80000000, 0x10000, 0x8000, 0x7, 0x5}, {0x1, 0x81, 0x3, 0x80000000, 0x4, 0x401}, {0x0, 0x28fa42cc, 0x7, 0x8000, 0x9, 0x4}, {0xffffffff, 0x7, 0x1, 0x108e0000, 0x3c50422b, 0x7fff}, {0x9, 0x3, 0x5, 0x0, 0x6}, {0x8, 0x80, 0x7, 0xfffffff8, 0x2, 0x7}, {0x8000, 0x7, 0x3, 0x8001, 0x8b0, 0x1}, {0x1, 0x299e, 0xf54, 0x3, 0x65c, 0xfffffc01}, {0x80000001, 0xb, 0x6, 0x7, 0x7ff, 0x9}, {0x6, 0x8, 0x7, 0x1, 0x4, 0x9}, {0x26f8, 0x6, 0x9c0f, 0x401, 0x5, 0x1}, {0x7, 0x0, 0x4, 0x2, 0x6}, {0x1b0f, 0x2, 0x81, 0x3, 0x80, 0x3}, {0x6, 0x6, 0x3, 0x1, 0x2, 0x1}, {0xd, 0x8dc1, 0x200, 0x0, 0x6, 0x6}, {0xfffffff8, 0x9, 0x1, 0x9, 0x3, 0x4}, {0x10000, 0x249d, 0x8, 0x3, 0x3, 0xd}, {0x3, 0x1, 0x7, 0x49f00, 0x731, 0x7}, {0x10, 0x10, 0xfffffff7, 0x8000, 0x6d38aeb4, 0x7}, {0x1, 0x8, 0x1000, 0xcd, 0x6, 0x57000000}, {0x0, 0x6, 0x1, 0x8, 0x9, 0x5}, {0xb, 0x5d53, 0x1, 0x6, 0x100, 0x1}, {0xffffffff, 0x8, 0x0, 0xa72, 0x9, 0xe}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x81}, {0xec, 0x2, 0xaf6, 0xd2b, 0x4, 0x800}, {0x12, 0x1b5, 0x4, 0x1, 0x5, 0x2}, {0x6, 0x7fff, 0x200, 0x3, 0x7fffffff, 0xff}, {0x6, 0x5d84, 0x8, 0xaa9, 0x5, 0x5}, {0x2, 0x79e9, 0x3, 0x81, 0x4, 0x10}, {0x6a3e, 0x6, 0x6, 0x9, 0x9, 0x5}, {0xf, 0x7fffffff, 0x0, 0x9, 0x63, 0xb9}, {0x2, 0x7fffffff, 0x0, 0x9, 0xb, 0x4}, {0x6, 0x4, 0xb, 0x6, 0x80000000, 0xb7e9}, {0xfff, 0x3, 0xa, 0x7fff, 0x9, 0x7fffffff}, {0x6, 0x1, 0x2, 0x14, 0x5823ba09, 0xaf}, {0x7, 0x401, 0x4, 0x6, 0x2661d, 0x8}, {0x0, 0x101, 0x0, 0x8001, 0x8, 0x51d}, {0xe2a3, 0x2, 0x80000001, 0x3, 0x40, 0x7}, {0x2, 0xe9e3, 0xffff, 0x7, 0x0, 0x7}, {0x4, 0xf9, 0x5, 0x1, 0x7, 0x3ff}, {0x58ad, 0x6, 0x7, 0x1, 0x8, 0x6}, {0x7ff, 0xc74, 0x57c5, 0x8, 0x9, 0x5}, {0xd, 0xd, 0x0, 0x0, 0xd, 0x7}, {0x23, 0x6, 0x4, 0xea7, 0xfffffffb, 0x2}, {0x0, 0x4, 0x1, 0x8, 0x9, 0x80}, {0x551, 0x8, 0xfff, 0xffffffff, 0x0, 0x8}, {0x6, 0x6, 0x4, 0x6, 0x7, 0x6}, {0xfd0, 0x100, 0x3, 0xc056, 0x9, 0x5}, {0x5, 0xffffffff, 0x3418, 0x2000200, 0x3, 0x3}, {0xff, 0x1, 0x101, 0x40, 0x4d94, 0x3}, {0x2, 0xb39b, 0xb1, 0x4, 0x1, 0x4ff}, {0x7, 0x2, 0x9, 0x40, 0x0, 0x2}, {0x4, 0x6, 0x3ff, 0x4, 0x67}, {0x5747, 0x7, 0x867, 0x1, 0x3, 0x6be1}, {0x6, 0xc3f, 0x7, 0x6c24, 0x5, 0xfc2}, {0x4, 0x4, 0xfffffffc, 0xc, 0x7, 0x400}, {0x800, 0x80000000, 0x3ff, 0x8, 0x7f, 0x2}, {0xd2, 0x9, 0xfffffff8, 0x80000001, 0x6, 0x401}, {0xfff, 0x7c3, 0x80, 0x1, 0x2, 0x9}, {0x1, 0x7, 0xa49c, 0x1, 0x5, 0x51}, {0x10001, 0x4, 0xfffffc00, 0x3, 0x9, 0x9}, {0x200, 0x5, 0x629e1fe5, 0x7, 0x9, 0xd}, {0x0, 0xb, 0x84, 0x9, 0x7, 0x8}, {0x8, 0x3, 0x2, 0x12, 0x9, 0x5}, {0x2296, 0x0, 0x8, 0x7, 0x5589, 0x8}, {0x55a4, 0x2, 0x7fffffff, 0x9, 0x65, 0x6}, {0x7f, 0x0, 0x10000, 0xffff, 0x60be, 0x7}, {0x5, 0x1, 0x3, 0xd, 0x80000000, 0x4}, {0x5, 0xfffffff9, 0x800, 0x7, 0x3, 0xfffffffa}, {0x6, 0x7, 0x7fff, 0x5, 0x7, 0xfffffffa}, {0x6, 0x9, 0xbb9, 0x2, 0x2, 0x75f}, {0x10000, 0x200, 0x7, 0xc, 0x5, 0x5}, {0x849, 0x7, 0x9, 0x7ce, 0x4, 0x6fea}, {0x8000, 0x9, 0xa03, 0x4, 0x1, 0x9}, {0x9, 0x9, 0x746, 0xff, 0x80, 0x30}, {0x2, 0x4, 0xfffffeff, 0xa84c, 0x8000, 0x9f}, {0x7c4, 0x4, 0x5, 0x4, 0x6da, 0x3}, {0x3, 0x5, 0x9, 0x75f2bf07, 0xffff, 0xe32b}, {0x8, 0x1, 0x5, 0x76e5a317, 0x1, 0x19cb}, {0x5, 0x5, 0x8, 0x4, 0x1, 0x6}, {0x4, 0x7, 0x80, 0x0, 0x2}, {0x3, 0x5, 0xb, 0x6, 0x6, 0x4}, {0x4, 0x57e, 0x9c000000, 0x7f, 0xdb2c, 0x5}, {0x12, 0x9bb, 0x5, 0x400, 0x30d, 0x4}, {0x2, 0xfff, 0xe763, 0x80, 0xb83, 0x9}, {0x7, 0xfffffffa, 0xf816, 0x6, 0x4, 0x1}], [{0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x5}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x302a4252fc4bd83d}, {0x5}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2877e59f87c9bae6}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x4}, {0xc, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x4}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x100, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa44622c15e086493}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xffffffff, 0x13d, 0x3, 0x8, 0x3}, 0x0, 0x6, [{0x4, 0x3, 0x8001, 0xffff, 0xffff21d2, 0x8}, {0x1000, 0x1, 0x7, 0x3ff, 0x10001, 0xe00}]}, [{0x6, 0x8, 0x5, 0x1, 0xfffffaff, 0x4}, {0xffffff92, 0x628d, 0x5, 0x60a8, 0x7}, {0x1, 0x1008, 0x4, 0xa, 0x0, 0x7fff}, {0x0, 0x0, 0x7, 0x4, 0x4, 0x101}, {0x19bc, 0x0, 0x7, 0x8, 0xc3a, 0x1}, {0x9, 0x2, 0xc1bd, 0x7, 0xd, 0x2}, {0xa4, 0xffc00000, 0xab6f, 0x3, 0x7}, {0x0, 0x4, 0x80000000, 0xfa0, 0x2, 0x200}, {0x8000, 0x4, 0x4, 0x0, 0x7, 0x3}, {0xf, 0x3, 0x81, 0x1f27, 0x6, 0x80}, {0x5, 0x73, 0x9, 0x7e, 0x3ff, 0x2}, {0x9c, 0x9, 0xe3c, 0x5, 0x9, 0x1}, {0x3, 0x9, 0xc, 0x9, 0xffff, 0x9}, {0x5, 0xda4, 0x7, 0x6, 0x6, 0x8001}, {0x3dca, 0x28d1b516, 0x8, 0xe, 0x1, 0x5}, {0x80000001, 0x8, 0x7, 0x8c000000, 0x0, 0x3d7}, {0x5, 0x71a7, 0xb, 0x0, 0x3, 0x3}, {0x5, 0x0, 0x4, 0x401, 0x9, 0x6f}, {0x7, 0x80, 0x5, 0x4, 0xffff, 0x7}, {0xffff5282, 0x7, 0xf4, 0x6f96d403, 0x6}, {0x7, 0xe4, 0xffffffff, 0x100, 0x800, 0xfffffffa}, {0xffffffff, 0x5, 0x1, 0x5, 0x0, 0x1ff}, {0x3d82b4bc, 0x3, 0x10000, 0xd3, 0xffff, 0x8}, {0xb63, 0x80000000, 0x1ff, 0x4, 0xfffff000, 0x7ff}, {0x9, 0x81, 0x5, 0x9, 0x8, 0x8001}, {0x81, 0xffff, 0xfffffff2, 0x7, 0x7f, 0x9}, {0xff, 0xfff, 0x7, 0x3, 0x0, 0xa}, {0x0, 0x3, 0x100000, 0x4, 0xac7c, 0x10000}, {0x9, 0x4e, 0x8, 0x3, 0x3, 0x66}, {0xf, 0x101, 0x9, 0x6, 0x8, 0x2}, {0x7, 0x3, 0x4, 0x3ff, 0xb, 0x7}, {0x3, 0x20000, 0x401, 0xe, 0x9ab, 0x6}, {0x810, 0x9, 0xff, 0x4, 0x7, 0x2}, {0x3, 0x1, 0xba2, 0x120, 0x7, 0x101}, {0xffffffff, 0x8, 0x3, 0xc772, 0xb, 0x3}, {0x101, 0x1a38, 0x3, 0x7, 0x6, 0x1}, {0x3, 0x0, 0x400, 0xff, 0x7fffffff, 0xfffffbcc}, {0x5, 0xfffffffc, 0x6, 0x2, 0x401, 0x1}, {0x2, 0x4, 0x2, 0x8, 0x10001, 0x1}, {0x1d, 0x4, 0x1ff, 0x3, 0xf, 0x34}, {0x7, 0x7fffffff, 0x5, 0x7, 0x0, 0x8}, {0x1, 0x4, 0xa1b, 0x5510, 0x5, 0x6}, {0x508d, 0x0, 0xa, 0x100}, {0x1, 0x7, 0x2, 0x80000001, 0x2, 0x6}, {0x21fceaa2, 0x200, 0x951, 0x1, 0x3, 0xfffffffa}, {0x546, 0x100, 0x7ff, 0xb13c, 0x9, 0x1000}, {0x2c2d, 0x4, 0xd5, 0x4d8, 0x0, 0xcc9d}, {0x2, 0x4, 0x0, 0x8, 0x4, 0x5}, {0x2, 0x2, 0x1ff, 0x0, 0x0, 0x6}, {0x5d98bf83, 0x0, 0xfffffffc, 0x2, 0xc, 0x9}, {0x7fffffff, 0x7ff, 0x4, 0x9, 0xb3e, 0xa}, {0xab1e, 0x4, 0x100, 0x0, 0x7, 0x4}, {0x4, 0x7ff, 0x12a, 0xff, 0xff, 0x3ff}, {0x1, 0x6, 0x81, 0x6, 0x10000, 0x3}, {0xeaca, 0x5, 0x3, 0x9, 0x6, 0x7}, {0x4c40, 0x5, 0x8, 0x3, 0x6, 0x3}, {0xffffffff, 0x7, 0xe85c, 0x6, 0xfffffffa, 0x1ff}, {0xfaa, 0x7, 0x3, 0x8, 0x0, 0x8}, {0x8001, 0x1, 0xf11, 0x40000, 0x6, 0x65}, {0x8, 0x3, 0x81, 0x5, 0xdaca, 0x6}, {0x6, 0x5, 0x3ff, 0xd01d, 0x10, 0x5}, {0x400, 0x3, 0xfffffffd, 0x2, 0x8, 0x5}, {0x8000, 0x97, 0x9c9, 0x400, 0x800, 0xff}, {0xfe3, 0x9, 0x1, 0x80000000, 0x70, 0x4}, {0xff, 0xe, 0x3, 0xff, 0x8001, 0x4bf}, {0x3, 0xffffffae, 0x0, 0x6, 0x2, 0x4}, {0x5, 0x0, 0xcb6, 0xfbb4, 0x6, 0x4}, {0xd, 0x5, 0xa, 0xfffffb78, 0x6, 0x8}, {0x80000001, 0xcf53, 0x3, 0xffff, 0x4, 0x98}, {0x800, 0x4, 0x5, 0x1, 0xd, 0xffffffff}, {0xffffff3e, 0x7e, 0x8, 0x7, 0x2, 0x3ff}, {0x2, 0x100, 0x1, 0x5, 0x4, 0x10}, {0x4, 0x3, 0x2, 0xfffffffc, 0x6, 0x81}, {0x5, 0x2, 0x101, 0x2, 0xfffffff0, 0x7fff}, {0x40, 0x9, 0x0, 0x4, 0x400, 0x85}, {0x1, 0x7f, 0x81, 0x9, 0x1, 0x9}, {0x740, 0x8, 0x1, 0x81, 0xffffff7f, 0x200}, {0x8, 0x8, 0x1, 0x10, 0x6, 0x6}, {0x5, 0x2, 0x3, 0x776dc31b, 0x0, 0x6}, {0x400, 0x8001, 0xf, 0x1, 0x2, 0xe6b4}, {0xbba, 0x8, 0x8, 0x4, 0x3, 0x8}, {0x1, 0x8, 0x8000, 0x1, 0x8, 0x200}, {0x5, 0x1, 0x1, 0x2, 0x81}, {0x7f, 0x8, 0x5, 0x3ff, 0x8, 0xf}, {0x4, 0x7f, 0x1, 0xb, 0x6, 0x4}, {0x0, 0x9, 0x7, 0x1ff, 0x6, 0x669e}, {0xc03, 0x3, 0x10000, 0x3, 0x9, 0x4}, {0x3, 0x7, 0xfffffff4, 0x9, 0x70000000, 0x6}, {0xfffffbff, 0x7, 0x3, 0x7fffffff, 0x4c}, {0x0, 0x1, 0xffffffff, 0x8, 0xc1, 0x8}, {0x0, 0x8, 0x7, 0x2, 0x80, 0x9}, {0xffff, 0x74d, 0xa, 0x9, 0x3, 0x8}, {0x1, 0x7, 0x1, 0x9, 0x9, 0x10}, {0xe, 0x10000, 0x3, 0x80, 0x5, 0x3}, {0x0, 0x2, 0x6, 0x3, 0xfffff6a4, 0x800}, {0x51, 0x6, 0x7, 0x6, 0x5, 0x5d29c839}, {0x9, 0x1, 0x7, 0x1d, 0x10000, 0x6b}, {0x7, 0x8, 0x83, 0x1, 0x281, 0x3}, {0x101, 0x1, 0x5, 0x0, 0x7, 0x3}, {0x6, 0xa7d7ab27, 0x8, 0x3, 0x1, 0xfffffbbd}, {0x9, 0x3, 0x427, 0x9, 0x80000000, 0x7}, {0x7, 0xffffffff, 0x2, 0xc776, 0x0, 0x5}, {0x4000000, 0x5, 0x1, 0x10000, 0xb15, 0x8}, {0x64, 0x8001, 0x6, 0x8, 0x401, 0x1}, {0x180000, 0x8, 0xf, 0x5, 0x5, 0xffffffff}, {0x3e8, 0x2, 0x2, 0xfffffff7, 0x2, 0x101}, {0x8, 0x8001, 0x6, 0x7f, 0x607c, 0x1}, {0x7, 0xfffffff7, 0x0, 0x4, 0x8, 0x8}, {0x0, 0x74d, 0x9, 0x1, 0x7, 0x4}, {0x1, 0x9, 0x81, 0xb, 0x7, 0x5}, {0x12c, 0xf, 0x2, 0x7fff, 0x2, 0xfc}, {0xf, 0xfffffff8, 0x1, 0x10001, 0x80000001, 0x7}, {0x6, 0x9, 0x800, 0x10, 0x5, 0x8}, {0x6, 0x6, 0x7, 0xffffffff, 0x2, 0xe}, {0x8, 0xf, 0x23, 0x10001, 0x1000, 0x7}, {0x8770, 0x80000001, 0x81, 0x6, 0x6, 0x800}, {0x8, 0x800, 0x6, 0x9, 0x0, 0x4}, {0x8000, 0xfff, 0x4, 0x2, 0x0, 0x1000}, {0x3, 0x200, 0xc, 0xffffffff, 0x2, 0x7}, {0xb, 0xc, 0x4, 0x6, 0x4, 0x3}, {0x400, 0xb52c, 0x5, 0x6, 0x426, 0x4}, {0x3, 0x0, 0xc, 0x4, 0x0, 0x2b0b97b1}, {0xff, 0x34c9d4f7, 0x6, 0x3, 0x40, 0x9}, {0x2, 0x60, 0x11, 0x4, 0x8, 0x4}, {0xd1b1, 0xc9, 0xe, 0x5, 0x7, 0x2}, {0x7, 0xfffffffd, 0x6, 0x7f, 0x16, 0x9}, {0x5, 0xb, 0xffffffff, 0xfffffffa, 0xab, 0xb38}, {0x0, 0x5, 0x8, 0x7, 0x1, 0x9}], [{0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4, 0x7b0be006d4641aba}, {0x4}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {}, {0x3}, {0x5}, {0x9cc1e81a3ad60309}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x3}, {0x1, 0x1}, {0x5}, {0x6}, {0x2}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0xa}, {0x4}, {0x4}, {0x5}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {}, {0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x19d2c589c20e2962}, {0x1}, {0x4, 0x1}, {0x2, 0x6e141e8f0a5c6cbd}, {0x1, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x7, 0x400, 0x5, 0x5, 0x4}, 0x7, 0x40, [{0x6652, 0x4a, 0x526, 0x9, 0x3, 0x7}, {0x8, 0x7fff, 0x5, 0x3, 0xe, 0x8}, {0x400, 0xfffffffb, 0x195, 0x2814, 0x25ae208}, {0x8, 0x2, 0x7, 0xcc9, 0x7, 0x267}]}, [{0x99, 0x200000, 0x6, 0x8, 0x87, 0x8}, {0x1000, 0x646, 0x3, 0x9, 0x14, 0x9}, {0x2, 0x3, 0x1, 0x2, 0x9, 0x7}, {0x10, 0x2, 0x1, 0xe, 0x3, 0x81}, {0x8, 0x0, 0x7f, 0x1, 0x200, 0x8}, {0xfa, 0x9, 0x2, 0x3, 0x10, 0x8}, {0x80000001, 0x2, 0x101, 0x8, 0xff, 0x9}, {0x5, 0x5, 0x80000001, 0x1729, 0xfffffff4, 0x2}, {0x3ff, 0x0, 0x0, 0xf7, 0x400, 0x9}, {0x3, 0x3, 0x2, 0xfffffff8, 0x7, 0x10001}, {0x7, 0x6, 0xfffffffd, 0x0, 0x8, 0x269}, {0x3ff, 0xfffffff7, 0x4, 0x6, 0xe6, 0x8}, {0x6, 0x8, 0x6, 0x7, 0xc, 0x401}, {0x2, 0xaa, 0x5, 0xfffffffb, 0x2, 0x9}, {0x6, 0x9, 0x80000000, 0xffff, 0x3310, 0x5}, {0xa67, 0x2, 0x10001, 0x8, 0x9, 0x1}, {0x2, 0xfffffffc, 0xfffffff8, 0x5, 0x2c5, 0x7}, {0xfffff801, 0x4, 0x7, 0x0, 0x4, 0x2}, {0x8, 0x1, 0xfff, 0x72f5, 0x7, 0x8}, {0xfffffff9, 0x3, 0x0, 0xe, 0x6}, {0x1, 0x6, 0xa, 0x7ff, 0x761, 0x3}, {0x1, 0x1, 0x6, 0xc, 0x2}, {0x2, 0x2, 0x2, 0xc7a, 0x401, 0x1}, {0x3ff, 0x7, 0xa61, 0x1e1f, 0x8000, 0x4}, {0xfffffffd, 0x3, 0x7344, 0x38, 0x800, 0x1}, {0x9, 0x34, 0x2, 0x2, 0x1, 0x6}, {0x7fffffff, 0x3de, 0x4ba4, 0x1, 0x4, 0x4}, {0x9, 0x4, 0x1, 0x4076, 0xbbc5ff7, 0x800}, {0x40, 0x40c1, 0x80, 0xd, 0x0, 0x9}, {0x747, 0x100, 0x5, 0xbd97, 0x85, 0x6}, {0x4ae, 0x8, 0x1, 0x5, 0x4, 0x9}, {0x401, 0x4, 0xf, 0x6, 0x4, 0x3}, {0x3, 0x3ee0, 0x401, 0x6, 0x2, 0x7fff}, {0x1, 0x2, 0xff, 0x1, 0x5, 0x4}, {0x6, 0x9, 0x85, 0x0, 0xe23, 0xffff1455}, {0x10000, 0x8, 0xfffeffff, 0x4, 0x7}, {0x1, 0xb3, 0x8, 0x2, 0x6, 0x7}, {0x1, 0x3, 0x1911, 0x6, 0xfffffc00, 0xb}, {0x6, 0x9, 0x7fff, 0xb2, 0x9, 0xcbc6}, {0x6, 0x80, 0xffff, 0x5, 0x8, 0x988}, {0xff, 0xfffff2e2, 0x3ff, 0x5a1, 0x80b6, 0x5a8}, {0x0, 0x939, 0x8, 0x8, 0x80000001, 0x9}, {0x80000000, 0x8000, 0x1ff, 0x0, 0x80, 0x7}, {0x8, 0x9, 0xfffffbff, 0x4, 0x7a09, 0x9}, {0x2, 0x8, 0x7, 0x3, 0x1da4}, {0x3, 0x5, 0xc32d, 0x4, 0x8, 0xff}, {0x7fffffff, 0xb8db, 0x1, 0x7, 0x80000000, 0x1}, {0x0, 0x9, 0x0, 0x6, 0x7f04, 0x4}, {0x7fffffff, 0x3, 0x9, 0x4, 0x7, 0x10000}, {0x4, 0xffffffff, 0x101, 0x3, 0x200, 0x1}, {0x1ff, 0x432b, 0xd, 0x0, 0xfff}, {0xfda, 0x5, 0x2, 0x6, 0x2, 0x3ff}, {0x5, 0x6, 0x0, 0x13e, 0x1}, {0x6, 0x8, 0x9, 0x40, 0x43, 0xfffffffe}, {0xc5c2, 0x3, 0x769, 0x685, 0x8001, 0x8000}, {0x6, 0x0, 0x400, 0x9fc, 0x5, 0xfffffffa}, {0x97, 0x7, 0x8001, 0x70aa, 0x80000001}, {0x3, 0x5, 0x5, 0x8000, 0x7, 0x9}, {0xd88, 0xffffffa9, 0x9, 0x0, 0x3, 0xff}, {0x8, 0x4, 0xffffffff, 0x9, 0x10000, 0x80000001}, {0x9, 0x9, 0x10000, 0x5, 0x5, 0x1500000}, {0x3, 0x9, 0x4, 0x2, 0x6, 0x375}, {0x5, 0xffffffff, 0x1, 0xb00, 0x3ff, 0x8}, {0x1, 0x4, 0x2, 0x3, 0x8001, 0xfffffff9}, {0x1, 0x8, 0x8, 0x753, 0x7, 0x7f}, {0xfffffff1, 0x79ad, 0x7, 0xffff, 0x10001, 0x10}, {0x13, 0x0, 0x0, 0x21, 0xd, 0x211}, {0xb12a, 0x3, 0xf0000000, 0x8, 0x30000000, 0x7}, {0x9, 0x3, 0x7fff, 0xffffffff, 0xd, 0x8}, {0x6, 0x7, 0x1, 0x7, 0x40, 0x1ff}, {0x101, 0x0, 0x40, 0x0, 0x4, 0xce}, {0x6, 0xffff, 0x6, 0x8, 0x1ff, 0x25}, {0x3, 0xa, 0x3, 0xebbc, 0x9, 0x1ff}, {0x4, 0x7, 0x8001, 0x18fc, 0x7ff, 0x80000001}, {0x2, 0x7, 0x729, 0x330b, 0x8, 0x1}, {0x0, 0xff, 0x2, 0x1c3, 0x7, 0x7}, {0x8, 0x1, 0x6, 0x26, 0x9, 0x6}, {0x2, 0x10001, 0x9c, 0xff, 0x7, 0x200}, {0x9, 0x7, 0x3, 0x0, 0x4, 0x9}, {0x9, 0x1ff, 0x8, 0x4, 0xff, 0xeb}, {0x9, 0x502a, 0x9, 0x80, 0x5, 0x1}, {0x2000000, 0x2, 0x0, 0xa91c, 0x3, 0x21d}, {0x0, 0x30c0, 0xff, 0x5e5, 0x0, 0x8001}, {0xd, 0xc4a3, 0x6, 0x5fe7, 0x3, 0xffff}, {0x7fffffff, 0x5, 0x4, 0xfffff859, 0x200, 0xffff}, {0x9, 0x3, 0x6, 0x6, 0x0, 0x7da}, {0xc7423275, 0x7, 0x4, 0xf, 0x7fff, 0x1}, {0x81, 0x7, 0x1, 0x8, 0x4, 0x9}, {0x75b, 0x1, 0xfffffff9, 0x387, 0xf, 0x5}, {0x1, 0x3, 0x8, 0x6, 0x1, 0xffffffff}, {0x40, 0x101, 0xaf2, 0xfffff20f, 0x5, 0x4}, {0x795, 0xfffffffa, 0x7, 0x324b, 0x7fff, 0x7}, {0x6, 0x0, 0x2, 0xfffffffb, 0x7f}, {0x6, 0x2, 0x80, 0xd0, 0x101, 0x1}, {0x7fffffff, 0x2, 0xfffffffa, 0x40000000, 0x4, 0x8}, {0x3, 0x2, 0x0, 0x7, 0x2, 0x7}, {0x4, 0xa, 0x7f, 0x3, 0x7ff, 0x8001}, {0x4, 0x3, 0x200, 0x3, 0x2, 0x4}, {0x5f2b, 0x4, 0x96, 0x1, 0x0, 0x9}, {0x6, 0x5bff, 0xaca, 0x7fffffff, 0x10, 0xffffffff}, {0x8, 0x7f, 0x1, 0x5, 0x2}, {0x10, 0x2, 0x74f, 0x8, 0x7, 0x1}, {0x9, 0x3, 0x0, 0x2e, 0x2, 0x1}, {0x6, 0x6, 0x4, 0xef, 0x10000, 0x8001}, {0x80000001, 0x8, 0x7, 0x5, 0x8, 0xf9e}, {0xc, 0x7e5, 0x5, 0xd, 0xfd7, 0x7}, {0x4a6e, 0xfffffff8, 0x0, 0xaf5a, 0x0, 0x9}, {0x5, 0x8, 0xfffffffd, 0x5, 0x4, 0x5e2a}, {0x9, 0x2, 0x9, 0x4, 0x5, 0x1}, {0x0, 0x7, 0x6, 0x6, 0x4, 0x2}, {0x2, 0x8, 0x3, 0x0, 0x3, 0x1}, {0x1, 0xfffe00, 0x8b54, 0x7, 0x2, 0x4}, {0xfffffffa, 0x0, 0xfffffffd, 0x0, 0x3, 0x9}, {0xd, 0xd766, 0x7fffffff, 0x9b, 0xffffffff, 0xfffff000}, {0x3, 0x200, 0x6, 0x81, 0x3, 0x880c}, {0x7f, 0x0, 0x80, 0x5, 0x9d, 0x9}, {0x8, 0x9, 0x12, 0x1e, 0x0, 0x10001}, {0x4, 0x3, 0x10000, 0x2, 0x800, 0x1000}, {0xd6, 0x1, 0x9, 0x9, 0xc, 0x6}, {0x2ce, 0x4, 0x9, 0xdb4, 0x8000, 0x5}, {0x8, 0x23, 0x8000, 0x80, 0x69c9, 0x365f}, {0x8, 0x9, 0x2, 0x4, 0x7, 0xaf}, {0x0, 0x6c, 0x1, 0x0, 0x7f8, 0x400}, {0x1, 0x7, 0x7, 0x0, 0xfdf, 0x8}, {0x5e4, 0x1000, 0xb19c, 0x0, 0x0, 0x4}, {0xe, 0x8, 0x101, 0x1, 0x10}, {0x6, 0x1, 0x1, 0x4, 0x8, 0xffffff01}, {0x0, 0x10, 0x80000001, 0xdcb2, 0x10, 0x73e}], [{0x4, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {0x3}, {0x3}, {0x1, 0x28533210eb0a77b8}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x4}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x5}, {0x5}, {0x5, 0x1}, {0x5}, {0x7}, {0x4, 0x1}, {0x1}, {0x5}, {0x4}, {}, {0x5}, {0x3}, {0x1}, {0x8f4c85ff8dec84b5, 0x1}, {0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x5}, {0x2}, {0x3}, {0x5}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x7c9b, 0x80000001, 0xffffffffdffffffb, 0x800, 0x6b}, 0x1d, 0x2, [{0x100, 0x8, 0x1, 0x0, 0x800, 0x8}, {0x29c0, 0x5, 0x9, 0xa6b, 0x9, 0x4}, {0x9, 0xfffffffa, 0xff, 0x6, 0x4, 0x81}, {0x100, 0x4, 0x5, 0x7, 0x7, 0x6}, {0x6, 0x5, 0x2, 0x3, 0x9, 0x2}, {0x0, 0xdba0, 0x4, 0x0, 0x1, 0x80000000}, {0x97, 0x2, 0x1, 0xc6e, 0x8}, {0x9, 0x101, 0x1, 0xfffffffc, 0x1, 0x8}]}, [{0x2, 0x4, 0xff, 0xfffffffe, 0x4, 0x7fffffff}, {0x7f, 0x7, 0x8, 0x3, 0xa, 0x6}, {0xfff, 0x1, 0xf7c, 0x8, 0x16, 0x8000}, {0xff, 0x1, 0xe, 0xfffffffa, 0x642, 0x2fe1}, {0x1, 0x200, 0x6, 0x9, 0x9, 0x9}, {0xff, 0x5, 0x800, 0xe, 0x40, 0x4}, {0x3, 0x5, 0x5, 0x6, 0x8, 0x1000}, {0x3, 0xfffffffb, 0x9, 0x1000, 0x5, 0xf819}, {0x6, 0x10, 0x6, 0x1, 0xb}, {0xfffffff7, 0x80000000, 0x5, 0x3, 0x7fff, 0xff}, {0xe0, 0x6b, 0x539, 0x6, 0x1, 0xffffffff}, {0x0, 0x2b5, 0x7fff, 0x2, 0x80000000, 0xa}, {0x9, 0x0, 0xc, 0x2, 0x8, 0x7}, {0xe, 0x7, 0x200, 0x3, 0x3, 0x2}, {0x5, 0x9, 0xfffffff9, 0x89, 0x6, 0xcbc}, {0x3, 0xff, 0x5, 0x3, 0x7f, 0xa}, {0x9, 0x400, 0x7d2, 0x8001, 0x6, 0x401}, {0xffffffff, 0x400, 0x0, 0x9, 0x4, 0x7fffffff}, {0x2, 0x1, 0x3, 0x5, 0x4, 0x7}, {0x0, 0x8, 0x4, 0x8, 0x9, 0x10000}, {0x6, 0x0, 0xfffffffd, 0x400, 0x2, 0xf742}, {0x5, 0x70, 0xfffffff9, 0x10001, 0x2, 0x5}, {0x1, 0x3, 0x4, 0xfffffffe, 0xf, 0x800}, {0x0, 0x10001, 0x8001, 0xab, 0x6, 0x39}, {0x7, 0x4, 0x7ff, 0x5, 0x101, 0x9}, {0x7, 0xc, 0x1, 0x0, 0xf5, 0x2}, {0x2, 0x2, 0x9, 0xffff3836, 0x9, 0x9}, {0x4, 0xcb, 0x0, 0x6, 0xa2d, 0x6}, {0x7, 0xb, 0xf6, 0x4, 0x2, 0x44}, {0xa6, 0x1, 0x2, 0x8001, 0x6, 0x2}, {0x8, 0x101, 0x5, 0x7, 0x1, 0x2cd0}, {0x1, 0x6, 0x6, 0x6, 0x4c7, 0x401}, {0x81, 0x9, 0x6, 0x2f, 0x0, 0x11f6}, {0xffffffff, 0xfee1, 0x3, 0x4, 0x2, 0x39392c03}, {0x2, 0x40, 0x7, 0x3ff, 0xc6b, 0x2}, {0x8bb, 0x200, 0x10000, 0xf8, 0x5, 0x3}, {0x400, 0x5, 0x5, 0xffffffff, 0x401, 0x7}, {0x4, 0x7, 0xf, 0x9, 0x7, 0x3ff}, {0x5, 0x3, 0x4, 0x9, 0x3, 0x80000000}, {0x6, 0x3, 0x7f, 0x4, 0x1, 0x3}, {0xd23, 0x8, 0x80000001, 0xf1, 0x3, 0x8}, {0x7fff, 0x1, 0xb657, 0x54e3, 0x3, 0x371f}, {0x8, 0x180, 0x4972, 0x2, 0x40, 0x8}, {0x0, 0x7, 0x538f, 0x4, 0x3, 0xe}, {0x8, 0x0, 0x21b, 0x5, 0x2, 0x9d8}, {0x5, 0x5, 0x1, 0x9, 0x0, 0x9}, {0x401, 0x1000, 0x6, 0xffff, 0x8, 0xfffffeff}, {0x80, 0xf, 0x8, 0x79f3, 0x240, 0x54}, {0xb0f, 0x7, 0xa9, 0x1, 0x4, 0x6}, {0x222, 0x1, 0xe, 0x9, 0x9, 0x4}, {0x3, 0x3, 0x68b, 0x10000, 0x0, 0x7}, {0x1, 0x9, 0x9, 0x5, 0x0, 0xfffffffa}, {0x9, 0x101, 0xffffffff, 0x9cdf, 0xffffff86, 0x5}, {0x80000001, 0x7, 0x9, 0x2, 0x1, 0xe3}, {0x1, 0xc, 0xffffb6ec, 0xb, 0x2, 0xfffffffa}, {0x0, 0x2, 0xf, 0xfffffffa, 0x35d, 0x7}, {0x7, 0x5659, 0x8, 0x10000, 0x1000, 0x8000}, {0x3, 0x1, 0x9, 0xffff, 0x9, 0x2}, {0x7, 0xfff, 0x3, 0xd, 0x8, 0x6}, {0x8, 0x10, 0x1000, 0xfffffff7, 0xa6, 0x142d}, {0x7, 0x7f, 0x9, 0x3, 0x6, 0xe0}, {0x4, 0x5, 0x2, 0xfffffe01, 0x3, 0x3ff}, {0x5, 0x7, 0x8, 0x6, 0x0, 0x7}, {0xffffffaf, 0x4, 0x1, 0xfffffff4, 0x1, 0x4}, {0x40, 0x3, 0x10000, 0x8746, 0x6, 0x5}, {0x2, 0x3, 0xcfd2, 0x5, 0x2, 0x2c5}, {0x2, 0x3, 0x5b, 0x4, 0x3, 0x1}, {0x1, 0x7fff, 0x8, 0x7fffffff, 0x4, 0xfffffff7}, {0xffffffff, 0xbac, 0x8, 0x380000, 0x9, 0xd88}, {0x9, 0x189d79f2, 0x5, 0xfffffd1c, 0x9, 0x9}, {0x42, 0x7, 0x6, 0x5, 0x3ff, 0x200}, {0xf, 0xffff1197, 0x7da8, 0x9, 0x5, 0x8a}, {0x6, 0x5, 0xc04, 0x3, 0x769, 0x2}, {0x603, 0x7fff, 0x6, 0x9e9, 0x4, 0x400}, {0x7, 0x3, 0xfffffff9, 0xf1, 0x9, 0x8}, {0x3, 0x0, 0xad, 0xc, 0x6, 0x7}, {0x6, 0x4, 0xc0000, 0x7, 0x0, 0x2}, {0x9, 0x1, 0x4, 0x1, 0x9, 0xe38}, {0x6, 0x2, 0x8, 0x5, 0x0, 0x1d1}, {0x2, 0x5, 0xffff0000, 0x0, 0x2, 0x7}, {0x5, 0x7f, 0xa, 0x1, 0x1ff, 0x69d}, {0x80, 0xfffff2d2, 0x0, 0x2, 0x0, 0x3}, {0x10000, 0x2, 0x3, 0x100, 0x6, 0x10}, {0x7, 0x2, 0xa6, 0x6, 0x8, 0x46a}, {0xffff, 0x5, 0x1000, 0x81, 0x0, 0x5}, {0x5, 0x400, 0x7fff, 0x7fffffff, 0x6, 0x80000000}, {0x401, 0xe, 0x2, 0x0, 0x2, 0x6}, {0xc82, 0x80, 0x8, 0x4, 0x6, 0x8}, {0x9, 0x8, 0xffff27c5, 0x100, 0x7, 0x8}, {0x5, 0x7b58, 0x1ff, 0x9, 0x1ff, 0x7}, {0x2, 0x6, 0x10, 0x80000001, 0x8, 0x7}, {0x400, 0x1, 0x3, 0x81, 0xd}, {0x2, 0x1, 0xfb3, 0xffff7fff, 0xbd3, 0x735823ad}, {0x80000001, 0xff, 0x10, 0x0, 0x5, 0x100}, {0xfd6, 0x9, 0xfffffff4, 0x8, 0x0, 0x1}, {0x8, 0x8, 0xfffffffa, 0x2, 0x8, 0x5c}, {0x8, 0x4, 0x6f0eac09, 0x1504, 0x2c8, 0x7f}, {0x9, 0x10000, 0x8, 0x1, 0x9, 0x9}, {0x7, 0xcf, 0x1, 0x568, 0xfffffffe, 0x9}, {0xff, 0x26b0, 0x9, 0x22, 0xffff, 0x2}, {0x5, 0x4c3, 0x1000, 0x7, 0x5, 0xdf5}, {0x6, 0x2, 0x7d4, 0x6, 0x1, 0x9}, {0x5e, 0x2, 0x7, 0x400, 0xb}, {0x8, 0x2, 0x5, 0x0, 0x88c, 0x7f}, {0x3, 0x7f, 0x401, 0x4, 0x3ff, 0x4}, {0x3, 0x9, 0xb, 0xd9a1, 0x48e, 0x80000001}, {0x0, 0x24ea9292, 0x3, 0x8, 0x2, 0x2}, {0x4, 0x8, 0x7, 0xfffffffc, 0x4, 0xb77c}, {0x9, 0xc4a, 0x48, 0x6, 0x4, 0x1}, {0x3, 0x0, 0xa, 0x7fffffff, 0x400, 0x9}, {0x2, 0x4, 0x100, 0x5, 0x1, 0x8}, {0x1, 0xfffffffd, 0x5, 0xfffffffc, 0xfffffffa, 0xbf90}, {0x80000001, 0x7, 0xe20, 0x0, 0x8001, 0x8}, {0x9, 0x3, 0x8, 0x4, 0xffffffff, 0x5}, {0x4, 0x6, 0x5, 0x8, 0x21648729, 0x2}, {0x76, 0x8, 0x6, 0x1, 0x6, 0x2}, {0x2, 0xfffffffe, 0x5, 0xfffffffc, 0x3, 0x1}, {0x2, 0x3, 0x2, 0x7, 0x0, 0x5}, {0x3, 0x0, 0x6, 0x6251, 0xffffff00, 0xc44}, {0x1, 0x5, 0xbdc9, 0x6, 0xcd3, 0x81}, {0x0, 0x5, 0xc, 0x6, 0x0, 0x401}, {0x1, 0x7, 0x4, 0x0, 0x8, 0x1}, {0x5, 0x7, 0xe121, 0x8ad, 0xc}, {0x10, 0x1, 0x9, 0x4, 0x8, 0x2}, {0x7, 0xfff, 0xff, 0x7, 0x1c00, 0x9}, {0x6b, 0x0, 0xbb7, 0x6, 0x5}, {0xffff, 0x8, 0x7feed09e, 0x80, 0x3}, {0x6, 0x7fff, 0x60, 0xc8, 0x2, 0xe0}], [{0x4}, {0x4}, {}, {0x5}, {}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x518351a53a6a4c1a}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x7}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x8, 0x9, 0x4, 0x3, 0x3}, 0x6, 0x5, [{0x3, 0x2, 0x1, 0x34de, 0x5, 0x9}, {0x9020, 0x1, 0x1, 0x3, 0x800, 0x7}, {0xfffffffe, 0x4, 0x1, 0x3e, 0x7, 0x6}, {0x6, 0xa524, 0x90, 0x0, 0xfffffffc, 0x7fffffff}, {0x0, 0xa309, 0x2, 0x8, 0x3a82, 0x2}, {0x5, 0x1, 0x2, 0x7f, 0x400, 0x7}, {0x8001, 0x1e16d2fe, 0x1ff, 0xfff, 0x7, 0x6}, {0xc, 0x23ae, 0x81, 0x7, 0x7, 0x7}, {0x400, 0x81, 0x4, 0x8, 0x4, 0xe0f}, {0x5, 0xff, 0x8, 0x5, 0xffffffa8, 0x4d8}]}, [{0x7, 0xfffffff7, 0x7fffffff, 0x9, 0x0, 0x3}, {0x0, 0x3, 0x55c2, 0x4, 0x0, 0x5}, {0x36, 0x8, 0x5, 0x10000, 0x5, 0x1}, {0x3, 0x4, 0x53, 0x9, 0x8, 0x5}, {0xfffff6f8, 0x8, 0x4, 0xffffffb8, 0x4050, 0x8}, {0x9, 0x24000000, 0x3, 0x5, 0x33, 0x6}, {0x5, 0x4, 0x0, 0x9, 0x7fffffff, 0x2}, {0x2, 0x9942, 0x5, 0x9, 0x0, 0x1}, {0x173, 0x4, 0x6a63, 0x2, 0x2, 0xa0}, {0x8, 0x1c, 0x8de1, 0x6, 0xe, 0x7}, {0x2, 0x9, 0x5, 0x9, 0x2, 0x8001}, {0x3, 0x9, 0x2, 0x0, 0xbdfb, 0x800}, {0x1, 0xffffff00, 0x498, 0x8, 0x5, 0xf}, {0x78, 0x8, 0x4, 0x324, 0xfffffffb, 0x7757}, {0xe, 0x9, 0x5a, 0xda8, 0xe5, 0x2}, {0x1, 0x41, 0x8, 0x1, 0x9, 0xbe5b}, {0x401, 0x401, 0x8, 0x90e, 0x1, 0x51}, {0x5, 0x2, 0x5, 0x8, 0x8, 0x2}, {0xfff, 0x9, 0x400, 0x5, 0xffff8881, 0x1}, {0x5, 0x5, 0x36a, 0x100000, 0x9, 0x7fffffff}, {0xb, 0x1, 0xc, 0xff, 0x1}, {0x0, 0x2, 0x0, 0xfffffffc, 0x2, 0x8}, {0x4, 0x1, 0x0, 0x7, 0x0, 0xd}, {0x5df, 0xfffffff8, 0x0, 0x252, 0x6}, {0x5, 0xd2e, 0xfffffc01, 0x4, 0x5, 0x7fffffff}, {0x1000, 0xff, 0xb0d8, 0x6, 0x4}, {0x3, 0x7fff, 0xfffffffe, 0x6, 0x5, 0x1}, {0xffff0001, 0x1, 0x2, 0x5, 0x8, 0x9}, {0x3ed, 0x7, 0x8, 0x5, 0x5}, {0x8, 0x7fff, 0x7, 0x6, 0x8, 0x6}, {0x5, 0x0, 0x6, 0x200000, 