last executing test programs: 33.095539662s ago: executing program 0 (id=196): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x9}, 0x90) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'macvlan1\x00'}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x57789000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x24) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x9}, 0x90) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'macvlan1\x00'}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x57789000) (async) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') (async) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') (async) socket$rxrpc(0x21, 0x2, 0xa) (async) connect$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x24) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 32.590383091s ago: executing program 0 (id=199): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)}, 0x40000120) sendmsg$inet(r5, 0x0, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517", 0x8}], 0x1}, 0x0) fcntl$lock(r6, 0x26, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) dup(r4) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff04000000100000001800018014000200766574683100000000000000000000000500190001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000000000000000051000", 0x1e}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 29.41425069s ago: executing program 0 (id=234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000000000000000100060000000000100007000000000020"], 0x24, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000040)=0x371, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto(r0, &(0x7f0000000000)="f88f7e3084494aa73bc392", 0xb, 0x40000, &(0x7f0000000080)=@in6={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x80) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)='jffs2\x00', 0x200000, 0x0) 29.27955853s ago: executing program 0 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r2, r1, 0x0, 0x7ffff000) 29.278516721s ago: executing program 0 (id=237): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = epoll_create1(0x80000) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000001540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000040)='-1\x00', 0x3) (async) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f00000014c0)={0xf000, 0x1c000}) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x7, 0xfffffffd, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x3, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001480)={'gre0\x00', &(0x7f0000001440)={'syztnl1\x00', r10, 0x8000, 0x80, 0xfffffffc, 0x5, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x62, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x2400c0d0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6edfd0539cbf1e1fdf69f360cd0ba1fea9d41600000000000000d71571199a94a4ba7d19d01f1a57d9658be0c7d899e730617ab06f2373b75fb178c71dec6411324645f85b364d8140965edd26d93004225c1cc4d074d4a086ee903da021fafeb3de5651378a5d9b25b63e4b205c7b26c28af06a66954b2e1235f7281a3a3d2f6e42de970f2390e692549a1db27de7a708e6d0b61219d8bf426159fc08ede7fddb387440b4915f959c1950894e10f55e20732462ac7f6d82bd7b16", @ANYRES16=r9, @ANYBLOB="000428bd7000fedbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) 28.975311829s ago: executing program 0 (id=243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cd2, 0x4, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="0003000009000000", 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff824}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x20041) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYRESOCT=r3], 0xe0}, 0x1, 0x0, 0x0, 0xa3d35308ed295c18}, 0x0) close(r4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x2f}, 0xfffffffd}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x21, @loopback, @mcast1, 0x10, 0x70c2dfcf32e7961, 0xb4, 0x9}}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000180)={{@my=0x0, 0xfffffff3}, @hyper, 0xf, 0x86e, 0x3, 0xffff, 0x5, 0xffffffff, 0xfffffffd}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r12) sendmsg$IEEE802154_LLSEC_DEL_DEV(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000ffdbdf252b0000000a0001007770616e300000160c0005c10000000000e99af0346506afe33386feb8a202924369e1aee3393a89a9563e6a26db41926a6efc048f7ef5db7df2ba2caa000e11a58447bca5f62f8e78f8c9e28d7cd95960628c53b0abdf68696c777c01bb10487e87884eca9fa0d30ba6662be1148d6c44cbbaa6ce0e8e7ac24cd426e87a2058647b404904a25b428ef59ef912174deadcb5428a7d95cd80003998e63ebfd52ec0a3446372283a498be7657fa2854a9beae1eff5fed52690737cf2ac76ad2d8bfc"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 28.859158819s ago: executing program 32 (id=243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cd2, 0x4, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="0003000009000000", 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff824}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x20041) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYRESOCT=r3], 0xe0}, 0x1, 0x0, 0x0, 0xa3d35308ed295c18}, 0x0) close(r4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x2f}, 0xfffffffd}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x21, @loopback, @mcast1, 0x10, 0x70c2dfcf32e7961, 0xb4, 0x9}}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000180)={{@my=0x0, 0xfffffff3}, @hyper, 0xf, 0x86e, 0x3, 0xffff, 0x5, 0xffffffff, 0xfffffffd}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r12) sendmsg$IEEE802154_LLSEC_DEL_DEV(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000ffdbdf252b0000000a0001007770616e300000160c0005c10000000000e99af0346506afe33386feb8a202924369e1aee3393a89a9563e6a26db41926a6efc048f7ef5db7df2ba2caa000e11a58447bca5f62f8e78f8c9e28d7cd95960628c53b0abdf68696c777c01bb10487e87884eca9fa0d30ba6662be1148d6c44cbbaa6ce0e8e7ac24cd426e87a2058647b404904a25b428ef59ef912174deadcb5428a7d95cd80003998e63ebfd52ec0a3446372283a498be7657fa2854a9beae1eff5fed52690737cf2ac76ad2d8bfc"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 8.486786061s ago: executing program 4 (id=373): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x3, 0xffff, 0xb, 0xb8d0, 0x2, 0x4, 0x8000, 0x7fffffff, 0xfffffffeffffffff, 0x2, 0xffff, 0x5, 0x80000000, 0xffffffff, 0x7, 0x7fffffffffffffff], 0x4000}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x20280) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x248, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2b}, {0xc, 0x90, 0x8000000000000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0xc2e2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xa}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x8000000000000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x10000}, {0xc, 0x90, 0x37e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x80000001}}]}, 0x248}, 0x1, 0x0, 0x0, 0x4800}, 0x40045) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000005c0)={0x32ad, 0x1, 0x57efcf072692ec4a, "fb098413274b3fc0bf344b54c358c8ef7434951aac0a58a679fd8bf410bfd28c", 0x38414761}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000600), 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000640)={0x8, 0x8, 0x80000000, 0x8, 0x6}) r3 = accept4$inet6(r1, 0x0, &(0x7f0000000680), 0x1800) ioctl$TCSETS(r1, 0x5402, &(0x7f00000006c0)={0x1, 0x2, 0x40, 0xde2, 0x9, "a457a71fb7ff34cef41f82090929db8cbbf5be"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000700), 0x9, 0x100) read$sequencer(r1, &(0x7f0000000740)=""/186, 0xba) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x80, 0x20, 0xdd, 0x8, {{0x10, 0x4, 0x2, 0x14, 0x40, 0x66, 0x0, 0x7, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x7, [{@rand_addr=0x64010101, 0x401}]}, @timestamp_addr={0x44, 0x1c, 0xad, 0x1, 0xe, [{@broadcast, 0x1}, {@private=0xa010101, 0xfffffbff}, {@local, 0x1}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', r4, 0x2f, 0x4, 0x9b, 0x32e7, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x1, 0x2ae41f7763e2591c, 0x7, 0x80000000}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1d4, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x88, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x294}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0x2, 0x6, 0x5, 0x400, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x8, 0x7, 0x61, 0x3, 0x61c3, 0xe, 0x9, 0x800, 0x60]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x515e3805}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x9, 0x2, 0x8ba, 0x5, 0x4, 0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x29a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x20a}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xa, 0xe]}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x2, 0x6, 0x2, 0x1457, 0x80000001, 0x5, 0x80000001, 0x3, 0x3, 0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1ff, 0x9, 0x722, 0x5, 0x400]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x10}, 0x84) r6 = openat$cgroup_ro(r1, &(0x7f0000000c80)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r1) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xe0, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @empty, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x841}, 0x10) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000f00)={0x8, 0x1, [{0x7ff, 0x0, 0x1ff}, {0x7, 0x0, 0x7f}, {0x800, 0x0, 0x10001}, {0x4, 0x0, 0x4}, {0x6c, 0x0, 0x5a}, {0x2, 0x0, 0x1}, {0x6, 0x0, 0x8000}, {0x9, 0x0, 0x9}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x4}, {0x8, 0x0, 0x10001}, {0xff, 0x0, 0x10000}, {0x242, 0x0, 0xffffffff}, {0x7f, 0x0, 0x284}, {0x7, 0x0, 0x2}, {0xffffff7b}]}) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000010c0)={'\x00', 0xc4, 0x6, 0x7, 0x0, 0x80, 0x3000, 0x8080000, '\x00', 0x9}) syz_genetlink_get_family_id$SEG6(&(0x7f0000001280), r1) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) poll(&(0x7f0000001300)=[{r8, 0x431d}, {r7, 0x84}, {r3, 0xe100}, {r0, 0xc115}, {r10, 0x1421}, {r6, 0x1614}, {r1, 0x6120}], 0x7, 0x3) r11 = syz_usb_connect$uac1(0x2, 0xc3, &(0x7f0000001340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0xf9, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x7f}, [@extension_unit={0x9, 0x24, 0x8, 0x5, 0xffff, 0xff, "cd9c"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x2, 0x3, "e6acdd"}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0xa, "6f46f7"}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x5, "33e0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x4, "5dff6744f92b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x95, 0x2c, {0x7, 0x25, 0x1, 0x0, 0x3, 0x39e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x6, 0x1002}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0xffff, 0x3, "7c5e3886"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x6, 0x3}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x4, 0x6, {0x7, 0x25, 0x1, 0x80, 0x9, 0x6}}}}}}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x300, 0x1, 0x0, 0x0, 0x8, 0xc}, 0xfe, &(0x7f0000001480)={0x5, 0xf, 0xfe, 0x2, [@generic={0xef, 0x10, 0x7bca1b2ffeede0a0, "f5920f747841a65bf5c0c3912ae292c7af99e27ce1b8ed5a984a3b7f4e3622648b0cc34d390bde5ef39e198a67c7299fd206a62ecbe9cf7aa77b9ec43b4cfd20307dffd5ac5f5b136d4474ea5dc13964428fa16b4d1cd18567c917c1bfb3c749fc215d43a2c1ece65349ccab40155bceb29a25a0bad4b9168afc7439375c200831ec8e0cbcd05a0e0ecd6c2b45939e2713cf75f22c9a3b3d3a09e88aba12c09e69d0fe3a5d15f8a72d91e52e1a3304bbaf73281eccbb676689b83ce6f05b1665090946a3528ccce52c289f1f469f8b5baee01db507dcc20520ef173fb552ccb5a5e67cdcb8978a1cc0205c71"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xfd, 0x80, 0xf}]}, 0x2, [{0x79, &(0x7f0000001580)=@string={0x79, 0x3, "e5e97bde01b947328c74d6157599e2a3f3d90c6a943a279737e1f25687a42bc53f312802c88e3af8a005d7d4b920bb7d176593e1a1c40ecf7b57b58799a5fc282f505aff5f9542abf15cdd8a6b143ef814ceea93a2c939589ea1e3fcf84f3d634a3d0eab14d95637b7787a272a18f34cd406989bd08b65"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_control_io$uac1(r11, &(0x7f0000001880)={0x14, &(0x7f0000001680)={0x40, 0x11, 0xe9, {0xe9, 0xb, "f38391e17eea6607e8bd24cd2632a6598eec3f828624d601f79a85a9a526f7301069452c98ccf2f11b947aa516c8eebb038eeb3f250896cc35925850c378907f34dc8fbd5cceac245c20d71c848a1a288594683d16acac46a3d79d4d23be3a9e6dcaac54d5e573d18900918f7eb84be078dce4876cfc2729a6650a00101b34732d2ba0ecd0aa8c649841380d5498f14d5b93a7a35facfed9a6d0ddb7e70b49e3bf1cfd51b3eee7e9caf5b571157836de11851cb7fa23e5acddd3b9fc54e5ed519a451ec15fce78a13b9da0b1206fb44ea606a8adb166755ab694f1e9dd624b2f71a2ee56005be4"}}, &(0x7f0000001780)={0x0, 0x3, 0xda, @string={0xda, 0x3, "91048ff142921fdaacc667b95be03f9b5f7201bbf256ea9c6f4b9119563d5dbf8f653eb05257c62182e93883d96d24eee5e7f15920d8e861dfc9c697edddedce7550670c8bde1bdf513887c6ab311f771a4f004adc0cc0d8ce31c4672743a026bdefbe241d5cef5f334ffb46609a5be0050e452de924fd383b5009c23e4b042f3252d96da228791f7df3b12e39f08949cb65a9a6f6dde6eecd0f4eb3f68b9232a03061d3ff89da810a86b168269d622724944e431910388d1f3b649564c291fd1459fcb5588ef55ca01b3bb17b0d4ce31e1ba4c26d4c1df1"}}}, &(0x7f0000001b80)={0x44, &(0x7f00000018c0)={0x0, 0x30, 0xd8, "802f9aa06188c0d3c81276c6960897f19adfb41845a19cf1ed75e33f650677f4b0d41659c9ea1f1858ba012b4b254a6f59f7b2bb4e8b7589d638f523f918fde321a7459ccfe1d4c5479a3b49fb797da86725b0b524b372db770e08ebdd362fbd6b16f60cf3a31dcfa45567f6a0695a5960e4b37b22c4ec5ecbf2cd3c89443604fc7c36bd882cef57a25f1b07ab09b1a8af3d6e4a9957e30384678113ab67d41928a6845c1252005cc4f4a9562a82e9d7e85511ec70e5cdc3b4969f12b921ac35e21c0bf664dc84454fdc55ab30af96af8f46374fb6aa0e89"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000001a00)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001a40)={0x20, 0x81, 0x3, "4ef769"}, &(0x7f0000001a80)={0x20, 0x82, 0x3, "4213ec"}, &(0x7f0000001ac0)={0x20, 0x83, 0x3, "cb9b69"}, &(0x7f0000001b00)={0x20, 0x84, 0x3, "d38aed"}, &(0x7f0000001b40)={0x20, 0x85, 0x3, "3649b7"}}) 5.406806097s ago: executing program 4 (id=397): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1652c2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}}, 0x800) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendfile(r2, r0, 0x0, 0x7fffefff) 5.391532389s ago: executing program 4 (id=398): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c5a42, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) (async) fadvise64(r0, 0x9, 0x9, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x2000) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) sendfile(r0, r0, 0x0, 0x6) (async) fallocate(r4, 0x48, 0x5, 0xb1bb) 4.471441695s ago: executing program 4 (id=400): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x552}}, './file0\x00'}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r8]) ioctl$KVM_GET_VCPU_EVENTS(r9, 0xc048aeca, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfd}, 0xffffffffffffff33) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xf73f}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20040045}, 0x0) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f00000003c0)={r12, 0x5, 0x2, 0x2}, &(0x7f0000000400)=0x10) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="e370d6", 0x3}], 0x1) 4.261920746s ago: executing program 4 (id=405): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) keyctl$read(0x2, 0x0, &(0x7f0000002180)=""/4096, 0x1000) syz_clone(0x208c7600, 0x0, 0xfffffed8, 0x0, 0x0, 0x0) (async) syz_clone(0x208c7600, 0x0, 0xfffffed8, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="073478b0467ab4a59a83962ed24adcde01e1f4b383e661faf6b720f865525875ebe1d4b6e930164c73d072776a1dd71f812ba0dfc87ed4f56d", 0x39}, {&(0x7f00000001c0)="004fb555c85bb870ad0aa3bcb4420cb5b3058aaca785f9c339b685ae6f9c8f557e172883bb45e5f8d5f0fc57eae902dde53b9ffda9b73005e4d8fbecf8d54efe3db94de1c1", 0x45}, {&(0x7f0000000240)="35a37a160d3631fb2c18a6580c2ba9e4c2cd13b65fff4ae4b27bfed2244e3ea61711eecf7ed443504ccb9fb75e3070a88241a4035f10b80d346f36724c52ac8914bd6e", 0x43}, {&(0x7f00000003c0)="29242ee7db556f5919eff034f324e1c02bba3c654ec6a4a68fa2193a7d84f4340c6a858cf4dad10e3c70b64c41a44f80f1dbb1b37cca24a5e1bd4ce6a69121ed118fb992dcdfe4d31a70aa7fee3ad75e8f34769eabe8f2bf67cb53aaa4a0896fba4c0ba80b1355d950076b0e05978d85aa6aae1f1f43f7f449be8632dfe1b2b85515651eabfa9d646a4b1468a2a32137a99882cb54818b62a3a3696dae17ea4b66bcfd29cbb40a7385345dc96f704a9f5a3ff8d664caee2158bf0cf2ccdda3f94a9a1d3944c9393eb428eb325f6f2035cc9fcc0d134b", 0xd6}], 0x4, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x24}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x30}, 0x4800) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 2.371403636s ago: executing program 1 (id=416): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x3c, 0x9, 0x6, '\x00', 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2.312001236s ago: executing program 3 (id=417): setfsgid(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x407}}}, 0x7) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) r1 = userfaultfd(0x80001) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) io_setup(0x6bc2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setreuid(0x0, r3) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400501, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.229564205s ago: executing program 3 (id=418): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x37, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090500002defeab6210000000000", @ANYRES32=r3, @ANYBLOB="14005080050009000200000005000200000000000a0006000802110000010000"], 0x3c}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x5, 0x8000000000000000}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000014c0)={0xffffffd1, 0x2, 0x2, 0x811a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd24, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffe}]}, 0x41}, 0x1, 0x0, 0x0, 0x20008000}, 0x4810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, 0x140d, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x8050) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x74) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000397000/0x2000)=nil, r7, 0x1000000, 0x80010, r8, 0x0) 2.123532511s ago: executing program 1 (id=419): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000000c0)={0x18, 0x1000000, 0x0, 0x0, 0x0, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 2.119538378s ago: executing program 3 (id=420): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000380)="c441f96ec866400fe2dec441a16dfb46c7045300101000f00fc01e66410f6f150400000052c4637bf02640f5c4b93c10", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.076308822s ago: executing program 3 (id=421): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000d36000/0x4000)=nil, 0x4000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.848424236s ago: executing program 1 (id=422): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) read(r4, &(0x7f0000000740)=""/377, 0x179) sendfile(r1, r1, 0x0, 0x7ffff000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)=0x0) ptrace$peeksig(0x4209, r6, &(0x7f0000000100)={0x1c, 0x0, 0x5}, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.72764466s ago: executing program 3 (id=423): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) openat$uhid(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000000001c00000"]) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.667878607s ago: executing program 3 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x5, "ffb63e57dd"}, 0x0}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, &(0x7f00000000c0)='./mnt\x00', r1, 0x0, 0x177) 1.157729891s ago: executing program 4 (id=427): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) madvise(&(0x7f000006c000/0x2000)=nil, 0x2000, 0x16) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async, rerun: 64) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000001800)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "d3e21ecd"}]}}, 0x0}, 0x0) (async, rerun: 32) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) (async) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) (async, rerun: 32) r3 = dup2(r2, r1) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x11080}) landlock_restrict_self(r4, 0x4) 986.00591ms ago: executing program 2 (id=428): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 952.607204ms ago: executing program 1 (id=429): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xc0000, 0x2}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4004010) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0, 0xfffffffffffffe7d}, 0x200001}, {{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x407}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001a00)=""/4109, 0x100d}]}, 0x8}, {{0x0, 0x0, 0x0}, 0x12}], 0x7, 0x40000020, 0x0) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r0, r0, 0x0, 0x7ffff000) 879.563259ms ago: executing program 2 (id=430): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x7, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x30, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f000099b000/0x1000)=nil, 0x1000, 0x300000a, 0x22052, r1, 0x5708e000) 877.501075ms ago: executing program 2 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402228}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000001) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r2, 0xc20, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x2800) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r4, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audisp_exec_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40804}, 0x4004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r5, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0xfa16beb79fb514b8, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x34}}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x20000080) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000a40), 0x100, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r7) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000bc0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, [0x6, 0x5, 0xff, 0x7fffffff, 0x9, 0x3, 0x10000, 0x5, 0x4d1, 0xfffffffffffffff7, 0xe87, 0x9, 0x1, 0x6, 0x8]}, &(0x7f0000000cc0)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000d00)={r10, 0x7, 0x9, [0x1, 0x0, 0x101, 0x5, 0x7f95, 0xf5c, 0x401, 0xfffe, 0x3]}, 0x1a) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r11, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80, 0x13}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000051) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r8, 0xa, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xa0c}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000002}, 0x20000) sync_file_range(r9, 0xa, 0x8, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r8, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc094) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000001040)=@arm64={0x81, 0x3, 0x9, '\x00', 0x7}) msgget(0x1, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000006a00)={0xc000002, 0x1655, &(0x7f0000001080)=[0x80000000, 0x1, 0x4, 0xf43, 0x4, 0x1, 0x6, 0x8001, 0x62, 0x0, 0x4, 0x80000000, 0x10001, 0x1ec, 0x10, 0x2c, 0x62d, 0x1, 0x6b7, 0xc, 0x0, 0x72ddddff, 0xd8000000, 0x3, 0x5, 0x3, 0x4, 0x6, 0x0, 0x4, 0x5, 0x8, 0x621, 0x400, 0xf832, 0x8, 0x86, 0x9, 0x5, 0x697, 0x3, 0x9, 0x2, 0x57fa3079, 0xfff, 0x1, 0x6, 0x7f, 0xf64f, 0x2, 0x3418, 0xd4d, 0xc, 0x2, 0x33, 0x8, 0x4, 0xffffff0b, 0x5, 0x4, 0x8, 0x79, 0x7, 0x6b9c, 0x20, 0x2, 0x3, 0x5, 0x3, 0x0, 0x9, 0x4, 0x31, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x70000, 0x400, 0x7, 0xc83, 0x800, 0x0, 0xfffffff8, 0x3b, 0x6, 0x8, 0x1000, 0x87, 0x3ff, 0x0, 0x5, 0x7f, 0x0, 0x0, 0x5, 0x7, 0x9, 0x6, 0xe, 0x4, 0x6, 0x8, 0x0, 0x9, 0x7, 0xfffffffa, 0x330a, 0x6d53, 0x1, 0x7, 0x5cad, 0x4, 0x0, 0x3ff, 0x4, 0xffffffff, 0x0, 0x6, 0x29449895, 0x0, 0x4, 0x9, 0x1, 0x5, 0x6, 0x8, 0x80000001, 0x4, 0x3, 0x1, 0x6c672971, 0xff, 0x40, 0x80000000, 0x115b, 0x6, 0x9, 0x29, 0x3, 0x3, 0x3, 0x6, 0x0, 0x6, 0x7fffffff, 0x6, 0x1, 0xff, 0xffff, 0x80000000, 0x7, 0x8, 0x0, 0xe8a, 0x1, 0x2800000, 0x7, 0x94, 0x0, 0x8, 0xb, 0x10000000, 0xfff, 0x3, 0x1, 0x9, 0xc, 0x7, 0xed, 0x6, 0x953e, 0x6, 0x7, 0xffffffff, 0x2, 0x8, 0x2, 0x6, 0x4, 0x101, 0x9, 0xfcd7, 0x406, 0x3, 0x400, 0xd, 0x17d, 0x1ff, 0x3, 0xfffffff8, 0x8, 0x800, 0xb, 0x7, 0x3, 0xfffffffe, 0x9f6, 0x7fff, 0x3, 0x6, 0x6, 0x7ff, 0x3, 0x4, 0xd598, 0xff, 0xfffffffa, 0xff, 0x3, 0x5, 0xfffff000, 0x62, 0x8, 0x0, 0xfffffff9, 0x40, 0x6b98, 0x636, 0x6, 0x4, 0x400, 0x4, 0x5, 0x5, 0xf, 0x100, 0x2, 0x9, 0x9, 0x7, 0x6, 0x4, 0x3, 0xff, 0x6, 0x6, 0x67c, 0x9, 0x8000, 0xfff, 0x9, 0x0, 0x7f, 0x3, 0x5, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x5, 0x7, 0x3, 0x6, 0xfb, 0x1, 0x6, 0x2, 0x1ff, 0x63, 0x7, 0x9, 0x6, 0x1, 0x7ff, 0x1a56, 0x2, 0x2, 0xa, 0x80, 0x4000, 0x8, 0x4, 0x9, 0x9, 0x9, 0x9b, 0x9, 0x3, 0x1ff, 0x4, 0x80000001, 0x7f, 0x4, 0x3cd, 0xf1, 0x9, 0x8, 0x5, 0x6, 0x0, 0x93, 0x9, 0x3, 0x4, 0x7, 0xd, 0x3, 0x7, 0x4, 0x8, 0x8, 0x70f, 0x400, 0x1, 0x6, 0x1, 0x5061dbad, 0xd, 0xfffffffb, 0x2, 0x6, 0x7fff, 0x6, 0x5, 0xfffffff7, 0x2, 0x0, 0x7, 0x6, 0xc2, 0xc4ed, 0x7, 0x1, 0x5, 0xffff, 0x0, 0xfffffffa, 0x7, 0x1, 0x2, 0x9, 0xb, 0x8, 0x6, 0x2, 0xffffffff, 0x4, 0xa1, 0x800, 0x0, 0x2, 0x7ff, 0x6, 0x7, 0x1, 0x4, 0x8, 0x5, 0x80, 0x12, 0x7ea, 0xa, 0x9, 0x7f, 0x7, 0x124, 0xf3d0, 0x3, 0x6, 0x0, 0x6, 0x4, 0x400, 0xfffffffe, 0x400, 0x6, 0x2e6, 0x40, 0xc, 0x1, 0x1, 0x4, 0x2, 0xf, 0x6, 0x5, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x7fffffff, 0x1000, 0x6, 0x0, 0xe7, 0x8fbb, 0x1, 0x312, 0xe2a2, 0xfffffffc, 0x8, 0x2, 0x2, 0x7, 0x2, 0x3, 0x40, 0x5, 0x1, 0x0, 0x0, 0x10, 0x9, 0x4736, 0x6, 0x0, 0x7, 0x1, 0x8, 0x6, 0x3, 0x987, 0x4c4, 0x12ea, 0x800000, 0x9dfd, 0x39a7, 0xf5, 0x6, 0xfffffeff, 0x9, 0x0, 0x3687, 0x8, 0x3, 0x7, 0x8, 0x8, 0x7ff, 0x6, 0x800, 0x6, 0x2, 0x5, 0x4, 0x4, 0x9, 0x9, 0x1000, 0x4, 0x6, 0x4, 0xbfb4, 0xe, 0x1, 0x5, 0x40, 0x7, 0xc8, 0x82c8, 0x8001, 0x7ff, 0x0, 0x0, 0x80000000, 0x800, 0x4e, 0x83, 0x2, 0x1, 0x7, 0x4ee9, 0x400, 0x8, 0x8, 0x1, 0x5, 0x6, 0x1, 0x1000, 0x9, 0x400, 0x8, 0x9, 0x3, 0x1, 0x800, 0x3, 0x1000, 0x6, 0x4, 0x7f, 0x6, 0x0, 0x5, 0x9, 0x20000, 0x4668, 0x2, 0x2, 0x6, 0x8000, 0x7ff, 0x3, 0x2, 0x4, 0x9, 0xa, 0xfffffffc, 0x7, 0x968, 0x3, 0x9, 0x0, 0x6, 0x6, 0x2, 0x7, 0x8, 0x7, 0x3f, 0x100, 0x1f0, 0x7, 0x2, 0x0, 0xe, 0x3, 0x200, 0xe, 0x401, 0x4d, 0x10001, 0x7b09, 0x8000, 0x4, 0x7f, 0x6, 0x3, 0x4, 0xa, 0x9b, 0x9, 0x2, 0x2, 0x1, 0x86f, 0x7f, 0x487, 0x4, 0xd02, 0x8, 0x401, 0x0, 0xffffffff, 0xe, 0x401, 0x183, 0x14, 0xf44, 0x7fff, 0x3ff, 0x4, 0x4, 0x1, 0x1, 0x2, 0xbb62, 0x3, 0x1, 0x4, 0x84efbeb5, 0x2, 0x0, 0x8, 0x544, 0x2, 0x6, 0x8, 0xab, 0x3, 0x8, 0x400, 0x1, 0x5, 0x1, 0x5, 0x6, 0x6, 0xfffffeff, 0x4, 0xc254, 0x7, 0x7f, 0x4, 0x9724, 0x47, 0x1, 0xf94, 0x7c7, 0x9, 0xa797, 0x4, 0xfffffff9, 0x9, 0x3ff, 0x5, 0x2, 0x0, 0x4, 0x4, 0x9, 0x800, 0x0, 0x8, 0x3, 0x3ff, 0x24, 0xca, 0x0, 0x6, 0x800, 0x10000, 0x3, 0x8000, 0x3, 0x7, 0x101, 0x8, 0x6d, 0xf86, 0x0, 0x0, 0x5, 0x8, 0xfffffffe, 0x3, 0x7, 0x1980, 0x15, 0x6, 0x80000000, 0xe3, 0x5, 0x1000, 0x4, 0x7, 0x401, 0xffffffff, 0x6, 0x1, 0xa, 0x4, 0x2, 0x40, 0xfffffffa, 0x7, 0x0, 0x400, 0x9, 0x3, 0x4, 0x19bd9545, 0x2, 0x6, 0x2, 0x3, 0xc, 0x6, 0x1, 0x9, 0x80000001, 0x0, 0xffffffff, 0x9, 0x0, 0xfffffffa, 0x4, 0xffff, 0x2000000, 0x6, 0x10001, 0x3, 0x2, 0x8, 0xb190, 0x7, 0x4, 0x81, 0x7, 0x0, 0x0, 0xffffffff, 0x2, 0xab2b, 0x9, 0xdf, 0x7, 0x3, 0x9f, 0x3, 0x3, 0x20000000, 0x6, 0xfff, 0x6, 0x1, 0xd872, 0x7520696d, 0x66cb08e9, 0x9, 0x4228, 0x1, 0x899f, 0x5, 0x1, 0x8001, 0x0, 0x4, 0x100, 0x4, 0x4, 0x3, 0xe0, 0x7, 0xfffffff5, 0x553ca62b, 0x709b, 0x6, 0x2, 0x5, 0x7, 0x745, 0x6, 0x3, 0xff, 0x0, 0xb241, 0x2, 0x51, 0x9, 0x6, 0x7, 0x5, 0x11, 0x7, 0x5, 0xffffff9b, 0x1, 0x9, 0x1, 0x7, 0x7, 0x9, 0x800, 0x80, 0x1ff, 0xfffffd8e, 0x800, 0xb, 0xa8c3, 0x80000000, 0x1, 0x0, 0x100, 0x2, 0x6, 0xbb1, 0x7, 0x68ee, 0x79e, 0x100, 0xfffffff9, 0xf37e, 0x23f766a6, 0x9, 0x3, 0x40, 0x6, 0xffffffc0, 0x1ff, 0x7, 0x100, 0x269c, 0x54, 0x1, 0xffff0001, 0x3, 0xa, 0xb4, 0xc, 0xcda, 0x9, 0x3, 0xf, 0x3, 0x80000000, 0x3, 0x6, 0x7, 0x8000, 0x4, 0x9, 0x6, 0x5cc, 0x6, 0x2, 0x8, 0x63b0, 0x9, 0x7f, 0x4, 0x8, 0x8d, 0xc, 0x6, 0x4, 0xd, 0x9, 0x2, 0x9, 0x6, 0xfffffff9, 0xd, 0x800, 0x80000000, 0x6, 0xc1, 0x9, 0x3, 0x3, 0x1, 0x49, 0x5, 0x7ff, 0x3, 0x80000000, 0x2, 0x7, 0x6, 0x9, 0xfffff801, 0x6, 0xe, 0x4, 0x9554, 0x4af000, 0xd, 0x10, 0xfffffe6b, 0x0, 0x9, 0x4, 0x101, 0x800, 0x1, 0x2, 0xd6, 0x7, 0x7, 0x1, 0x5, 0x7, 0x7fff, 0x8000, 0xc, 0x9, 0x3, 0xa3, 0xfffffffd, 0x3, 0x10001, 0xfffffffb, 0x1, 0x4, 0x4, 0x5, 0x894cc5e, 0x6, 0x0, 0xc128, 0x4, 0x6, 0x0, 0x9, 0x9, 0x6053, 0x7, 0x10000, 0x1, 0xe3, 0x5, 0x4, 0x3, 0x1, 0x1000, 0x8c0c, 0xb, 0x0, 0x8, 0x7, 0xbf78, 0x10001, 0xaa, 0x7, 0x8, 0x10001, 0x9, 0xfff, 0x8, 0x601, 0xfff, 0x5, 0x6, 0x9, 0x6, 0xfffffffc, 0x7, 0x5, 0x9, 0x1c0, 0xd, 0x8000, 0x4, 0x10, 0x3, 0x0, 0x8, 0x8285, 0x8, 0xfffffff6, 0x0, 0x3, 0x7, 0x4, 0x4c76, 0x7fff, 0x0, 0x2, 0x7, 0x6, 0xa, 0x6, 0x4, 0x0, 0x800, 0x9, 0x3ff, 0x6, 0x3000000, 0x4000, 0x1, 0x74, 0x1ff, 0x7, 0x1ff, 0x100, 0xc0000, 0x4, 0x17a, 0x6, 0x3, 0x81, 0x8, 0x8, 0x101, 0x3, 0x400, 0x5, 0x1, 0x0, 0x9, 0xc7ed, 0x6a, 0x8, 0x6, 0x0, 0x6, 0x1, 0x9, 0x3, 0x3, 0x1, 0x10, 0x0, 0x9, 0x6, 0x4, 0x3, 0x9, 0xfffffe08, 0x6, 0x3, 0x0, 0x2, 0x1, 0x4, 0x6, 0x7, 0x9, 0x6, 0x6, 0x1, 0x2, 0x101, 0x80000001, 0xa9, 0xa39, 0xfffffff1, 0x7, 0x2, 0x5, 0x6, 0x8, 0x7ff, 0x4d86, 0x0, 0x6, 0x0, 0xdc5, 0x3, 0x3, 0x5, 0x6, 0x7b, 0x1, 0x0, 0x2, 0x7, 0x5, 0xfc, 0x9, 0x1ff, 0x1, 0x7, 0x80000001, 0x7fff, 0x5, 0x3, 0x0, 0x8, 0x1, 0x8, 0x8000, 0x3, 0xfffffff7, 0x1, 0x6c, 0x0, 0xe, 0xffff, 0xfffffff9, 0x9, 0x3e5, 0x18, 0x7fffffff, 0x9, 0x5, 0x8, 0x2, 0x0, 0x101, 0x9, 0x6, 0x1ff, 0x6, 0x98, 0x0, 0x2, 0x7, 0x9308, 0x1, 0xd, 0x5, 0x4, 0x200, 0x6, 0x0, 0x0, 0x2b, 0x7, 0x5, 0x6, 0x9d, 0x8, 0x7fffffff, 0x2, 0x0, 0x505, 0x1000, 0x6, 0x10000, 0x1, 0xb, 0xb, 0x3, 0x3, 0x3, 0xfff, 0xffffff5c, 0x5a, 0xd6, 0x5, 0x7, 0x8, 0x1, 0x54a4, 0x1, 0xfffffffa, 0x3, 0x3, 0x6, 0x8, 0x68, 0x80, 0x9, 0x8, 0x9, 0x0, 0x4, 0x9, 0x1, 0x9, 0x80, 0xfffffff9, 0x9, 0x7, 0x1, 0x2, 0x7ff, 0x0, 0xc, 0x5, 0x80000000, 0x6b, 0x9, 0x8, 0x0, 0x10, 0x6, 0xfff, 0x7, 0x23b, 0xb, 0x7fff, 0x7, 0x2, 0x4, 0x7, 0x0, 0x0, 0x9, 0x7, 0x10, 0x7, 0x1, 0x6, 0x9, 0x3, 0x0, 0x3, 0x67360a93, 0x2, 0x4, 0xfffff0db, 0x9, 0x3, 0xa68e, 0x0, 0xf048, 0x1, 0x90000000, 0x100, 0x9, 0xff, 0xd2, 0x0, 0x1, 0x0, 0x800, 0x1000, 0x7, 0x4, 0x9, 0x2, 0x8, 0x14aa, 0xffff8000, 0x5, 0x1ff, 0x6, 0x4, 0x1ff, 0x1, 0xf16, 0xe8, 0x5, 0x7, 0xfffffff8, 0xa54, 0xbc, 0x94e, 0x81, 0xffff7a40, 0x8, 0x7, 0x1, 0x110, 0xd9, 0x0, 0xffffff46, 0x754, 0x3, 0x9, 0x1, 0x8, 0x6, 0x77, 0xfffffffc, 0x2, 0x8, 0x5, 0x9, 0x4, 0x18b, 0x7c5f, 0x7, 0x45eb, 0x1ff, 0x8, 0x7fffffff, 0x2adc, 0x0, 0x9, 0x4, 0xb9da, 0xfff, 0x6, 0x6, 0x4, 0xffff, 0x3, 0x400, 0x1d35, 0x1, 0x7, 0x1, 0x8, 0x3, 0x8, 0x101, 0x1, 0x88, 0xb, 0xfffffffb, 0x7ff, 0x8, 0xc, 0x0, 0x4, 0xfffffffb, 0xffffffff, 0x26d, 0x7, 0x1, 0x1, 0x5, 0xd, 0x5, 0x6, 0x5, 0x2, 0x40000, 0xffff, 0xf1, 0x0, 0x5, 0x3, 0x10, 0x9, 0x7, 0x7, 0x97, 0x40, 0x80, 0x4, 0xffe00000, 0x9, 0x0, 0x4, 0x10001, 0x7, 0x6, 0x80ac, 0x2d, 0x2e, 0x2, 0x8, 0x800, 0x5, 0xfffffffc, 0xfffffffc, 0x89dd, 0xcc, 0x9, 0x5, 0x8, 0x187, 0x1, 0x47c0, 0x2, 0x1, 0xfffffffa, 0x9, 0x0, 0x8, 0x30, 0x8000, 0x4, 0x800, 0x2, 0x8d88, 0x5, 0x1000, 0x1, 0x80000001, 0x3, 0x9, 0x400, 0x2, 0x800, 0x7ff, 0x5, 0x1c0000, 0x9, 0x8001, 0x3, 0xa, 0xffffffc0, 0x3, 0xece5, 0xe, 0x3, 0xfff, 0x7, 0x3, 0x0, 0x2, 0x7, 0x3, 0x2, 0xffffffff, 0x5, 0x2, 0x9, 0x5, 0x4886, 0x101, 0x14, 0x5, 0x0, 0x57c1, 0x3, 0x6, 0x101, 0x1c0000, 0x3, 0x5, 0x3, 0xa, 0xd59, 0x0, 0x100, 0x4aeb, 0xffffff3d, 0xc5, 0x0, 0x2, 0xf, 0xfffffffc, 0x5, 0xbca1, 0x24, 0x9, 0x2, 0x6, 0xe, 0x7f, 0x4, 0x6, 0x1000, 0x4d, 0x4, 0x9, 0x5b46, 0x6, 0x9ab, 0x1, 0x0, 0x5, 0x7, 0x8, 0x0, 0x1, 0x2, 0x81cc, 0x8, 0x8, 0x7, 0x2, 0x0, 0xda, 0x5, 0x2, 0x2, 0x8, 0xdf23, 0x9, 0x3ff, 0x943, 0x0, 0x0, 0x2269, 0xa0, 0x5, 0x5fe002b7, 0x3, 0x800, 0x2, 0x8001, 0x1, 0x9bed, 0x1, 0x33b, 0x5, 0x9, 0x9, 0x3, 0x9, 0x5, 0x9, 0x0, 0x4, 0x6, 0x6, 0xffff, 0x9, 0x8, 0xfffffff8, 0x3, 0xe0b, 0xcb6, 0x3, 0x800, 0x7dc2, 0x15, 0x9, 0x0, 0x11, 0xa67a, 0x2, 0x8, 0xfff, 0x10000, 0x4, 0x6, 0xfffffffa, 0x9, 0x400, 0x6, 0x67c9, 0xc, 0x9, 0x40, 0x6, 0x3, 0x5622, 0x6, 0x400, 0x1, 0x45a80000, 0xfffffff4, 0x0, 0x2, 0x1, 0x3, 0x80, 0x6, 0x3a0, 0x21, 0x5, 0x6, 0x4, 0x8, 0x0, 0x200, 0x7, 0x3, 0x1, 0x9b22, 0xfffffffd, 0x61af, 0x4, 0x1, 0xfffffffe, 0x1, 0x9, 0x8, 0x4, 0x7, 0x8, 0x9, 0x7, 0x3b, 0x200, 0x80000000, 0x7, 0x80000000, 0x401, 0x4, 0x10, 0xb, 0x0, 0x80000000, 0x8, 0x1ff, 0x3, 0x9, 0x1, 0x4, 0x3, 0x5, 0x4, 0x7fffffff, 0x6, 0xfffffff7, 0x400, 0x10001, 0x38, 0x8, 0x6, 0x1, 0xd68, 0x5, 0xf89, 0xffc00000, 0x81, 0x200, 0x7, 0x8000, 0x4f6, 0x1ff, 0x4, 0x7, 0x749b, 0xad1, 0x6, 0x1, 0x6, 0x4844, 0x4, 0x9, 0x9, 0x4, 0x8, 0xbd, 0x10, 0xfffffffe, 0x7, 0x5, 0x10001, 0x80000000, 0x1, 0x8, 0x8, 0x2, 0xffff0000, 0xc9, 0x2e7e, 0x6, 0xffff, 0x80000001, 0x8, 0x80000000, 0x95, 0x80000000, 0x8, 0x3, 0xfffffff9, 0x7034, 0x4b48, 0x4, 0x5, 0x6, 0x1000, 0x55f9, 0x100, 0xd, 0x3, 0x3, 0xa, 0xffffffff, 0xfb86, 0x4, 0x3ff, 0x8, 0x8000, 0x1, 0x5, 0x2, 0x1000, 0x1, 0x4, 0x9064, 0x100, 0x8, 0xef, 0x8, 0x8, 0x8, 0x4, 0xfffffffc, 0x8, 0x4, 0x8, 0x75, 0xfffffffb, 0x8001, 0x7, 0x101, 0x7f, 0x1000, 0x9, 0x14, 0xa, 0x1, 0x10000, 0x0, 0x2, 0x9, 0x5, 0x6, 0x9, 0x1, 0x9, 0x3, 0x5, 0x5, 0x10, 0x3, 0xf, 0x99e7, 0xfffffe00, 0x401, 0x3, 0x3, 0x999, 0xc0000000, 0x861, 0x4, 0x68, 0x1, 0x4, 0x77, 0x400, 0x4, 0x22a, 0x80000001, 0x1, 0x7, 0xffffffff, 0xa7, 0x13, 0x3d, 0x80, 0x7fffffff, 0x1, 0x1, 0x7, 0x0, 0x3ff, 0xfa, 0xd4, 0x9, 0x80, 0xd, 0xc, 0x4, 0x0, 0x7fffffff, 0x0, 0x4, 0x4, 0x5, 0x3, 0x4, 0x9, 0x2, 0x101, 0x3, 0x9, 0x0, 0x2, 0x1, 0x800, 0x4, 0xffffffff, 0x0, 0x0, 0xc0c9, 0xbe91, 0x1, 0x1, 0x7ff, 0x1000, 0x7, 0x4, 0x2, 0xfff, 0x8, 0xb6, 0x400, 0x2, 0x4800, 0xe, 0x8, 0x4, 0x80000001, 0x2, 0x1, 0x8, 0x800, 0x3, 0x8, 0x1ff, 0x3, 0xf3f8, 0x8000, 0x3, 0x2, 0x1, 0x6, 0x3, 0x6, 0x9aae, 0x9, 0xedc6, 0xb, 0x7, 0x8, 0x7ff, 0x2, 0x800, 0x5, 0x7, 0xd9, 0x97, 0xfffffff8, 0xd7, 0x7, 0x4, 0x0, 0xe3, 0x7, 0xa, 0x8, 0x40, 0x9, 0x6, 0x8, 0x7fff, 0x9, 0x7f, 0x8, 0x2, 0x8, 0x10000, 0x401, 0x1, 0x6, 0xd, 0x6040, 0x1, 0x3ff, 0x6, 0x4, 0x70, 0x7, 0x1, 0xfffffff9, 0x5, 0x6, 0x6, 0x0, 0xc, 0x63e, 0x7, 0x5, 0xfffffffc, 0x10, 0x80000000, 0x2, 0xc, 0x2, 0x4, 0xbb, 0x44, 0x3, 0x2, 0x3, 0x80000000, 0xe8, 0x5, 0x3, 0x81, 0x3, 0x6, 0x3, 0x3ff, 0x0, 0x6, 0xc, 0x3, 0x24, 0x27, 0x4, 0x400, 0x80000001, 0x7, 0x8, 0x80000001, 0x6, 0x200, 0x7, 0x913, 0xfffffff7, 0x4, 0x2, 0x6, 0x9, 0x1, 0x8, 0xd88, 0x25, 0x2, 0xffffffff, 0xffffff71, 0x7fffffff, 0x8, 0x1d, 0x0, 0x484, 0x7, 0xfffffffe, 0x2, 0x7fffffff, 0x5, 0x80, 0x0, 0x0, 0x8, 0x7, 0x5, 0xfffffff7, 0x400, 0x2, 0x6, 0x7, 0x8, 0x3, 0xfff, 0x3, 0x0, 0x80000001, 0xfffffffb, 0x3, 0x1, 0xe8, 0x1000, 0x4, 0x7fffffff, 0x2, 0xfd, 0x2, 0x9, 0x2, 0x1, 0x2, 0x10000, 0xe, 0xc8, 0x2b1, 0xb, 0x4, 0xb25b, 0x9, 0x7ff, 0x100, 0x5, 0xffff, 0x2, 0x35d6, 0x3, 0x0, 0x7, 0x6, 0x1, 0x659f7536, 0x9, 0xffffffff, 0x7, 0x7, 0xffff2510, 0x7ff, 0x7, 0x0, 0x6, 0x0, 0xffffffff, 0x7f, 0x5, 0xf4a, 0x9, 0x400, 0x9e, 0xff, 0x0, 0x3, 0x9, 0x101, 0xc72, 0x5, 0x4, 0xfff, 0x4, 0x0, 0x7, 0x1, 0x51924269, 0x2a, 0x36, 0xc857, 0x4, 0x9, 0x7, 0x14799300, 0x9, 0x800f, 0x89ce, 0xfffffffd, 0x8, 0x0, 0x6, 0x5, 0xb4, 0xfafd, 0x9, 0x1000, 0xff, 0x1, 0x5, 0x5, 0x9, 0x3ff, 0xfffffffb, 0x8001, 0x7, 0x6, 0x0, 0xff, 0x2, 0x3, 0x5, 0x7, 0x5, 0x8000, 0x1, 0x7, 0x6, 0x4, 0x80c0, 0x800, 0x9, 0x7, 0x7, 0x6, 0x4, 0x3, 0xfffff800, 0x7, 0x7f, 0x8, 0x1000, 0x4, 0x3, 0x10000, 0xff, 0x9, 0x9, 0xa3, 0x2, 0xcb, 0xb6, 0x1db7, 0x7f, 0x783dcd45, 0x7, 0x40, 0x7, 0x7, 0x8, 0x9a71, 0x6, 0x3, 0x5, 0xff, 0x43c, 0x72, 0xfff, 0x0, 0x1, 0x8, 0xffffffe1, 0x2, 0x234, 0x2, 0x98, 0x8000, 0x1000, 0x7, 0xdf3, 0x80, 0x8, 0xfff, 0xc9b, 0xffff, 0x8, 0x7, 0xffffffff, 0x101, 0x0, 0xffff0001, 0x5, 0x6, 0x3, 0x0, 0x3, 0xff0, 0x400, 0x80000000, 0x400, 0xac2c, 0x2, 0x7d4, 0x3, 0x140, 0x2, 0x8, 0x9, 0xff, 0x41, 0x6, 0x4, 0x1, 0x8, 0x3ff, 0x9, 0xfffffffc, 0x0, 0xfffffff9, 0x6, 0x1000, 0x0, 0xb, 0x108, 0x258de1d9, 0x5, 0x9, 0x8000, 0x2, 0x93, 0x658, 0x4000, 0x702, 0x1, 0x0, 0xfffffffc, 0x8001, 0x8, 0xe, 0x4, 0xe7819616, 0x1, 0x8, 0x40, 0xa01, 0x2, 0x101, 0x6, 0x7, 0x36, 0x81, 0x3, 0x81, 0x7, 0x80000000, 0x4, 0xfffffff6, 0x80000000, 0x7, 0xc647, 0x1, 0x10001, 0x9, 0x200, 0x9, 0xc0000000, 0xa, 0x0, 0x40, 0xfffffff7, 0xfff, 0x4, 0x58, 0xe, 0x6, 0x800000, 0x59f, 0xfff, 0x2, 0xe, 0x2, 0x11bb0c84, 0xa, 0x5, 0xb, 0x7ff, 0xef, 0x3, 0x8, 0x1, 0x3, 0x3, 0x7, 0x6, 0x81, 0xf, 0x1, 0xd0d, 0x401, 0x8, 0x8, 0x8, 0xfffff14d, 0x7, 0xe786, 0x4, 0xe8, 0x6, 0x1, 0xfac0, 0xa, 0x5, 0x218, 0x1, 0xc1, 0x7, 0xe00000, 0xa5, 0x0, 0x8, 0x3, 0x4, 0xfff, 0x5, 0x4, 0x7, 0x3ff, 0x6, 0xb, 0x5, 0x523, 0x7, 0x2, 0x8, 0x4906, 0x0, 0xfffffeff, 0x8, 0x8, 0x2, 0x0, 0x6, 0x8, 0x8, 0x1ff, 0x5, 0x401, 0x5, 0x9, 0xfff, 0x3, 0x0, 0xd, 0xffffffb8, 0x4000, 0x4, 0xac9c, 0x7fffffff, 0x2, 0x8, 0x871, 0x9, 0xf94, 0xfffffffd, 0x6, 0x8, 0x1, 0x1, 0xb85, 0x6, 0x80000000, 0x3, 0x6, 0x1, 0x10000, 0x0, 0x9, 0x5, 0x8, 0x3, 0x10000, 0x9, 0x0, 0x1ff, 0x3, 0x7, 0x473c, 0x101, 0x2, 0x4, 0x95, 0x101, 0x5, 0x8, 0x7, 0x5, 0x10000, 0xb86b, 0x9, 0x89, 0xa263, 0x0, 0x2, 0x4, 0x4, 0x8, 0x8, 0x0, 0x3d4, 0x5, 0xffffffff, 0x80, 0x23, 0x0, 0xf08, 0x7, 0x6, 0xd605, 0x9, 0x16, 0x0, 0x6, 0x3ff, 0x81, 0x7, 0x6, 0x8, 0xa8a, 0xd24a, 0x9c5, 0xd413, 0x3, 0x3, 0x10, 0xfffff001, 0x856f, 0xda8, 0x1ff, 0x7fffffff, 0xc3, 0x80000001, 0x3, 0x4, 0x7, 0xd, 0x4, 0x2, 0xc, 0x4, 0x0, 0xfc61fc1c, 0xde, 0x200, 0x2, 0xe4d, 0x0, 0x5, 0x81, 0x580, 0x6df775f4, 0x7f, 0xff, 0x8, 0x80000000, 0x0, 0x80000000, 0x80000000, 0x7, 0x9, 0x0, 0x8001, 0x7, 0x8, 0x3, 0x5, 0x14, 0x10, 0x400, 0xfffffffe, 0x1, 0x29d, 0x10, 0x1ff, 0xcdea, 0x80, 0xfff, 0x9, 0x5, 0x9, 0x1, 0x7, 0xfffffff9, 0x7ff, 0x9, 0x100, 0x2, 0x3, 0x8fda, 0x8, 0x1ff, 0x8, 0x88e, 0x8, 0xfffffff8, 0x10001, 0x0, 0x1, 0x7, 0x7fffffff, 0xfff, 0x2, 0x7, 0x400, 0x9, 0x4, 0x90, 0x10000, 0x9, 0xf1a9, 0x9, 0x7, 0x7, 0x66037d9c, 0x7, 0x8, 0x3, 0xfffffffd, 0x4, 0xb, 0x0, 0x696, 0x0, 0x1, 0x5, 0x5, 0x3, 0x9, 0x0, 0x0, 0x800, 0x45, 0x9, 0x7, 0x69aa, 0x0, 0x9, 0xed, 0x593c, 0xfffffff8, 0xb165, 0x7fffffff, 0x6, 0xb6a, 0x3a06, 0x6, 0x100, 0x4, 0x1, 0x30db0000, 0x3da7cfe5, 0x1, 0x0, 0x8000, 0x9, 0x0, 0xcec5, 0x0, 0x6, 0x400, 0x6, 0xfffffff8, 0x8001, 0x6, 0x3, 0x5, 0x9, 0x0, 0x3e07, 0x6, 0x150abc10, 0x1000, 0x401, 0x8fc3, 0x9, 0x6, 0x9837, 0x4, 0x80000000, 0x8000, 0x22c2d57d, 0x7, 0x8, 0x4, 0x2, 0x0, 0x5, 0xb9, 0x4, 0x3, 0x3ff, 0xffffff81, 0x800, 0x9, 0x4, 0x0, 0x7, 0x80000001, 0x6, 0x6, 0x84, 0xc427, 0x3, 0x80000000, 0x1, 0x0, 0x2, 0x2, 0x0, 0x3ff, 0x4, 0x8, 0xfffffaf8, 0x9, 0xff, 0x3ff, 0xf06e, 0xe, 0x2, 0x80000000, 0x2, 0x3a, 0x3, 0x7, 0x62, 0x7, 0x8, 0x80000000, 0xf, 0x8, 0x0, 0x10001, 0x15, 0x0, 0x2, 0x8, 0x4c, 0x2, 0x65, 0x4, 0x0, 0x100, 0x2926, 0x80, 0x8, 0x0, 0x2, 0xcd, 0xd3a, 0x7, 0x0, 0x5, 0x2, 0x92, 0x3, 0x5, 0x7, 0x8, 0x9, 0x7, 0xc, 0x80000000, 0x0, 0x0, 0x3, 0x7, 0xf, 0x8, 0x1, 0x2, 0xfffffffa, 0x200, 0x0, 0x9, 0x3, 0xd, 0x2, 0x1, 0x5, 0x2, 0x0, 0x2, 0xffffffff, 0x2, 0x9, 0x9, 0x9, 0x966, 0x3c, 0x3, 0x5, 0x9, 0x8, 0x2, 0xfffffffe, 0x9, 