0xfffffff3, 0xfffffffc}, {0x7, 0x7ff, 0xe, 0xffff, 0x8, 0x6}, {0x1f, 0x8, 0x5, 0x0, 0x2, 0x1e7}, {0x5, 0x6, 0x80000000, 0x94, 0x7, 0x1}, {0xffffffff, 0x8, 0x5, 0x6, 0xff, 0x6}, {0x5, 0x1, 0x48, 0x0, 0x8}, {0xf6, 0x7, 0x1, 0x5, 0xfffffffd, 0x5}, {0x1ff, 0x2, 0x6, 0x7, 0x6, 0x7}, {0x100, 0x80000000, 0x1000, 0x1, 0xd, 0xfff}, {0xffff, 0x5, 0x7fffffff, 0x8, 0x7fffffff, 0xffffffc0}, {0x800, 0x3, 0x0, 0x70e, 0x318e, 0x7}, {0x400, 0x1ff, 0xba, 0x1, 0x7, 0x14000}, {0xffffffff, 0xe19, 0x8, 0x8, 0x3800000, 0x4}, {0x80000001, 0x5, 0x0, 0x3, 0x6, 0x6}, {0x7, 0x2, 0x4, 0x5, 0x35, 0x7}, {0x8, 0x1, 0x8, 0x0, 0x2, 0x1}, {0x1, 0x7fffffff, 0x118, 0x5, 0x5, 0xd}, {0x7f, 0x8, 0x0, 0x1, 0x1000, 0x8}, {0xef, 0x9, 0x0, 0x6, 0x100, 0xe}, {0x1, 0xb51, 0x5, 0x0, 0xe, 0x9}, {0x7, 0xff, 0x3, 0x1, 0x0, 0x9}, {0x8, 0x5, 0x0, 0x47b5, 0x8, 0x10}, {0xcd05, 0x4, 0x7, 0x80000000, 0x7fff, 0xd9}, {0x30, 0x30bd8df7, 0x9, 0x8000, 0x87b014a3, 0x6}, {0x1, 0x9, 0x1, 0x8, 0x5, 0xe}, {0x49a4, 0xa327, 0x0, 0x80000000, 0x0, 0x973}, {0xfc5, 0x3, 0x7ba059f2, 0x5, 0x6, 0x80}, {0x8ae9, 0x6, 0x1, 0x3, 0x9, 0x5}, {0xffffff00, 0x0, 0x6, 0xbf9a, 0x0, 0x7fff}, {0xfffffc25, 0xd, 0x3, 0x2, 0x80000000, 0x8}, {0x6, 0x10000, 0x3, 0x2, 0x9, 0x9}, {0x3, 0x1, 0x3, 0x2, 0x200, 0xffffff44}, {0x89, 0x2, 0x3ff, 0xffff0c1f, 0x1ff, 0x8}, {0x8, 0x1, 0x3000, 0xc8, 0x9, 0x5}, {0x7, 0x0, 0xa, 0x7, 0x10000, 0x62f8}, {0x2, 0xf, 0x7ff, 0x5, 0x4, 0x4}, {0x73c, 0x4, 0x4, 0x400, 0x0, 0x8}, {0x179b, 0x6, 0x7, 0x40, 0xfffffffb, 0x80000001}, {0xc000, 0x101, 0x8001, 0x4c, 0x0, 0x2}, {0x318, 0xed1, 0x1, 0x3, 0xbe7, 0x1}, {0x0, 0x9, 0x7, 0x8, 0x8, 0x1}, {0x3, 0x2, 0x8, 0x27, 0x5, 0x9}, {0x7, 0x8, 0x6, 0x6, 0xb8, 0x40}, {0x5, 0x8, 0x3, 0x1ff, 0x7}, {0xfffff000, 0x2, 0x2, 0xffff, 0x93a0, 0x2}, {0x8, 0x8, 0x4e3, 0x9, 0x5}, {0x1000, 0x1, 0xfffffffe, 0x5, 0x91, 0x1}, {0x3, 0xb4b9, 0x4, 0x4, 0x10001, 0x9}, {0x6, 0xd7, 0x8, 0x101, 0x7d}, {0xf76, 0x6, 0x0, 0x6, 0x9}, {0x4, 0x6, 0xd, 0x6, 0x7, 0x101}, {0x7ff, 0xfffff631, 0x4, 0xfffffff8, 0x5cd, 0x100}, {0x0, 0x7, 0xfffffffb, 0x59, 0x91f, 0x8}, {0x6, 0x54f6, 0x8, 0x3, 0x10001, 0xfffffff5}, {0x1000, 0x8, 0xfffffffd, 0x3, 0xad1, 0x9}, {0x3cc, 0x400, 0x6, 0xd, 0x1, 0xdf}, {0x4, 0x40, 0x9c, 0x5, 0x7f, 0x5}, {0x10, 0x0, 0x8, 0x6, 0xfff, 0xfffffffa}, {0x9, 0x2, 0x60, 0x7, 0x5, 0x6}, {0x3, 0x9, 0x4, 0x80000001, 0x1, 0x10}, {0x0, 0x34e, 0x4, 0x8000, 0x10001, 0x6213}, {0xb40, 0x8258, 0xffff, 0x4, 0x1, 0x2}, {0x3, 0x7, 0x10, 0x9, 0x8, 0x81c}, {0x9, 0x1, 0x7, 0x7ff, 0x8, 0x6}, {0x3, 0x20000000, 0x10001, 0xc7d, 0x1, 0x1}, {0x101, 0x101, 0x40, 0x8, 0xe8}, {0x3, 0xf4, 0x81, 0x5, 0x6, 0x1b469e2e}, {0xb, 0xa46, 0x7, 0x2, 0x8}, {0x7, 0x5, 0xbc3, 0x1, 0x7fffffff, 0x28}, {0x48, 0x401, 0x5, 0x7f, 0xffff7fff, 0x9a}, {0x9, 0x7, 0x0, 0x6, 0x2, 0x2}, {0x2, 0x3, 0xfffffffd, 0x1ff, 0x6, 0x4}, {0x6, 0x8, 0x3, 0xff, 0x3ff, 0x9}, {0xd, 0xfffff610, 0x200, 0x8, 0xffffd6e2, 0x4}, {0xd, 0xfffffffd, 0x0, 0x7, 0x2528, 0xfffffff8}, {0x5, 0x0, 0x5, 0x8, 0xa, 0x5}, {0x8, 0x10001, 0x1000000, 0x9, 0x3, 0x1}, {0x200, 0x1b2f, 0x1, 0x2, 0x3fc0000, 0xe}, {0x0, 0x3ff, 0x9, 0x8, 0x9, 0x9}, {0xd, 0x2, 0xffff8c7a, 0x5, 0x81, 0xfffffffc}, {0x9, 0xff, 0x800, 0xb, 0xfffffff9}, {0xfff, 0x7, 0x800, 0x8, 0x2, 0x9}, {0x4, 0x3, 0x7, 0x1ff, 0x7}, {0x1, 0x732, 0x7fffffff, 0x7, 0x7, 0xb}, {0x2, 0xfffffffb, 0x6ae5, 0x0, 0x5, 0x9}, {0x8, 0xffff8790, 0x0, 0x2, 0x80000000, 0x400}, {0x9, 0x100, 0xffff, 0x3, 0x8, 0x3ee}, {0x1, 0x9, 0x20c, 0x6, 0x6, 0x3}, {0x2, 0x5, 0xf6c5, 0x8, 0x5, 0x8}, {0x2, 0x5, 0x8, 0x47, 0x5, 0x9}, {0x5, 0x3ff, 0x80000001, 0x0, 0x5eac, 0x4}, {0x2, 0x2, 0x2de4c324, 0x6, 0x200, 0x5}, {0x6, 0x100, 0x2, 0x22d, 0x7fff}, {0x5, 0x3, 0x7, 0x3, 0x3, 0x10000}, {0x10001, 0x3, 0xfc2, 0xb8, 0xde, 0x9}, {0x1, 0x10000, 0x10001, 0x5, 0x40}, {0xfffffff7, 0x800, 0x8, 0x7f, 0x4, 0xb8}, {0x46d1, 0x5, 0x6, 0x6, 0x3}], [{0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x7}, {0x2}, {0x3}, {0x3}, {0x3}, {0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0xc4220c31e81872dc}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x206cb5e069a466af}, {0x4, 0x1}, {0x1}, {}, {0x5}, {0x4, 0x1}, {0x2}]}}]}, {0x2a, 0x6, "3e0d8a3dc0888aeac2ac251c1663f4cd06d288a5faf6fe7f99c329b55ecfd9f642642837d140"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x3, 0xfffffffe, 0x9, 0xe, 0x8, 0x2, 0x5, 0xfff, 0x2, 0x6, 0x1000, 0x5a, 0x3, 0x6, 0xffff552c, 0x1, 0x1, 0x7, 0xd, 0x9b9, 0x8000, 0x6, 0x2, 0x0, 0x3, 0x5, 0xfffffffe, 0x1, 0xe500, 0x2, 0x9, 0x1, 0x2, 0x6, 0xb2, 0xb, 0x5, 0x4, 0x10001, 0x5, 0x7, 0x3, 0x9, 0x6, 0x5, 0x3, 0xfffffff9, 0x9, 0x5, 0xf, 0x7, 0x1, 0x5, 0xf, 0x6, 0x3, 0x2, 0xe, 0x1, 0x640a, 0x401, 0xe4, 0x100, 0xb8, 0x7, 0x0, 0x5, 0xcb6, 0x2, 0x1, 0x7ff, 0x1, 0x5, 0x7fffffff, 0x6, 0xc3, 0x4, 0x976, 0x7, 0xfffff800, 0x7, 0x40, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4b, 0x838, 0x64, 0x3e, 0x0, 0x7, 0x0, 0x80, 0x4, 0x8, 0x3ff, 0x99, 0x52a1, 0x54, 0x5, 0x8, 0x6, 0x6, 0x1, 0x1156, 0x9, 0x1, 0x8, 0x0, 0x7fff, 0x31, 0x9, 0x6, 0x401, 0x10, 0x3, 0x0, 0x7, 0x5, 0x9, 0x80, 0x4, 0x2, 0x7, 0x9103, 0x8, 0x7, 0xf, 0x101, 0xa, 0x43, 0xffff0001, 0x8, 0x85, 0x4, 0x4, 0xbe, 0x6, 0x80000000, 0x3169, 0x2, 0x40, 0x4, 0x401, 0x45a, 0x4f8, 0x2, 0x8, 0x2, 0xf, 0x3b7b, 0x9, 0xfffffff7, 0xffffffff, 0x9, 0x3, 0x6, 0x0, 0x5, 0x1, 0x1, 0x40, 0x8, 0x6, 0x9, 0x5, 0x1, 0x5, 0x79, 0x6, 0x0, 0x3, 0x4c7c, 0x2, 0x85, 0xa, 0xfffffffe, 0xe, 0x448, 0x5e3ac071, 0x2, 0x36, 0xfff, 0x5, 0x8f3, 0x7, 0x9, 0x10000, 0xbdc, 0x80000000, 0xf, 0xffff, 0x1, 0x7, 0x8, 0x4, 0x80000001, 0x4, 0xcbc, 0x5, 0xb, 0x6c6, 0x67, 0x2, 0x400, 0xa000000, 0x4, 0x6, 0x8000, 0x6, 0xa, 0x3, 0x4e, 0xf, 0xb, 0x8, 0x5, 0xc, 0x4000000, 0xa, 0x101, 0x4, 0x100, 0x400, 0xb56e, 0x1, 0x40, 0x6, 0x5, 0x80, 0x9, 0x22d9, 0x7f, 0x7fffffff, 0x8, 0xfa97, 0x1ff, 0x8b8, 0x4, 0x6, 0xde, 0xfffffffa, 0x9, 0x6, 0xb99, 0xf1bd, 0x6, 0x59a5, 0x9, 0x0, 0x8, 0x800]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_FW_MASK={0x8, 0x5, 0xa}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xa6}]}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'macvlan0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x5df0}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fe, 0xfffffffe, 0x0, 0x80000007}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="05070000000000000000010000000400030004000180080002800400018004000180480001801400020064766d727030000000000000000000001400020076657468315f6d61637674617000000014000200766574683100000000000000000000000800030003000000040003004c000280140001800800010006000000080001000500000034000180080001000800000008000180070000000800010001000000080001000200000008000100030000000800010008000000040003"], 0xc4}}, 0x0) 2m33.73625022s ago: executing program 1 (id=664): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x100402) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x3) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@newae={0x184, 0x1e, 0x20, 0x70bd2b, 0x25dfdbfd, {{@in6=@remote, 0x4d6, 0x2, 0x3c}, @in=@private=0xa010100, 0xffffffff, 0x3507}, [@tmpl={0x144, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3501, 0x2, 0x2, 0x8, 0xfffffc01, 0x7, 0x5}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x2, @in=@empty, 0x3504, 0x0, 0x1, 0x63, 0x9b8f, 0x4, 0x74f}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0x34ff, 0x0, 0x1, 0xde, 0x1, 0x3, 0x6}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@mcast2, 0x3506, 0x2, 0x0, 0x80, 0x4, 0x0, 0x6}, {{@in6=@private0, 0x4d2, 0x32}, 0x0, @in=@rand_addr=0x64010100, 0x3502, 0x0, 0x3, 0x2, 0x8, 0xe, 0x8000000}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80c0}, 0x8018) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="b0b548c44aee4ac193a65c4d054f8fa591", 0x11}, {&(0x7f0000000480)="0a795ac3d52100b8ce78e4e5aae5807a6d721f619e50d31c4d41cc2497fe3a2f833cffd99bb97296c7c490dba46ac4e8fb7625b6", 0x34}, {&(0x7f00000004c0)}], 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0xe) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x408400, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000600), &(0x7f0000000640)=0x4) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, r3, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xd0, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xe, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0xf8, 0x4e}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x0, 0x8, 0x80, 0xc, 0x10, 0x9}, 0x96, &(0x7f00000007c0)={0x5, 0xf, 0x96, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0xf0, 0x1, 0x2, 0x80}, @ssp_cap={0x1c, 0x10, 0xa, 0x8a, 0x4, 0x80, 0xf000, 0x8, [0xcf, 0xc00f, 0x0, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x68, 0x1, 0x8, 0x7, 0x80}, @generic={0x4b, 0x10, 0x0, "023c1fc89b64dd4df76c0c1e1844e83c6dfdc2a34da8c1f23704ef80659e597c3e8143cb8d0ab07bf5836548ea0b0c78a45684b8f47ce37fd5ef5062058eaf09487e615780d49d6a"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3fbf34629bac480e920193c1937f4812"}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x40d}}]}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000a00)=0xe8) syz_usb_connect(0x6, 0x5b, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x5e, 0x9, 0x10, 0x0, 0x50d, 0x115, 0x133, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x6, 0x24, 0xa0, 0x6, [{{0x9, 0x4, 0x12, 0xd, 0x0, 0x5a, 0x17, 0x71, 0xff, [@generic={0x37, 0xc, "4039f2e77b9e3e7b237696b233e602904c56ae3528c4ecdedc114154514c6a1aa899c064d43ea178eb05f96b676ca18afaa4fd9269"}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x73, 0x4, 0x0, 0x40, 0xf5}, 0x5, &(0x7f0000000b00)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40a}}, {0xd9, &(0x7f0000000b80)=@string={0xd9, 0x3, "e4231604466d932e3b056adc13df3f06ee5d9ecaa0dcc60789949bac8b0867d0b057fa3300253910e06999ffe2f81e660dea033aefe8f6e8b6239deb11a482b39048e21367fa1cf6626217b801c5b0f85c8dd470fa60115df78ff94bf66654ec8074a3751cb31fad98db58fb00043f574cbacca235119d353831b25af3cee499e398f55b96999b3392e83090fb1c63831c9e54cf23f349af091571e1b844999e069888fc3903cc6125a22c14622be85d73d7d213ee892bd3e78f31ec2e4838b8428228dbd2ff5e525e3adbfbe892e8236eb9c235e7febd"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x83e}}, {0xc3, &(0x7f0000000d00)=@string={0xc3, 0x3, "aa9c205a7a64247ed2bd50f292450b58134becaaded4127b9037dc574251931ede849bc42e3a479700c9dff5c70e093aa28b1334d9fd5b3a21064424640da28437558fa501a297cb77995dfc7020eed475beb6916cef1737abf5277038b28b44917716d4f00125e752e9c42194aac6aa0113de0d3b660e9a03680679c77f1905d9da0fcf3b46c8597b2f7decf47d0aa08235461971a01d6288d4c20c62697438e28040455c878f78192baab2097fdb3e75e2b2c015787ad618196662f897358d3d"}}, {0x15, &(0x7f0000000e00)=@string={0x15, 0x3, "b0ccec476496505bc288e9f5c4acd8e53ea13a"}}, {0xd2, &(0x7f0000000e40)=@string={0xd2, 0x3, "af596d9bb1135e4a9b8d6ad5152bba44bbeb648819383ca9cf0aabe18e0b394386ce95ae7c87724a9ca50e21568574db6ae7072132d38e6167b5cb296b861a5731e934258c41fc2b3f2d242af7412c81f30b09e47e062b9bdbd192a5c6715ff4ab6743b3e52ba5ec9632cdd49b991d4fa86abd0b179df76d8503597135bfad69ff78ca43a0743eec252089e3cafbde4b3b3dd93b1999223aa3090a68ee0a8e28d901af6beff1ed7b6dfdf8a233a7558d86a29a74879ad7a21679b176637e122d8deb091b35291290072a4d8b0fb1f458"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x84c}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x1801}}]}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000010c0)={0x1, 0x0, @pic={0x0, 0x10, 0x8, 0xe7, 0x4b, 0x8, 0xc, 0x2, 0x8, 0x3, 0x1, 0x10, 0x9, 0x0, 0x7f, 0xc}}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001300)=0x0) bind$nfc_llcp(r0, &(0x7f0000001340)={0x27, r4, 0x1, 0x3, 0x64, 0x0, "aa63c805b8c113c3b7ee7f485167b657653a0d4d716a19c275ff48d46ad1a4d3ea5eb61998637c8cc2a0c9ef48b68f033cc797b4f812bef72a1a893d6f6e8e", 0x1a}, 0x60) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000013c0)=0x14) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x12, 0x1f, 0x1, "999b4068cb64522c71bafdaad013392ba093ed2f85542e8ccf7645050f62a94a3510314981f6072e7cd9d4eba22d6fea4cca26854ee00f7a3d18f9c00bb10181", "b52a79710426c24e57c578c00ffb7638da5e1d1c10681e6b2b1a6114f1f6ebeebe0fde78b7095dc99fecf142b42f713b7539b1f4f369d1b7812b307e1f36a2f5", "eaaa887f8be04fa6668f407c74fe407b2be3b03c64499a5cbdabc4ffa62f71ee", [0x6, 0x5]}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000001500)={0x0, 0x2, 0x3}) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000001540)={0xe0}) write$FUSE_INIT(r0, &(0x7f0000001580)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x5, 0x20800080, 0x7f, 0x100, 0x4, 0x8, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000001600)={{0x3, 0x1, 0x72, 0x80000000, 0x7, 0x27}, 0x24f, [0x8, 0x7, 0x69, 0x2, 0xa5, 0x1, 0x0, 0x100, 0x1, 0x200, 0x2, 0xffff7fff, 0xffffffff, 0x8, 0x3, 0x7, 0x3, 0x8e, 0x8, 0x2, 0x3, 0x4, 0x0, 0x10, 0x4, 0x9, 0x3, 0x4, 0x4, 0x101, 0xb, 0x1, 0x1, 0x101, 0x8, 0x1, 0x4, 0x5f75, 0x4f, 0x7f, 0x9, 0x9, 0x1, 0x9, 0x1, 0xfffffe00, 0x5, 0x3, 0x2, 0x3, 0xd6e4, 0x712, 0xd0, 0x2, 0x101, 0x9, 0x2, 0x6, 0x2, 0x7, 0x3, 0x10, 0xf4, 0xf, 0x3, 0xe8, 0x7ff, 0x101, 0x5, 0x5e61, 0x6, 0x10000, 0x7, 0x4, 0x6, 0xe, 0x7fffffff, 0x80000000, 0xb9cd, 0x6, 0x1, 0x80000001, 0x200, 0x8, 0x8, 0x3, 0x1a0, 0x9, 0xbf, 0x3, 0x2, 0x400, 0x2df, 0x5, 0x401, 0x5, 0x2a671aa0, 0x4, 0x6, 0x6, 0xc43e, 0x6, 0x67, 0x8, 0x10000, 0x1, 0x5, 0x1, 0x3, 0xb, 0xc, 0x2, 0x40, 0x7, 0x5540, 0x4, 0x6, 0xf, 0xffffffff, 0xbf, 0x6, 0x3, 0x9, 0x4, 0x8, 0x5, 0x5, 0x10, 0x0, 0x7fff, 0x1, 0x954, 0xb7, 0x2, 0x100, 0x8, 0x5, 0xfff, 0x0, 0x4, 0x6, 0x5, 0x3, 0xb, 0x4, 0xff, 0x5, 0x0, 0x7, 0x3, 0x9, 0x6, 0x2, 0x43, 0x7, 0x7f, 0x101, 0x9, 0x2, 0x4, 0x80c3, 0x655, 0x9, 0x5, 0xa0, 0x4, 0x6, 0x4, 0x9, 0xfff, 0x0, 0x81, 0x8, 0x0, 0x101, 0x4, 0x7, 0x0, 0x7, 0x0, 0x4, 0x1ff, 0x3, 0x2, 0x4, 0x73f, 0x5, 0x1, 0x2, 0x6, 0x3, 0x6, 0x1, 0x6, 0x0, 0x80, 0x5, 0x2, 0xe27e, 0x100, 0x4129, 0x5, 0x9, 0x1ff, 0x4, 0x0, 0x6, 0x2, 0x9a, 0x7, 0x708c9d23, 0x80000001, 0x4, 0x4, 0x2, 0x2, 0x3, 0x9, 0x3, 0x2ef, 0xfffffffe, 0xff, 0x8, 0x9, 0x7, 0x6, 0x8, 0x7f, 0x100, 0x1, 0x6, 0x2, 0x3, 0x40, 0x8, 0x300, 0x9, 0x3, 0xc, 0xa, 0x742e, 0x9d0, 0x3, 0x10000, 0xff, 0xe, 0xa8, 0xc715, 0x1, 0x80000001, 0x5b85619f, 0xbb85, 0xfffffc00, 0x2, 0x7ff, 0x0, 0x7ff, 0x1ff, 0x6, 0xfff, 0x9c3, 0x0, 0x4, 0x4, 0x8, 0x7, 0x8001, 0x6, 0x95c, 0x8000, 0x40000000, 0x200, 0x400, 0xffffffff, 0x2, 0xffff3b08, 0xb, 0x3, 0x3, 0x0, 0x100, 0x400, 0xb69, 0xfffffffd, 0x4, 0x80000001, 0x5, 0xffffffff, 0x80, 0xfffffffe, 0x2, 0x10000, 0x1ff, 0x3, 0x8, 0x8, 0x8, 0x7, 0x1, 0x80, 0x9, 0x6, 0x80, 0x2a, 0x401, 0x7, 0x9, 0x5, 0xf627, 0x40, 0x0, 0x101, 0x5, 0x5, 0x8, 0x7fff, 0x7fff, 0x6, 0x400, 0xfffffff8, 0xd, 0xfffffffa, 0x0, 0xc, 0x9, 0x1, 0x8, 0x5, 0xfffffffe, 0x7, 0x2d, 0x0, 0x0, 0x8, 0x7, 0x9, 0x5e, 0xffff8000, 0xfff, 0x2, 0x3, 0x5, 0x1, 0xe, 0x2, 0x8, 0x7, 0x7, 0x0, 0x2, 0x7, 0x326b7ecd, 0x3, 0x2, 0x81, 0x6, 0x8000, 0x1, 0x2, 0x50d, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7fff, 0x1b05, 0xdab1, 0x4, 0x9, 0x7, 0xe3, 0xfffffff5, 0xf5, 0x40c, 0x328, 0x6, 0x2, 0x7, 0x3be, 0x50, 0x8, 0x7, 0xf3cbead, 0xbbc, 0x5, 0x9, 0x100, 0x5, 0x10001, 0x3, 0x6, 0x800, 0x4fc, 0x7, 0x5, 0x0, 0xd31, 0x8, 0x2, 0x7fffffff, 0x3, 0x80, 0x3, 0x355, 0x2, 0x0, 0x6, 0x8001, 0x25, 0x8, 0x8, 0xfff, 0x9, 0xd52, 0x7, 0x7, 0xfffffffe, 0x4, 0x5, 0x8, 0xff, 0x8000, 0x7ff, 0x7, 0x2, 0xffffffff, 0x6, 0x72, 0xa, 0x2, 0x0, 0x11, 0x4, 0x1, 0x3, 0x6, 0x5, 0x1e3, 0x7, 0x1, 0x1, 0x2, 0x4, 0x7, 0x8001, 0x7, 0x5, 0x0, 0x8001, 0x1, 0x8, 0x10001, 0xfffffffe, 0x5, 0x1, 0x401, 0x3, 0x1ff, 0x7, 0x4, 0x4, 0x1, 0x80000000, 0xfffffffa, 0x7, 0x2, 0xc8, 0x8, 0x3, 0x5, 0x3, 0x101, 0x1, 0xb25, 0x5, 0x7ff, 0x9, 0x6, 0xfff, 0x1, 0x9, 0x2, 0x2, 0x1, 0x4, 0x7, 0x5, 0x1, 0x6, 0x7, 0x7, 0x2, 0x2, 0xfffffffd, 0x1, 0x2, 0x8eb, 0x5, 0x2, 0x9, 0x0, 0x7, 0x3, 0x4, 0x4, 0x7, 0x6, 0x7, 0x4, 0x9, 0xffffff80, 0x0, 0x5, 0x9, 0x6, 0xad9623b, 0x0, 0xfffffffc, 0x8, 0x1000, 0x0, 0x9, 0x7, 0x200, 0x1f12, 0x5, 0x7, 0xff, 0x9, 0xfffffffb, 0x10001, 0xb, 0x0, 0x2, 0x6, 0xb3a, 0xe, 0x3, 0x7, 0x3, 0x9, 0x5, 0x4, 0x7aaf1596, 0xe, 0x0, 0xfffffff7, 0x1, 0x0, 0xa, 0xf, 0x80, 0x11600, 0x8, 0x5, 0x7fffffff, 0x1, 0x0, 0xffff8001, 0x80000001, 0x9, 0x401, 0x9, 0x0, 0x7ff, 0x8, 0x5, 0xb3, 0x80, 0x9, 0x9, 0x7, 0x1, 0x6, 0xe, 0x9, 0x7, 0x2, 0x2, 0x7ff, 0x7, 0x8, 0x7, 0x1443655b, 0x1, 0x0, 0xfff, 0xfffff577, 0x13f, 0xd8, 0x9, 0xfffffff7, 0x8, 0x0, 0x200, 0x7fffffff, 0x3a, 0x7fff, 0x544a, 0x7, 0x0, 0x0, 0x5, 0x8b91, 0x1, 0x8, 0x5, 0x1ff, 0x4, 0x3, 0x1, 0x3ff, 0x94b, 0x8001, 0x2, 0x6d238f9a, 0x80000000, 0xb, 0x8, 0x3, 0x5920, 0x9, 0x3ff, 0x1ff, 0x9, 0x4, 0xc, 0xae3c, 0x1, 0x4db7, 0x100, 0xf, 0xfff00000, 0x40, 0xfffffffa, 0x1, 0xfffffffc, 0x2, 0x100, 0xffff, 0x10000, 0x1ff, 0x7, 0x7, 0x8, 0x5, 0x400, 0x4, 0xfff, 0x5, 0x0, 0x5, 0x401, 0x3a6b, 0x5, 0x2, 0xfff, 0x14000, 0x50, 0x8001, 0x1000, 0x8, 0xa5, 0x4, 0x2, 0x1ff, 0x3, 0x40, 0x6, 0xf, 0x3, 0x40, 0x4, 0xe, 0x10001, 0x2, 0x80000000, 0xe376, 0x100, 0x7, 0xfff, 0xffffff3d, 0x8001, 0xe11, 0xba, 0x9, 0xede, 0x9, 0x7fff, 0x0, 0x101, 0x9, 0xfff, 0xff, 0x4, 0x7, 0xfffff001, 0x1, 0xa000, 0x4, 0x6, 0x401, 0x4, 0x0, 0x6, 0x5, 0x8, 0x1, 0x0, 0x8, 0x4, 0x8000, 0xd049, 0x1, 0xc, 0x8001, 0x6, 0x6, 0x7, 0x2, 0x6, 0x7, 0x8, 0x96, 0xe, 0x3, 0x4, 0x965, 0x7, 0x3, 0x9, 0x92f, 0xe, 0x0, 0x9, 0x6b6c, 0x7, 0x3, 0xf934, 0x80, 0x6, 0x7, 0x2, 0x0, 0x9, 0x7, 0x0, 0x8, 0xbaa, 0x2, 0x8, 0x8, 0x2, 0x0, 0x7f, 0x100000, 0xa, 0x0, 0xffff6531, 0x6, 0xb3, 0x6, 0x8001, 0x0, 0x1, 0x80, 0x1, 0xb, 0xb, 0xd, 0x9, 0x4, 0x7, 0x9, 0x0, 0xfffffffa, 0x8, 0x2, 0xffff, 0x4, 0x93, 0x0, 0xf0, 0x401, 0x0, 0x8, 0x4, 0x8, 0x7ae, 0x6, 0x889, 0x2, 0x716a, 0x4, 0x1, 0x4ee7, 0x0, 0x7, 0x800, 0x7, 0x3bb, 0xff, 0x1, 0x7, 0x1, 0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0xb03, 0x2, 0x78e, 0x2, 0x80000001, 0x6, 0x8, 0xd, 0x2, 0xc, 0x1, 0x8, 0xc, 0x8, 0x69, 0xc, 0x6, 0x8, 0x1, 0x5, 0xfffffff9, 0xdc, 0x0, 0xfffffffa, 0x6, 0x5, 0xfffffffb, 0x0, 0x0, 0x24b4, 0x3, 0x6b, 0x6, 0xb, 0x9, 0xd, 0x2, 0x4, 0x9, 0x0, 0x7798, 0x2f, 0x8, 0x1, 0x9, 0x6, 0xd, 0xffffffc0, 0x1, 0x469238a2, 0xc1ff, 0x7, 0x75b, 0x7fff, 0x0, 0x4, 0x8, 0xa, 0x7, 0x7, 0x0, 0x10001, 0x1, 0x8, 0x7, 0x7a41, 0x9, 0x5, 0xfffeffff, 0xc85, 0x1, 0x0, 0x7fffffff, 0x0, 0x80000000, 0x1, 0x4, 0x4, 0x7, 0x9, 0x8001, 0x100, 0xfffffffb, 0x7, 0x8001, 0x4, 0x6, 0x8, 0x0, 0x1, 0x2, 0x0, 0x6, 0x8, 0x7, 0x1, 0x6, 0x6, 0x6, 0x3, 0xffffff01, 0x6, 0x1c05, 0x1, 0x1, 0x9, 0x1, 0x5, 0x36, 0x1000, 0x7, 0x4, 0x5ee2, 0x6, 0x1, 0x2, 0x2, 0x8, 0x8001, 0x2, 0x8, 0x4, 0x8, 0x2, 0x5, 0x4, 0x1, 0xfffffffb, 0x1, 0x9, 0x6b2, 0x8, 0x400, 0x4, 0xd, 0x3, 0x607c, 0xac, 0x2, 0x7ff, 0xfffffffa, 0x8, 0x2893, 0x4, 0x8, 0x4, 0x7, 0x9, 0x9, 0x6, 0x8, 0x6, 0x0, 0x6, 0xffffffff, 0x4, 0x81, 0x3, 0x7fffffff, 0x8, 0x2, 0xffffffff, 0x9, 0x5, 0x9, 0x4, 0x7, 0x9, 0x1, 0x0, 0x52c, 0x0, 0xd, 0x9, 0xe353, 0x1, 0x1, 0xb3e, 0x3, 0x4, 0x2, 0x101, 0xffffffff, 0x5, 0x3ff, 0x977f, 0x68d0, 0xfffff843, 0x2, 0x1, 0x5, 0xff, 0x0, 0x0, 0x9, 0x3, 0x5, 0x4, 0x3, 0xe149, 0x8, 0x51fa, 0x3, 0x6, 0x4, 0x4c5, 0x9, 0x400, 0x4]}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000002640)={{0x2, @name="d21cf12ea15a1414a3697f31b86cfce428b78f63e0cd4a84203d24df9e134766"}, "36af2670cc5a8c4892bbff3fac26b6499c9beb709b1c7a24a50a3e88e9d873d4", 0x2}) write$6lowpan_control(r0, &(0x7f0000002740)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 2m30.993451348s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x161804, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000200)=""/224, 0x0, 0xe0, 0x1}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0x4}, {0x0}], 0x2}}], 0x2, 0x20004810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000009dc0)={0x2, 0x4e21, @broadcast}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x1) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4) close(0x3) sendmsg$nl_generic(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={0x14, 0x36, 0x701, 0x0, 0x2, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 2m30.72158519s ago: executing program 1 (id=679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) mkdir(&(0x7f0000000000)='./file1\x00', 0x74) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x77, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xb082, 0x5, 0x200, 0x9, 0x2, 0x4, 0x7, 0x8, 0x0, 0x3, 0xf17, 0x547875b, 0x1, 0x10000, 0x90, 0x7, 0x4, 0xcc7, 0x5f, 0xd8, 0x8, 0x200008, 0x2, 0x41, 0x2, 0x8}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000095000015a8c680b4aab9d4624000f9ff0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="80000000010201040000000000000000020000002400028014"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x400300) r9 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m29.901091978s ago: executing program 1 (id=682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000004100000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 2m29.139758039s ago: executing program 32 (id=682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000004100000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 9.552957197s ago: executing program 4 (id=1180): r0 = syz_open_dev$audion(0x0, 0x0, 0x8000) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) r3 = dup(r1) read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020) inotify_rm_watch(r3, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) syz_clone3(&(0x7f0000000700)={0x300210000, &(0x7f0000000040), &(0x7f0000000200)=0x0, &(0x7f0000000340), {0xe}, &(0x7f0000000440)=""/83, 0x53, &(0x7f0000000500)=""/219, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, {r0}}, 0x58) prlimit64(r4, 0x8, &(0x7f0000000000)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$alg(0x26, 0x5, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB='veth1_to_ba|adv26'], 0x12) r6 = gettid() r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000080000000800000006"], 0x48) r8 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x80010, r8, 0x4c4e5000) r9 = socket(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r9}, 0x20) recvfrom$rose(r9, &(0x7f0000000600)=""/211, 0xd3, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x8, 0x10001, 0x1, {{0x18, 0x4, 0x0, 0x2a, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x94, 0x2}, @rr={0x7, 0x1f, 0x39, [@empty, @loopback, @broadcast, @multicast2, @empty, @empty, @multicast1]}, @ssrr={0x89, 0x1b, 0xd4, [@dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @empty]}, @noop, @rr={0x7, 0xf, 0xd8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2]}]}}}}}) 9.49573396s ago: executing program 0 (id=1181): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008f9ff010c00000004800000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000005000000feffffff0000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000200)="e0e14571e640722249adc11cd68d19768a7e6beb1b381a0d01f27ee56f4e5b974ac0f1e915436e0c3ddafc3a152f512f1616715ddce18592c6d61833d2f0487e0f216984638751fecc707c37d613d1c53dea"}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x200000) recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2}, 0x20000}], 0x1, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r7, 0x4068aea3, &(0x7f0000000280)={0xdc, 0x0, 0x7a}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 7.914011825s ago: executing program 4 (id=1185): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f00}, 0x48) 7.889321478s ago: executing program 2 (id=1186): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffd, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x80) 7.732949265s ago: executing program 4 (id=1189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5}, 0x11) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$dsp(r9, &(0x7f0000000200)=""/133, 0x85) syz_usb_connect$uac1(0x0, 0x94, 0x0, 0x0) syz_io_uring_complete(0x0) 6.946239605s ago: executing program 2 (id=1190): shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004000000000000000003000000000000000000030000000002000000000000000000000004"], 0x0, 0x4a}, 0x28) 5.548955371s ago: executing program 2 (id=1195): socket$inet_tcp(0x2, 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000df2500000000", @ANYRES32=0x0, @ANYBLOB="850b0100000000001400030076657468305f746f5f626174616476000a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffff94b21dece9d5ffffffff000000000000000000000000000000000000040000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c000004000000007f000001000002000000400000000000020000000403000000000000000021c72dc6a31f84aab63e3cff7cfe214827c71e578a73e630f0a79e03be7ff050a46fc904c6ff45f0d4654c7f4c93cec7"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 4.927974403s ago: executing program 0 (id=1197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_enter(r1, 0x5994, 0x9edf, 0x42, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000240)={0x18, r6}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) 4.732204774s ago: executing program 2 (id=1199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000840)={0x40, 0x4, 0x2, {0x2, 0x8}}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x2, 0x40, "8a539132", "32215db1"}}, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000011c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x4000}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 4.079772763s ago: executing program 4 (id=1200): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000010000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 3.935710698s ago: executing program 0 (id=1201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='attr/exec\x00') syz_usb_disconnect(0xffffffffffffffff) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x111002, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x15, "f9808039360bcc2b16d413871108db2bf1b8e11467"}, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x0, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) dup3(r5, r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.419614128s ago: executing program 3 (id=1203): syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_page_alloc\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000400)=@fd={0x0, 0xc, 0x4, 0x8, 0x1, {}, {0x1, 0x1, 0x5, 0x3, 0x30, 0x71, "b75a9956"}, 0xe600, 0x4, {}, 0x1cd}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x8a) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0xa, r4, 0x0, r5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r3, &(0x7f0000000f80)={0xa, 0x0, 0x3, @remote, 0x3}, 0x1c) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r8, 0x4004510d, &(0x7f0000000080)=0x7fff) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff00100004000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A\f\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3.388435977s ago: executing program 4 (id=1204): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00003f000000000000000000000000000014002000000000"], 0x6c}}, 0x0) 3.364738851s ago: executing program 5 (id=1205): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) getpid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403", 0x16}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {0x0}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000001600000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d7", 0x7f}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x6}}], 0x3, 0xf000000) 2.087841417s ago: executing program 2 (id=1206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000200000000000000000002000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000003000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000a00000c0015"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 2.080627862s ago: executing program 3 (id=1207): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000380)=""/204, &(0x7f00000000c0)=0xcc) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000380)=""/204, &(0x7f00000000c0)=0xcc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffc8e, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001", @ANYRES64=r1], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20040850) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.070020682s ago: executing program 4 (id=1208): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000005c0)={[], [{@appraise}, {@obj_role={'obj_role', 0x3d, 'nodioread_nolock'}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, 'nodioread_nolock'}}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvbH40aapJi6j1YBdEWtAmTdpKEQ/tVUqoP/DixdiktXbbhiaiqUJTqBdBvIgInjxYwT9Ci732pCB48OJJCkWlR8GV2cyk2exufmyTbOx8PrDNzHsz8950882befvebACFVU7/KUXsjYjpJGIwmV/M644ss7yw3b2/PzqdvpKoVl/7M4kkS8u3T7KfA9nOfRHx049J7OlqLHdm7sr5iUpl6nK2PjJ7YXpkZu7KwXMXJs5OnZ26OPbC2LGjR44eGz3U1nldbZJ28vq77w9+Mv7mN1/9k4x++9t4Esfj5WzDpecREb+U2iq1XjnKtf+TpDFr4NgGHH876Mp+T5a+xUl3ByvEuuTvX09EPBGD0RX337zB+PiVjlYO2FTVJKIKFFQi/qGg8uuA/N5+2X1wbMR9MLA93T2x0AHQGP/dC32D0VfrG9h5L4ml3TpJRLTXM1dvV0TcvjV+/cyt8evR2A8HbKL5axHxZLP4T2rxPxR9MVSL/1Jd/KfXBaeyn2n6q22Wv7yruDH+D7d5ZGA1C/Hft2L8R4v4f2tJ/L/dZvnl+4vv9NfFf3+7pwQAAAAAAACFdfNERDzf7PP/0uL4n2gy/mcgIo5vQPnlZeuNn/+X7mxAMUATd09EvNR0/G8pH/071JUtPVIbD9CTnDlXmToUEY9GxIHo2ZGuj65QxsFP93zZKq+cjf/LX2n5t7OxgFk97nTvqN9ncmJ24kHPG4i4ey3iqabjf5PF9j9p0v6nfw+m11jGnmdvnGqVt3r8A5ul+nXE/qbt//2nViQrP59jpHY9MJJfFTR6+sPPvm9Vfrvx7xET8ODS9n/nyvE/lCx9Xs/M+ss4PNddbZXX7vV/b/J67ZEzvVnaBxOzs5dHI3qTk11pal362PrrDA+jPB7yeEnj/8AzK/f/Nbv+74+I+WXHTv6qn1Oce/zfgd9b1cf1P3ROGv+T62r/178wdmPoh1blr639P1Jr6w9kKfr/YMEXeZj21qc3RuFiQNdlbXV9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBhUIqIXZGUhheXS6Xh4YiBiHgsdpYql2Zmnztz6b2Lk2le7fv/S/k3/Q4urCf59/8PLVkfW7Z+OCJ2R8TnXf219eHTlyqTnT55AAAAAAAAAAAAAAAAAAAA2CYGWsz/T/3R1enaAZuuu9MVADqmSfz/3Il6AFtP+w/FJf6huMQ/FJf4h+IS/1Bc4h+KS/xDcYl/AAAAAAB4qOzed/PXJCLmX+yvvVK9WV5PR2sGbLZSpysAdIxH/EBxGfoDxeUeH0hWye9rudNqe65k+vQD7AwAAAAAAAAAAAAAhbN/r/n/UFTm/0Nxmf8PxZXP/9/X4XoAW889PhCrzORvOv9/1b0AAAAAAAAAAAAAgI00M3fl/ESlMnV5Ixd2xBo3/m4zSm934Y3tUY2tXKhWq1fT34LtUp//+UI+FH6LS++OtW2cz/Vb25E79zcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo918AAAD//x99I+M=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000003c0)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r3, &(0x7f0000000c40), 0x0, 0x10000, 0x0) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x4004000) futex(&(0x7f0000000040)=0x2, 0xa, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000440)=0x2, 0x1) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x200040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4c804) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x11, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000540)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000400)=@x86={0x1, 0x2, 0x5, 0x0, 0x7, 0x3, 0x3, 0x2, 0x7, 0x7, 0xf, 0x2, 0x0, 0x401, 0xb1a, 0xe, 0x1, 0x5, 0x3, '\x00', 0x2, 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.914363826s ago: executing program 5 (id=1209): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000500008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.894089591s ago: executing program 2 (id=1210): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xf0f041, 0x0, '\x00', @value64}}) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x7e) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x9, 0xfc, {0xfc, 0x22, "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"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0x16, 0xc, "f5b6675596fba799f6b706c6"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6e}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x81, 0x2, "24ab"}, &(0x7f0000000340)={0x20, 0x82, 0x1, "ee"}, &(0x7f0000000380)={0x20, 0x83, 0x1, '\b'}, &(0x7f0000000400)={0x20, 0x84, 0x1, ')'}, &(0x7f0000000440)={0x20, 0x85, 0x3, '4fP'}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="5400000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.827158217s ago: executing program 3 (id=1211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002048000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000001007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.771982509s ago: executing program 5 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f8ff8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.77166729s ago: executing program 3 (id=1213): socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x3}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) 1.734247594s ago: executing program 5 (id=1214): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x17c1, 0x2000, [0x2], [0x3, 0x7]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x3, "110000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = open(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x359d42, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="00003f0000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000080)=@userptr={0x1, 0x5, 0x4, 0xfc6634500d8de9fd, 0xf, {0x77359400}, {0x4, 0x0, 0x4, 0x1, 0x2c, 0x8, "247d31e3"}, 0x5, 0x2, {0x0}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) syz_genetlink_get_family_id$nl80211(0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 1.527107845s ago: executing program 3 (id=1215): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) writev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002580)="d6", 0x1}], 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120002, 0x9, 0xfe00000000, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x1, 0x8800}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7f, 0xba}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000600)={0x1, @vbi={0x4, 0x8, 0x3, 0x34325842, [0x8000, 0xffffff7f], [0x4, 0xffffffc4], 0x2}}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x7ff, 0x401, 0x80, 0x0, [{0x6, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x2, 0x10, '\x00', 0x6}, {0x8a, 0x7f, 0x9d, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x3, 0x8, 0x1, '\x00', 0x5}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0x0, 0x2, 0x73, '\x00', 0xff}, {0x1, 0x6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x6, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0x1, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x4, 0xa, '\x00', 0xf8}, {0x8, 0x2, 0x1, '\x00', 0xf7}, {0x6, 0x6, 0x1, '\x00', 0xa}, {0x1, 0x0, 0x1, '\x00', 0x8}, {0x12, 0xe, 0x4, '\x00', 0x1}]}}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000000c0)) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="98"]) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000003d007000"/24]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000040)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.015787464s ago: executing program 0 (id=1216): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fdf09b5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd8b}, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfff}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000040)=0x3, 0xfffffffffffffd03) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x6f031b51b2e0b748) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@local, 0x1, 0x794, 0x4623, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x4) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000100)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000fffbe0000868c266000000fffffffc000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/237], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}]}}}}}}}, 0x0) 966.995037ms ago: executing program 5 (id=1217): syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_page_alloc\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000400)=@fd={0x0, 0xc, 0x4, 0x8, 0x1, {}, {0x1, 0x1, 0x5, 0x3, 0x30, 0x71, "b75a9956"}, 0xe600, 0x4, {}, 0x1cd}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x8a) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0xa, r4, 0x0, r5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r3, &(0x7f0000000f80)={0xa, 0x0, 0x3, @remote, 0x3}, 0x1c) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r8, 0x4004510d, &(0x7f0000000080)=0x7fff) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="110000000400000004000000ff00100004000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A\f\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 832.044658ms ago: executing program 3 (id=1218): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x1980, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000400)="7dbbda87380f4ef9ae1b68cd9067f990ff3c6215fc85b8ed2961934588fa5397f9e9d73d8fa255be607862c072217abbb50132a1343ead67ae706e2125dbdd8f8eac09c58e57110b8b59c8f01b7f81ae686f0cbe89dbdf1f40a7051f0a6d3192e8ff8cabb65530600bcbb3f2d11427caae69b8df7a373bbfd4dae361ab198847fef229495129cee5d326cce8eb77a94c34ee6f4f965049c0103558d3ea65757c88d6", 0xa2}], 0x1, 0x0, 0x0, 0x54}}], 0x1, 0x3037091e08716209) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0xffffffff80000000) r5 = syz_io_uring_setup(0x1da1, &(0x7f0000000140)={0x0, 0xf46a, 0x20, 0x22}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r8 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x80002, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f0000000d40)="01", 0x1) syz_io_uring_setup(0x6bd, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup2(r11, r12) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 193.196795ms ago: executing program 5 (id=1219): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbc, 0xf1, 0x4, 0x40, 0xc45, 0x628f, 0x1f44, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe9, 0xea, 0x2d}}, {{0x9, 0x4, 0xd9, 0x0, 0x0, 0x18, 0xe0, 0x1f}}]}}]}}, 0x0) 103.846546ms ago: executing program 0 (id=1220): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003800000000ff019078ac1e0001ac1414aa030490781200183f2500000000000000000600007f0100017f000001e2176371ae9b0999b26c35a31d"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = dup2(r2, r1) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, 0x0) recvfrom$x25(r2, 0x0, 0x0, 0x400001e2, &(0x7f0000000380), 0x12) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) syz_io_uring_setup(0x21ad, &(0x7f0000000200)={0x0, 0x8eac, 0x8000, 0x3, 0x1aa}, &(0x7f0000000140), 0x0) 0s ago: executing program 0 (id=1221): socket$unix(0x1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x800000, 0x4, 0x16e, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2, 0x0, 0x10000}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x106, 0x9}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x0, 0x2, 0x7e) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2081) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) recvmmsg$unix(r3, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000040)=""/27, 0x1b}], 0x2, &(0x7f0000000740)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{&(0x7f0000000a80), 0x6e, 0x0, 0x0, &(0x7f0000000ec0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/200, 0xc8}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000056c0), 0x0, &(0x7f0000001e00)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/183, 0xb7}, {&(0x7f0000005100)=""/135, 0x87}, {&(0x7f00000051c0)=""/202, 0xca}, {&(0x7f00000052c0)=""/142, 0x8e}], 0x5}}], 0x8, 0x10062, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x1, r5, 0x1, 0x8}, 0x14) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) kernel console output (not intermixed with test programs): to 1024 [ 201.581296][ T6044] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.639587][ T6044] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 201.698510][ T6044] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 201.718634][ T43] vhci_hcd: vhci_device speed not set [ 201.765791][ T6044] usb 2-1: config 179 interface 65 has no altsetting 0 [ 201.796979][ T6044] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 201.835674][ T6044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.949081][ T6044] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 202.109642][ T7428] overlayfs: missing 'lowerdir' [ 202.116817][ T7455] ubi: mtd0 is already attached to ubi31 [ 202.665947][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 203.058087][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'. [ 203.138678][ T9] usb 5-1: device descriptor read/64, error -71 [ 203.419099][ T7474] netlink: 156 bytes leftover after parsing attributes in process `syz.2.471'. [ 203.710997][ T5932] usb usb42-port1: attempt power cycle [ 203.776653][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.958734][ T9] usb 5-1: device descriptor read/64, error -71 [ 204.046227][ T43] usb 2-1: USB disconnect, device number 7 [ 204.046226][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 204.658984][ T9] usb usb5-port1: attempt power cycle [ 204.742274][ T5932] usb usb42-port1: unable to enumerate USB device [ 205.388538][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 205.438873][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 205.456207][ T9] usb 5-1: device descriptor read/8, error -32 [ 206.005602][ T7503] ubi: mtd0 is already attached to ubi31 [ 208.908695][ T5932] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 208.944704][ T7537] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 209.058504][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 210.329251][ T5932] usb 5-1: config 0 has no interfaces? [ 210.360081][ T5932] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 210.388263][ T5932] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 210.397247][ T5932] usb 5-1: Product: syz [ 210.407072][ T5932] usb 5-1: Manufacturer: syz [ 210.417389][ T5932] usb 5-1: SerialNumber: syz [ 210.441086][ T5932] usb 5-1: config 0 descriptor?? [ 210.557774][ T7551] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 211.487627][ T10] usb 5-1: USB disconnect, device number 8 [ 211.847052][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 212.895727][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 212.953010][ T7583] veth0: entered promiscuous mode [ 212.969335][ T7583] veth0: left promiscuous mode [ 213.135188][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 213.158869][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.202164][ T7593] vlan2: entered promiscuous mode [ 213.207274][ T7593] batadv0: entered promiscuous mode [ 213.318563][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 213.334003][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.358543][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.375029][ T7598] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 213.384773][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.429205][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.045767][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.080656][ T10] usb 2-1: Product: syz [ 214.085327][ T10] usb 2-1: Manufacturer: syz [ 214.099773][ T10] usb 2-1: SerialNumber: syz [ 214.896882][ T10] usb 2-1: 0:2 : does not exist [ 215.053414][ T7586] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 217.578940][ T10] usb 2-1: USB disconnect, device number 8 [ 218.634514][ T7649] vfat: Bad value for 'umask' [ 218.697480][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.618728][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 219.977304][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 220.005524][ T43] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 220.047059][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.088256][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.117558][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.177000][ T43] usbtmc 1-1:16.0: bulk endpoints not found [ 220.426573][ T5932] usb 1-1: USB disconnect, device number 9 [ 220.638571][ T43] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 220.800003][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.811235][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.821615][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.830728][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.043608][ T43] usb 3-1: config 0 descriptor?? [ 221.053751][ T43] hub 3-1:0.0: USB hub found [ 221.543435][ T43] hub 3-1:0.0: 1 port detected [ 223.038756][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 223.384973][ T43] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 223.648968][ T43] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 223.667917][ T43] usbhid 3-1:0.0: can't add hid device: -32 [ 223.674198][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 224.006718][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 224.139065][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.288253][ T6044] usb 3-1: USB disconnect, device number 7 [ 224.298044][ T9] usb 1-1: config 253 has an invalid interface number: 140 but max is 0 [ 224.322969][ T9] usb 1-1: config 253 has no interface number 0 [ 226.038714][ T9] usb 1-1: string descriptor 0 read error: -71 [ 226.045086][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 226.054271][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.067158][ T9] usb 1-1: can't set config #253, error -71 [ 226.078243][ T9] usb 1-1: USB disconnect, device number 10 [ 226.352597][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 226.739156][ T7716] input: syz1 as /devices/virtual/input/input19 [ 226.991354][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 