0x2, 0x5, 0x0, 0x6, 0xda7, 0x2, 0xc, 0x0, 0x0, 0x9, 0x1, 0x7, 0x6, 0x4, 0x80, 0x53fe, 0x3, 0x5b41, 0x3, 0x1, 0x80, 0xb10a, 0x0, 0x80000000, 0x1, 0x535, 0x800, 0x4a0, 0x1, 0x9, 0x0, 0x1, 0x2, 0xc, 0x9, 0x10, 0x10000, 0xd1a, 0xfff, 0x0, 0x7, 0xbc05, 0x101, 0x2, 0x4, 0xfffffff1, 0xd9, 0x2, 0x1000, 0xa0d8bef, 0xff, 0x5, 0xfffffe00, 0xb0, 0x10000, 0xe99, 0x1, 0xb103, 0x4, 0x3, 0x10, 0x41, 0x80000000, 0x800, 0x7, 0x9b6, 0x7, 0x0, 0x6, 0x6, 0x101, 0xb, 0x8, 0x7, 0x0, 0x300000, 0x3, 0x7, 0x600000, 0x5e, 0x1, 0x33, 0x2, 0x4, 0x3ff, 0xd, 0x8, 0x0, 0x7, 0x10000, 0x9, 0x9bb, 0x80000001, 0x8, 0xf14, 0x0, 0xd1, 0xfff, 0xba, 0x8, 0x1, 0x0, 0x9, 0x100, 0x3, 0x401, 0xb3, 0x1, 0xfffffe00, 0x4, 0x80000001, 0x9, 0x1000, 0x2, 0x2, 0x0, 0x1, 0x8, 0x6, 0xfff, 0xffffffff, 0x2, 0x7, 0x5, 0x7, 0x80, 0x7a1, 0x8000, 0x7, 0xba, 0x1, 0x0, 0x2, 0x5, 0xcea, 0xfffffff9, 0x4, 0x2, 0x7, 0xff000000, 0x0, 0x2, 0x3ff, 0x0, 0x8, 0x2, 0x4, 0x1, 0xfffffffa, 0x9, 0x3ff, 0x7f, 0x80, 0x9, 0x80000000, 0x5, 0x490b5d21, 0x80000000, 0xd, 0x3, 0x700000, 0x7f, 0xbe1a, 0x2, 0xb, 0x0, 0x7, 0x3, 0xf, 0x6, 0xc, 0x9, 0x0, 0x6, 0x27, 0x20, 0x4, 0x0, 0x2, 0x6, 0x1, 0x1, 0x7, 0x5, 0x5, 0x7f, 0x10000, 0x8, 0x3, 0x0, 0x7, 0x0, 0xad, 0xe, 0xfffffff7, 0x80000000, 0x3, 0x6, 0x3, 0x0, 0x5, 0x7, 0x3, 0x0, 0x3, 0x100, 0x8, 0x8, 0x0, 0x2, 0x4, 0x1, 0x0, 0x4, 0x3, 0x1, 0x100, 0x7, 0xceae, 0x8, 0x6, 0x7fffffff, 0x8, 0x80000001, 0x71f, 0x1000, 0xfffff000, 0x3, 0x9, 0x4, 0x7ff, 0xd4, 0xee1b, 0x10000, 0x5, 0xfd7, 0x8, 0x7, 0x401, 0xe86, 0x5, 0x9, 0x6, 0x3, 0x3374, 0x7beebec3, 0x1, 0x1, 0x9, 0x7, 0x4, 0xed, 0x2, 0xbf8, 0x3ff, 0xbf4, 0xfffffffc, 0x473, 0x6, 0x4, 0x2, 0x6, 0x5, 0x81, 0x172, 0x80000001, 0x3, 0x8, 0x3f3, 0x3, 0x3ff, 0x8, 0x3, 0x7fffffff, 0x7, 0x6, 0x0, 0xd, 0x1c, 0x4b, 0x4, 0x1000, 0x8001, 0x1ff, 0xc71, 0x1, 0x2cfc, 0x9, 0x80, 0x13a, 0x2, 0xffffffff, 0x89b, 0x3811, 0x81, 0x8, 0x2, 0x584, 0x4, 0x7f, 0xff, 0x5ce6, 0x1, 0x3ff, 0x6, 0x80, 0x6, 0x7, 0xfffffffc, 0x2, 0x4, 0x3ff00000, 0xff, 0x33f2, 0x1, 0x3, 0x8, 0x7, 0x5, 0x8, 0x1, 0xea56, 0x9, 0x0, 0x2, 0x2, 0x2, 0xffff, 0x1, 0x6, 0xfffffffa, 0x7f, 0x6, 0x81, 0x3, 0x4, 0x1, 0x10, 0x6, 0x5, 0x638a8e57, 0x7fff, 0xd, 0x5, 0x8, 0xffffff01, 0x2c, 0x7, 0x2c0eb2dc, 0x1ff, 0xb, 0x8, 0x5cc, 0x77f, 0x80, 0x960, 0xfffffff0, 0x1, 0x5, 0x6, 0x6, 0xffffffff, 0x6, 0x3, 0x80000000, 0xff, 0x3fdc, 0x2, 0xb3d, 0x4, 0x8000, 0x6, 0x200, 0xf, 0x1, 0x8, 0x9, 0x199, 0x6, 0x3, 0x95, 0x8, 0x6, 0x10000, 0x7, 0x2, 0x2, 0x81, 0x8000, 0x2, 0x6, 0x7, 0x1, 0x2, 0x7, 0x0, 0x91, 0x3, 0xd, 0x9, 0x400, 0x81, 0x2, 0x100, 0x7, 0x6, 0x8001, 0xd9, 0x1000, 0x8, 0xfffffffe, 0x3ff, 0x2, 0x0, 0x124586b0, 0x1, 0x80, 0x9, 0x0, 0x9, 0x1, 0x0, 0x6, 0x6, 0x4a, 0x8, 0x800, 0x6, 0x739d, 0x727d, 0x3ff, 0x7, 0x100, 0x34, 0xfffffffb, 0x1, 0xc, 0xc, 0x27f, 0x5, 0x8, 0xffffffff, 0x79, 0x1ff, 0x8, 0x3, 0xd80, 0x5, 0x800, 0x7, 0x2, 0x9, 0x3, 0x1, 0x8ac, 0x401, 0x5, 0x6, 0x6, 0xf57, 0xf436, 0x0, 0x4, 0x25, 0x8, 0xe14, 0x2b4000, 0x9, 0x9, 0x8, 0x0, 0x4, 0x5, 0x4, 0x9, 0x4, 0x10, 0x0, 0x100, 0x5, 0x6, 0x1, 0x4, 0x8, 0x3ff, 0x8001, 0x9, 0x3, 0x6, 0x4, 0xfffffff8, 0x5, 0xb, 0x10001, 0x5, 0x5, 0x0, 0x24, 0xa3, 0x4, 0xf5, 0x0, 0x3, 0x2, 0x8, 0x2, 0x47, 0x4, 0x101, 0x5a, 0x9, 0x5, 0x800, 0x81, 0x0, 0x7, 0x9, 0x235, 0x8, 0x1, 0x20000, 0x200, 0x8, 0x80, 0x5, 0x401, 0x6, 0x3, 0x8000, 0x2, 0x4, 0x5, 0x2, 0xb0e9, 0x7, 0x7, 0x3, 0x5, 0x9, 0x1c00, 0xa, 0x3, 0x60000000, 0x100000, 0x0, 0x3, 0xfffffffc, 0x4, 0x9, 0x6e57, 0x7fffffff, 0xf9d8, 0xfff, 0x8000, 0x6, 0x4000000, 0x4, 0x6bdf, 0x2, 0xdcb8, 0x2, 0xff, 0x101, 0x800, 0xc, 0x7, 0x1ff, 0x5, 0x101, 0xfffffff8, 0xb, 0x197535dc, 0x0, 0x40, 0x5, 0x8001, 0x800, 0x40, 0x9, 0x5, 0xae, 0x5, 0x9, 0x43, 0x3, 0x7, 0xbb, 0x9, 0x5, 0xfff, 0x3, 0x7f, 0x5, 0x5, 0xff, 0x5, 0x0, 0x7, 0x4, 0x7, 0x800, 0xd96e, 0x100, 0x200, 0x0, 0x18000000, 0xfffffe01, 0x80000000, 0x401, 0x9, 0xdb8, 0x5, 0x8000, 0x9, 0x89, 0x4, 0x4, 0x1, 0x0, 0x690, 0x416d, 0xbe, 0x7, 0x9, 0x3, 0xf, 0x10001, 0x1, 0x8, 0x4, 0x1ff, 0x1, 0x0, 0x65, 0x3, 0x7, 0x7fff, 0x8001, 0x3, 0x6, 0x9, 0xffff, 0xd, 0x3, 0x9, 0xa420, 0xfffffffb, 0xa961, 0x4, 0x7fffffff, 0x0, 0xf, 0x1, 0xfffffff9, 0x1, 0x3, 0x7fff, 0xffffff2e, 0x7, 0xfeb, 0x0, 0x970, 0x7, 0x1, 0xffff8000, 0xc2a9, 0x8, 0x9, 0xfffff902, 0x8, 0x89, 0x8001, 0x0, 0x4639, 0x4, 0x4, 0x4, 0x6, 0x3bcc, 0x6, 0x6, 0x4, 0x3, 0x3, 0x6, 0x3, 0x6, 0xffffffff, 0x6, 0x5, 0x2, 0x9, 0x4, 0x0, 0x8, 0x7, 0x10000, 0x81, 0x8e7, 0x4f4, 0x200, 0x6, 0x6, 0x0, 0x8001, 0x7, 0x7, 0x5, 0x1f, 0x0, 0x1, 0xfff, 0xfffffffe, 0x9, 0x8, 0x8, 0xbd, 0x4, 0x2, 0x8, 0x40, 0x8, 0x7dc2, 0x4, 0x2, 0x7, 0x9, 0x7, 0xe6, 0x2, 0x7, 0x2, 0x2, 0x5, 0x8, 0x80, 0x2, 0x9, 0x2, 0x1, 0xfff, 0xffffffff, 0x85, 0x8, 0x1, 0x0, 0x1, 0x4, 0xfffffffa, 0x2, 0x65c1, 0x3, 0xffff, 0x3ff, 0x8, 0xfffffff7, 0x8, 0x1, 0x7, 0x8, 0x7, 0xa9, 0x3, 0x1, 0x7, 0x10001, 0xfffffff9, 0x7f, 0x1, 0x8, 0x1, 0x1, 0x6, 0x7f, 0x8, 0x73, 0x800, 0x3, 0xfff, 0x677, 0x7ff, 0x0, 0xffffffff, 0x8, 0x9, 0x7, 0x4, 0x8, 0x8c76, 0x9, 0x6, 0x100, 0x6, 0x10000, 0x80, 0x6, 0x80000001, 0x91, 0xb6, 0x2d, 0x5, 0x3ff, 0x5b565f3e, 0x6, 0x8, 0x5, 0x9, 0xb4000000, 0x7ff, 0x8001, 0x0, 0x8, 0x4, 0x7, 0x3, 0x40, 0x6, 0x1, 0x3, 0x8, 0x3, 0x9, 0x9, 0x2, 0x2, 0xe, 0x0, 0x3, 0xe, 0x10001, 0x6, 0xba04, 0x3, 0x401, 0x3, 0x1, 0xffffff52, 0x7efd, 0xffffffff, 0x0, 0x9, 0xfffffffd, 0x5, 0x9, 0xff, 0x7, 0x4, 0x5, 0x227d, 0x1, 0x3312bb9b, 0x3, 0x8, 0xffff5e0e, 0xa0000000, 0xa9, 0x82ac, 0x7, 0x80000000, 0x3, 0x7fffffff, 0x101, 0x1000, 0x9, 0xfffffff7, 0x4, 0x0, 0x2, 0x1, 0x7, 0x800, 0x8, 0x5d989d3a, 0x0, 0xffffffff, 0x6, 0x0, 0xfffff6c2, 0xd, 0x1, 0x6, 0x0, 0x3, 0x3, 0x7f, 0x80000000, 0x5, 0xfffffff6, 0x3633e2ae, 0x8, 0x608e, 0x6, 0x45c, 0x46, 0x4, 0xa5, 0x8, 0xf14d, 0x9, 0x9, 0xbf0, 0x5, 0x6, 0x1ff, 0x10000, 0x0, 0x5, 0x7, 0x4, 0x8, 0xffffe86b, 0x915, 0x0, 0x2, 0x3, 0x65, 0xffffffff, 0x8001, 0x5adaa762, 0x2, 0x5, 0x1, 0x4, 0x0, 0x80, 0x8, 0x8beb, 0x1, 0xafdb, 0x1, 0x9, 0x2, 0x6, 0x10001, 0x6, 0x6, 0xc4c4, 0x4, 0x2, 0x10000, 0x80, 0x200, 0xf, 0x9, 0x7, 0x4, 0x21, 0xafd, 0x7fffffff, 0x6, 0x3e, 0x10, 0xb, 0xfffffd45, 0x3e, 0x9, 0x2, 0x8, 0x8, 0x3, 0x61, 0x401, 0x2, 0x1, 0x9, 0x8, 0x4, 0x707d7c1b, 0x5, 0x4, 0x5, 0x5, 0x1000, 0x8, 0x7ff, 0xe3, 0x65, 0xa0, 0x7fffffff, 0x4, 0x2, 0x3ff, 0x8, 0x0, 0x1, 0xe, 0xfff, 0x10, 0x80000001, 0x1ff, 0x8001, 0x90, 0x5, 0x5, 0x5, 0xffffffff, 0xfd, 0x1000, 0x3, 0xc341, 0xf43, 0x8, 0x1, 0x1, 0x7ff, 0x4, 0x1ff, 0x4, 0x2, 0x27ce, 0xc, 0x2, 0x7, 0x7, 0x5a9, 0x7, 0xffffffff, 0x4b2, 0xfffffff1, 0xb7c, 0x3, 0x9, 0x3ff, 0x1ff, 0x7, 0x80, 0xa1, 0x7, 0x1, 0x9882, 0x9, 0xffff, 0x6621, 0x10001, 0x8, 0x8, 0x800, 0x7, 0x2, 0xa, 0x1ff, 0x4, 0xb, 0x3, 0xe000, 0x7, 0x3, 0x4, 0x9, 0x7, 0x8, 0x0, 0xfd01, 0x4, 0x2, 0x8, 0x0, 0xe, 0xffff8000, 0x592f, 0x0, 0xfffffffd, 0x4, 0x5317, 0x8, 0xa, 0x9, 0xe8df, 0xe, 0x8, 0xf1b, 0x4, 0x7f, 0xab6a, 0x10001, 0x4, 0x800, 0x9ef4, 0x51e9cedd, 0x3, 0x72d, 0x7, 0x6, 0x0, 0x81, 0x2, 0x9, 0x0, 0xb, 0x0, 0x200, 0xffffff9f, 0x7, 0x8, 0x7, 0x400, 0x8, 0x7, 0xb3b, 0x401, 0x4, 0xffffa422, 0xd, 0x3, 0x917, 0x80000001, 0x800, 0xfffffff1, 0xffffff4b, 0x7, 0x9, 0x74ba, 0x7fff, 0x6, 0x0, 0x0, 0x9, 0x8000, 0x5, 0x7fffffff, 0x3, 0x5, 0x8, 0x0, 0x8, 0x7, 0x0, 0x8, 0x5, 0xd, 0x8, 0xee62, 0x7, 0x2cbaeda0, 0x8, 0x2, 0x300000, 0xfffffffb, 0x7f, 0x5313, 0x6, 0x6, 0x1, 0x81, 0x10001, 0xb, 0xa0000000, 0x98, 0x9, 0x0, 0xd, 0xfe3, 0x10000, 0xc871, 0xc23, 0x66d8, 0x3, 0x2000000, 0x7, 0x100, 0x0, 0x0, 0x5, 0x400, 0x3e, 0x4, 0x3, 0xe038, 0xfff, 0xa37, 0x6, 0x400, 0x5, 0xff, 0x1, 0xa, 0x2, 0x401, 0x9, 0x4, 0xa, 0xa, 0x0, 0x7, 0xcf2, 0x8, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x800, 0x8, 0xb0, 0x6, 0x3, 0x0, 0x0, 0x10, 0x1ff, 0x7b, 0x2000, 0x8, 0xc, 0x0, 0x8, 0x9, 0x8, 0xff, 0x5, 0x3, 0x9, 0xffffff85, 0x3, 0xfffffffc, 0xcf, 0x2, 0xaefb, 0xb09c, 0x0, 0x7, 0x7, 0x0, 0x9, 0x7, 0x509b8745, 0x3, 0xd59d, 0x8, 0x1, 0x10000, 0x1000, 0x1, 0x10001, 0x0, 0x9, 0x7, 0xcde, 0xb, 0x6, 0x7fff, 0x10001, 0x1, 0x8, 0xfffffff0, 0x5bd020cc, 0x7, 0x3, 0x6, 0x564, 0xb, 0x5, 0x10000, 0x8, 0x3, 0x10000, 0x6, 0x5a, 0x7, 0xfffffffe, 0x7, 0x0, 0x6, 0x304, 0xffffff16, 0x9, 0x6, 0x3, 0x10001, 0x400, 0x5, 0x3af, 0x8, 0x80, 0x1, 0xf9c, 0xfffffff9, 0x10001, 0xa, 0x2, 0x3, 0x1, 0xa76, 0x1, 0x1, 0x26, 0x80000000, 0x4c3c, 0x97, 0x5, 0x8, 0x5, 0x9, 0x3a, 0x6, 0x0, 0x5, 0x8000, 0x1, 0x9, 0xf1, 0x1, 0x7fffffff, 0x7, 0x6, 0x80000000, 0xd52, 0x7, 0x33f5, 0x8, 0x7, 0x4, 0xe, 0x4b, 0x200, 0x3, 0x3, 0x2, 0x553f0725, 0x3, 0x1, 0x10, 0x4, 0x1000, 0x9, 0x2, 0x80, 0x6, 0x80000000, 0x1, 0x800, 0x8, 0x5, 0x9, 0x6, 0x4, 0x81, 0x7, 0x6, 0x3, 0x1, 0x4, 0x8, 0x101, 0x1013671b, 0x0, 0x3, 0x4, 0x0, 0x6645, 0x3, 0x7fffffff, 0xb, 0x5, 0x73cd, 0x6, 0x0, 0x0, 0x9, 0x800, 0xffffffff, 0x8000, 0x2, 0xe, 0x4, 0x9, 0x1, 0x5, 0x9, 0x6, 0x5, 0x3cb, 0x9, 0x80000001, 0x5, 0x5, 0x5, 0x0, 0x4, 0x7, 0xfffffff7, 0x5, 0xd9, 0x5, 0x1, 0x1, 0x1, 0x0, 0x3, 0x7, 0x1, 0x8, 0x6, 0x4, 0x9bc, 0x101, 0x2, 0x1, 0x8, 0x6, 0xdb23, 0x1, 0x5, 0x400, 0xf, 0x7, 0xfffffff6, 0x7, 0x6fc, 0x4, 0x324, 0x5, 0x95c, 0xaf82, 0x939, 0x0, 0xfffffffe, 0xfffff001, 0x4, 0x48b32afe, 0x6, 0x7, 0x7, 0x8000, 0x401, 0x1, 0xff, 0x8, 0x3f, 0x0, 0x2ca7, 0x2, 0x4, 0xe0, 0x8001, 0x493d, 0x80, 0x9, 0xd19, 0x4, 0x1ef4, 0x1, 0x7a, 0x6, 0xc7, 0x7ff, 0xc5a8, 0xffe00000, 0x100, 0x7, 0x5, 0x1, 0xc1a, 0x6, 0x2000400, 0x8, 0x80, 0x9, 0x7fffffff, 0xffffffff, 0x10001, 0xffffff9a, 0x2, 0x5, 0x7, 0x4, 0xb, 0xffffffff, 0x9, 0x29, 0x0, 0x5, 0x7, 0x40, 0x0, 0x4, 0x75, 0x3, 0x5, 0x0, 0x5, 0xaac3, 0x7fffffff, 0x0, 0xc, 0x0, 0x0, 0x3, 0x7, 0x1000, 0x3, 0xffffffff, 0x5, 0x100, 0x1, 0x7, 0x3, 0x5, 0x80000000, 0xfffff7ac, 0x100, 0x9, 0xb, 0xb, 0xc2f4, 0x40, 0x3, 0xf48, 0x1800000, 0xfffffffb, 0x8, 0x0, 0xf, 0x4, 0xa, 0x5, 0xc, 0x7, 0x2, 0x7f, 0xfffffff8, 0xb8d7, 0x7, 0x9, 0x7f, 0x81, 0x10, 0xc, 0x1, 0x10, 0xb, 0x9, 0x5, 0xd0, 0x8, 0x8, 0xc83, 0x6, 0x9, 0xffff, 0xffff, 0x3, 0x0, 0x81, 0x400, 0x7, 0x101, 0x4, 0x1, 0x6, 0x8, 0x1, 0x6, 0x8, 0xfffffffe, 0x1, 0x1, 0x6, 0x5, 0x3, 0x9, 0x65d, 0xff, 0x9, 0x1000, 0x10000, 0x4, 0x1, 0x0, 0x2, 0x7b, 0x5, 0x5, 0x401, 0x9, 0xcf1, 0x0, 0x0, 0x2, 0x10000, 0x4, 0x5, 0x3, 0x7, 0x6, 0x9, 0x1ff, 0xd64, 0x8, 0x9, 0x7, 0x83, 0x6, 0x4, 0xffffff00, 0x1, 0x1, 0x100, 0x5f, 0x401, 0xfffffffc, 0x725563b3, 0xff, 0x7fff, 0xffff7fff, 0x4, 0x1b6b6a31, 0x7, 0x3, 0x3, 0x1, 0x0, 0x6, 0x7, 0x0, 0x2, 0x1, 0x4, 0x8, 0x7ff, 0x10, 0x800, 0x0, 0x10001, 0x7, 0xffff, 0x2, 0x7, 0x7, 0xc7, 0x4, 0x4, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0xb9, 0x7b, 0x4, 0x7, 0x6, 0x7fff, 0x486f, 0x26f, 0x7, 0x529, 0x1, 0xfff, 0x7ff, 0x89, 0x5, 0x4, 0x7, 0x2, 0xd, 0x5, 0x101, 0x81, 0x4, 0x5, 0x7f6, 0x3, 0xfffffff9, 0x7, 0xffff8001, 0xd, 0x8, 0x80, 0x1, 0xfffffffe, 0x1, 0x5, 0xffffffff, 0xe, 0x2, 0xbe, 0x4, 0x13, 0x2, 0x10, 0x0, 0x5, 0x4f1e, 0x1, 0x400, 0x0, 0xa, 0xeb30, 0x4, 0x8, 0x4, 0xcc9, 0x0, 0x80000001, 0x3, 0x7f, 0x2, 0x6, 0x7, 0x5, 0x7, 0x10000000, 0xffff, 0x100, 0x5, 0x56, 0xc8, 0x31, 0x7, 0xba8d, 0x1de9, 0x2, 0x3ff, 0x3, 0x8, 0xf89, 0x100000, 0x101, 0xf0db, 0x309, 0x0, 0x975a, 0x9, 0x6, 0x10000, 0x10000, 0x3, 0x9, 0x1, 0x4, 0x8, 0x9, 0x6, 0x80000001, 0x7, 0x2, 0x6, 0x8, 0x4, 0x8, 0x1fd2fee3, 0xfffffffc, 0x7, 0x0, 0x7, 0x40, 0x6, 0x9, 0x4, 0x2, 0xfffffe00, 0x0, 0x1000, 0x8e40, 0xd, 0x5, 0x80000001, 0x8, 0x5, 0x29, 0x80000001, 0x5, 0x10, 0x7ff, 0x9, 0x4, 0x0, 0xd, 0x96, 0x6, 0x0, 0x81, 0x81, 0x9, 0x1, 0x4, 0x1, 0x1feb7674, 0x10, 0x3, 0x4, 0x2, 0x9, 0x10001, 0x10, 0x4, 0x1, 0x9f, 0x20ff, 0xf, 0x40, 0x4, 0x0, 0x1, 0x3, 0x40, 0x52, 0xd, 0x1ff, 0x46ac, 0x4, 0x5, 0x5, 0x5, 0x9, 0x100, 0x2, 0x2, 0x9, 0x0, 0x4d, 0x3, 0x10e, 0x8000, 0x1, 0x2, 0xc, 0x9, 0xd50, 0x1, 0x8c2b, 0xffffffff, 0x1, 0x8, 0x2, 0x6d, 0x4, 0x7fffffff, 0x7, 0x1, 0xfffffffb, 0x0, 0x1, 0x4, 0xff, 0xb, 0x6, 0x10000, 0x7, 0x8, 0x3, 0x2, 0xfff, 0xaed, 0xff, 0x5, 0x8, 0x322c, 0x2, 0x400, 0x4, 0x6616128e, 0xfffffe01, 0x0, 0x6, 0x641f, 0x6, 0xff, 0x2, 0x0, 0xfff, 0x4, 0x7, 0x8, 0x5, 0x4, 0x2, 0x62d, 0x2, 0x9, 0x4, 0xd, 0x1, 0x3, 0x3, 0x6, 0x7, 0x2, 0x7, 0xd, 0xc5, 0xfffff800, 0x4, 0x0, 0x0, 0x3c, 0x4, 0x1, 0x9, 0x4, 0x7, 0xd5, 0x1, 0x1, 0xfffffffd, 0x80000001, 0x800, 0x0, 0x4, 0xfff, 0x1, 0x24000000, 0x6155419c, 0x1, 0x6, 0x0, 0xd5, 0xd, 0x5, 0x8, 0x800, 0x596, 0x7, 0x6f1f, 0x9, 0x3ff, 0x3e7e9852, 0x3, 0x7f, 0x8, 0x3, 0x1, 0xfffffff8, 0x1, 0x5, 0xf, 0x6, 0xb, 0x5, 0x1, 0x7, 0x3, 0x5, 0xe, 0xf, 0x7, 0xffffffff, 0x88, 0x3ff, 0x1, 0x81, 0x101, 0x0, 0x1c03, 0x65, 0x3172, 0x5, 0xb6, 0x7, 0x0, 0x9, 0x9, 0x7f, 0x80000000, 0x800, 0xffffffff, 0xfffffff7, 0x6, 0x6, 0x5, 0x80, 0x7, 0xe, 0x7, 0x9, 0x4, 0x1, 0x5, 0x2, 0x401, 0x5, 0x6, 0x8, 0x8bad, 0x4, 0x5, 0x4, 0x8000, 0x3, 0x2c, 0xe, 0x81, 0x9, 0xba32, 0x7f, 0x8001, 0xd, 0x4, 0xfffffff8, 0x8, 0x5, 0x7ff, 0xb, 0x8, 0x3, 0xfff, 0x6, 0x3, 0x1, 0x7fff, 0x2, 0x200, 0x4, 0x4, 0xfffff001, 0x4, 0x4, 0x5, 0x8, 0x1, 0x0, 0x40, 0xfffffff3, 0x4f7, 0x3, 0x5, 0x6, 0x7, 0xfffffff5, 0xebc3784, 0x80000000, 0x8, 0x200, 0x101, 0x8, 0x200, 0x9, 0xe, 0x28c, 0x7, 0x7fff, 0x3ff, 0x1, 0x6, 0x4, 0x6, 0xa2fa, 0x7, 0xffffffff, 0x9, 0x7, 0x0, 0x1, 0xa, 0xfffffffe, 0x0, 0x3, 0x2, 0xad, 0x1, 0x9, 0x10, 0x1000, 0x1, 0x7fff, 0x1, 0x2, 0x9, 0x1, 0x4e, 0x6e, 0xdaf, 0x1, 0x100, 0xdd8, 0x0, 0x8001, 0x9, 0x3, 0x3, 0x9, 0xa, 0x4, 0xe, 0xd, 0x6, 0x10001, 0xb0000, 0x6, 0x7, 0x9, 0x69, 0x5, 0x0, 0xe, 0x98, 0x3, 0xb08, 0xe, 0x5, 0x1, 0xff, 0x174, 0x5, 0xffff, 0x7, 0x6, 0x7, 0x0, 0x20000000, 0x1, 0x6e5, 0x9, 0x3, 0x7, 0x1000, 0x2, 0x5, 0x9, 0x7, 0x0, 0x8, 0x2, 0xfff, 0x9, 0x6, 0x400, 0xe2, 0x1, 0x8, 0x8, 0x6, 0xff, 0xa6, 0x60d5, 0x9, 0xe, 0xffff, 0x2, 0x5, 0x0, 0x9, 0x3, 0x31, 0x95, 0x8bf, 0x7, 0xfffffffb, 0x9, 0x9, 0x9257, 0x3ff, 0x9b73, 0x7, 0x3, 0x40, 0x5, 0x80000001, 0x4, 0x3, 0x9, 0x1, 0x7, 0x1, 0x6, 0x8fa3, 0x0, 0x3, 0xfb5, 0x3, 0x80000001, 0x0, 0x2, 0x4, 0xde, 0x7, 0x5, 0x80000000, 0x5, 0x5, 0x4, 0x9, 0x8001, 0x3, 0x7, 0x6, 0xffff, 0x32, 0x7, 0x3, 0x5, 0x4, 0x0, 0x31500000, 0xfffffff9, 0x3, 0x4fe8, 0x5, 0x5, 0x80, 0x4, 0x8, 0x6, 0x8, 0xd, 0x101, 0xfffffffd, 0x6, 0x7ff, 0x56282e3f, 0x80000001, 0x1, 0x1, 0x1, 0x80000000, 0x8, 0xaf54, 0x1, 0xf98, 0x7, 0x518, 0xfffffff8, 0x2, 0x9, 0x8, 0x80000001, 0x5, 0x4600, 0x9, 0x80000001, 0x6, 0x7, 0xd28c, 0x4, 0x7, 0x0, 0xf, 0x4, 0x3, 0x3, 0x1, 0x0, 0x8, 0x400, 0xfffffffa, 0x3, 0xd, 0x5, 0xfc0, 0x3, 0x2, 0xffffff80, 0x8, 0x200, 0x2, 0x3, 0x7, 0x9, 0x6, 0x800, 0xffffa68e, 0x101, 0xf, 0x8000, 0x3ff, 0xaa0, 0x8001, 0x3, 0x3, 0x9, 0x1, 0x6, 0x3, 0x6, 0x6, 0x942d, 0x8, 0x2, 0xffffd63f, 0xcc, 0xff, 0xb, 0x200, 0x1, 0x80ab, 0x80000000, 0x9, 0x5, 0x8, 0x400, 0x101, 0xd2f, 0xff, 0x7, 0x9, 0x17c1, 0x4, 0x6, 0xc21, 0xa, 0x20a0, 0x8, 0xfff, 0xedb5, 0x0, 0x5, 0xff, 0x9, 0x7ff, 0x7, 0x1000, 0x7, 0x80, 0x5, 0x80000000, 0x2e, 0x8, 0x2, 0x0, 0x6, 0x2, 0x4, 0x2, 0x5, 0x5, 0x2, 0x6c, 0xfffffff8, 0x1, 0x7fffffff, 0x5, 0x4, 0x0, 0x0, 0x36, 0x1, 0x3, 0xae3, 0x7f, 0x80000001, 0x81, 0x7f, 0x4, 0xf0, 0x3, 0x10000, 0xac, 0x6, 0x2, 0x7, 0x40, 0x6, 0x5, 0x7, 0x7, 0x7, 0xffffff7c, 0x9, 0x6, 0xfffffffe, 0x4, 0x5, 0x3, 0x3ff, 0xfff, 0x9d9, 0xff, 0x0, 0x5, 0x9, 0x5, 0x7, 0xfffffffc, 0x10, 0x800, 0x1, 0xfffffff7, 0xe, 0x4, 0x80, 0x3c, 0xffffffff, 0x9, 0xc, 0x2c47, 0x3, 0x6, 0x0, 0x8, 0x4, 0x800, 0x7f, 0x4, 0x9, 0x7, 0x9, 0x5, 0x5c, 0x55, 0x5, 0xfffffff9, 0x2, 0x3, 0x6, 0x2, 0x5ed, 0xb2, 0x8001, 0x31, 0x3ff, 0x7, 0x6, 0x0, 0x4, 0x1736, 0x7, 0x4223a231, 0x40, 0x2, 0xa18, 0x3, 0xfffffffd, 0xa2af, 0x2, 0x3, 0xfffffffd, 0x0, 0x0, 0x1, 0x6, 0x3, 0x40, 0x9, 0xdde, 0xe, 0x8, 0xfa45, 0x4, 0x5, 0x6a4, 0x4, 0x2, 0x0, 0x7, 0x7fff, 0x0, 0x309, 0x101, 0x9, 0x23, 0x4, 0x7, 0x8, 0x400, 0x2, 0x6f89, 0x6, 0xad4, 0x9, 0xff54, 0x6, 0xffff, 0xfff, 0x5, 0x800, 0x5, 0x7, 0x0, 0x1, 0x0, 0x7, 0x5, 0x9, 0x8, 0x2, 0x2, 0x81, 0x1, 0x2, 0xffff, 0x41ae37bb, 0x5, 0x4, 0x6, 0x5, 0x10, 0x0, 0x81, 0x10, 0x1e, 0x2, 0xffff, 0xd769, 0x400, 0x10001, 0x10000, 0x6, 0x8, 0x1, 0x6, 0x7, 0x9, 0x7, 0x7, 0x80, 0x40, 0x9, 0x16000000, 0xe6, 0x1, 0x8, 0x9, 0x2, 0x400, 0x0, 0x1, 0x4, 0x8, 0x1, 0x8000, 0x3, 0xd, 0xfffffffa, 0xffff0001, 0x1, 0x85c, 0x8, 0x1, 0x100, 0x7fff, 0x8, 0x4, 0x3ff, 0xf4e, 0x6, 0x1, 0x1, 0x5, 0xa3, 0xe, 0x1, 0x40, 0x9, 0xe0, 0x51f, 0x5, 0x4, 0x7, 0x8, 0x2, 0xb94, 0x81, 0x2, 0x0, 0x0, 0xc65d, 0x0, 0x5, 0x9, 0xb8, 0x17, 0x6, 0x40, 0x0, 0x2d4, 0x4, 0x7, 0xceae, 0x6, 0x100, 0xfffffffa, 0x800, 0xa02000, 0x6, 0x1000, 0x5, 0x2, 0x8, 0x1ff, 0x6, 0x600, 0x9, 0x1000, 0xd27, 0x5, 0x6, 0x4, 0x7, 0x6, 0xfffffffd, 0x7ff, 0x7f, 0x1, 0x3, 0x7, 0xf8, 0x6, 0x4, 0x7, 0x3, 0x80000001, 0x92ad, 0x91a2, 0x4, 0x0, 0x6, 0x4, 0x8000, 0x8, 0x80000001, 0xa, 0x3, 0x857, 0xc0000, 0x9, 0x401, 0x6, 0x5, 0x1, 0x7, 0x3, 0xffffff01, 0x80000000, 0x8, 0x9, 0x4, 0xd, 0x401, 0x8, 0x3ff, 0x4, 0x1, 0x1, 0x5, 0x2, 0x2, 0xd6, 0x1, 0x8, 0x8b5, 0x6, 0x3, 0x2, 0xf3, 0x9, 0x0, 0x4, 0x7fffffff, 0x0, 0xfffffff4, 0x53, 0x9, 0xfffffff8, 0x0, 0x2, 0x83, 0x0, 0x5, 0x49, 0x2, 0x4, 0x81, 0x2, 0x636, 0x2, 0x8, 0x8, 0x8, 0x1, 0x3, 0x5, 0x6, 0x8, 0x6c, 0x81, 0x6, 0x2, 0xf, 0x3, 0x5, 0xc1a5, 0x43, 0x7, 0x6, 0x1a, 0x0, 0x7, 0x0, 0x340b, 0x1, 0x7, 0x0, 0x1, 0x958, 0x0, 0x1, 0xc, 0x400, 0x5, 0xfffffff4, 0x3, 0x1, 0x0, 0xffff, 0x3, 0x5, 0x4, 0x0, 0x3, 0x584703ca, 0x5, 0x6, 0x2, 0x7, 0xe9, 0x8080, 0x0, 0x0, 0x1, 0x7, 0x2, 0x10000, 0x37, 0x7, 0x9, 0x9, 0xff6, 0x2, 0x8000, 0x3, 0xa6, 0x7, 0x5, 0xd, 0x3, 0x9, 0x8, 0x3, 0x663a, 0x2a, 0x7ff, 0x1, 0x9, 0x7ff, 0x1, 0x0, 0x4c, 0x0, 0x6, 0x8, 0x7fff, 0x9, 0x4c66, 0xc0, 0x80, 0x4, 0x16, 0x7, 0xa, 0x7, 0xa0f4, 0x6, 0x3, 0x10001, 0x0, 0x800, 0x9, 0xc1, 0x7ff, 0xb, 0x8, 0x1, 0x3, 0xffffffff, 0x9, 0x8, 0x6, 0x65ab526d, 0x5, 0x0, 0x8, 0x2, 0x2, 0x4, 0x3, 0x7fffffff, 0xffc00000, 0x78f4, 0xc, 0x8, 0x1a5, 0xfffffff3, 0x2, 0x9, 0x4, 0x2, 0x7f, 0x2, 0x9, 0x0, 0x7, 0x3, 0x1, 0x6, 0x7, 0xa5, 0x8, 0x6, 0x9, 0x7fffffff, 0x1, 0x7fffffff, 0x364b, 0x5de, 0x2, 0x4, 0xfffff541, 0xfe000000, 0x19, 0x8001, 0x9, 0x3d, 0x5, 0x3, 0x2, 0xfc8, 0x9, 0x81, 0x6c57, 0x3, 0x5, 0x0, 0x6, 0x41d, 0x9, 0x1000, 0xbe7, 0x8, 0x4, 0xc, 0x3, 0x6, 0x39, 0x1800000, 0xfffff486, 0x5, 0x5, 0x0, 0x8, 0x4, 0x661, 0xfffffffd, 0x6, 0x3ff, 0x3, 0x0, 0xc278, 0x0, 0x4, 0x2f0, 0x3, 0x101, 0x1, 0x6, 0x8, 0xe0000000, 0xffffffff, 0x8, 0x7, 0x6, 0x5, 0x7, 0xfff, 0x7f, 0x6, 0x10000, 0x80000000, 0x90, 0xf9d, 0x8, 0x8, 0x7, 0xfffffff9, 0x200, 0x8, 0xfffffffb, 0x4, 0x3ff, 0x800, 0xc6, 0xffff, 0x2, 0x2, 0xffff0000, 0x10000, 0x0, 0x6, 0xff, 0xc, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0x43b, 0x1000, 0x4, 0x3541, 0xfff, 0x7, 0x8, 0x0, 0xfa, 0x8, 0x314, 0x10000, 0x5, 0x1000, 0x10001, 0x8, 0x2, 0x800, 0xa, 0x2, 0x61, 0x80, 0x1, 0x93c, 0xfffffffb, 0x2, 0x9, 0x1, 0x0, 0x5, 0xfffffffb, 0x10001, 0x7, 0x200, 0x7, 0xf, 0x7, 0x4, 0x0, 0x60f9, 0x29, 0x1000, 0x4, 0x7, 0x9176, 0x2, 0x6, 0x9, 0xffffff94, 0x101, 0x9, 0x9, 0x1, 0x4, 0x7, 0x7, 0x4, 0x0, 0x10001, 0x400, 0x8000, 0x9485, 0x9, 0x0, 0x2, 0x3, 0x9, 0x4, 0x6, 0x10, 0xc2, 0xc, 0xafe, 0x6, 0xe7a, 0x2, 0x1, 0x40, 0x8, 0x4, 0x5, 0x8296, 0x5, 0x1, 0x3, 0x3, 0x7fffffff, 0x0, 0x5, 0x4, 0xfffffff7, 0x3, 0x3, 0x1, 0xffffffff, 0x6, 0xfff, 0x1, 0x3, 0x8, 0x8, 0x9, 0x2, 0xa88b, 0xfffffffc, 0xffffffff, 0xff, 0xe, 0x8, 0x3, 0x5, 0x80000001, 0x7, 0x80, 0x4, 0xe, 0x4, 0x7, 0x1, 0xb6, 0x0, 0xd449, 0x1acb, 0x101, 0x5, 0x4, 0x6, 0x7fff, 0x10, 0x1800000, 0xfffffffa, 0x340, 0x40, 0x3, 0xfffffffe, 0x7, 0x4, 0x400000, 0x0, 0xef1e, 0x8, 0x3, 0x2, 0x4, 0x2, 0x2, 0x604, 0x9ed, 0x80, 0x7, 0x7f, 0x6, 0xf, 0x7fffffff, 0x2, 0x8, 0x8, 0x7f, 0x1ff, 0x85c, 0xdfc6, 0xfffffffa, 0x400, 0x0, 0x55c9, 0x878, 0x9, 0x7, 0x7, 0x4, 0xd68d, 0x9, 0x0, 0x100, 0x8, 0x1, 0x5bd4, 0x8, 0x1, 0xffffffa6, 0x19, 0x2, 0x4, 0x7, 0xfffffffd, 0x5, 0x6c7d, 0xaad, 0x6, 0x80000001, 0x1000, 0x2, 0x4, 0x8, 0x4, 0x80000000, 0x5, 0x5, 0x81, 0x7, 0x100, 0x2, 0x0, 0xf3f, 0x781, 0x7516, 0x5, 0x3, 0x6, 0x9, 0x8, 0x5, 0x11, 0xb2c, 0x4, 0x3ff, 0x7, 0x44, 0x81, 0x101, 0x0, 0x8, 0x3, 0x7ff, 0x1543, 0x9, 0x401, 0xe45, 0x10001, 0xaa, 0x7, 0x80000001, 0x9, 0x2, 0x2, 0x1, 0xe, 0x200, 0x0, 0x0, 0x0, 0x9, 0x6, 0x8, 0x3, 0x7, 0x4, 0x4638, 0x1, 0x9, 0x6, 0x1, 0x3, 0x81, 0x40, 0x0, 0x100, 0x5, 0x200, 0x8, 0xabb, 0x6, 0x7f, 0x0, 0x8, 0x7, 0x0, 0x0, 0x88, 0xfffffffc, 0x0, 0x3], 0xffffc370, 0xd}) 829.052996ms ago: executing program 2 (id=432): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2860c2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 248.221576ms ago: executing program 2 (id=433): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "8f0626fa6a71fa33f11255083f821e8f9197e90ba92de0b92185382dd1832b61d927f9f4080c288c939281efd4d7495e3f564d0b04ef969534c2fe94abdf84a6", 0x37}, 0x48, 0xfffffffffffffff9) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x62, 0x33, 0x36, 0x34, 0x32, 0x39, 0x5a, 0x31, 0x39, 0x35, 0x62, 0x66, 0x37, 0x34, 0x66, 0x34]}, &(0x7f00000002c0)={0x0, "3441780985b85ce86a2f128705b1b92051d735754e3d7e423ca6fa7dbb8328231aec4f76d5e373a88a49e70dc32bbf0dad2a86dd5b023226e1317c8facdd0073", 0x27}, 0x48, 0xfffffffffffffff9) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x2, @random="0958079b1ad0", 'veth0_to_hsr\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) keyctl$search(0xa, r0, &(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x0}, r1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) munlock(&(0x7f0000002000/0x3000)=nil, 0x3000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000540)=@generic={0x0, 0x1, 0x3}) keyctl$chown(0x4, r0, r4, r5) 139.355996ms ago: executing program 2 (id=434): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000180)="bf5ebb4264f3a053f15dbce7b203dd6c17c3873e0976720c8934426c5f1dd332eab164f82197b5797ce26a74b705dac45d7f0e0728f690bdbdd7488c438e3e8beee96218b746e58fd2a854a63d369d32c86693152875c7e265f2890900f585a78897edc6f38cccc9e7efc0acba564d759c00b0857e00f8b6d0ed1d1757bd7ec71511391d46d7d78c19c05d519f0bbffa9d4160e1cf6d5b00df38787af788c8c540bae290bc0d5b7b7f9497c04b0962e3c4152f84362df070a48c31123fe601190d8156a3603c69182579529a7c8e57d0c7deea6cfefa3e956608c94517e6baf0be88489ef2cee6911e542cf878aeacd15466", 0xf2, 0x10008095, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) sendfile(r1, r2, 0x0, 0x7ffff000) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000280)={0x20, 0x4, 0x7c, {0x7c, 0x21, "052c7bee7bc52782a81bcb7068483f54b501183fbc7e17a22ded0b350d28535cd2364de77dfb80e520482a3a08897119d38d98a45b1695835b7501d117587bcf71028c35566f6bba6dc9bd99be7fa1f8b4f5cb8ea6557d17fad041b567f4a84cbb6199eaeef0f1fc7e74fedcbb50ad0059409d934a431eb59ea1"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}}, &(0x7f0000000580)={0x34, &(0x7f0000000340)={0x20, 0x11, 0x87, "329d64e40aa3ce6a2b9ca62f2b2794ba94685ba4883a79d392cda6497bfce938033d76ba8323bea8082e71172441c8a7ed902672cc45d5d92c46495d7d9e16563914d9c56cf8ca93a3c27e4dac765a886b6d155f19b4310ab186a54880f8ac29e418baa4b1a35c90dfa7623ab0efdfcd92055fb2166dadf3fb4c9341638b7aacd7da7699cba943"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x2c, {0x2a, "eeaa5bda628de02268b26c6b3dcc5c54bf64c1604e3a567756612075f7abddaf1bafab2e07f08f18bdce"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x8}}) 62.681055ms ago: executing program 1 (id=435): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) futex(&(0x7f000000cffc)=0x101, 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="8670638d82a2d8826aaa7cabb4b9e3d0efa7e77809b2c326f58b46374fdf01ec846e29cafe07c05937f4e5bccc2869f9", 0x30) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) read$alg(r4, &(0x7f0000001140)=""/137, 0x89) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, 0x0, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r5, 0x2000) 0s ago: executing program 1 (id=436): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) close(0x3) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0x0, 0x8000}) lseek(r3, 0x101, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r6, 0x0, 0x1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = socket(0x28, 0x5, 0x0) getsockopt$inet_opts(r8, 0x28, 0x4, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000040)={0x8, r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r9, 0x5708e000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 50.557464][ T5831] cgroup: Unknown subsys name 'net' [ 50.704878][ T5831] cgroup: Unknown subsys name 'cpuset' [ 50.713535][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.756917][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.709739][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.709797][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.718064][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.735029][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.753752][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.760762][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.768056][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.769446][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.776177][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.783705][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.792206][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.798457][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.816708][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.824442][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.824770][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.831646][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.839816][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.852958][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.860313][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.861876][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.153879][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 54.164269][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 54.236444][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 54.280233][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.287682][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.295540][ T5860] bridge_slave_0: entered allmulticast mode [ 54.302463][ T5860] bridge_slave_0: entered promiscuous mode [ 54.316267][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.323527][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.330732][ T5860] bridge_slave_1: entered allmulticast mode [ 54.337541][ T5860] bridge_slave_1: entered promiscuous mode [ 54.371396][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 54.392374][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.399564][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.407152][ T5861] bridge_slave_0: entered allmulticast mode [ 54.414318][ T5861] bridge_slave_0: entered promiscuous mode [ 54.428799][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.438164][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.445526][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.452651][ T5861] bridge_slave_1: entered allmulticast mode [ 54.459578][ T5861] bridge_slave_1: entered promiscuous mode [ 54.485928][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.522895][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.532944][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.540418][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.547922][ T5859] bridge_slave_0: entered allmulticast mode [ 54.554982][ T5859] bridge_slave_0: entered promiscuous mode [ 54.576252][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.594551][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.602295][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.610199][ T5859] bridge_slave_1: entered allmulticast mode [ 54.617755][ T5859] bridge_slave_1: entered promiscuous mode [ 54.625514][ T5860] team0: Port device team_slave_0 added [ 54.650451][ T5860] team0: Port device team_slave_1 added [ 54.663978][ T5861] team0: Port device team_slave_0 added [ 54.692157][ T5861] team0: Port device team_slave_1 added [ 54.699796][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.711246][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.727248][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.734457][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.741802][ T5862] bridge_slave_0: entered allmulticast mode [ 54.749142][ T5862] bridge_slave_0: entered promiscuous mode [ 54.768401][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.775765][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.802855][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.814911][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.822076][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.829973][ T5862] bridge_slave_1: entered allmulticast mode [ 54.837117][ T5862] bridge_slave_1: entered promiscuous mode [ 54.856075][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.863368][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.889736][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.908319][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.915699][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.942024][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.954269][ T5859] team0: Port device team_slave_0 added [ 54.970459][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.977655][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.004342][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.020973][ T5859] team0: Port device team_slave_1 added [ 55.036667][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.055720][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.077026][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.084467][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.111843][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.141850][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.149180][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.177310][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.203789][ T5860] hsr_slave_0: entered promiscuous mode [ 55.210504][ T5860] hsr_slave_1: entered promiscuous mode [ 55.219943][ T5861] hsr_slave_0: entered promiscuous mode [ 55.226966][ T5861] hsr_slave_1: entered promiscuous mode [ 55.233720][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 55.240278][ T5861] Cannot create hsr debugfs directory [ 55.255812][ T5862] team0: Port device team_slave_0 added [ 55.287278][ T5862] team0: Port device team_slave_1 added [ 55.320299][ T5859] hsr_slave_0: entered promiscuous mode [ 55.326974][ T5859] hsr_slave_1: entered promiscuous mode [ 55.333449][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 55.339172][ T5859] Cannot create hsr debugfs directory [ 55.378423][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.385574][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.412426][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.432742][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.439834][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.465964][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.538960][ T5862] hsr_slave_0: entered promiscuous mode [ 55.545448][ T5862] hsr_slave_1: entered promiscuous mode [ 55.551378][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 55.557545][ T5862] Cannot create hsr debugfs directory [ 55.688270][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.697051][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.714325][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.730079][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.759720][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.770190][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.779896][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.796558][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.835626][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.845874][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.864351][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.873436][ T5870] Bluetooth: hci0: command tx timeout [ 55.889592][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.941959][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.953450][ T5870] Bluetooth: hci2: command tx timeout [ 55.953534][ T5873] Bluetooth: hci3: command tx timeout [ 55.958864][ T5870] Bluetooth: hci1: command tx timeout [ 55.970772][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.986266][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.994270][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.002947][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.031225][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.055247][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.063776][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.070897][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.087562][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.094703][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.135467][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.152634][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.159845][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.186814][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.193948][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.225268][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.245468][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.256960][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.287129][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.316760][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.324001][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.345209][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.352330][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.406372][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.462738][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.472205][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.500213][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.507460][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.522229][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.531428][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.538514][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.598393][ T5860] veth0_vlan: entered promiscuous mode [ 56.633436][ T5861] veth0_vlan: entered promiscuous mode [ 56.645292][ T5860] veth1_vlan: entered promiscuous mode [ 56.664334][ T5861] veth1_vlan: entered promiscuous mode [ 56.680051][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.727190][ T5860] veth0_macvtap: entered promiscuous mode [ 56.748684][ T5861] veth0_macvtap: entered promiscuous mode [ 56.764498][ T5860] veth1_macvtap: entered promiscuous mode [ 56.781128][ T5861] veth1_macvtap: entered promiscuous mode [ 56.790904][ T5859] veth0_vlan: entered promiscuous mode [ 56.806836][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.826242][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.835916][ T5859] veth1_vlan: entered promiscuous mode [ 56.844656][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.861418][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.869096][ T3500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.886643][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.899582][ T3500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.909065][ T3500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.926404][ T3500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.935552][ T3500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.955964][ T3500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.964970][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.980905][ T5859] veth0_macvtap: entered promiscuous mode [ 56.990116][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.009732][ T5859] veth1_macvtap: entered promiscuous mode [ 57.031588][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.040590][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.070320][ T5862] veth0_vlan: entered promiscuous mode [ 57.080858][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.094065][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.102132][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.111985][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.125842][ T5862] veth1_vlan: entered promiscuous mode [ 57.135857][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.151447][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.162153][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175665][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.201318][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.210184][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.238137][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.245760][ T3500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.253437][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.280913][ T5946] raw_sendmsg: syz.3.4 forgot to set AF_INET. Fix it! [ 57.331111][ T5862] veth0_macvtap: entered promiscuous mode [ 57.354994][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.362871][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.376561][ T5862] veth1_macvtap: entered promiscuous mode [ 57.433783][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.447624][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.474734][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.506857][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.528455][ T180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.547329][ T180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.579560][ T180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.612294][ T180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.740742][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.763037][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.828175][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.865310][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.953866][ T5870] Bluetooth: hci0: command tx timeout [ 58.001349][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.033244][ T5870] Bluetooth: hci1: command tx timeout [ 58.036823][ T5873] Bluetooth: hci3: command tx timeout [ 58.038693][ T5870] Bluetooth: hci2: command tx timeout [ 58.167703][ T5978] warning: `syz.3.