227.014083][ T7720] veth0: entered promiscuous mode [ 227.306290][ T7720] veth0: left promiscuous mode [ 227.324646][ T7724] netlink: 'syz.2.548': attribute type 10 has an invalid length. [ 227.353348][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.361081][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.375268][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.382506][ T7724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.390020][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.397118][ T7724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.470708][ T7730] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 227.481882][ T7730] qnx6: wrong signature (magic) in superblock #1. [ 227.488578][ T7730] qnx6: unable to read the first superblock [ 227.505850][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 227.508877][ T7724] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.187264][ T6044] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 228.401366][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 228.417371][ T7732] vlan2: entered promiscuous mode [ 228.590528][ T6044] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.698482][ T6044] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.713251][ T6044] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.810769][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 229.037581][ T6044] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.071075][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 229.080558][ T6044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.094367][ T6044] usb 5-1: Product: syz [ 229.108508][ T6044] usb 5-1: Manufacturer: syz [ 229.113218][ T6044] usb 5-1: SerialNumber: syz [ 229.170177][ T6044] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 229.177075][ T6044] cdc_ncm 5-1:1.0: bind() failure [ 229.375296][ T6044] usb 5-1: USB disconnect, device number 9 [ 230.049223][ T9] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 230.298791][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.357523][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.414638][ T9] usb 2-1: string descriptor 0 read error: -22 [ 230.437410][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.470568][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.813729][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.838531][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 231.508890][ T7782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.565'. [ 231.706641][ T7785] input: syz1 as /devices/virtual/input/input20 [ 231.882885][ T43] usb 2-1: USB disconnect, device number 9 [ 232.081740][ T7787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.568'. [ 233.390687][ T7803] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 234.041732][ T7803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.220087][ T7840] FAULT_INJECTION: forcing a failure. [ 236.220087][ T7840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.240431][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(full) [ 236.240453][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.240464][ T7840] Call Trace: [ 236.240471][ T7840] [ 236.240479][ T7840] dump_stack_lvl+0x189/0x250 [ 236.240516][ T7840] ? __pfx____ratelimit+0x10/0x10 [ 236.240539][ T7840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.240559][ T7840] ? __pfx__printk+0x10/0x10 [ 236.240583][ T7840] ? __might_fault+0xb0/0x130 [ 236.240622][ T7840] should_fail_ex+0x414/0x560 [ 236.240646][ T7840] _copy_from_iter+0x1de/0x1790 [ 236.240682][ T7840] ? rcu_is_watching+0x15/0xb0 [ 236.240712][ T7840] ? kmalloc_reserve+0xbd/0x290 [ 236.240738][ T7840] ? __pfx__copy_from_iter+0x10/0x10 [ 236.240764][ T7840] ? __build_skb_around+0x262/0x3f0 [ 236.240793][ T7840] ? netlink_sendmsg+0x642/0xb30 [ 236.240817][ T7840] ? skb_put+0x11b/0x210 [ 236.240835][ T7840] netlink_sendmsg+0x6b2/0xb30 [ 236.240869][ T7840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.240897][ T7840] ? aa_sock_msg_perm+0xf1/0x1d0 [ 236.240920][ T7840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.240937][ T7840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.240964][ T7840] __sock_sendmsg+0x21c/0x270 [ 236.240989][ T7840] ____sys_sendmsg+0x505/0x830 [ 236.241012][ T7840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.241037][ T7840] ? import_iovec+0x74/0xa0 [ 236.241056][ T7840] ___sys_sendmsg+0x21f/0x2a0 [ 236.241076][ T7840] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.241126][ T7840] ? __fget_files+0x2a/0x420 [ 236.241141][ T7840] ? __fget_files+0x3a0/0x420 [ 236.241167][ T7840] __x64_sys_sendmsg+0x19b/0x260 [ 236.241187][ T7840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.241214][ T7840] ? __pfx_ksys_write+0x10/0x10 [ 236.241242][ T7840] ? do_syscall_64+0xbe/0xfa0 [ 236.241269][ T7840] do_syscall_64+0xfa/0xfa0 [ 236.241290][ T7840] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.241313][ T7840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.241330][ T7840] ? clear_bhb_loop+0x60/0xb0 [ 236.241350][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.241367][ T7840] RIP: 0033:0x7fe9baf8eba9 [ 236.241386][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.241400][ T7840] RSP: 002b:00007fe9bbe10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.241421][ T7840] RAX: ffffffffffffffda RBX: 00007fe9bb1d5fa0 RCX: 00007fe9baf8eba9 [ 236.241434][ T7840] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 236.241444][ T7840] RBP: 00007fe9bbe10090 R08: 0000000000000000 R09: 0000000000000000 [ 236.241454][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.241463][ T7840] R13: 00007fe9bb1d6038 R14: 00007fe9bb1d5fa0 R15: 00007fff128be4b8 [ 236.241491][ T7840] [ 236.699976][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.801306][ T7853] netlink: 260 bytes leftover after parsing attributes in process `syz.2.588'. [ 236.812769][ T7854] vfat: Bad value for 'umask' [ 238.030295][ T7868] vfat: Bad value for 'umask' [ 238.254606][ T7872] geneve2: entered promiscuous mode [ 238.260156][ T7872] geneve2: entered allmulticast mode [ 238.469886][ T7857] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.495423][ T7857] I/O error, dev loop3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.528205][ T7857] Mount JFS Failure: -5 [ 238.545876][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 238.547318][ T7857] jfs_mount failed w/return code = -5 [ 238.580712][ T7882] vlan2: entered promiscuous mode [ 238.592108][ T7882] batadv0: entered promiscuous mode [ 239.005096][ T7857] tty tty26: ldisc open failed (-12), clearing slot 25 [ 239.024356][ T7888] tty tty26: ldisc open failed (-12), clearing slot 25 [ 240.651606][ T7915] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 240.661094][ T7915] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 240.669473][ T7915] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 240.678988][ T7915] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 240.686733][ T7915] bcachefs: bch2_fs_get_tree() error: EIO [ 240.989094][ T7917] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.103656][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 241.540260][ T7930] ubi: mtd0 is already attached to ubi31 [ 241.904568][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 241.935061][ T7942] bond2: entered promiscuous mode [ 242.082055][ T7947] vfat: Bad value for 'umask' [ 242.617490][ T5924] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 242.938753][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 242.945906][ T5924] usb 1-1: config 7 has an invalid interface number: 152 but max is 0 [ 242.955020][ T5924] usb 1-1: config 7 has no interface number 0 [ 242.961307][ T5924] usb 1-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 242.968781][ T7957] libceph: resolve '4' (ret=-3): failed [ 242.972783][ T5924] usb 1-1: config 7 interface 152 altsetting 190 bulk endpoint 0x2 has invalid maxpacket 8 [ 243.492940][ T5924] usb 1-1: config 7 interface 152 has no altsetting 0 [ 243.503156][ T5924] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 243.512459][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.520811][ T5924] usb 1-1: Product: syz [ 243.525620][ T5924] usb 1-1: Manufacturer: syz [ 243.538487][ T5924] usb 1-1: SerialNumber: syz [ 243.550469][ T7933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.852409][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 243.932669][ T5924] usbtest 1-1:7.152: couldn't get endpoints, -71 [ 243.940237][ T5924] usbtest 1-1:7.152: probe with driver usbtest failed with error -71 [ 243.952473][ T5924] usb 1-1: USB disconnect, device number 11 [ 244.884995][ T7986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.626'. [ 244.935162][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 244.945418][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'. [ 244.974396][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'. [ 244.996283][ T7985] vlan2: entered promiscuous mode [ 245.744336][ T8000] netlink: 196 bytes leftover after parsing attributes in process `syz.0.628'. [ 245.839344][ T5924] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.928152][ T8004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.630'. [ 246.039870][ T5945] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 246.047562][ T5924] usb 2-1: device descriptor read/64, error -71 [ 246.197905][ T5945] usb 1-1: device descriptor read/64, error -71 [ 246.375682][ T5924] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 246.408097][ T8011] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 246.659096][ T5945] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 246.948510][ T5924] usb 2-1: device descriptor read/64, error -71 [ 247.178810][ T5924] usb usb2-port1: attempt power cycle [ 247.232145][ T5945] usb 1-1: device descriptor read/64, error -71 [ 247.354313][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 247.363999][ T5945] usb usb1-port1: attempt power cycle [ 247.382273][ T8024] FAULT_INJECTION: forcing a failure. [ 247.382273][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 247.409326][ T8024] CPU: 1 UID: 0 PID: 8024 Comm: syz.2.635 Not tainted syzkaller #0 PREEMPT(full) [ 247.409347][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.409357][ T8024] Call Trace: [ 247.409364][ T8024] [ 247.409371][ T8024] dump_stack_lvl+0x189/0x250 [ 247.409395][ T8024] ? __pfx____ratelimit+0x10/0x10 [ 247.409413][ T8024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.409428][ T8024] ? __pfx__printk+0x10/0x10 [ 247.409447][ T8024] ? lock_acquire+0x175/0x360 [ 247.409464][ T8024] ? __pfx___might_resched+0x10/0x10 [ 247.409485][ T8024] should_fail_ex+0x414/0x560 [ 247.409504][ T8024] should_failslab+0xa8/0x100 [ 247.409518][ T8024] kmem_cache_alloc_node_noprof+0x77/0x710 [ 247.409536][ T8024] ? __alloc_skb+0x112/0x2d0 [ 247.409559][ T8024] __alloc_skb+0x112/0x2d0 [ 247.409580][ T8024] netlink_ack+0x146/0xa50 [ 247.409607][ T8024] ? rcu_is_watching+0x15/0xb0 [ 247.409634][ T8024] ? trace_contention_end+0x39/0x120 [ 247.409671][ T8024] netlink_rcv_skb+0x28c/0x470 [ 247.409696][ T8024] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 247.409713][ T8024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.409740][ T8024] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.409758][ T8024] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.409777][ T8024] xfrm_netlink_rcv+0x79/0x90 [ 247.409793][ T8024] netlink_unicast+0x82f/0x9e0 [ 247.409815][ T8024] ? __pfx_netlink_unicast+0x10/0x10 [ 247.409832][ T8024] ? netlink_sendmsg+0x642/0xb30 [ 247.409850][ T8024] ? skb_put+0x11b/0x210 [ 247.409863][ T8024] netlink_sendmsg+0x805/0xb30 [ 247.409887][ T8024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.409908][ T8024] ? aa_sock_msg_perm+0xf1/0x1d0 [ 247.409925][ T8024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.409937][ T8024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.409956][ T8024] __sock_sendmsg+0x21c/0x270 [ 247.409974][ T8024] ____sys_sendmsg+0x505/0x830 [ 247.409990][ T8024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.410009][ T8024] ? import_iovec+0x74/0xa0 [ 247.410023][ T8024] ___sys_sendmsg+0x21f/0x2a0 [ 247.410037][ T8024] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.410072][ T8024] ? __fget_files+0x2a/0x420 [ 247.410083][ T8024] ? __fget_files+0x3a0/0x420 [ 247.410101][ T8024] __x64_sys_sendmsg+0x19b/0x260 [ 247.410115][ T8024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.410134][ T8024] ? __pfx_ksys_write+0x10/0x10 [ 247.410154][ T8024] ? do_syscall_64+0xbe/0xfa0 [ 247.410174][ T8024] do_syscall_64+0xfa/0xfa0 [ 247.410190][ T8024] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.410206][ T8024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.410221][ T8024] ? clear_bhb_loop+0x60/0xb0 [ 247.410237][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.410249][ T8024] RIP: 0033:0x7f6090d8eba9 [ 247.410260][ T8024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.410270][ T8024] RSP: 002b:00007f6091b6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.410283][ T8024] RAX: ffffffffffffffda RBX: 00007f6090fd5fa0 RCX: 00007f6090d8eba9 [ 247.410292][ T8024] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 247.410299][ T8024] RBP: 00007f6091b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 247.410306][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.410313][ T8024] R13: 00007f6090fd6038 R14: 00007f6090fd5fa0 R15: 00007ffe7bc83438 [ 247.410333][ T8024] [ 247.888523][ T5924] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.908981][ T5924] usb 2-1: device descriptor read/8, error -71 [ 247.953192][ T8026] input: syz0 as /devices/virtual/input/input21 [ 248.108490][ T5945] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 248.129048][ T5945] usb 1-1: device descriptor read/8, error -71 [ 248.368504][ T5945] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 248.399065][ T5945] usb 1-1: device descriptor read/8, error -71 [ 248.508823][ T5945] usb usb1-port1: unable to enumerate USB device [ 248.648546][ T5924] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 248.693113][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.741245][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.751753][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 248.761228][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.844296][ T5924] usb 2-1: config 0 descriptor?? [ 249.121240][ T8040] FAULT_INJECTION: forcing a failure. [ 249.121240][ T8040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.142831][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.3.641 Not tainted syzkaller #0 PREEMPT(full) [ 249.142854][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.142865][ T8040] Call Trace: [ 249.142872][ T8040] [ 249.142879][ T8040] dump_stack_lvl+0x189/0x250 [ 249.142903][ T8040] ? __pfx____ratelimit+0x10/0x10 [ 249.142926][ T8040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.142947][ T8040] ? __pfx__printk+0x10/0x10 [ 249.142971][ T8040] ? __might_fault+0xb0/0x130 [ 249.143005][ T8040] should_fail_ex+0x414/0x560 [ 249.143029][ T8040] _copy_from_iter+0x1de/0x1790 [ 249.143056][ T8040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 249.143080][ T8040] ? policy_nodemask+0x27c/0x720 [ 249.143096][ T8040] ? __pfx__copy_from_iter+0x10/0x10 [ 249.143126][ T8040] ? set_page_refcounted+0xa0/0x1e0 [ 249.143142][ T8040] ? page_copy_sane+0x4e/0x280 [ 249.143167][ T8040] copy_page_from_iter+0xdd/0x170 [ 249.143196][ T8040] tun_get_user+0x1d7b/0x3e20 [ 249.143225][ T8040] ? tun_get_user+0x6f6/0x3e20 [ 249.143264][ T8040] ? aa_file_perm+0x44d/0x1550 [ 249.143286][ T8040] ? __pfx_tun_get_user+0x10/0x10 [ 249.143306][ T8040] ? _parse_integer_limit+0x1ae/0x1f0 [ 249.143335][ T8040] ? __lock_acquire+0xab9/0xd20 [ 249.143364][ T8040] ? ref_tracker_alloc+0x318/0x460 [ 249.143385][ T8040] ? __lock_acquire+0xab9/0xd20 [ 249.143409][ T8040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 249.143436][ T8040] ? tun_get+0x1c/0x2f0 [ 249.143461][ T8040] ? tun_get+0x1c/0x2f0 [ 249.143477][ T8040] ? tun_get+0x1c/0x2f0 [ 249.143498][ T8040] tun_chr_write_iter+0x113/0x200 [ 249.143520][ T8040] vfs_write+0x5c9/0xb30 [ 249.143544][ T8040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 249.143562][ T8040] ? __pfx_vfs_write+0x10/0x10 [ 249.143590][ T8040] ? __fget_files+0x2a/0x420 [ 249.143610][ T8040] ksys_write+0x145/0x250 [ 249.143630][ T8040] ? __pfx_ksys_write+0x10/0x10 [ 249.143654][ T8040] ? do_syscall_64+0xbe/0xfa0 [ 249.143680][ T8040] do_syscall_64+0xfa/0xfa0 [ 249.143697][ T8040] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.143716][ T8040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.143729][ T8040] ? clear_bhb_loop+0x60/0xb0 [ 249.143745][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.143760][ T8040] RIP: 0033:0x7f39b9d8d65f [ 249.143774][ T8040] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 249.143785][ T8040] RSP: 002b:00007f39bacc3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 249.143802][ T8040] RAX: ffffffffffffffda RBX: 00007f39b9fd5fa0 RCX: 00007f39b9d8d65f [ 249.143814][ T8040] RDX: 0000000000000260 RSI: 00002000000009c0 RDI: 00000000000000c8 [ 249.143823][ T8040] RBP: 00007f39bacc3090 R08: 0000000000000000 R09: 0000000000000000 [ 249.143831][ T8040] R10: 0000000000000260 R11: 0000000000000293 R12: 0000000000000001 [ 249.143838][ T8040] R13: 00007f39b9fd6038 R14: 00007f39b9fd5fa0 R15: 00007fff1a1e5518 [ 249.143860][ T8040] [ 249.780444][ T8048] vfat: Bad value for 'umask' [ 250.053490][ T5924] logitech-djreceiver 0003:046D:C71F.0006: ignoring exceeding usage max [ 250.070126][ T5924] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 250.086275][ T8055] ubi: mtd0 is already attached to ubi31 [ 250.818348][ T43] usb 2-1: USB disconnect, device number 13 [ 250.883424][ T8058] fido_id[8058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 251.059117][ T8065] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 251.086476][ T8065] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 252.373872][ T8086] FAULT_INJECTION: forcing a failure. [ 252.373872][ T8086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.478509][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.3.656 Not tainted syzkaller #0 PREEMPT(full) [ 252.478534][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.478544][ T8086] Call Trace: [ 252.478552][ T8086] [ 252.478560][ T8086] dump_stack_lvl+0x189/0x250 [ 252.478589][ T8086] ? __pfx____ratelimit+0x10/0x10 [ 252.478613][ T8086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.478633][ T8086] ? __pfx__printk+0x10/0x10 [ 252.478657][ T8086] ? __might_fault+0xb0/0x130 [ 252.478692][ T8086] should_fail_ex+0x414/0x560 [ 252.478717][ T8086] _copy_from_user+0x2d/0xb0 [ 252.478735][ T8086] ___sys_recvmsg+0x12e/0x510 [ 252.478760][ T8086] ? __pfx____sys_recvmsg+0x10/0x10 [ 252.478801][ T8086] ? __fget_files+0x3a0/0x420 [ 252.478828][ T8086] do_recvmmsg+0x307/0x770 [ 252.478855][ T8086] ? __pfx_do_recvmmsg+0x10/0x10 [ 252.478885][ T8086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.478927][ T8086] __x64_sys_recvmmsg+0x190/0x240 [ 252.478949][ T8086] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 252.478972][ T8086] ? do_syscall_64+0xbe/0xfa0 [ 252.479000][ T8086] do_syscall_64+0xfa/0xfa0 [ 252.479022][ T8086] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.479045][ T8086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.479062][ T8086] ? clear_bhb_loop+0x60/0xb0 [ 252.479082][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.479099][ T8086] RIP: 0033:0x7f39b9d8eba9 [ 252.479114][ T8086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.479128][ T8086] RSP: 002b:00007f39bacc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 252.479146][ T8086] RAX: ffffffffffffffda RBX: 00007f39b9fd5fa0 RCX: 00007f39b9d8eba9 [ 252.479158][ T8086] RDX: 0000000000000001 RSI: 0000200000001440 RDI: 0000000000000006 [ 252.479169][ T8086] RBP: 00007f39bacc3090 R08: 0000000000000000 R09: 0000000000000000 [ 252.479179][ T8086] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000001 [ 252.479189][ T8086] R13: 00007f39b9fd6038 R14: 00007f39b9fd5fa0 R15: 00007fff1a1e5518 [ 252.479225][ T8086] [ 253.566424][ T8095] ubi: mtd0 is already attached to ubi31 [ 253.642276][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 254.128716][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'. [ 254.209648][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'. [ 254.332002][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 254.429564][ T5924] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 254.621561][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 254.647405][ T5924] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.40 [ 254.744773][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.794043][ T5924] usb 2-1: Product: syz [ 254.805247][ T5924] usb 2-1: Manufacturer: syz [ 254.810059][ T5924] usb 2-1: SerialNumber: syz [ 254.982664][ T8124] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 255.592688][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.599151][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.700452][ T5924] usbhid 2-1:1.0: can't add hid device: -71 [ 255.706433][ T5924] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 255.739627][ T5924] usb 2-1: USB disconnect, device number 14 [ 256.022659][ T8134] netlink: 9 bytes leftover after parsing attributes in process `syz.4.673'. [ 256.100916][ T8135] netlink: 64 bytes leftover after parsing attributes in process `syz.4.673'. [ 257.325472][ T8148] vfat: Bad value for 'umask' [ 257.598613][ T5989] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 258.048907][ T5989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.062446][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 258.105525][ T5989] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.118606][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.142483][ T5989] usb 1-1: config 0 descriptor?? [ 258.170033][ T5989] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 258.383960][ T10] usb 1-1: USB disconnect, device number 16 [ 259.495641][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.504548][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.512537][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.524038][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 259.528748][ T5872] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 259.544222][ T5180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.560515][ T5180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.008707][ T5924] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 260.359865][ T5924] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 260.452208][ T5924] usb 5-1: config 0 has no interface number 0 [ 260.465524][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 260.472474][ T5924] usb 5-1: config 0 interface 29 has no altsetting 0 [ 260.480804][ T8193] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 260.498055][ T5924] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 260.561766][ T8188] syzkaller1: tun_chr_ioctl cmd 35111 [ 260.618940][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.626956][ T5924] usb 5-1: Product: syz [ 261.125350][ T5924] usb 5-1: Manufacturer: syz [ 261.127702][ T8197] bond3: entered promiscuous mode [ 261.152041][ T5924] usb 5-1: SerialNumber: syz [ 261.180003][ T5924] usb 5-1: config 0 descriptor?? [ 261.271320][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 261.302151][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.314410][ T8205] FAULT_INJECTION: forcing a failure. [ 261.314410][ T8205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.327936][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.328077][ T8169] bridge_slave_0: entered allmulticast mode [ 261.330023][ T8169] bridge_slave_0: entered promiscuous mode [ 261.361514][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.375117][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.387468][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.3.696 Not tainted syzkaller #0 PREEMPT(full) [ 261.387489][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.387499][ T8205] Call Trace: [ 261.387502][ T8169] bridge_slave_1: entered allmulticast mode [ 261.387507][ T8205] [ 261.387518][ T8205] dump_stack_lvl+0x189/0x250 [ 261.387548][ T8205] ? __pfx____ratelimit+0x10/0x10 [ 261.387576][ T8205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.387601][ T8205] ? __pfx__printk+0x10/0x10 [ 261.387643][ T8205] should_fail_ex+0x414/0x560 [ 261.387674][ T8205] _copy_to_user+0x31/0xb0 [ 261.387697][ T8205] simple_read_from_buffer+0xe1/0x170 [ 261.387735][ T8205] proc_fail_nth_read+0x1b3/0x220 [ 261.387764][ T8205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.387794][ T8205] ? rw_verify_area+0x2a6/0x4d0 [ 261.387820][ T8205] ? __lock_acquire+0xab9/0xd20 [ 261.387855][ T8205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.387881][ T8205] vfs_read+0x200/0xa30 [ 261.387906][ T8205] ? fdget_pos+0x247/0x320 [ 261.387928][ T8205] ? __pfx___mutex_lock+0x10/0x10 [ 261.387956][ T8205] ? __pfx_vfs_read+0x10/0x10 [ 261.387984][ T8205] ? __fget_files+0x2a/0x420 [ 261.388006][ T8205] ? __fget_files+0x3a0/0x420 [ 261.388022][ T8205] ? __fget_files+0x2a/0x420 [ 261.388048][ T8205] ksys_read+0x145/0x250 [ 261.388077][ T8205] ? __pfx_ksys_read+0x10/0x10 [ 261.388107][ T8205] ? do_syscall_64+0xbe/0xfa0 [ 261.388137][ T8205] do_syscall_64+0xfa/0xfa0 [ 261.388160][ T8205] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.388205][ T8205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.388224][ T8205] ? clear_bhb_loop+0x60/0xb0 [ 261.388249][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.388268][ T8205] RIP: 0033:0x7f39b9d8d5bc [ 261.388287][ T8205] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 261.388303][ T8205] RSP: 002b:00007f39bacc3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.388324][ T8205] RAX: ffffffffffffffda RBX: 00007f39b9fd5fa0 RCX: 00007f39b9d8d5bc [ 261.388339][ T8205] RDX: 000000000000000f RSI: 00007f39bacc30a0 RDI: 0000000000000004 [ 261.388352][ T8205] RBP: 00007f39bacc3090 R08: 0000000000000000 R09: 0000000000000000 [ 261.388363][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.388374][ T8205] R13: 00007f39b9fd6038 R14: 00007f39b9fd5fa0 R15: 00007fff1a1e5518 [ 261.388415][ T8205] [ 261.615408][ T5924] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 261.689736][ T5180] Bluetooth: hci1: command tx timeout [ 261.856569][ T5924] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 261.863863][ T5924] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 261.871203][ T5924] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 262.172651][ T8169] bridge_slave_1: entered promiscuous mode [ 262.275765][ T8211] siw: device registration error -23 [ 262.646324][ T5924] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 262.804217][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.144237][ T8229] ubi: mtd0 is already attached to ubi31 [ 263.879410][ T5180] Bluetooth: hci1: command tx timeout [ 263.902639][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 263.902656][ T30] audit: type=1326 audit(1758213003.422:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 263.916362][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.048694][ T5924] usb 5-1: USB disconnect, device number 11 [ 264.058914][ T30] audit: type=1326 audit(1758213003.422:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 264.083144][ T30] audit: type=1326 audit(1758213003.422:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 264.163075][ T30] audit: type=1326 audit(1758213003.422:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 264.260483][ T30] audit: type=1326 audit(1758213003.422:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 264.431858][ T30] audit: type=1326 audit(1758213003.422:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 264.498235][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 264.591798][ T5989] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 264.757177][ T30] audit: type=1326 audit(1758213003.432:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 264.836744][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 264.904202][ T5989] usb 5-1: unable to get BOS descriptor or descriptor too short [ 265.080112][ T5989] usb 5-1: config 253 has an invalid interface number: 140 but max is 0 [ 265.171196][ T30] audit: type=1326 audit(1758213003.432:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 265.252356][ T5989] usb 5-1: config 253 has no interface number 0 [ 265.411366][ T5989] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 265.524349][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.570485][ T30] audit: type=1326 audit(1758213003.432:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 265.632314][ T5989] usb 5-1: Product: syz [ 265.660999][ T5989] usb 5-1: Manufacturer: syz [ 265.693666][ T5989] usb 5-1: SerialNumber: syz [ 265.756121][ T30] audit: type=1326 audit(1758213003.432:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x7ffc0000 [ 265.959220][ T5180] Bluetooth: hci1: command tx timeout [ 267.881500][ T8169] team0: Port device team_slave_0 added [ 267.894701][ T8169] team0: Port device team_slave_1 added [ 268.015345][ T5989] usbtest 5-1:253.140: Linux gadget zero [ 268.039226][ T5180] Bluetooth: hci1: command tx timeout [ 268.044121][ T5989] usbtest 5-1:253.140: high-speed {control in/out int-out} tests (+alt) [ 268.298199][ T5989] usb 5-1: USB disconnect, device number 12 [ 268.398254][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.448230][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.660221][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.700571][ T8257] team_slave_0: entered promiscuous mode [ 268.706509][ T8257] team_slave_1: entered promiscuous mode [ 268.842456][ T8257] vlan2: entered promiscuous mode [ 268.915546][ T8257] team0: entered promiscuous mode [ 269.527141][ T8266] netlink: 64 bytes leftover after parsing attributes in process `syz.3.714'. [ 269.810123][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.827987][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.874838][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.939098][ T8276] 9pnet_fd: Insufficient options for proto=fd [ 269.962142][ T8276] tipc: Started in network mode [ 269.967937][ T8276] tipc: Node identity c209bbe20dc3, cluster identity 4711 [ 269.976543][ T8276] tipc: Enabled bearer , priority 0 [ 270.007808][ T8169] hsr_slave_0: entered promiscuous mode [ 270.026186][ T8169] hsr_slave_1: entered promiscuous mode [ 270.033076][ T8169] debugfs: 'hsr0' already exists in 'hsr' [ 270.039140][ T8169] Cannot create hsr debugfs directory [ 270.046643][ T8276] tipc: Resetting bearer [ 270.368321][ T8286] netlink: 48 bytes leftover after parsing attributes in process `syz.0.722'. [ 270.940288][ T8288] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 270.946869][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 270.973077][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 270.979449][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 270.993387][ T8288] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 270.999917][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.008314][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 271.016250][ T8288] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 271.022884][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 271.031697][ T5924] tipc: Node number set to 3486170082 [ 271.060977][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 271.109183][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 271.115113][ T8292] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 271.121761][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 271.137161][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 271.151852][ T8288] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 271.158468][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 271.169237][ T5924] vhci_hcd: vhci_device speed not set [ 271.176248][ T8302] netlink: 'syz.4.724': attribute type 10 has an invalid length. [ 271.184764][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 271.191995][ T8288] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 271.201184][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.208799][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.221872][ T8288] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(20) [ 271.224572][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.228479][ T8288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.228674][ T43] usb 1-1: device descriptor read/64, error -71 [ 271.235824][ T8302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.243275][ T5924] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 271.249739][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.249864][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.288057][ T8288] vhci_hcd vhci_hcd.0: Device attached [ 271.291306][ T8302] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 271.635377][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 271.701748][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 271.778107][ T8169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.790184][ T8169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.838520][ T43] usb 1-1: device descriptor read/64, error -71 [ 271.841199][ T8169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.863581][ T8303] vhci_hcd: connection closed [ 271.863982][ T8300] vhci_hcd: connection closed [ 271.868771][ T8293] vhci_hcd: connection closed [ 271.868785][ T8297] vhci_hcd: connection closed [ 271.878357][ T8289] vhci_hcd: connection reset by peer [ 271.888562][ T8295] vhci_hcd: connection closed [ 271.889021][ T6038] vhci_hcd: stop threads [ 271.898244][ T6038] vhci_hcd: release socket [ 271.903075][ T6038] vhci_hcd: disconnect device [ 271.910626][ T6038] vhci_hcd: stop threads [ 271.915250][ T6038] vhci_hcd: release socket [ 271.917712][ T8169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.927532][ T6038] vhci_hcd: disconnect device [ 271.934197][ T6038] vhci_hcd: stop threads [ 271.941270][ T6038] vhci_hcd: release socket [ 271.963992][ T43] usb usb1-port1: attempt power cycle [ 271.977825][ T6038] vhci_hcd: disconnect device [ 272.005536][ T8308] dvmrp1: entered allmulticast mode [ 272.008187][ T6038] vhci_hcd: stop threads [ 272.015641][ T6038] vhci_hcd: release socket [ 272.022908][ T6038] vhci_hcd: disconnect device [ 272.029828][ T6038] vhci_hcd: stop threads [ 272.034399][ T6038] vhci_hcd: release socket [ 272.051371][ T6038] vhci_hcd: disconnect device [ 272.057100][ T6038] vhci_hcd: stop threads [ 272.078591][ T6038] vhci_hcd: release socket [ 272.098827][ T6038] vhci_hcd: disconnect device [ 272.251301][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.281658][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.300870][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.308017][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.309251][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 272.330001][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.337141][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.345636][ T43] usb 1-1: device descriptor read/8, error -71 [ 272.593261][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 272.619055][ T43] usb 1-1: device descriptor read/8, error -71 [ 272.637818][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.730324][ T43] usb usb1-port1: unable to enumerate USB device [ 272.887943][ T8274] tipc: Disabling bearer [ 273.035666][ T8169] veth0_vlan: entered promiscuous mode [ 273.062148][ T8169] veth1_vlan: entered promiscuous mode [ 273.156061][ T8169] veth0_macvtap: entered promiscuous mode [ 273.182564][ T8169] veth1_macvtap: entered promiscuous mode [ 273.211390][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.224765][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'. [ 273.664696][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.694340][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.726309][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.770240][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.785839][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.338806][ T6038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.359520][ T6038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.437497][ T8354] vfat: Bad value for 'umask' [ 274.482921][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.508482][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.338857][ T5925] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 276.381333][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 276.449866][ T5924] vhci_hcd: vhci_device speed not set [ 276.558816][ T5925] usb 5-1: device descriptor read/64, error -71 [ 276.648807][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 276.709563][ T43] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 276.720931][ T43] usb 1-1: config 0 has no interface number 0 [ 276.727163][ T43] usb 1-1: config 0 interface 89 has no altsetting 0 [ 276.743470][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 276.768583][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.770012][ T8381] bond1: entered promiscuous mode [ 276.789107][ T43] usb 1-1: Product: syz [ 276.801083][ T43] usb 1-1: Manufacturer: syz [ 276.812573][ T43] usb 1-1: SerialNumber: syz [ 276.827134][ T43] usb 1-1: config 0 descriptor?? [ 276.848690][ T5925] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.865494][ T43] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 276.886997][ T43] em28xx 1-1:0.89: Video interface 89 found: bulk [ 276.925634][ T8385] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 277.008646][ T5925] usb 5-1: device descriptor read/64, error -71 [ 277.068998][ T8392] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 277.075560][ T8392] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.086918][ T8392] vhci_hcd vhci_hcd.0: Device attached [ 277.093315][ T8392] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 277.102778][ T8392] FAULT_INJECTION: forcing a failure. [ 277.102778][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 277.119741][ T5925] usb usb5-port1: attempt power cycle [ 277.129037][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.2.745 Not tainted syzkaller #0 PREEMPT(full) [ 277.129058][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.129075][ T8392] Call Trace: [ 277.129082][ T8392] [ 277.129089][ T8392] dump_stack_lvl+0x189/0x250 [ 277.129114][ T8392] ? __pfx____ratelimit+0x10/0x10 [ 277.129141][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.129161][ T8392] ? __pfx__printk+0x10/0x10 [ 277.129190][ T8392] ? __pfx___might_resched+0x10/0x10 [ 277.129219][ T8392] should_fail_ex+0x414/0x560 [ 277.129243][ T8392] ? __pfx_sock_alloc_inode+0x10/0x10 [ 277.129265][ T8392] should_failslab+0xa8/0x100 [ 277.129283][ T8392] ? __pfx_sock_alloc_inode+0x10/0x10 [ 277.129302][ T8392] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 277.129327][ T8392] ? sock_alloc_inode+0x28/0xc0 [ 277.129352][ T8392] ? __pfx_sock_alloc_inode+0x10/0x10 [ 277.129372][ T8392] sock_alloc_inode+0x28/0xc0 [ 277.129393][ T8392] alloc_inode+0x6a/0x1b0 [ 277.129420][ T8392] __sock_create+0x12d/0x9f0 [ 277.129445][ T8392] ? __might_fault+0xb0/0x130 [ 277.129473][ T8392] __sys_socketpair+0x1c5/0x560 [ 277.129505][ T8392] __x64_sys_socketpair+0x9b/0xb0 [ 277.129531][ T8392] do_syscall_64+0xfa/0xfa0 [ 277.129553][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.129576][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.129593][ T8392] ? clear_bhb_loop+0x60/0xb0 [ 277.129614][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.129630][ T8392] RIP: 0033:0x7f6090d90afa [ 277.129645][ T8392] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.129659][ T8392] RSP: 002b:00007f6091b6bf78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 277.129677][ T8392] RAX: ffffffffffffffda RBX: 00007f6090fd5f00 RCX: 00007f6090d90afa [ 277.129690][ T8392] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 277.129699][ T8392] RBP: 00007f6091b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 277.129710][ T8392] R10: 00007f6091b6bf98 R11: 0000000000000246 R12: 0000000000000004 [ 277.129720][ T8392] R13: 00007f6090fd6038 R14: 00007f6090fd5fa0 R15: 00007ffe7bc83438 [ 277.129750][ T8392] [ 277.132691][ T8392] socket: no more sockets [ 277.269086][ T8400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 277.371334][ T8399] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 277.377947][ T8399] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.385518][ T8392] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 277.386169][ T8398] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 277.392117][ T8392] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.398603][ T8398] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.406291][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.414912][ T8397] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 277.426146][ T8397] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.432949][ T8396] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 277.440276][ T8396] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 277.451966][ T8392] vhci_hcd vhci_hcd.0: Device attached [ 277.460383][ T8396] vhci_hcd vhci_hcd.0: Device attached [ 277.466829][ T8399] vhci_hcd vhci_hcd.0: Device attached [ 277.475195][ T8392] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 277.483729][ T5924] vhci_hcd: vhci_device speed not set [ 277.498908][ T8396] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 277.505528][ T8396] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.517383][ T8392] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 277.523987][ T8392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.531784][ T8396] vhci_hcd vhci_hcd.0: Device attached [ 277.541638][ T8396] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 277.548253][ T8396] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.556195][ T5924] usb 37-1: device descriptor read/64, error -110 [ 277.573582][ T8397] vhci_hcd vhci_hcd.0: Device attached [ 277.584235][ T8392] vhci_hcd vhci_hcd.0: Device attached [ 277.634414][ T8398] vhci_hcd vhci_hcd.0: Device attached [ 277.640185][ T5925] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 277.658024][ T8383] vhci_hcd: vhci_device speed not set [ 277.676397][ T8418] vhci_hcd: connection closed [ 277.676642][ T8403] vhci_hcd: connection closed [ 277.685021][ T43] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 277.708065][ T8400] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 277.714689][ T8400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.717728][ T50] vhci_hcd: stop threads [ 277.894845][ T8406] vhci_hcd: connection closed [ 277.947206][ T8393] vhci_hcd: connection closed [ 278.419969][ T8400] vhci_hcd vhci_hcd.0: Device attached [ 278.446647][ T5924] vhci_hcd: vhci_device speed not set [ 278.452136][ T8383] usb 39-3: new full-speed USB device number 3 using vhci_hcd [ 278.460867][ T8396] vhci_hcd vhci_hcd.0: Device attached [ 278.467710][ T5925] usb 5-1: device descriptor read/8, error -71 [ 278.484755][ T50] vhci_hcd: release socket [ 278.499532][ T50] vhci_hcd: disconnect device [ 278.501409][ T8424] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.504641][ T50] vhci_hcd: stop threads [ 278.522311][ T8401] vhci_hcd: connection closed [ 278.524083][ T50] vhci_hcd: release socket [ 278.533324][ T5924] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 278.541707][ T50] vhci_hcd: disconnect device [ 278.550977][ T50] vhci_hcd: stop threads [ 278.555239][ T50] vhci_hcd: release socket [ 278.563422][ T8394] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 278.564211][ T50] vhci_hcd: disconnect device [ 278.575776][ T50] vhci_hcd: stop threads [ 278.575789][ T50] vhci_hcd: release socket [ 278.575911][ T50] vhci_hcd: disconnect device [ 278.576160][ T50] vhci_hcd: stop threads [ 278.576172][ T50] vhci_hcd: release socket [ 278.576275][ T50] vhci_hcd: disconnect device [ 278.621448][ T8396] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 278.621478][ T8396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.621579][ T8396] vhci_hcd vhci_hcd.0: Device attached [ 278.696029][ T8430] vfat: Bad value for 'umask' [ 278.728640][ T5925] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.749305][ T5925] usb 5-1: device descriptor read/8, error -71 [ 278.812618][ T8416] vhci_hcd: connection closed [ 278.812897][ T8420] vhci_hcd: connection closed [ 278.824226][ T8414] vhci_hcd: connection closed [ 278.833608][ T8402] vhci_hcd: connection closed [ 278.833829][ T5958] vhci_hcd: stop threads [ 278.833872][ T5958] vhci_hcd: release socket [ 278.833921][ T5958] vhci_hcd: disconnect device [ 278.834373][ T8409] vhci_hcd: connection reset by peer [ 278.834582][ T5958] vhci_hcd: stop threads [ 278.834619][ T5958] vhci_hcd: release socket [ 278.834663][ T5958] vhci_hcd: disconnect device [ 278.835114][ T5958] vhci_hcd: stop threads [ 278.835130][ T5958] vhci_hcd: release socket [ 278.835191][ T5958] vhci_hcd: disconnect device [ 278.835368][ T8427] vhci_hcd: connection closed [ 278.852906][ T5958] vhci_hcd: stop threads [ 278.852919][ T5958] vhci_hcd: release socket [ 278.852962][ T5958] vhci_hcd: disconnect device [ 278.854364][ T5958] vhci_hcd: stop threads [ 278.854384][ T5958] vhci_hcd: release socket [ 278.854416][ T5958] vhci_hcd: disconnect device [ 278.869211][ T5925] usb usb5-port1: unable to enumerate USB device [ 278.878937][ T5958] vhci_hcd: stop threads [ 278.878979][ T5958] vhci_hcd: release socket [ 278.879021][ T5958] vhci_hcd: disconnect device [ 279.913043][ T8438] xfrm1: entered allmulticast mode [ 279.943940][ T8376] binder: BINDER_SET_CONTEXT_MGR already set [ 279.961494][ T8438] sctp: [Deprecated]: syz.2.752 (pid 8438) Use of int in max_burst socket option. [ 279.961494][ T8438] Use struct sctp_assoc_value instead [ 279.968795][ T8376] binder: 8373:8376 ioctl 4018620d 200000004a80 returned -16 [ 280.020081][ T8374] sd 0:0:1:0: device reset [ 280.049650][ T43] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 280.058513][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 280.068962][ T43] em28xx 1-1:0.89: board has no eeprom [ 280.131362][ T43] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 280.155491][ T43] em28xx 1-1:0.89: analog set to bulk mode. [ 280.163600][ T24] em28xx 1-1:0.89: Registering V4L2 extension [ 280.218893][ T43] usb 1-1: USB disconnect, device number 21 [ 280.245798][ T43] em28xx 1-1:0.89: Disconnecting em28xx [ 280.383606][ T24] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 280.400157][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 280.407907][ T24] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 280.418536][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.430541][ T24] em28xx 1-1:0.89: No AC97 audio processor [ 280.432118][ T9] usb 5-1: config 0 descriptor?? [ 280.985200][ T24] usb 1-1: Decoder not found [ 281.016999][ T24] em28xx 1-1:0.89: failed to create media graph [ 281.046630][ T24] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 281.105412][ T24] em28xx 1-1:0.89: Registering snapshot button... [ 281.187100][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input22 [ 281.284876][ T24] em28xx 1-1:0.89: Remote control support is not available for this card. [ 281.294369][ T43] em28xx 1-1:0.89: Closing input extension [ 281.305203][ T43] em28xx 1-1:0.89: Deregistering snapshot button [ 281.632191][ T9] ath6kl: Failed to submit usb control message: -71 [ 281.684375][ T43] em28xx 1-1:0.89: Freeing device [ 281.685629][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 281.982010][ T9] ath6kl: Unable to send get target info: -71 [ 282.130356][ T9] ath6kl: Failed to init ath6kl core: -71 [ 282.289526][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 282.596404][ T9] usb 5-1: USB disconnect, device number 17 [ 282.810574][ T8473] bond1: entered promiscuous mode [ 282.919707][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 282.944005][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 283.019654][ T8478] vlan2: entered promiscuous mode [ 283.078495][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 283.083974][ T8485] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 283.090517][ T8485] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 283.093925][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 283.109287][ T9] usb 5-1: config 179 has no interface number 0 [ 283.128260][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 283.130260][ T8485] vhci_hcd vhci_hcd.0: Device attached [ 283.156772][ T8488] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 283.179513][ T8485] FAULT_INJECTION: forcing a failure. [ 283.179513][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 283.189539][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 283.192820][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.0.767 Not tainted syzkaller #0 PREEMPT(full) [ 283.192844][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.192857][ T8485] Call Trace: [ 283.192864][ T8485] [ 283.192873][ T8485] dump_stack_lvl+0x189/0x250 [ 283.192902][ T8485] ? __pfx____ratelimit+0x10/0x10 [ 283.192928][ T8485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.192951][ T8485] ? __pfx__printk+0x10/0x10 [ 283.192981][ T8485] ? __pfx___might_resched+0x10/0x10 [ 283.193010][ T8485] ? fs_reclaim_acquire+0x7d/0x100 [ 283.193033][ T8485] should_fail_ex+0x414/0x560 [ 283.193061][ T8485] should_failslab+0xa8/0x100 [ 283.193082][ T8485] kmem_cache_alloc_noprof+0x74/0x6e0 [ 283.193111][ T8485] ? security_inode_alloc+0x39/0x330 [ 283.193141][ T8485] security_inode_alloc+0x39/0x330 [ 283.193167][ T8485] inode_init_always_gfp+0x9ed/0xdc0 [ 283.193202][ T8485] ? __pfx_sock_alloc_inode+0x10/0x10 [ 283.193227][ T8485] alloc_inode+0x82/0x1b0 [ 283.193256][ T8485] __sock_create+0x12d/0x9f0 [ 283.193285][ T8485] ? __might_fault+0xb0/0x130 [ 283.193317][ T8485] __sys_socketpair+0x1c5/0x560 [ 283.193350][ T8485] __x64_sys_socketpair+0x9b/0xb0 [ 283.193380][ T8485] do_syscall_64+0xfa/0xfa0 [ 283.193406][ T8485] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.193438][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.193457][ T8485] ? clear_bhb_loop+0x60/0xb0 [ 283.193480][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.193500][ T8485] RIP: 0033:0x7fe9baf90afa [ 283.193533][ T8485] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.193550][ T8485] RSP: 002b:00007fe9bbe0ff78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 283.193572][ T8485] RAX: ffffffffffffffda RBX: 00007fe9bb1d5f00 RCX: 00007fe9baf90afa [ 283.193587][ T8485] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 283.193599][ T8485] RBP: 00007fe9bbe10090 R08: 0000000000000000 R09: 0000000000000000 [ 283.193612][ T8485] R10: 00007fe9bbe0ff98 R11: 0000000000000246 R12: 0000000000000004 [ 283.193625][ T8485] R13: 00007fe9bb1d6038 R14: 00007fe9bb1d5fa0 R15: 00007fff128be4b8 [ 283.193660][ T8485] [ 283.193690][ T8485] socket: no more sockets [ 283.229672][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 283.308561][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 283.451480][ T24] vhci_hcd: vhci_device speed not set [ 283.477644][ T8486] vhci_hcd: connection closed [ 283.482926][ T13] vhci_hcd: stop threads [ 283.503420][ T13] vhci_hcd: release socket [ 283.513518][ T13] vhci_hcd: disconnect device [ 283.530221][ T24] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 283.538492][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 283.538522][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 283.538585][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 283.579943][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 283.591506][ T24] usb 33-1: enqueue for inactive port 0 [ 283.630221][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.643208][ T8383] vhci_hcd: vhci_device speed not set [ 283.649489][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.660495][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.677381][ T8466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 283.688543][ T24] vhci_hcd: vhci_device speed not set [ 283.700285][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.716235][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.724984][ T5924] vhci_hcd: vhci_device speed not set [ 283.754787][ T43] usb 6-1: SerialNumber: syz [ 283.906660][ T8502] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 284.080147][ T43] usb 6-1: 0:2 : does not exist [ 284.137886][ T43] usb 6-1: unit 5: unexpected type 0x03 [ 284.228049][ T43] usb 6-1: USB disconnect, device number 2 [ 285.632788][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.603266][ T5945] usb usb40-port1: attempt power cycle [ 288.609460][ T5932] usb usb38-port1: attempt power cycle [ 290.101910][ T43] usb 5-1: USB disconnect, device number 18 [ 290.101999][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 290.116133][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 290.369986][ T5932] usb usb38-port1: unable to enumerate USB device [ 290.398732][ T5945] usb usb40-port1: unable to enumerate USB device [ 291.843386][ T8535] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 291.998630][ T5924] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 292.201342][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 292.251539][ T5924] usb 4-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 292.326654][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.453168][ T5924] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 292.502769][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.536451][ T5924] usb 4-1: config 0 descriptor?? [ 294.095058][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 295.961446][ T6044] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 296.057258][ T5924] usb 4-1: string descriptor 0 read error: -71 [ 296.086542][ T8582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.794'. [ 296.088084][ T5924] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 296.100678][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.794'. [ 296.146069][ T6044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.168462][ T6044] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 296.177539][ T6044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.264438][ T5924] usb 4-1: USB disconnect, device number 7 [ 296.267522][ T6044] usb 6-1: config 0 descriptor?? [ 296.400952][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.797'. [ 297.140356][ T6044] lenovo 0003:17EF:6062.0007: unknown main item tag 0x1 [ 297.149934][ T8598] vfat: Bad value for 'umask' [ 297.290323][ T6044] lenovo 0003:17EF:6062.0007: hidraw0: USB HID v0.04 Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0 [ 297.913030][ T6044] usb 6-1: USB disconnect, device number 3 [ 297.994112][ T8600] fido_id[8600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 298.246802][ T8615] netlink: 56 bytes leftover after parsing attributes in process `syz.5.805'. [ 298.268717][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.805'. [ 298.470666][ T8588] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.493663][ T8588] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.506262][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 298.739518][ T8588] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.842010][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 298.855170][ T8588] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 298.994219][ T8588] UDF-fs: Scanning with blocksize 512 failed [ 299.014081][ T8588] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.088835][ T8588] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.168752][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 299.179046][ T8588] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.195386][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 299.207128][ T8588] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 299.345236][ T8588] UDF-fs: Scanning with blocksize 1024 failed [ 299.825360][ T8588] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.841454][ T8588] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.851338][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 299.873811][ T8588] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.895905][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 299.910686][ T8588] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 299.929819][ T8588] UDF-fs: Scanning with blocksize 2048 failed [ 299.945728][ T8588] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.967708][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 299.992607][ T8588] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 300.002500][ T8588] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 300.010280][ T8588] UDF-fs: Scanning with blocksize 4096 failed [ 300.016522][ T8588] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 300.897971][ T8659] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.904689][ T8659] EXT4-fs: inline encryption not supported [ 300.910672][ T8659] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.917749][ T8659] EXT4-fs (loop4): unable to read superblock [ 302.302586][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 302.600186][ T5989] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 302.771904][ T5989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.796448][ T5989] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 302.822332][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.842019][ T5989] usb 6-1: Product: syz [ 302.852005][ T5989] usb 6-1: Manufacturer: syz [ 302.862819][ T5989] usb 6-1: SerialNumber: syz [ 302.912949][ T5989] usb 6-1: config 0 descriptor?? [ 302.961247][ T5989] usb 6-1: bad CDC descriptors [ 302.973248][ T5989] usb 6-1: unsupported MDLM descriptors [ 303.534624][ T8634] netlink: 'syz.3.811': attribute type 4 has an invalid length. [ 303.560952][ T8666] veth0: entered promiscuous mode [ 303.570534][ T8666] veth0: left promiscuous mode [ 303.931113][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 304.215180][ T8680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.828'. [ 304.252717][ T5989] usb 6-1: USB disconnect, device number 4 [ 304.261934][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 304.274609][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.285678][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.369957][ T5924] usb 4-1: New USB device found, idVendor=1385, idProduct=4251, bcdDevice=2c.d4 [ 304.381079][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.455223][ T5924] usb 4-1: Product: syz [ 304.478781][ T5924] usb 4-1: Manufacturer: syz [ 304.518534][ T5924] usb 4-1: SerialNumber: syz [ 304.563889][ T5924] usb 4-1: config 0 descriptor?? [ 304.607475][ T5924] usb 4-1: Could not find all expected endpoints [ 304.726061][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'. [ 304.767714][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 305.208512][ T5989] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 305.348490][ T5989] usb 6-1: device descriptor read/64, error -71 [ 306.099403][ T5989] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 306.299096][ T5989] usb 6-1: device descriptor read/64, error -71 [ 306.463999][ T5989] usb usb6-port1: attempt power cycle [ 306.651448][ T5924] usb 4-1: USB disconnect, device number 8 [ 306.826007][ T5989] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 307.105922][ T5989] usb 6-1: device descriptor read/8, error -71 [ 307.548515][ T5989] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 308.230180][ T8383] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 308.242334][ T8731] netlink: 64 bytes leftover after parsing attributes in process `syz.2.840'. [ 308.352761][ T5989] usb 6-1: device descriptor read/8, error -71 [ 308.463840][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.842'. [ 308.498475][ T8383] usb 1-1: Using ep0 maxpacket: 32 [ 308.507928][ T8383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.521694][ T5989] usb usb6-port1: unable to enumerate USB device [ 308.657539][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 308.657579][ T30] audit: type=1326 audit(1758213048.952:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.3.846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x0 [ 308.697427][ T8383] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 308.712481][ T8383] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 308.726791][ T8383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.735045][ T8383] usb 1-1: Product: syz [ 308.739968][ T8383] usb 1-1: Manufacturer: syz [ 308.744591][ T8383] usb 1-1: SerialNumber: syz [ 309.058584][ T8383] usb 1-1: Limiting number of CPorts to U8_MAX [ 309.122155][ T8383] usb 1-1: Not enough endpoints found in device, aborting! [ 309.275560][ T8756] netlink: 'syz.3.846': attribute type 10 has an invalid length. [ 309.314532][ T8756] team0: Device ipvlan1 failed to register rx_handler [ 309.331908][ T8383] usb 1-1: USB disconnect, device number 22 [ 309.495097][ T8762] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 309.745802][ T8762] blk_print_req_error: 3 callbacks suppressed [ 309.745824][ T8762] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 309.866914][ T8762] EXT4-fs (loop2): unable to read superblock [ 310.144421][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 311.275869][ T8787] bond2: entered promiscuous mode [ 311.937271][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 311.974970][ T8802] veth0: entered promiscuous mode [ 311.991379][ T8802] veth0: left promiscuous mode [ 312.034992][ T8809] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 312.043979][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 312.054076][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 312.071435][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.078775][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.433962][ T8808] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 312.444547][ T8808] XFS (loop0): SB validate failed with error -5. [ 312.470422][ T8814] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 312.501707][ T8814] qnx6: wrong signature (magic) in superblock #1. [ 312.508386][ T8814] qnx6: unable to read the first superblock [ 312.579324][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 313.350599][ T8832] team_slave_0: entered promiscuous mode [ 313.356406][ T8832] team_slave_1: entered promiscuous mode [ 313.387603][ T8825] ntfs3(loop4): try to read out of volume at offset 0x0 [ 313.405907][ T8832] vlan2: entered promiscuous mode [ 313.415988][ T8832] team0: entered promiscuous mode [ 314.316798][ T8850] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 314.326236][ T8850] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 314.334490][ T8850] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 315.148618][ T5924] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 316.369176][ T5924] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 316.441438][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.481910][ T5924] usb 1-1: Product: syz [ 316.486109][ T5924] usb 1-1: Manufacturer: syz [ 316.515454][ T5924] usb 1-1: SerialNumber: syz [ 316.650874][ T5924] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 317.479466][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.485923][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.528190][ T8383] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 317.552085][ T5924] usb 1-1: USB disconnect, device number 23 [ 317.615701][ T5924] usb 1-1: ath9k_htc: USB layer deinitialized [ 317.720360][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 317.763492][ T8889] veth0: entered promiscuous mode [ 317.770614][ T8891] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 317.777155][ T8891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.783129][ T8889] veth0: left promiscuous mode [ 317.796741][ T8891] vhci_hcd vhci_hcd.0: Device attached [ 317.809377][ T8891] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.821140][ T8891] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 317.827767][ T8891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.850966][ T8891] vhci_hcd vhci_hcd.0: Device attached [ 317.874281][ T8891] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 317.880908][ T8891] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 317.899090][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 318.087466][ T8891] vhci_hcd vhci_hcd.0: Device attached [ 318.121028][ T8891] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 318.127665][ T8891] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 318.135828][ T8891] vhci_hcd vhci_hcd.0: Device attached [ 318.236662][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 318.255161][ T8905] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 318.261827][ T8905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.301358][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 318.324745][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 318.335506][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.350308][ T9] usb 3-1: Product: syz [ 318.359222][ T8914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 318.367876][ T9] usb 3-1: Manufacturer: syz [ 318.372698][ T9] usb 3-1: SerialNumber: syz [ 318.378326][ T8905] vhci_hcd vhci_hcd.0: Device attached [ 318.426611][ T8914] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(22) [ 318.433233][ T8914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.457355][ T9] usb 3-1: config 0 descriptor?? [ 318.500494][ T5945] vhci_hcd: vhci_device speed not set [ 318.509963][ T9] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 318.532294][ T8914] vhci_hcd vhci_hcd.0: Device attached [ 318.558503][ T5945] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 318.569668][ T9] em28xx 3-1:0.0: Device initialization failed. [ 318.576207][ T9] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 318.595184][ T8915] vhci_hcd: connection closed [ 318.595952][ T13] vhci_hcd: stop threads [ 318.605984][ T13] vhci_hcd: release socket [ 318.630209][ T13] vhci_hcd: disconnect device [ 318.697283][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.720226][ T8898] vhci_hcd: connection closed [ 318.720430][ T8908] vhci_hcd: connection closed [ 318.726057][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.753662][ T8894] vhci_hcd: connection reset by peer [ 318.760702][ T13] vhci_hcd: stop threads [ 318.771831][ T9] usb 3-1: USB disconnect, device number 8 [ 318.780419][ T13] vhci_hcd: release socket [ 318.804920][ T13] vhci_hcd: disconnect device [ 318.812056][ T8909] vhci_hcd: connection closed [ 318.812236][ T8901] vhci_hcd: connection closed [ 318.941610][ T13] vhci_hcd: stop threads [ 318.956604][ T13] vhci_hcd: release socket [ 318.965058][ T13] vhci_hcd: disconnect device [ 318.973016][ T13] vhci_hcd: stop threads [ 318.977298][ T13] vhci_hcd: release socket [ 319.003177][ T13] vhci_hcd: disconnect device [ 319.048970][ T13] vhci_hcd: stop threads [ 319.098684][ T13] vhci_hcd: release socket [ 319.152331][ T13] vhci_hcd: disconnect device [ 319.163282][ T13] vhci_hcd: stop threads [ 319.174797][ T13] vhci_hcd: release socket [ 319.228770][ T13] vhci_hcd: disconnect device [ 322.360970][ T6044] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 322.708839][ T6044] usb 1-1: Using ep0 maxpacket: 8 [ 322.737165][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'. [ 322.751426][ T6044] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.781491][ T6044] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 16 [ 322.796997][ T6044] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 322.804225][ T8963] veth0: entered promiscuous mode [ 322.811015][ T6044] usb 1-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.828305][ T6044] usb 1-1: config 1 interface 0 has no altsetting 0 [ 322.838339][ T8963] veth0: left promiscuous mode [ 322.875118][ T6044] usb 1-1: string descriptor 0 read error: -22 [ 322.892227][ T6044] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.901645][ T6044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.933858][ T8958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.946156][ T8958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.110000][ T8974] netlink: 156 bytes leftover after parsing attributes in process `syz.3.913'. [ 323.143722][ T5989] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 323.193030][ T6044] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 323.208520][ T6044] usb 1-1: USB disconnect, device number 24 [ 323.231576][ T8979] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 323.257939][ T8979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.916'. [ 324.535017][ T5945] vhci_hcd: vhci_device speed not set [ 324.548682][ T5989] usb 5-1: Using ep0 maxpacket: 32 [ 324.705317][ T8994] bond4: entered promiscuous mode [ 324.918851][ T5989] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.939121][ T5989] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.960049][ T5989] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 324.978433][ T5989] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 324.986939][ T5989] usb 5-1: Product: syz [ 325.025511][ T5989] usb 5-1: Manufacturer: syz [ 325.048269][ T5989] hub 5-1:4.0: USB hub found [ 325.111526][ T8997] ntfs3(loop3): try to read out of volume at offset 0x0 [ 325.269930][ T5989] hub 5-1:4.0: 2 ports detected [ 325.271053][ T5989] hub 5-1:4.0: insufficient power available to use all downstream ports [ 325.479079][ T5989] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 325.479164][ T5989] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 325.629505][ T5989] usb 5-1: USB disconnect, device number 19 [ 325.984519][ T8383] usb usb34-port1: attempt power cycle [ 326.282958][ T9010] vfat: Bad value for 'umask' [ 327.251745][ T8383] usb usb34-port1: unable to enumerate USB device [ 327.265378][ T30] audit: type=1326 audit(1758213066.792:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8996 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x7fc00000 [ 327.303656][ T9022] netlink: 156 bytes leftover after parsing attributes in process `syz.4.925'. [ 329.399149][ T9034] bond2: entered promiscuous mode [ 330.638971][ T8383] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 330.958566][ T8383] usb 6-1: Using ep0 maxpacket: 32 [ 330.970854][ T8383] usb 6-1: config 14 has an invalid interface number: 137 but max is 3 [ 330.979842][ T8383] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 330.990208][ T8383] usb 6-1: config 14 has 2 interfaces, different from the descriptor's value: 4 [ 331.313698][ T8383] usb 6-1: config 14 has no interface number 1 [ 331.320733][ T8383] usb 6-1: config 14 interface 137 has no altsetting 0 [ 331.327858][ T8383] usb 6-1: config 14 interface 0 has no altsetting 0 [ 331.718765][ T8383] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a [ 331.758439][ T8383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.791423][ T8383] usb 6-1: Product: syz [ 331.795630][ T8383] usb 6-1: Manufacturer: syz [ 331.838643][ T8383] usb 6-1: SerialNumber: syz [ 331.970804][ T9081] netlink: 64 bytes leftover after parsing attributes in process `syz.0.946'. [ 332.181198][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.938'. [ 332.437782][ T8383] ati_remote2 6-1:14.0: ati_remote2_probe(): interface 0 must have an endpoint [ 332.463473][ T8383] usb 6-1: USB disconnect, device number 9 [ 332.591689][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 332.782894][ T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 333.241842][ T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.261275][ T10] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.275428][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.309091][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 333.383477][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 333.394666][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.434800][ T10] usb 5-1: config 0 descriptor?? [ 334.103956][ T9106] befs: (nbd5): No write support. Marking filesystem read-only [ 334.117058][ T9106] block nbd5: Attempted send on invalid socket [ 334.124697][ T9106] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.136752][ T9106] befs: (nbd5): unable to read superblock [ 334.310683][ T10] lenovo 0003:17EF:60B5.0008: hidraw0: USB HID vff.fc Device [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0 [ 334.375768][ T9111] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 334.382319][ T9111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.573163][ T9116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 334.794175][ T9111] vhci_hcd vhci_hcd.0: Device attached [ 334.987130][ T9117] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 334.993764][ T9117] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.031814][ T10] vhci_hcd: vhci_device speed not set [ 335.072881][ T9117] vhci_hcd vhci_hcd.0: Device attached [ 335.088521][ T9108] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 335.095141][ T9108] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.108352][ T9108] vhci_hcd vhci_hcd.0: Device attached [ 335.119080][ T9108] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(8) [ 335.125613][ T9108] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.133939][ T9108] vhci_hcd vhci_hcd.0: Device attached [ 335.143554][ T9108] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 335.150169][ T9108] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 335.158794][ T9108] vhci_hcd vhci_hcd.0: Device attached [ 335.166367][ T9108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 335.203103][ T9108] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(20) [ 335.209724][ T9108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 335.217902][ T9108] vhci_hcd vhci_hcd.0: Device attached [ 335.389689][ T10] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 335.419829][ T9132] vhci_hcd: connection closed [ 335.432668][ T6044] usb 5-1: USB disconnect, device number 20 [ 335.483926][ T9119] vhci_hcd: connection closed [ 335.545629][ T9122] vhci_hcd: connection closed [ 335.559396][ T9125] vhci_hcd: connection closed [ 335.570266][ T9128] vhci_hcd: connection closed [ 335.615443][ T9039] vhci_hcd: stop threads [ 336.139165][ T9039] vhci_hcd: release socket [ 336.143944][ T9039] vhci_hcd: disconnect device [ 336.148921][ T9039] vhci_hcd: stop threads [ 336.153231][ T9039] vhci_hcd: release socket [ 336.157774][ T9039] vhci_hcd: disconnect device [ 336.169545][ T9113] vhci_hcd: connection reset by peer [ 336.182248][ T9039] vhci_hcd: stop threads [ 336.186570][ T9039] vhci_hcd: release socket [ 336.216610][ T9039] vhci_hcd: disconnect device [ 336.238979][ T9039] vhci_hcd: stop threads [ 336.243308][ T9039] vhci_hcd: release socket [ 336.257680][ T9039] vhci_hcd: disconnect device [ 336.279932][ T9039] vhci_hcd: stop threads [ 336.311494][ T9039] vhci_hcd: release socket [ 336.319674][ T9039] vhci_hcd: disconnect device [ 336.333867][ T9039] vhci_hcd: stop threads [ 336.415214][ T9039] vhci_hcd: release socket [ 336.506108][ T9039] vhci_hcd: disconnect device [ 336.699849][ T9146] netlink: 64 bytes leftover after parsing attributes in process `syz.0.963'. [ 337.122916][ T30] audit: type=1326 audit(1758213077.422:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3659b8eba9 code=0x7ffc0000 [ 337.145039][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.247514][ T9158] netlink: 'syz.2.968': attribute type 21 has an invalid length. [ 337.284304][ T30] audit: type=1326 audit(1758213077.462:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3659b8eba9 code=0x7ffc0000 [ 337.461687][ T9159] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 337.700047][ T30] audit: type=1326 audit(1758213077.462:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3659b8eba9 code=0x7ffc0000 [ 337.731947][ T9159] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 337.797006][ T30] audit: type=1326 audit(1758213077.462:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3659b8eba9 code=0x7ffc0000 [ 337.975280][ T30] audit: type=1326 audit(1758213077.482:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3659b8eba9 code=0x7ffc0000 [ 337.997537][ T30] audit: type=1326 audit(1758213077.482:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3659b8eba9 code=0x7ffc0000 [ 338.046536][ T30] audit: type=1326 audit(1758213077.492:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3659b8eba9 code=0x7ffc0000 [ 338.656850][ T30] audit: type=1326 audit(1758213077.492:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3659b90ac7 code=0x7ffc0000 [ 338.678857][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.686481][ T30] audit: type=1326 audit(1758213077.492:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3659b90a3c code=0x7ffc0000 [ 338.708641][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.734834][ T30] audit: type=1326 audit(1758213077.512:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3659b90974 code=0x7ffc0000 [ 338.976673][ T9176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.013547][ T9176] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 339.030345][ T9176] EXT4-fs (loop0): unable to read superblock [ 339.049983][ T9176] Bluetooth: MGMT ver 1.23 [ 339.134888][ T9186] netlink: 'syz.5.976': attribute type 1 has an invalid length. [ 339.836919][ T9186] bond3: entered promiscuous mode [ 339.845494][ T9186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.073355][ T9188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.102764][ T9188] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 340.113676][ T9188] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 340.210360][ T9188] bond3: (slave wireguard0): making interface the new active one [ 340.218550][ T9188] wireguard0: entered promiscuous mode [ 340.246495][ T9188] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 340.508535][ T10] vhci_hcd: vhci_device speed not set [ 340.588880][ T9208] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 340.608572][ T9208] EXT4-fs (loop3): unable to read superblock [ 340.793664][ T9214] NILFS (loop0): device size too small [ 341.377076][ T9214] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 341.386702][ T9214] exFAT-fs (loop0): unable to read boot sector [ 341.394604][ T9214] exFAT-fs (loop0): failed to read boot sector [ 341.400980][ T9214] exFAT-fs (loop0): failed to recognize exfat type [ 342.539437][ T5866] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 342.800891][ T5945] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 342.812350][ T5866] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 342.848237][ T5866] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 342.860637][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 342.868960][ T9227] nbd0: detected capacity change from 0 to 127 [ 342.882306][ T5866] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 342.920163][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.968349][ T5180] block nbd0: Receive control failed (result -32) [ 342.986965][ T6041] block nbd0: Send control failed (result -32) [ 343.042987][ T5866] usb 4-1: Product: syz [ 343.061238][ T6041] block nbd0: Request send failed, requeueing [ 343.091057][ T5866] usb 4-1: Manufacturer: syz [ 343.140407][ T5866] usb 4-1: SerialNumber: syz [ 343.178718][ T95] block nbd0: Dead connection, failed to find a fallback [ 343.186161][ T95] block nbd0: shutting down sockets [ 343.192148][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.202381][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 343.218456][ T6041] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.246565][ T5866] usb 4-1: config 0 descriptor?? [ 343.252499][ T6041] Buffer I/O error on dev nbd0, logical block 1, async page read [ 343.266428][ T5866] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 343.268805][ T6041] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.278039][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 343.296184][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 343.312064][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 343.320353][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 343.328082][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 343.328491][ T6041] Buffer I/O error on dev nbd0, logical block 2, async page read [ 343.340273][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 343.360202][ T5866] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 343.372532][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 343.372631][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 343.372712][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 343.372784][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 343.372872][ T5866] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 343.374938][ T5866] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 343.381861][ T6041] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.381888][ T6041] Buffer I/O error on dev nbd0, logical block 3, async page read [ 343.382027][ T6041] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.382049][ T6041] Buffer I/O error on dev nbd0, logical block 0, async page read [ 343.382166][ T6041] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.382187][ T6041] Buffer I/O error on dev nbd0, logical block 1, async page read [ 343.382299][ T6041] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.382320][ T6041] Buffer I/O error on dev nbd0, logical block 2, async page read [ 343.382509][ T6041] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.382530][ T6041] Buffer I/O error on dev nbd0, logical block 3, async page read [ 343.382658][ T6041] Buffer I/O error on dev nbd0, logical block 0, async page read [ 343.382783][ T6041] Buffer I/O error on dev nbd0, logical block 1, async page read [ 343.385370][ T6041] ldm_validate_partition_table(): Disk read failed. [ 343.387392][ T6041] Dev nbd0: unable to read RDB block 0 [ 343.389398][ T6041] nbd0: unable to read partition table [ 343.402075][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.402103][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.402138][ T5945] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 343.402160][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.449393][ T8383] usb usb38-port1: attempt power cycle [ 343.516170][ T6041] ldm_validate_partition_table(): Disk read failed. [ 343.517960][ T6041] Dev nbd0: unable to read RDB block 0 [ 343.528845][ T5866] usb 4-1: USB disconnect, device number 9 [ 343.551792][ T6041] nbd0: unable to read partition table [ 343.573336][ T5866] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 343.586512][ T5866] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 343.587225][ T5866] keyspan 4-1:0.0: device disconnected [ 343.601707][ T5945] usb 6-1: config 0 descriptor?? [ 343.851911][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.904996][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.933992][ T9237] mmap: syz.2.993 (9237): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 343.953917][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.009930][ T8383] usb usb38-port1: unable to enumerate USB device [ 344.043909][ T5945] kye 0003:0458:5014.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 344.082992][ T5945] kye 0003:0458:5014.0009: unknown main item tag 0x0 [ 344.091509][ T9243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.101478][ T5945] kye 0003:0458:5014.0009: unknown main item tag 0x0 [ 344.108197][ T5945] kye 0003:0458:5014.0009: unknown main item tag 0x0 [ 344.115475][ T5945] kye 0003:0458:5014.0009: unknown main item tag 0x0 [ 344.126555][ T9243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.143969][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 344.159501][ T9247] veth0: entered promiscuous mode [ 344.175877][ T9247] veth0: left promiscuous mode [ 344.187715][ T5945] kye 0003:0458:5014.0009: unknown main item tag 0x0 [ 344.237504][ T5945] kye 0003:0458:5014.0009: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.5-1/input0 [ 344.290626][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.320394][ T5945] kye 0003:0458:5014.0009: tablet-enabling feature report not found [ 344.348576][ T5945] kye 0003:0458:5014.0009: tablet enabling failed [ 344.493184][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.531232][ T5945] usb 6-1: USB disconnect, device number 10 [ 347.171350][ T5932] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 347.521807][ T5932] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 347.532020][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 347.545441][ T5932] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.700889][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 348.940348][ T5932] usb 5-1: Product: syz [ 348.949482][ T5932] usb 5-1: Manufacturer: syz [ 349.018472][ T5932] usb 5-1: SerialNumber: syz [ 349.174836][ T5932] usb 5-1: config 0 descriptor?? [ 349.202856][ T5932] usb 5-1: can't set config #0, error -71 [ 349.246196][ T5932] usb 5-1: USB disconnect, device number 21 [ 350.467297][ T9310] blk_print_req_error: 140 callbacks suppressed [ 350.467316][ T9310] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.483993][ T9309] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1019'. [ 350.485102][ T9310] MINIX-fs: unable to read superblock [ 351.360757][ T9314] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 351.381366][ T9314] EXT4-fs (loop5): unable to read superblock [ 351.434526][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'. [ 351.465229][ T9309] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 351.480184][ T9322] bond2: entered promiscuous mode [ 351.487260][ T9322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.496292][ T9322] bond0: (slave bond2): Enslaving as an active interface with an up link [ 352.805752][ T5866] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 353.149522][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 353.252901][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.375193][ T5866] usb 1-1: config 253 has an invalid interface number: 140 but max is 0 [ 353.490363][ T5866] usb 1-1: config 253 has no interface number 0 [ 353.517302][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1028'. [ 356.028455][ T5932] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 356.914450][ T9342] netlink: 'syz.4.1029': attribute type 4 has an invalid length. [ 356.926679][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 356.937951][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.947955][ T5866] usb 1-1: Product: syz [ 356.958498][ T9342] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1029'. [ 356.981489][ T5866] usb 1-1: can't set config #253, error -71 [ 357.005254][ T5866] usb 1-1: USB disconnect, device number 25 [ 357.367008][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 357.387102][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 357.400868][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 357.561317][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.613035][ T5993] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.677048][ T5993] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.688553][ T5993] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.116053][ T9385] No control pipe specified [ 360.426229][ T9417] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1052'. [ 360.825777][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 360.978464][ T6044] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 361.490406][ T6044] usb 4-1: not running at top speed; connect to a high speed hub [ 361.500272][ T6044] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1423, setting to 64 [ 361.517146][ T6044] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.533829][ T6044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.555534][ T6044] usb 4-1: Product: ည [ 361.563523][ T6044] usb 4-1: Manufacturer: 4 [ 361.991174][ T6044] cdc_ncm 4-1:1.0: bind() failure [ 362.057338][ T6044] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 362.064427][ T6044] cdc_ncm 4-1:1.1: bind() failure [ 362.101077][ T6044] usb 4-1: USB disconnect, device number 10 [ 364.527776][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.670445][ T5924] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 365.048577][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 365.096907][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.097513][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.118721][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.254503][ T5924] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 365.264492][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.269497][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1072'. [ 365.275700][ T5924] usb 5-1: config 0 descriptor?? [ 365.290172][ T9477] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1071'. [ 