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.266438][ T5870] Bluetooth: Wrong link type (-71) [ 58.523135][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 58.677266][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 58.686476][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.696194][ T24] usb 3-1: config 0 descriptor?? [ 60.033370][ T5870] Bluetooth: hci0: command tx timeout [ 60.113442][ T5870] Bluetooth: hci3: command tx timeout [ 60.113454][ T5873] Bluetooth: hci1: command tx timeout [ 60.113479][ T5873] Bluetooth: hci2: command tx timeout [ 60.403949][ T5944] usb 3-1: USB disconnect, device number 2 [ 60.466236][ T6018] wlan1 speed is unknown, defaulting to 1000 [ 60.472727][ T6018] wlan1 speed is unknown, defaulting to 1000 [ 60.479796][ T6018] wlan1 speed is unknown, defaulting to 1000 [ 60.529440][ T6021] /dev/rnullb0: Can't open blockdev [ 60.627982][ T6018] infiniband syz0: set active [ 60.634192][ T5944] wlan1 speed is unknown, defaulting to 1000 [ 60.640366][ T6018] infiniband syz0: added wlan1 [ 60.664151][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 60.706066][ T6018] RDS/IB: syz0: added [ 60.715114][ T6018] smc: adding ib device syz0 with port count 1 [ 60.726093][ T6018] smc: ib device syz0 port 1 has pnetid [ 60.739510][ T5900] wlan1 speed is unknown, defaulting to 1000 [ 60.747133][ T6018] wlan1 speed is unknown, defaulting to 1000 [ 60.875737][ T6018] wlan1 speed is unknown, defaulting to 1000 [ 61.123429][ T6018] wlan1 speed is unknown, defaulting to 1000 [ 61.408918][ T6018] wlan1 speed is unknown, defaulting to 1000 [ 62.005089][ T6062] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 62.036383][ T6064] ======================================================= [ 62.036383][ T6064] WARNING: The mand mount option has been deprecated and [ 62.036383][ T6064] and is ignored by this kernel. Remove the mand [ 62.036383][ T6064] option from the mount to silence this warning. [ 62.036383][ T6064] ======================================================= [ 62.054316][ T6060] netlink: 'syz.0.36': attribute type 5 has an invalid length. [ 62.114564][ T5873] Bluetooth: hci0: command tx timeout [ 62.116410][ T6064] /dev/rnullb0: Can't open blockdev [ 62.193772][ T5873] Bluetooth: hci2: command tx timeout [ 62.195980][ T51] Bluetooth: hci3: command tx timeout [ 62.199300][ T5870] Bluetooth: hci1: command tx timeout [ 62.245405][ T6073] block nbd1: Attempted send on invalid socket [ 62.291690][ T6073] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.331158][ T6073] block nbd1: Attempted send on invalid socket [ 62.366007][ T6073] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.393213][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 62.447431][ T6077] kAFS: unable to lookup cell '.,cL' [ 62.478317][ T6073] block nbd1: Attempted send on invalid socket [ 62.496446][ T6073] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.518425][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 62.532234][ T6079] netlink: 88 bytes leftover after parsing attributes in process `syz.2.42'. [ 62.552390][ T6079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 62.560108][ T6079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 62.567641][ T6079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 62.583451][ T6079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 62.590906][ T6079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 62.603029][ T6073] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 62.610616][ T6073] UDF-fs: Scanning with blocksize 512 failed [ 62.618111][ T6079] Dead loop on virtual device ip6_vti0, fix it urgently! [ 62.646279][ T6073] block nbd1: Attempted send on invalid socket [ 62.662679][ T6073] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.677884][ T6073] block nbd1: Attempted send on invalid socket [ 62.693167][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.701296][ T6073] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.724643][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 62.746180][ T6073] block nbd1: Attempted send on invalid socket [ 62.752422][ T6073] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.763763][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 62.774851][ T6073] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 62.782499][ T6073] UDF-fs: Scanning with blocksize 1024 failed [ 62.789118][ T6073] block nbd1: Attempted send on invalid socket [ 62.798294][ T6073] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.883336][ T6073] block nbd1: Attempted send on invalid socket [ 62.883491][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 62.896951][ T6073] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.918751][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 62.954218][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 62.986754][ T6073] block nbd1: Attempted send on invalid socket [ 62.993384][ T6073] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.005728][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 63.013302][ T5900] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 63.016701][ T6073] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 63.024514][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.024536][ T5900] usb 1-1: Product: syz [ 63.024548][ T5900] usb 1-1: Manufacturer: syz [ 63.033722][ T6073] UDF-fs: Scanning with blocksize 2048 failed [ 63.059494][ T6073] block nbd1: Attempted send on invalid socket [ 63.066114][ T6073] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.083212][ T5900] usb 1-1: SerialNumber: syz [ 63.084110][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 63.093677][ T5900] usb 1-1: config 0 descriptor?? [ 63.104758][ T6073] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 63.116775][ T6073] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 63.125135][ T6073] UDF-fs: Scanning with blocksize 4096 failed [ 63.131841][ T6073] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 63.356160][ T5900] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 63.373063][ T5900] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 63.396987][ T5900] usb 1-1: USB disconnect, device number 2 [ 64.103820][ T6097] syzkaller1: entered promiscuous mode [ 64.129928][ T6097] syzkaller1: entered allmulticast mode [ 64.960718][ T3462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.104223][ T3462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.207519][ T3462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.295025][ T3462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.457152][ T3462] bridge_slave_1: left allmulticast mode [ 65.481147][ T3462] bridge_slave_1: left promiscuous mode [ 65.513546][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.533277][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.540726][ T3462] bridge_slave_0: left allmulticast mode [ 65.547729][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.550666][ T3462] bridge_slave_0: left promiscuous mode [ 65.563800][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.571795][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.579654][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.588614][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.602171][ T6130] comedi comedi3: ni_at_a2150: I/O port conflict (0xffff,28) [ 65.809371][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.825693][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.839656][ T3462] bond0 (unregistering): Released all slaves [ 65.878813][ T6124] wlan1 speed is unknown, defaulting to 1000 [ 66.276279][ T6161] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.381596][ T3462] hsr_slave_0: left promiscuous mode [ 66.420092][ T3462] hsr_slave_1: left promiscuous mode [ 66.438000][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.464929][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.482316][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.490056][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.531348][ T3462] veth1_macvtap: left promiscuous mode [ 66.547906][ T3462] veth0_macvtap: left promiscuous mode [ 66.563318][ T3462] veth1_vlan: left promiscuous mode [ 66.568642][ T3462] veth0_vlan: left promiscuous mode [ 66.593367][ T5873] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.599796][ T5870] Bluetooth: hci4: command 0x1003 tx timeout [ 66.825064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.834370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.844841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.863190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.871878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.928423][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 66.941172][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 67.004292][ T5944] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.017535][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 67.027688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 67.046614][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 67.063726][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 67.129957][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 67.149429][ T6197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 67.164050][ T5944] usb 2-1: device descriptor read/64, error -71 [ 67.288820][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.298107][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.306088][ T6124] bridge_slave_0: entered allmulticast mode [ 67.313152][ T6124] bridge_slave_0: entered promiscuous mode [ 67.320749][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.329123][ T6175] infiniband syz2: set active [ 67.331070][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.333915][ T6175] infiniband syz2: added vxcan1 [ 67.341986][ T6124] bridge_slave_1: entered allmulticast mode [ 67.353238][ T6124] bridge_slave_1: entered promiscuous mode [ 67.359873][ T5900] vxcan1 speed is unknown, defaulting to 1000 [ 67.391909][ T6175] RDS/IB: syz2: added [ 67.394210][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.407213][ T6175] smc: adding ib device syz2 with port count 1 [ 67.414428][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.424188][ T6175] smc: ib device syz2 port 1 has pnetid [ 67.431640][ T5900] vxcan1 speed is unknown, defaulting to 1000 [ 67.443144][ T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.444096][ T5944] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.460031][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 67.478795][ T6124] team0: Port device team_slave_0 added [ 67.495888][ T6124] team0: Port device team_slave_1 added [ 67.541711][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.561872][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.588913][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.596688][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.609337][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 67.612955][ T5944] usb 2-1: device descriptor read/64, error -71 [ 67.616699][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.629983][ T55] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.643181][ T5873] Bluetooth: hci3: command tx timeout [ 67.644561][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 67.669547][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.696984][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.734850][ T5944] usb usb2-port1: attempt power cycle [ 67.748049][ T55] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 67.757470][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.766489][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 67.782416][ T55] usb 4-1: config 0 descriptor?? [ 67.812384][ T6124] hsr_slave_0: entered promiscuous mode [ 67.916819][ T6124] hsr_slave_1: entered promiscuous mode [ 67.923270][ T6124] debugfs: 'hsr0' already exists in 'hsr' [ 67.930417][ T6124] Cannot create hsr debugfs directory [ 67.936566][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 68.093160][ T5944] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.125100][ T5944] usb 2-1: device descriptor read/8, error -71 [ 68.209239][ T55] hid-alps 0003:044E:1215.0001: unknown main item tag 0x1 [ 68.233706][ T55] hid-alps 0003:044E:1215.0001: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.3-1/input0 [ 68.381898][ T6124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.393138][ T5944] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 68.394178][ T6124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.410389][ T6124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.415540][ T6197] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 68.428253][ T5944] usb 2-1: device descriptor read/8, error -71 [ 68.430209][ T6124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.447956][ T6197] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 68.474079][ T6197] netlink: 256 bytes leftover after parsing attributes in process `syz.3.68'. [ 68.529244][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.550112][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.560074][ T5944] usb usb2-port1: unable to enumerate USB device [ 68.588042][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.595203][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.622715][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.629958][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.715286][ T6260] overlayfs: missing 'lowerdir' [ 68.859656][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 68.905743][ T5900] usb 4-1: USB disconnect, device number 2 [ 68.946538][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.012311][ T6124] veth0_vlan: entered promiscuous mode [ 69.024049][ T6124] veth1_vlan: entered promiscuous mode [ 69.049664][ T6124] veth0_macvtap: entered promiscuous mode [ 69.066137][ T6124] veth1_macvtap: entered promiscuous mode [ 69.100901][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.121553][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.159900][ T75] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.189356][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.213557][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.232653][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.303479][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.311507][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.361405][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.383502][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.723145][ T5873] Bluetooth: hci3: command tx timeout [ 70.108281][ T6321] /dev/rnullb0: Can't open blockdev [ 70.126810][ T6323] /dev/rnullb0: Can't open blockdev [ 70.164474][ T5944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 70.356893][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.378309][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.398628][ T5944] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.418934][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.440595][ T5944] usb 2-1: config 0 descriptor?? [ 71.260242][ T6344] /dev/rnullb0: Can't open blockdev [ 71.368707][ T6350] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.596975][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.645992][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.793159][ T5873] Bluetooth: hci3: command tx timeout [ 72.814456][ T5944] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 72.843105][ T5944] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 72.850664][ T5944] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 72.898144][ T5944] usb 2-1: USB disconnect, device number 6 [ 73.203205][ T5944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 73.323336][ T55] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 73.367023][ T5944] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 73.378080][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.390562][ T5944] usb 2-1: Product: syz [ 73.396194][ T5944] usb 2-1: Manufacturer: syz [ 73.400890][ T5944] usb 2-1: SerialNumber: syz [ 73.410787][ T5944] usb 2-1: config 0 descriptor?? [ 73.487886][ T55] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.503170][ T55] usb 4-1: config 0 has no interface number 0 [ 73.509912][ T55] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 73.532741][ T6381] capability: warning: `syz.0.92' uses deprecated v2 capabilities in a way that may be insecure [ 73.543097][ T55] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.564218][ T55] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 73.565864][ T6381] capability: warning: `syz.0.92' uses 32-bit capabilities (legacy support in use) [ 73.593487][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.614603][ T55] usb 4-1: config 0 descriptor?? [ 73.624340][ T55] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 73.885167][ T5873] Bluetooth: hci3: command tx timeout [ 73.926066][ T6374] iowarrior 4-1:0.1: Error -90 while submitting URB [ 74.077844][ T5944] usb 4-1: USB disconnect, device number 3 [ 74.327913][ T43] usb 2-1: USB disconnect, device number 7 [ 75.086972][ T55] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 75.302190][ T55] usb 4-1: Invalid ep0 maxpacket: 64 [ 75.453138][ T55] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 75.486907][ T6415] vxfs: WRONG superblock magic 00000000 at 1 [ 75.492954][ T6415] vxfs: WRONG superblock magic 00000000 at 8 [ 75.501362][ T6415] vxfs: can't find superblock. [ 75.613062][ T55] usb 4-1: Invalid ep0 maxpacket: 64 [ 75.619298][ T55] usb usb4-port1: attempt power cycle [ 75.773080][ T5944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.923133][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 75.930382][ T5944] usb 3-1: config 4 has an invalid interface number: 8 but max is 0 [ 75.939856][ T5944] usb 3-1: config 4 has no interface number 0 [ 75.946258][ T5944] usb 3-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 75.956079][ T5944] usb 3-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 75.965967][ T5944] usb 3-1: config 4 interface 8 has no altsetting 0 [ 75.975230][ T5944] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 75.983217][ T55] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 75.984875][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.000652][ T5944] usb 3-1: Product: syz [ 76.005241][ T5944] usb 3-1: Manufacturer: syz [ 76.009906][ T5944] usb 3-1: SerialNumber: syz [ 76.035147][ T55] usb 4-1: Invalid ep0 maxpacket: 64 [ 76.163129][ T55] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 76.183577][ T55] usb 4-1: Invalid ep0 maxpacket: 64 [ 76.189065][ T55] usb usb4-port1: unable to enumerate USB device [ 76.195652][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.261816][ T6411] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 76.354695][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.390496][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.410714][ T43] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 76.424936][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.440756][ T43] usb 1-1: config 0 descriptor?? [ 76.987237][ T6445] syz0: rxe_newlink: already configured on wlan1 [ 76.999444][ T6445] /dev/rnullb0: Can't open blockdev [ 77.473214][ T5870] Bluetooth: hci0: command 0x080f tx timeout [ 77.873384][ T5870] Bluetooth: hci3: command 0x0405 tx timeout [ 78.105961][ T6454] /dev/rnullb0: Can't open blockdev [ 78.575021][ T5944] opticon 3-1:4.8: opticon converter detected [ 78.603938][ T5944] usb 3-1: opticon converter now attached to ttyUSB0 [ 78.640929][ T5944] usb 3-1: USB disconnect, device number 3 [ 78.685074][ T5944] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 78.706166][ T5944] opticon 3-1:4.8: device disconnected [ 78.908020][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 78.921509][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 78.952313][ T43] usb 1-1: USB disconnect, device number 3 [ 78.957742][ T6467] binder: 6466:6467 ioctl c018620c 200000000080 returned -22 [ 79.452657][ T6464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.458831][ T6464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.465930][ T6464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.472550][ T6464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.479037][ T6464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.486681][ T6464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.495284][ T6464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.502480][ T6464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.526563][ T6464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.536901][ T6464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.544055][ T6464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.552322][ T6464] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.687595][ T6484] Zero length message leads to an empty skb [ 79.813338][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 79.924001][ T6496] netlink: 'syz.2.128': attribute type 3 has an invalid length. [ 79.948730][ T6496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.128'. [ 79.995701][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.015872][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.032883][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.063073][ T5900] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 80.078951][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.099058][ T5900] usb 2-1: config 0 descriptor?? [ 80.420696][ T6508] /dev/rnullb0: Can't open blockdev [ 80.519362][ T5900] dragonrise 0003:0079:0011.0003: unknown main item tag 0x0 [ 80.542419][ T5900] dragonrise 0003:0079:0011.0003: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 80.565058][ T6517] /dev/rnullb0: Can't open blockdev [ 80.582785][ T5900] usb 2-1: USB disconnect, device number 8 [ 80.626980][ T6518] fido_id[6518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 80.753119][ T5873] Bluetooth: hci0: command 0x080f tx timeout [ 80.800612][ T6526] /dev/rnullb0: Can't open blockdev [ 81.053276][ T5900] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 81.105405][ T6544] tipc: Failed to remove unknown binding: 66,1,1/0:385286891/385286893 [ 81.125476][ T6544] tipc: Failed to remove unknown binding: 66,1,1/0:385286891/385286893 [ 81.184313][ T5900] usb 4-1: device descriptor read/64, error -71 [ 81.424313][ T5900] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 81.473099][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.553422][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 81.553598][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.570292][ T5900] usb 4-1: device descriptor read/64, error -71 [ 81.683798][ T5900] usb usb4-port1: attempt power cycle [ 81.795110][ T953] cfg80211: failed to load regulatory.db [ 81.813123][ T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.973087][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 81.979980][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.993052][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.013111][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.026120][ T5900] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 82.036223][ T55] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.053124][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.061650][ T5900] usb 4-1: device descriptor read/8, error -71 [ 82.073479][ T55] usb 3-1: config 0 descriptor?? [ 82.163127][ T5944] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 82.313090][ T5900] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 82.315134][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.336418][ T5900] usb 4-1: device descriptor read/8, error -71 [ 82.343411][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.354373][ T5944] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.363973][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.371972][ T5944] usb 2-1: Product: syz [ 82.383441][ T5944] usb 2-1: Manufacturer: syz [ 82.389440][ T5944] usb 2-1: SerialNumber: syz [ 82.443474][ T5900] usb usb4-port1: unable to enumerate USB device [ 82.492056][ T55] microsoft 0003:045E:07DA.0004: unknown main item tag 0x2 [ 82.503203][ T55] microsoft 0003:045E:07DA.0004: unknown global tag 0xe [ 82.506472][ T6556] /dev/rnullb0: Can't open blockdev [ 82.510188][ T55] microsoft 0003:045E:07DA.0004: item 0 1 1 14 parsing failed [ 82.510601][ T55] microsoft 0003:045E:07DA.0004: parse failed [ 82.549638][ T55] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 82.696884][ T6549] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 82.705810][ T6549] /dev/rnullb0: Can't open blockdev [ 82.822534][ T6562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.143'. [ 82.833293][ T5870] Bluetooth: hci0: command 0x080f tx timeout [ 83.553106][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.633187][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.636405][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 83.845825][ T6568] binder: BINDER_SET_CONTEXT_MGR already set [ 83.862908][ T6568] binder: 6567:6568 ioctl 4018620d 200000000000 returned -16 [ 84.572252][ T55] usb 3-1: USB disconnect, device number 4 [ 84.914594][ T5873] Bluetooth: hci0: command 0x080f tx timeout [ 84.954800][ T5944] usb 2-1: 0:2 : does not exist [ 84.968961][ T5944] usb 2-1: USB disconnect, device number 9 [ 85.113054][ T55] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.263188][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 85.276095][ T55] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 85.286449][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.300297][ T55] usb 3-1: Product: syz [ 85.311923][ T55] usb 3-1: Manufacturer: syz [ 85.324276][ T55] usb 3-1: SerialNumber: syz [ 85.332954][ T55] usb 3-1: config 0 descriptor?? [ 85.550753][ T55] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 85.558448][ T55] gspca_sunplus: reg_w_riv err -71 [ 85.573111][ T55] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 85.601035][ T55] usb 3-1: USB disconnect, device number 5 [ 85.634693][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.713424][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 85.713862][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.139238][ T6613] /dev/rnullb0: Can't open blockdev [ 86.713393][ T953] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 86.713393][ T55] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.753615][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 86.822321][ T6547] syz.0.139 (6547) used greatest stack depth: 17336 bytes left [ 86.830189][ T5944] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.863076][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 86.869632][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.882147][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.883124][ T953] usb 2-1: Using ep0 maxpacket: 8 [ 86.892904][ T55] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.912527][ T55] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.912537][ T953] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 86.912569][ T953] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 86.928912][ T43] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 86.943136][ T953] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.964448][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.974418][ T43] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 86.983296][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 86.985525][ T55] usb 1-1: config 0 descriptor?? [ 86.989096][ T953] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 86.996306][ T43] usb 4-1: config 220 interface 0 has no altsetting 0 [ 87.019019][ T43] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 87.026180][ T953] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 87.028697][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.043686][ T5944] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 87.052000][ T43] usb 4-1: Product: syz [ 87.056457][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.060228][ T43] usb 4-1: Manufacturer: syz [ 87.074429][ T953] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.074462][ T43] usb 4-1: SerialNumber: syz [ 87.093851][ T5944] usb 3-1: Product: syz [ 87.099427][ T5944] usb 3-1: Manufacturer: syz [ 87.112553][ T5944] usb 3-1: SerialNumber: syz [ 87.117495][ T953] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.127407][ T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.136266][ T5944] usb 3-1: config 0 descriptor?? [ 87.349525][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 87.349625][ T43] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 87.363829][ T5944] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 87.372570][ T43] usb 4-1: USB disconnect, device number 12 [ 87.383865][ T953] usb 2-1: GET_CAPABILITIES returned 0 [ 87.389464][ T953] usbtmc 2-1:16.0: can't read capabilities [ 87.400628][ T5944] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 87.465411][ T5944] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 87.482119][ T5944] usb 3-1: USB disconnect, device number 6 [ 87.595708][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 87.607568][ T6623] usbtmc 2-1:16.0: Unable to send data, error -71 [ 87.618721][ T5865] usb 2-1: USB disconnect, device number 10 [ 87.966368][ T6633] /dev/rnullb0: Can't open blockdev [ 87.971807][ T6632] /dev/rnullb0: Can't open blockdev [ 88.006045][ T6636] /dev/rnullb0: Can't open blockdev [ 88.319906][ T24] hid (null): unknown global tag 0xd [ 88.325837][ T43] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 88.354686][ T24] hid (null): invalid report_count -1297675497 [ 88.375219][ T24] hid (null): unknown global tag 0xe [ 88.380617][ T24] hid (null): unknown global tag 0xd [ 88.395633][ T24] hid-generic 0101:7FFF:0032.0005: unknown main item tag 0x0 [ 88.405595][ T24] hid-generic 0101:7FFF:0032.0005: reserved main item tag 0xe [ 88.427101][ T6652] /dev/rnullb0: Can't open blockdev [ 88.432824][ T24] hid-generic 0101:7FFF:0032.0005: ignoring exceeding usage max [ 88.452230][ T24] hid-generic 0101:7FFF:0032.0005: unknown global tag 0xd [ 88.467555][ T24] hid-generic 0101:7FFF:0032.0005: item 0 1 1 13 parsing failed [ 88.496571][ T24] hid-generic 0101:7FFF:0032.0005: probe with driver hid-generic failed with error -22 [ 88.536959][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 88.557430][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.576779][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.595945][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.614590][ T43] usb 3-1: Product: syz [ 88.619192][ T43] usb 3-1: Manufacturer: syz [ 88.623917][ T5900] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 88.651911][ T43] usb 3-1: SerialNumber: syz [ 88.669058][ T43] usb 3-1: config 0 descriptor?? [ 88.689669][ T43] usb 3-1: selecting invalid altsetting 0 [ 88.793457][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 88.810980][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.825338][ T5900] usb 4-1: config 15 has an invalid interface number: 53 but max is 0 [ 88.857468][ T5900] usb 4-1: config 15 has no interface number 0 [ 88.871888][ T5900] usb 4-1: config 15 interface 53 altsetting 99 has an endpoint descriptor with address 0x2C, changing to 0xC [ 88.899837][ T24] usb 3-1: USB disconnect, device number 7 [ 88.906765][ T5900] usb 4-1: config 15 interface 53 altsetting 99 endpoint 0xC has an invalid bInterval 144, changing to 11 [ 88.932322][ T5900] usb 4-1: config 15 interface 53 altsetting 99 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 88.944927][ T5900] usb 4-1: config 15 interface 53 has no altsetting 0 [ 89.005750][ T5900] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=91.ce [ 89.016266][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.025456][ T5900] usb 4-1: Product: syz [ 89.029665][ T5900] usb 4-1: Manufacturer: syz [ 89.035798][ T5900] usb 4-1: SerialNumber: syz [ 89.203564][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 89.256250][ T5900] option 4-1:15.53: GSM modem (1-port) converter detected [ 89.274965][ T5900] usb 4-1: USB disconnect, device number 13 [ 89.297476][ T5900] option 4-1:15.53: device disconnected [ 89.360913][ T6668] netlink: 'syz.2.178': attribute type 2 has an invalid length. [ 89.368106][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 89.368953][ T6668] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.178'. [ 89.375305][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 89.392461][ T55] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.403485][ T55] usb 1-1: USB disconnect, device number 4 [ 89.410393][ T43] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 89.418802][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.431766][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.441992][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.452029][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.484799][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.493974][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.707078][ T43] usb 2-1: usb_control_msg returned -32 [ 89.713940][ T43] usbtmc 2-1:16.0: can't read capabilities [ 89.754245][ T55] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.801442][ T6673] Malformed UNC in devname [ 89.801442][ T6673] [ 89.808673][ T6673] CIFS: VFS: Malformed UNC in devname [ 89.917576][ T55] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 89.941171][ T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.964353][ T55] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.973986][ T55] usb 1-1: config 1 has no interface number 1 [ 89.980113][ T55] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 89.997007][ T55] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.021424][ T55] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.040952][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.051741][ T55] usb 1-1: Product: syz [ 90.056270][ T55] usb 1-1: Manufacturer: syz [ 90.061055][ T55] usb 1-1: SerialNumber: syz [ 90.291005][ T6671] NILFS (rnullb0): couldn't find nilfs on the device [ 90.310351][ T55] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 90.320413][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 90.328796][ T55] usb 1-1: MIDIStreaming interface descriptor not found [ 90.381369][ T55] usb 1-1: USB disconnect, device number 5 [ 90.483214][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 90.483844][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.490905][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.504243][ T43] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 90.513496][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.514877][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.530160][ T43] usb 4-1: config 0 descriptor?? [ 90.549679][ T6684] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 90.884565][ T6693] netlink: 5092 bytes leftover after parsing attributes in process `syz.0.185'. [ 91.142498][ T6681] /dev/rnullb0: Can't open blockdev [ 91.143076][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.154027][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.179003][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.190440][ T55] usb 2-1: USB disconnect, device number 11 [ 91.235314][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 91.261791][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.288466][ T43] usb 4-1: USB disconnect, device number 14 [ 91.315549][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 91.332436][ T5865] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.347392][ T5865] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 91.371244][ T5865] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 91.386096][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.396129][ T5865] usb 1-1: Product: syz [ 91.402057][ T5865] usb 1-1: Manufacturer: syz [ 91.408093][ T5865] usb 1-1: SerialNumber: syz [ 91.618011][ T5865] usb 1-1: Invalid number of CPorts: 0 [ 91.623621][ T5865] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 91.834339][ T5865] usb 1-1: USB disconnect, device number 6 [ 92.039323][ T30] audit: type=1326 audit(1756675173.265:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3dab8ebe9 code=0x7fc00000 [ 93.397220][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 93.428486][ T6744] 9p: Bad value for 'rfdno' [ 93.451575][ T6745] 9p: Bad value for 'rfdno' [ 93.626784][ T6750] usb usb8: usbfs: process 6750 (syz.0.199) did not claim interface 0 before use [ 93.637089][ T6750] netlink: 172 bytes leftover after parsing attributes in process `syz.0.199'. [ 93.656750][ T6750] /dev/rnullb0: Can't open blockdev [ 93.783499][ T6757] Mount JFS Failure: -22 [ 94.283343][ T6776] cgroup: Invalid name [ 94.421250][ T6800] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.539613][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'. [ 94.588851][ T6809] fuse: Unknown parameter 'rootmode9000000000100000' [ 95.299770][ T6811] /dev/rnullb0: Can't open blockdev [ 96.297759][ T6844] /dev/rnullb0: Can't open blockdev [ 96.328036][ T30] audit: type=1326 audit(1756675177.575:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649698ebe9 code=0x0 [ 96.349682][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.387880][ T6848] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 96.625944][ T6864] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 96.663071][ T5865] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 96.835227][ T5865] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 96.844952][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.873101][ T5865] usb 4-1: Product: syz [ 96.877298][ T5865] usb 4-1: Manufacturer: syz [ 96.881900][ T5865] usb 4-1: SerialNumber: syz [ 96.903474][ T5865] usb 4-1: config 0 descriptor?? [ 96.930949][ T5865] gspca_main: kinect-2.14.0 probing 045e:02bf [ 97.026327][ T6887] /dev/rnullb0: Can't open blockdev [ 97.037774][ T3563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.108544][ T3563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.164474][ T3563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.195755][ T6892] /dev/rnullb0: Can't open blockdev [ 97.245729][ T3563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.264916][ T6895] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.394202][ T3563] bridge_slave_1: left allmulticast mode [ 97.395334][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.399991][ T3563] bridge_slave_1: left promiscuous mode [ 97.400155][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.422556][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.430502][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.430934][ T3563] bridge_slave_0: left allmulticast mode [ 97.443796][ T55] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 97.451982][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.452214][ T3563] bridge_slave_0: left promiscuous mode [ 97.463479][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.474733][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.601162][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.609941][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 97.616656][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.620846][ T55] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 97.636027][ T55] usb 2-1: config 0 has no interface number 0 [ 97.643569][ T3563] bond0 (unregistering): Released all slaves [ 97.653357][ T55] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 97.670939][ T55] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 97.706472][ T55] usb 2-1: config 0 interface 126 has no altsetting 0 [ 97.721292][ T6899] wlan1 speed is unknown, defaulting to 1000 [ 97.731553][ T55] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 