365.307115][ T5924] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 365.437524][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.456286][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1073'. [ 365.773790][ T9489] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 365.783430][ T9489] XFS (loop5): SB validate failed with error -5. [ 365.989665][ T9469] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 369.181019][ T8383] usb 5-1: USB disconnect, device number 22 [ 372.196745][ T9513] netlink: 'syz.3.1079': attribute type 4 has an invalid length. [ 372.206159][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.017005][ T9524] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 373.149254][ T9530] siw: device registration error -23 [ 373.838843][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 374.009037][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 374.278504][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 374.321107][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 374.343668][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 374.353601][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 374.364245][ T9] usb 5-1: config 1 has no interface number 0 [ 374.377968][ T9546] team_slave_0: entered promiscuous mode [ 374.383773][ T9546] team_slave_1: entered promiscuous mode [ 374.390414][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.397401][ T9546] vlan2: entered promiscuous mode [ 374.401877][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 374.406904][ T9546] team0: entered promiscuous mode [ 374.449155][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 374.578881][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.925582][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 375.023803][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 375.118642][ T60] bridge_slave_1: left allmulticast mode [ 375.130284][ T60] bridge_slave_1: left promiscuous mode [ 375.212430][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.512895][ T60] bridge_slave_0: left allmulticast mode [ 375.526759][ T60] bridge_slave_0: left promiscuous mode [ 375.541031][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.578038][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 375.855571][ T8383] usb 5-1: USB disconnect, device number 23 [ 375.879865][ T8383] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 376.248156][ T60] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 376.542591][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.555811][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.575305][ T60] bond0 (unregistering): (slave bond1): Releasing backup interface [ 376.585506][ T60] bond0 (unregistering): Released all slaves [ 376.677488][ T9592] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1099'. [ 376.786662][ T60] bond1 (unregistering): Released all slaves [ 376.803778][ T9559] netlink: 'syz.2.1094': attribute type 12 has an invalid length. [ 376.830454][ T9573] bridge0: entered promiscuous mode [ 376.842689][ T9573] macsec1: entered promiscuous mode [ 376.933770][ T9594] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 377.388861][ T9609] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 378.137111][ T9617] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 378.172203][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.175408][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 378.179642][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.197504][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 378.276641][ T9624] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 378.298567][ T9624] qnx6: wrong signature (magic) in superblock #1. [ 378.305611][ T9624] qnx6: unable to read the first superblock [ 378.494435][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502312][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.560626][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 378.712992][ T9619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.861496][ T9631] erofs (device loop5): cannot find valid erofs superblock [ 378.884446][ T9638] program syz.4.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.888716][ T60] hsr_slave_0: left promiscuous mode [ 379.049265][ T60] hsr_slave_1: left promiscuous mode [ 379.081054][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.098435][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 379.098448][ T30] audit: type=1326 audit(1758213119.212:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.2.1113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6090d8eba9 code=0x0 [ 379.122714][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.708014][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.753340][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.781956][ T60] veth1_macvtap: left promiscuous mode [ 379.787983][ T60] veth0_macvtap: left promiscuous mode [ 379.798160][ T60] veth1_vlan: left promiscuous mode [ 379.804037][ T60] veth0_vlan: left promiscuous mode [ 382.725992][ T9698] program syz.4.1126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.842730][ T60] team0 (unregistering): Port device team_slave_1 removed [ 382.884131][ T60] team0 (unregistering): Port device team_slave_0 removed [ 384.461457][ T9720] ubi: mtd0 is already attached to ubi31 [ 384.674391][ T9728] fuse: Unknown parameter 'groŽAª' [ 384.886738][ T9712] ntfs3(loop4): try to read out of volume at offset 0x0 [ 386.086567][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 388.410194][ T9750] netlink: 'syz.2.1142': attribute type 10 has an invalid length. [ 388.715764][ T9758] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 388.753323][ T9758] qnx6: wrong signature (magic) in superblock #1. [ 388.768878][ T9758] qnx6: unable to read the first superblock [ 389.027717][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 389.390939][ T9767] vfat: Bad value for 'umask' [ 392.538657][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 393.278970][ T9815] netlink: 'syz.0.1159': attribute type 10 has an invalid length. [ 393.390602][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.392679][ T9816] cgroup: No subsys list or none specified [ 393.398277][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.490473][ T9821] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 393.527652][ T9821] qnx6: wrong signature (magic) in superblock #1. [ 393.628497][ T9821] qnx6: unable to read the first superblock [ 393.758978][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 394.016294][ T9818] bond2: entered promiscuous mode [ 394.222277][ T9835] capability: warning: `syz.0.1162' uses deprecated v2 capabilities in a way that may be insecure [ 394.247048][ T9836] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 394.359652][ T9840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 396.265523][ T9872] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 396.277616][ T9872] hfsplus: unable to find HFS+ superblock [ 397.994665][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 398.518443][ T5866] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 398.883226][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 399.418413][ T5866] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.450892][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.483485][ T5866] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 399.495487][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 399.505986][ T5866] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.519290][ T5866] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.528670][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.725447][ T9919] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 399.753901][ T5866] usb 1-1: GET_CAPABILITIES returned 0 [ 399.768453][ T5866] usbtmc 1-1:16.0: can't read capabilities [ 400.011681][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.422956][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.449684][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.529327][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.538444][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 400.549523][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.036052][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.045219][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.054313][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.063382][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.082695][ T9933] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1181'. [ 401.359424][ T9897] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1181'. [ 401.470964][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.480056][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.489103][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.498181][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.510688][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.519764][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.623777][ T9] usb 1-1: USB disconnect, device number 27 [ 401.693627][ T9947] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1194'. [ 403.393727][ T9958] ubi: mtd0 is already attached to ubi31 [ 403.643091][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 405.351315][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1204'. [ 405.482553][ T30] audit: type=1326 audit(1758213145.782:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 405.516466][ T9997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1207'. [ 405.518897][ T30] audit: type=1326 audit(1758213145.782:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 405.558563][ T30] audit: type=1326 audit(1758213145.782:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 405.610668][ T30] audit: type=1326 audit(1758213145.782:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 405.637474][ T30] audit: type=1326 audit(1758213145.782:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 405.659135][T10002] ext4: Unknown parameter 'appraise' [ 405.763995][ T30] audit: type=1326 audit(1758213145.782:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 405.797831][ T30] audit: type=1326 audit(1758213145.812:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 405.826149][ T30] audit: type=1326 audit(1758213145.812:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 406.030918][ T5866] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 406.149721][ T30] audit: type=1326 audit(1758213145.812:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 406.297478][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.334243][T10018] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 406.336230][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 406.392417][ T30] audit: type=1326 audit(1758213145.812:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f39b9d8eba9 code=0x7ffc0000 [ 406.416906][ T5866] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 406.470304][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.492160][ T5866] usb 3-1: config 0 descriptor?? [ 406.750504][T10025] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1216'. [ 407.156522][ T5866] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 407.182799][ T5866] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 407.190617][ T5866] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 407.197968][ T5866] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 407.207254][ T5866] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 407.227851][ T5866] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 407.547183][T10002] kvm: pic: non byte write [ 407.618451][ T6044] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 512.588334][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 512.595350][ C0] rcu: 1-...!: (0 ticks this GP) idle=064c/1/0x4000000000000000 softirq=39352/39352 fqs=3 [ 512.606322][ C0] rcu: (detected by 0, t=10502 jiffies, g=33249, q=29 ncpus=2) [ 512.613973][ C0] Sending NMI from CPU 0 to CPUs 1: [ 512.614000][ C1] NMI backtrace for cpu 1 [ 512.614022][ C1] CPU: 1 UID: 0 PID: 10042 Comm: syz.0.1221 Not tainted syzkaller #0 PREEMPT(full) [ 512.614040][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.614055][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x1d/0x110 [ 512.614082][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 48 89 f3 49 89 fe <65> 48 8b 05 5b 09 3e 07 48 89 44 24 48 48 c7 04 24 b3 8a b5 41 48 [ 512.614096][ C1] RSP: 0018:ffffc90000a08be0 EFLAGS: 00000082 [ 512.614109][ C1] RAX: 0000000000000000 RBX: 0000000000000802 RCX: 0000000000000001 [ 512.614119][ C1] RDX: 0000000000000001 RSI: 0000000000000802 RDI: ffffffff99f5f4b8 [ 512.614128][ C1] RBP: ffffc90000a08c78 R08: 0000000000000003 R09: 0000000000000004 [ 512.614137][ C1] R10: dffffc0000000000 R11: fffff5200014116c R12: ffff8880772aa520 [ 512.614148][ C1] R13: ffff8880772aa508 R14: ffffffff99f5f4b8 R15: 1ffff1100ee554a3 [ 512.614160][ C1] FS: 00007fe9bbdef6c0(0000) GS:ffff888125ae1000(0000) knlGS:0000000000000000 [ 512.614172][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.614182][ C1] CR2: 0000000000000000 CR3: 0000000030842000 CR4: 00000000003526f0 [ 512.614194][ C1] Call Trace: [ 512.614200][ C1] [ 512.614207][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 512.614227][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 512.614248][ C1] debug_object_activate+0x2e2/0x420 [ 512.614270][ C1] enqueue_hrtimer+0x30/0x3a0 [ 512.614286][ C1] __hrtimer_run_queues+0x656/0xc60 [ 512.614316][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 512.614336][ C1] ? read_tsc+0x9/0x20 [ 512.614358][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 512.614392][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 512.614416][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 512.614442][ C1] [ 512.614446][ C1] [ 512.614452][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.614467][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 512.614486][ C1] Code: 74 05 e8 ab a0 41 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 13 31 0a f6 65 8b 05 dc 08 3e 07 85 c0 74 40 48 c7 04 24 0e 36 [ 512.614499][ C1] RSP: 0018:ffffc90004edf9e0 EFLAGS: 00000206 [ 512.614511][ C1] RAX: 509102af73ad8f00 RBX: 0000000000000a06 RCX: 509102af73ad8f00 [ 512.614521][ C1] RDX: 0000000000000007 RSI: ffffffff8dbbfea8 RDI: 0000000000000001 [ 512.614530][ C1] RBP: ffffc90004edfa70 R08: ffffffff8fc43e37 R09: 1ffffffff1f887c6 [ 512.614540][ C1] R10: dffffc0000000000 R11: fffffbfff1f887c7 R12: dffffc0000000000 [ 512.614551][ C1] R13: ffff8880b8627ac0 R14: ffff8880b8627ac0 R15: 1ffff920009dbf3c [ 512.614571][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.614588][ C1] ? read_tsc+0x9/0x20 [ 512.614610][ C1] clock_was_set+0x63b/0x7c0 [ 512.614635][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 512.614665][ C1] do_adjtimex+0x8f0/0xb20 [ 512.614682][ C1] ? __x64_sys_clock_adjtime+0x1f7/0x2b0 [ 512.614700][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 512.614730][ C1] __x64_sys_clock_adjtime+0x1f7/0x2b0 [ 512.614751][ C1] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 512.614767][ C1] ? count_memcg_event_mm+0x21/0x260 [ 512.614796][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 512.614818][ C1] ? do_syscall_64+0xbe/0xfa0 [ 512.614840][ C1] do_syscall_64+0xfa/0xfa0 [ 512.614858][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.614878][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.614892][ C1] ? clear_bhb_loop+0x60/0xb0 [ 512.614908][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.614922][ C1] RIP: 0033:0x7fe9baf8eba9 [ 512.614935][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.614947][ C1] RSP: 002b:00007fe9bbdef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 512.614960][ C1] RAX: ffffffffffffffda RBX: 00007fe9bb1d6090 RCX: 00007fe9baf8eba9 [ 512.614970][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 512.614980][ C1] RBP: 00007fe9bb011e19 R08: 0000000000000000 R09: 0000000000000000 [ 512.614988][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.614997][ C1] R13: 00007fe9bb1d6128 R14: 00007fe9bb1d6090 R15: 00007fff128be4b8 [ 512.615016][ C1] [ 512.615995][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g33249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 513.057116][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 513.067097][ C0] rcu: RCU grace-period kthread stack dump: [ 513.072989][ C0] task:rcu_preempt state:R running task stack:26840 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 513.086499][ C0] Call Trace: [ 513.089780][ C0] [ 513.092728][ C0] __schedule+0x1798/0x4cc0 [ 513.097285][ C0] ? __pfx___schedule+0x10/0x10 [ 513.102167][ C0] ? schedule+0x91/0x360 [ 513.106437][ C0] schedule+0x165/0x360 [ 513.110630][ C0] schedule_timeout+0x12b/0x270 [ 513.115491][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 513.120879][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 513.126793][ C0] ? __pfx_process_timeout+0x10/0x10 [ 513.132091][ C0] ? prepare_to_swait_event+0x341/0x380 [ 513.137648][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 513.142525][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 513.148695][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 513.153995][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 513.159214][ C0] ? finish_swait+0xcd/0x1f0 [ 513.163822][ C0] rcu_gp_kthread+0x99/0x390 [ 513.168427][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 513.173639][ C0] ? __kthread_parkme+0x7b/0x200 [ 513.178590][ C0] ? __kthread_parkme+0x1a1/0x200 [ 513.183636][ C0] kthread+0x711/0x8a0 [ 513.187722][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 513.192937][ C0] ? __pfx_kthread+0x10/0x10 [ 513.197547][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.202776][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.207997][ C0] ? __pfx_kthread+0x10/0x10 [ 513.212601][ C0] ret_from_fork+0x4bc/0x870 [ 513.217214][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 513.222362][ C0] ? __switch_to_asm+0x39/0x70 [ 513.227142][ C0] ? __switch_to_asm+0x33/0x70 [ 513.231920][ C0] ? __pfx_kthread+0x10/0x10 [ 513.236528][ C0] ret_from_fork_asm+0x1a/0x30 [ 513.241333][ C0] [ 513.244374][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 513.250708][ C0] CPU: 0 UID: 0 PID: 10043 Comm: syz.0.1221 Not tainted syzkaller #0 PREEMPT(full) [ 513.260091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.270152][ C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 513.276848][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 e6 77 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 91 73 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 75 73 [ 513.296475][ C0] RSP: 0018:ffffc90004ff72a0 EFLAGS: 00000246 [ 513.302559][ C0] RAX: ffffffff81b4692b RBX: 1ffff110170e8005 RCX: 0000000000080000 [ 513.310540][ C0] RDX: ffffc9000e573000 RSI: 000000000007ffff RDI: 0000000000080000 [ 513.318522][ C0] RBP: ffffc90004ff7420 R08: ffffffff8fc43e37 R09: 1ffffffff1f887c6 [ 513.326503][ C0] R10: dffffc0000000000 R11: fffffbfff1f887c7 R12: ffff8880b8740028 [ 513.334478][ C0] R13: dffffc0000000000 R14: ffff8880b863b240 R15: 0000000000000001 [ 513.342453][ C0] FS: 00007fe9bbdce6c0(0000) GS:ffff8881259e1000(0000) knlGS:0000000000000000 [ 513.351390][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.357972][ C0] CR2: 00007fe9bbdcdf98 CR3: 0000000030842000 CR4: 00000000003526f0 [ 513.365948][ C0] Call Trace: [ 513.369233][ C0] [ 513.372167][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 513.377381][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 513.383714][ C0] ? free_pgd_range+0x144b/0x14c0 [ 513.388772][ C0] ? rcu_is_watching+0x15/0xb0 [ 513.393552][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 513.398761][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 513.403892][ C0] flush_tlb_mm_range+0x6b1/0x12d0 [ 513.409033][ C0] ? unlink_file_vma_batch_add+0xda/0x1e0 [ 513.414765][ C0] ? free_pgtables+0x8e0/0x9c0 [ 513.419537][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 513.425091][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 513.430209][ C0] tlb_flush_mmu+0x1a7/0x680 [ 513.434812][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 513.439411][ C0] vms_clear_ptes+0x42c/0x540 [ 513.444108][ C0] ? __pfx_vms_clear_ptes+0x10/0x10 [ 513.449323][ C0] ? mas_find+0xa7d/0xd30 [ 513.453663][ C0] ? may_expand_vm+0x1af/0x2f0 [ 513.458441][ C0] mmap_region+0x970/0x2110 [ 513.462952][ C0] ? trace_sched_exit_tp+0x36/0x110 [ 513.468172][ C0] ? __pfx_mmap_region+0x10/0x10 [ 513.473207][ C0] ? __lock_acquire+0xab9/0xd20 [ 513.478124][ C0] ? mm_get_unmapped_area+0xa7/0xd0 [ 513.483341][ C0] ? shmem_get_unmapped_area+0x2cf/0x910 [ 513.488988][ C0] ? cap_mmap_addr+0xb0/0x100 [ 513.493667][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 513.498538][ C0] ? security_mmap_addr+0x71/0x270 [ 513.503662][ C0] do_mmap+0xc45/0x10d0 [ 513.507840][ C0] ? __pfx_do_mmap+0x10/0x10 [ 513.512434][ C0] ? down_write_killable+0x178/0x230 [ 513.517726][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 513.523372][ C0] ? apparmor_mmap_file+0xc4/0xe0 [ 513.528417][ C0] vm_mmap_pgoff+0x2a6/0x4d0 [ 513.533019][ C0] ? __se_sys_futex+0x36f/0x400 [ 513.537876][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 513.543004][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 513.547863][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 513.552649][ C0] do_syscall_64+0xfa/0xfa0 [ 513.557166][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.562374][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.568462][ C0] ? clear_bhb_loop+0x60/0xb0 [ 513.573147][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.579042][ C0] RIP: 0033:0x7fe9baf8eba9 [ 513.583462][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.603079][ C0] RSP: 002b:00007fe9bbdce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 513.611515][ C0] RAX: ffffffffffffffda RBX: 00007fe9bb1d6180 RCX: 00007fe9baf8eba9 [ 513.619515][ C0] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 513.627527][ C0] RBP: 00007fe9bb011e19 R08: ffffffffffffffff R09: 00000000ec776000 [ 513.635505][ C0] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 513.643494][ C0] R13: 00007fe9bb1d6218 R14: 00007fe9bb1d6180 R15: 00007fff128be4b8 [ 513.651498][ C0]