97.751869][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.769797][ T55] usb 2-1: Product: syz [ 97.780922][ T55] usb 2-1: Manufacturer: syz [ 97.791270][ T55] usb 2-1: SerialNumber: syz [ 97.807421][ T55] usb 2-1: config 0 descriptor?? [ 97.815776][ T6891] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.838471][ T6891] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.892710][ T6906] delete_channel: no stack [ 97.932956][ T6899] vxcan1 speed is unknown, defaulting to 1000 [ 98.269205][ T55] ir_usb 2-1:0.126: IR Dongle converter detected [ 98.303421][ T24] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 98.342937][ T3563] hsr_slave_0: left promiscuous mode [ 98.349806][ T3563] hsr_slave_1: left promiscuous mode [ 98.356250][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.365790][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.374077][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.381643][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.392075][ T3563] veth1_macvtap: left promiscuous mode [ 98.397950][ T3563] veth0_macvtap: left promiscuous mode [ 98.403806][ T3563] veth1_vlan: left promiscuous mode [ 98.409084][ T3563] veth0_vlan: left promiscuous mode [ 98.453097][ T24] usb 3-1: device descriptor read/64, error -71 [ 98.468437][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.477242][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.488241][ T55] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 98.555679][ T3563] team0 (unregistering): Port device team_slave_1 removed [ 98.570009][ T3563] team0 (unregistering): Port device team_slave_0 removed [ 98.666169][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 98.694782][ T24] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 98.696417][ T6891] /dev/rnullb0: Can't open blockdev [ 98.719809][ T5865] usb 2-1: USB disconnect, device number 12 [ 98.740440][ T5865] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 98.765558][ T5865] ir_usb 2-1:0.126: device disconnected [ 98.811039][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.820185][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.827898][ T6899] bridge_slave_0: entered allmulticast mode [ 98.835024][ T6899] bridge_slave_0: entered promiscuous mode [ 98.842673][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.850112][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.853046][ T24] usb 3-1: device descriptor read/64, error -71 [ 98.857836][ T6899] bridge_slave_1: entered allmulticast mode [ 98.870685][ T6899] bridge_slave_1: entered promiscuous mode [ 98.907023][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.922969][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.956193][ T6899] team0: Port device team_slave_0 added [ 98.965103][ T6899] team0: Port device team_slave_1 added [ 98.975280][ T24] usb usb3-port1: attempt power cycle [ 98.999336][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.007610][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.033645][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.041749][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.056268][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.063329][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.089471][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.096261][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.135911][ T6899] hsr_slave_0: entered promiscuous mode [ 99.142565][ T6899] hsr_slave_1: entered promiscuous mode [ 99.149120][ T6899] debugfs: 'hsr0' already exists in 'hsr' [ 99.159142][ T6899] Cannot create hsr debugfs directory [ 99.188371][ T5963] usb 4-1: USB disconnect, device number 15 [ 99.338044][ T24] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 99.370297][ T24] usb 3-1: device descriptor read/8, error -71 [ 99.394957][ T6953] /dev/rnullb0: Can't open blockdev [ 99.401770][ T6899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.445561][ T6899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.477609][ T6899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.527085][ T6899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.553158][ T5873] Bluetooth: hci3: command tx timeout [ 99.636308][ T24] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 99.646408][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.661060][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.698163][ T24] usb 3-1: device descriptor read/8, error -71 [ 99.814666][ T24] usb usb3-port1: unable to enumerate USB device [ 99.826935][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.834172][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.934075][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.941311][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.057930][ T6988] __vm_enough_memory: pid: 6988, comm: syz.1.258, bytes: 21200397430784 not enough memory for the allocation [ 100.456047][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.890950][ T6899] veth0_vlan: entered promiscuous mode [ 100.919362][ T6899] veth1_vlan: entered promiscuous mode [ 100.984986][ T6899] veth0_macvtap: entered promiscuous mode [ 101.017079][ T6899] veth1_macvtap: entered promiscuous mode [ 101.055071][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.097501][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.126211][ T3500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.141565][ T3500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.167992][ T3500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.195964][ T3500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.356276][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.368061][ T7028] NILFS (rnullb0): couldn't find nilfs on the device [ 101.372248][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.420029][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.432646][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.633744][ T5873] Bluetooth: hci3: command tx timeout [ 101.751699][ T7054] JFS: charset not found [ 101.763297][ T5944] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 101.803078][ T953] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 101.927709][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.950728][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.981951][ T953] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 102.000779][ T953] usb 4-1: config 0 has no interface number 0 [ 102.007440][ T5944] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 102.016985][ T953] usb 4-1: config 0 interface 41 has no altsetting 0 [ 102.023942][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.042651][ T5944] usb 2-1: config 0 descriptor?? [ 102.050606][ T953] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 102.062105][ T953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.073822][ T953] usb 4-1: Product: syz [ 102.078120][ T953] usb 4-1: Manufacturer: syz [ 102.139671][ T953] usb 4-1: SerialNumber: syz [ 102.169944][ T953] usb 4-1: config 0 descriptor?? [ 102.198201][ T953] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 102.272232][ T5944] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 102.290096][ T5944] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 102.308663][ T5944] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 102.328501][ T5944] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 102.346096][ T5944] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 102.365256][ T5944] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 102.381332][ T5944] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 102.412018][ T5944] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 102.646993][ T5944] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 102.669017][ T5944] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 102.690888][ T5944] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -71 [ 102.712508][ T5944] usb 2-1: USB disconnect, device number 13 [ 103.281898][ T7078] netlink: 68 bytes leftover after parsing attributes in process `syz.1.275'. [ 103.303395][ T7079] netlink: 68 bytes leftover after parsing attributes in process `syz.1.275'. [ 103.713428][ T5873] Bluetooth: hci3: command tx timeout [ 104.460013][ T7096] overlayfs: missing 'workdir' [ 104.601605][ T10] usb 4-1: USB disconnect, device number 16 [ 104.953181][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 105.042059][ T7103] Mount JFS Failure: -22 [ 105.115138][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.126277][ T10] usb 4-1: config 0 has no interface number 0 [ 105.132502][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.147549][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.173722][ T10] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.206719][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 105.216444][ T7107] /dev/sg0: Can't lookup blockdev [ 105.221696][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.252915][ T10] usb 4-1: config 0 descriptor?? [ 105.296352][ T7111] trusted_key: syz.4.287 sent an empty control message without MSG_MORE. [ 105.698647][ T7120] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 105.705896][ T7120] VFS: Can't find a romfs filesystem on dev rnullb0. [ 105.705896][ T7120] [ 105.737795][ T7120] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 105.753457][ T7120] VFS: Can't find a romfs filesystem on dev rnullb0. [ 105.753457][ T7120] [ 105.793185][ T5873] Bluetooth: hci3: command tx timeout [ 105.899755][ T10] uclogic 0003:28BD:0042.0007: failed retrieving string descriptor #100: -71 [ 105.920713][ T10] uclogic 0003:28BD:0042.0007: failed retrieving pen parameters: -71 [ 105.933434][ T10] uclogic 0003:28BD:0042.0007: pen probing failed: -71 [ 105.953702][ T10] uclogic 0003:28BD:0042.0007: failed probing parameters: -71 [ 105.961268][ T10] uclogic 0003:28BD:0042.0007: probe with driver uclogic failed with error -71 [ 105.985213][ T10] usb 4-1: USB disconnect, device number 17 [ 106.103225][ T953] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 106.274727][ T953] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.293237][ T953] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.316504][ T953] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.332790][ T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.499080][ T7133] mkiss: ax0: crc mode is auto. [ 106.557713][ T953] usb 2-1: usb_control_msg returned -32 [ 106.564268][ T7131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.574839][ T953] usbtmc 2-1:16.0: can't read capabilities [ 106.609899][ T7131] bond0: (slave rose0): Enslaving as an active interface with an up link [ 106.803213][ T7143] Dead loop on virtual device ip6_vti0, fix it urgently! [ 106.916795][ T7153] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 106.924521][ T7153] UDF-fs: Scanning with blocksize 4096 failed [ 107.117767][ T953] usb 2-1: USB disconnect, device number 14 [ 107.302821][ T7173] block nbd4: Unsupported socket: shutdown callout must be supported. [ 107.709636][ T7190] /dev/rnullb0: Can't open blockdev [ 108.104867][ T7206] mmap: syz.1.306 (7206) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.382039][ T7219] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 108.403892][ T7219] /dev/rnullb0: Can't open blockdev [ 108.549690][ T7223] binder: 7221:7223 ioctl 4018f514 0 returned -22 [ 110.619121][ T7260] /dev/rnullb0: Can't open blockdev [ 110.656601][ T7251] /dev/rnullb0: Can't open blockdev [ 110.806789][ T7268] sit0: entered promiscuous mode [ 110.819237][ T7268] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 110.872687][ T7268] netlink: 1 bytes leftover after parsing attributes in process `syz.1.321'. [ 110.899209][ T7268] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 110.907249][ T7268] lo: entered promiscuous mode [ 110.918857][ T7268] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 110.937254][ T7274] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 110.982211][ T7274] /dev/rnullb0: Can't open blockdev [ 111.020898][ T5873] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 111.160296][ T7280] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 111.213401][ T7280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.513379][ T55] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 111.694731][ T55] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.726121][ T55] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.745568][ T55] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.773091][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.785775][ T55] usb 3-1: SerialNumber: syz [ 111.974676][ T30] audit: type=1326 audit(1756675193.225:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.3.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649698ebe9 code=0x0 [ 112.058731][ T7305] /dev/rnullb0: Can't open blockdev [ 112.763188][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 112.918096][ T7357] netlink: 328 bytes leftover after parsing attributes in process `syz.3.335'. [ 112.931726][ T7352] kvm: emulating exchange as write [ 112.933250][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 112.940433][ T7352] /dev/rnullb0: Can't open blockdev [ 112.950071][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 112.965118][ T10] usb 2-1: config 0 has no interface number 0 [ 112.972387][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.997525][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 113.026967][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 113.044296][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.052405][ T10] usb 2-1: Product: syz [ 113.061989][ T10] usb 2-1: Manufacturer: syz [ 113.067826][ T10] usb 2-1: SerialNumber: syz [ 113.088468][ T10] usb 2-1: config 0 descriptor?? [ 113.318604][ T10] appletouch 2-1:0.85: Failed to read mode from device. [ 113.325929][ T10] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 113.351504][ T10] usb 2-1: USB disconnect, device number 15 [ 113.414467][ T7382] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 113.422006][ T7382] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 113.428763][ T7382] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 113.435474][ T7382] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 113.442610][ T7382] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 113.449539][ T7382] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 113.456703][ T7382] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 113.463341][ T7382] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 113.470614][ T7382] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 113.478215][ T7382] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 113.484884][ T7382] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 113.491540][ T7382] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 113.520063][ T7382] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 113.546433][ T7382] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 113.555610][ T7382] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 113.562705][ T7382] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 113.571131][ T7382] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 113.579281][ T7382] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 113.586179][ T7382] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 113.985063][ T55] usb 3-1: 0:2 : does not exist [ 114.030346][ T55] usb 3-1: USB disconnect, device number 12 [ 114.059001][ T7405] mkiss: ax0: crc mode is auto. [ 114.079141][ T6685] udevd[6685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.230173][ T7417] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 114.413103][ T55] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.498284][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.506854][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.506854][ T7431] [ 114.517590][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.524927][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.524927][ T7431] [ 114.535410][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.543497][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.543497][ T7431] [ 114.562848][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.570120][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.570120][ T7431] [ 114.573092][ T55] usb 3-1: device descriptor read/64, error -71 [ 114.579717][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.597235][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.597235][ T7431] [ 114.606866][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.615662][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.615662][ T7431] [ 114.625754][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.632758][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.632758][ T7431] [ 114.643405][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.651864][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.651864][ T7431] [ 114.662539][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.670283][ T13] Bluetooth: hci4: Frame reassembly failed (-90) [ 114.670481][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.670481][ T7431] [ 114.686785][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.694808][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.694808][ T7431] [ 114.704149][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.711049][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.711049][ T7431] [ 114.720353][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.727784][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.727784][ T7431] [ 114.737573][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.744727][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.744727][ T7431] [ 114.755056][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.761937][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.761937][ T7431] [ 114.771333][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.778259][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.778259][ T7431] [ 114.787776][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.794837][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.794837][ T7431] [ 114.804319][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.811202][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.811202][ T7431] [ 114.820467][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.827600][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.827600][ T7431] [ 114.836912][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.844003][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.844003][ T7431] [ 114.845375][ T55] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 114.855328][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.868012][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.868012][ T7431] [ 114.877295][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.884319][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.884319][ T7431] [ 114.893551][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.900428][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.900428][ T7431] [ 114.909785][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.916809][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.916809][ T7431] [ 114.926288][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.933282][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.933282][ T7431] [ 114.942414][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.949551][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.949551][ T7431] [ 114.959229][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.966340][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.966340][ T7431] [ 114.975603][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.982521][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.982521][ T7431] [ 114.992053][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 114.999757][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 114.999757][ T7431] [ 115.000058][ T55] usb 3-1: device descriptor read/64, error -71 [ 115.010648][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.022041][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.022041][ T7431] [ 115.031320][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.038353][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.038353][ T7431] [ 115.047703][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.054858][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.054858][ T7431] [ 115.064187][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.071069][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.071069][ T7431] [ 115.081265][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.088462][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.088462][ T7431] [ 115.097833][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.105231][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.105231][ T7431] [ 115.114365][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.121346][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.121346][ T7431] [ 115.130627][ T55] usb usb3-port1: attempt power cycle [ 115.130998][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.143707][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.143707][ T7431] [ 115.152799][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.162595][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.162595][ T7431] [ 115.171897][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.178817][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.178817][ T7431] [ 115.188243][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.195217][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.195217][ T7431] [ 115.204707][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.211662][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.211662][ T7431] [ 115.221117][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.228230][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.228230][ T7431] [ 115.237565][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.244484][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.244484][ T7431] [ 115.254036][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.261635][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.261635][ T7431] [ 115.271017][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.277955][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.277955][ T7431] [ 115.287270][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.294224][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.294224][ T7431] [ 115.303678][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.310656][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.310656][ T7431] [ 115.319996][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.327144][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.327144][ T7431] [ 115.336413][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.343664][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.343664][ T7431] [ 115.354461][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.361683][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.361683][ T7431] [ 115.381423][ T7431] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 115.400809][ T7431] VFS: Can't find a romfs filesystem on dev rnullb0. [ 115.400809][ T7431] [ 115.485418][ T55] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 115.515639][ T55] usb 3-1: device descriptor read/8, error -71 [ 115.763828][ T55] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 115.791830][ T7456] qnx4: no qnx4 filesystem (no root dir). [ 115.805430][ T55] usb 3-1: device descriptor read/8, error -71 [ 115.913408][ T55] usb usb3-port1: unable to enumerate USB device [ 115.984145][ T7463] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 115.996403][ T7465] /dev/rnullb0: Can't open blockdev [ 116.557072][ T7477] wlan1 speed is unknown, defaulting to 1000 [ 116.614797][ T7477] vxcan1 speed is unknown, defaulting to 1000 [ 116.673096][ T5873] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.788266][ T30] audit: type=1326 audit(1756675198.035:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7476 comm="syz.3.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649698ebe9 code=0x0 [ 117.259426][ T7494] Bluetooth: MGMT ver 1.23 [ 117.281351][ T7495] /dev/rnullb0: Can't open blockdev [ 118.194702][ T5944] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.309239][ T7516] blk_print_req_error: 2 callbacks suppressed [ 118.309251][ T7516] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.344192][ T7518] hugetlbfs: Bad value '' for mount option 'size' [ 118.344192][ T7518] [ 118.353602][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 118.360389][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.370569][ T5944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.380420][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 118.392912][ T5944] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 118.402972][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.412096][ T5944] usb 2-1: Product: syz [ 118.416467][ T5944] usb 2-1: Manufacturer: syz [ 118.421073][ T5944] usb 2-1: SerialNumber: syz [ 118.428763][ T5944] usb 2-1: config 0 descriptor?? [ 118.439981][ T5944] redrat3 2-1:0.0: Couldn't find all endpoints [ 118.460512][ T7525] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 118.469009][ T7525] /dev/rnullb0: Can't open blockdev [ 118.665982][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.676781][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.712238][ T5865] usb 2-1: USB disconnect, device number 16 [ 118.786852][ T7542] /dev/rnullb0: Can't open blockdev [ 118.793872][ T5944] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 118.819759][ T7545] /dev/rnullb0: Can't open blockdev [ 118.881065][ T7550] /dev/rnullb0: Can't open blockdev [ 118.891266][ T5865] wlan1 speed is unknown, defaulting to 1000 [ 118.898017][ T5865] syz0: Port: 1 Link DOWN [ 118.902504][ T5865] wlan1 speed is unknown, defaulting to 1000 [ 118.945301][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 118.951526][ T5944] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 118.960833][ T5944] usb 3-1: config 0 has no interface number 0 [ 118.967644][ T5944] usb 3-1: config 0 interface 184 has no altsetting 0 [ 118.976676][ T5944] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 118.986654][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.994704][ T5944] usb 3-1: Product: syz [ 118.998920][ T5944] usb 3-1: Manufacturer: syz [ 119.003588][ T5944] usb 3-1: SerialNumber: syz [ 119.009265][ T5944] usb 3-1: config 0 descriptor?? [ 119.016239][ T5944] smsc75xx v1.0.0 [ 119.043522][ T7552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.260067][ T5944] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 119.270892][ T5944] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 119.286874][ T5944] usb 3-1: USB disconnect, device number 17 [ 119.443160][ T5963] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 119.593205][ T5944] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 119.616546][ T5963] usb 2-1: Using ep0 maxpacket: 32 [ 119.623135][ T7580] block nbd3: Device being setup by another task [ 119.624336][ T5963] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 119.639148][ T5963] usb 2-1: config 0 has no interface number 0 [ 119.648277][ T5963] usb 2-1: New USB device found, idVendor=0b3c, idProduct=c000, bcdDevice=62.b8 [ 119.649309][ T5870] block nbd3: Receive control failed (result -32) [ 119.667722][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.688437][ T6685] block nbd3: shutting down sockets [ 119.728399][ T5963] usb 2-1: Product: syz [ 119.753166][ T5963] usb 2-1: Manufacturer: syz [ 119.764716][ T5963] usb 2-1: SerialNumber: syz [ 119.783052][ T7586] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 119.789817][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 119.802065][ T7586] UDF-fs: Scanning with blocksize 4096 failed [ 119.808924][ T5944] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 119.819861][ T5963] usb 2-1: config 0 descriptor?? [ 119.826278][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.859447][ T5944] usb 3-1: Product: syz [ 119.864031][ T5944] usb 3-1: Manufacturer: syz [ 119.869341][ T5944] usb 3-1: SerialNumber: syz [ 119.912215][ T5944] usb 3-1: config 0 descriptor?? [ 119.961940][ T5944] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 120.036089][ T10] usb 2-1: USB disconnect, device number 17 [ 120.791027][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 120.945815][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 120.973088][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 121.031479][ T5944] gspca_stk1135: reg_w 0x7 err -71 [ 121.044150][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.058052][ T5944] gspca_stk1135: Sensor write failed [ 121.074398][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.090896][ T5944] gspca_stk1135: Sensor write failed [ 121.097652][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.113192][ T5944] gspca_stk1135: Sensor read failed [ 121.118710][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.126349][ T5944] gspca_stk1135: Sensor read failed [ 121.131682][ T5944] gspca_stk1135: Detected sensor type unknown (0x0) [ 121.140007][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.146751][ T5944] gspca_stk1135: Sensor read failed [ 121.152421][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.159377][ T5944] gspca_stk1135: Sensor read failed [ 121.164861][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.171349][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 121.190522][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 121.213869][ T5944] gspca_stk1135: Sensor write failed [ 121.219211][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 121.281913][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 121.306463][ T5944] gspca_stk1135: Sensor write failed [ 121.311861][ T5944] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 121.335366][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 121.352424][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.368861][ T5944] usb 3-1: USB disconnect, device number 18 [ 121.384731][ T10] usb 2-1: Product: syz [ 121.410440][ T10] usb 2-1: Manufacturer: syz [ 121.426608][ T10] usb 2-1: SerialNumber: syz [ 121.443880][ T10] usb 2-1: config 0 descriptor?? [ 121.450119][ T7608] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.466932][ T7608] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.492560][ T10] usb 2-1: ucan: probing device on interface #0 [ 121.630611][ T7615] overlay: ./file0 is not a directory [ 121.689211][ T7618] tmpfs: Bad value for 'mpol' [ 121.690529][ T10] usb 2-1: ucan: device protocol version 435186691 is not supported [ 121.706768][ T10] usb 2-1: ucan: probe failed; try to update the device firmware [ 121.746485][ T5870] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 121.749188][ T7624] /dev/rnullb0: Can't open blockdev [ 121.800543][ T7630] /dev/rnullb0: Can't open blockdev [ 121.943120][ T5944] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 122.094336][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.105320][ T5944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.114841][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.125482][ T5944] usb 4-1: config 0 descriptor?? [ 122.213109][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 122.364632][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.375855][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.385700][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 122.394800][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.404339][ T10] usb 3-1: config 0 descriptor?? [ 122.534736][ T5944] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 122.545295][ T5944] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input8 [ 122.615721][ T10] konepure 0003:1E7D:2DBE.0009: report_id 839971077 is invalid [ 122.624861][ T10] konepure 0003:1E7D:2DBE.0009: item 0 4 1 8 parsing failed [ 122.645535][ T5944] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 122.665371][ T10] konepure 0003:1E7D:2DBE.0009: parse failed [ 122.666726][ T7645] hfs: can't find a HFS filesystem on dev nullb0 [ 122.682562][ T10] konepure 0003:1E7D:2DBE.0009: probe with driver konepure failed with error -22 [ 122.716698][ T10] usb 3-1: USB disconnect, device number 19 [ 122.821806][ T7650] trusted_key: encrypted_key: insufficient parameters specified [ 122.830418][ T7650] trusted_key: encrypted_key: insufficient parameters specified [ 123.131651][ T43] usb 4-1: USB disconnect, device number 18 [ 123.323383][ T55] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 123.474296][ T55] usb 3-1: config 1 interface 0 altsetting 102 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.487467][ T55] usb 3-1: config 1 interface 0 has no altsetting 0 [ 123.495753][ T55] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.505033][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.513102][ T55] usb 3-1: Product: ᳶ [ 123.517277][ T55] usb 3-1: Manufacturer: ࠚ [ 123.521865][ T55] usb 3-1: SerialNumber: 㐁 [ 123.589936][ T43] usb 2-1: USB disconnect, device number 18 [ 123.624302][ T7660] /dev/rnullb0: Can't open blockdev [ 123.709925][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 123.735196][ T55] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 123.902969][ T7669] /dev/rnullb0: Can't open blockdev [ 124.058553][ T43] usb 3-1: USB disconnect, device number 20 [ 124.593071][ T5944] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 124.728347][ T7685] /dev/rnullb0: Can't open blockdev [ 124.743075][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 124.753925][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.773066][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.793048][ T5944] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 124.825953][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.848932][ T5944] usb 4-1: config 0 descriptor?? [ 125.040801][ T7694] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 125.047894][ T7694] /dev/rnullb0: Can't open blockdev [ 125.070583][ T5944] ft260 0003:0403:6030.000A: unknown main item tag 0x7 [ 125.263553][ T5944] ft260 0003:0403:6030.000A: chip code: 6424 8183 [ 125.465551][ T5944] ft260 0003:0403:6030.000A: failed to retrieve system status [ 125.476951][ T5944] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 125.799517][ T7709] /dev/rnullb0: Can't open blockdev [ 126.025048][ T7715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.040838][ T7715] ------------[ cut here ]------------ [ 126.046533][ T7715] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.1.436/7715 [ 126.055412][ T7715] Modules linked in: [ 126.059324][ T7715] CPU: 0 UID: 0 PID: 7715 Comm: syz.1.436 Not tainted syzkaller #0 PREEMPT(full) [ 126.068864][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.079151][ T7715] RIP: 0010:path_noexec+0x1af/0x200 [ 126.084648][ T7715] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 126.104562][ T7715] RSP: 0018:ffffc90002e47bd8 EFLAGS: 00010287 [ 126.110696][ T7715] RAX: ffffffff823813ce RBX: ffff888032da9200 RCX: 0000000000080000 [ 126.119248][ T7715] RDX: ffffc9000bf51000 RSI: 000000000000006b RDI: 000000000000006c [ 126.127679][ T7715] RBP: 0000000000080000 R08: ffff888031900000 R09: 0000000000000003 [ 126.135790][ T7715] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 126.143840][ T7715] R13: 1ffff920005c8f90 R14: 0000000000000000 R15: dffffc0000000000 [ 126.151912][ T7715] FS: 00007ff3db9596c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 126.160915][ T7715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.167581][ T7715] CR2: 0000000000000000 CR3: 0000000045964000 CR4: 00000000003526f0 [ 126.175675][ T7715] Call Trace: [ 126.178960][ T7715] [ 126.181879][ T7715] do_mmap+0xa43/0x10d0 [ 126.186104][ T7715] ? __pfx_do_mmap+0x10/0x10 [ 126.190697][ T7715] ? down_write_killable+0x178/0x230 [ 126.196136][ T7715] ? __pfx_down_write_killable+0x10/0x10 [ 126.201806][ T7715] ? common_file_perm+0x1b5/0x230 [ 126.206946][ T7715] vm_mmap_pgoff+0x2a6/0x4d0 [ 126.211595][ T7715] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 126.217193][ T7715] ? lock_release+0x4b/0x3e0 [ 126.222350][ T7715] ? __se_sys_futex+0x36f/0x400 [ 126.227295][ T7715] ? __fget_files+0x2a/0x420 [ 126.231896][ T7715] ? __fget_files+0x2a/0x420 [ 126.236518][ T7715] ksys_mmap_pgoff+0x51f/0x760 [ 126.241293][ T7715] do_syscall_64+0xfa/0xfa0 [ 126.245860][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.251922][ T7715] ? clear_bhb_loop+0x60/0xb0 [ 126.256636][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.262550][ T7715] RIP: 0033:0x7ff3dab8ebe9 [ 126.267109][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.286824][ T7715] RSP: 002b:00007ff3db959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 126.295271][ T7715] RAX: ffffffffffffffda RBX: 00007ff3dadc5fa0 RCX: 00007ff3dab8ebe9 [ 126.303291][ T7715] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 126.311251][ T7715] RBP: 00007ff3dac11e19 R08: 0000000000000003 R09: 0000000100000000 [ 126.319604][ T7715] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 126.327918][ T7715] R13: 00007ff3dadc6038 R14: 00007ff3dadc5fa0 R15: 00007fff6afc4a58 [ 126.336016][ T7715] [ 126.339022][ T7715] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.346286][ T7715] CPU: 0 UID: 0 PID: 7715 Comm: syz.1.436 Not tainted syzkaller #0 PREEMPT(full) [ 126.355467][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.365512][ T7715] Call Trace: [ 126.368781][ T7715] [ 126.371706][ T7715] dump_stack_lvl+0x99/0x250 [ 126.376284][ T7715] ? __asan_memcpy+0x40/0x70 [ 126.380858][ T7715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.386041][ T7715] ? __pfx__printk+0x10/0x10 [ 126.390624][ T7715] vpanic+0x281/0x750 [ 126.394595][ T7715] ? __pfx__printk+0x10/0x10 [ 126.399171][ T7715] ? __pfx_vpanic+0x10/0x10 [ 126.403662][ T7715] ? is_bpf_text_address+0x292/0x2b0 [ 126.408931][ T7715] ? is_bpf_text_address+0x26/0x2b0 [ 126.414119][ T7715] panic+0xb9/0xc0 [ 126.417850][ T7715] ? __pfx_panic+0x10/0x10 [ 126.422256][ T7715] __warn+0x334/0x4c0 [ 126.426224][ T7715] ? path_noexec+0x1af/0x200 [ 126.430802][ T7715] ? path_noexec+0x1af/0x200 [ 126.435378][ T7715] report_bug+0x2be/0x4f0 [ 126.439697][ T7715] ? path_noexec+0x1af/0x200 [ 126.444276][ T7715] ? path_noexec+0x1af/0x200 [ 126.448857][ T7715] ? path_noexec+0x1b1/0x200 [ 126.453437][ T7715] handle_bug+0x84/0x160 [ 126.457665][ T7715] exc_invalid_op+0x1a/0x50 [ 126.462149][ T7715] asm_exc_invalid_op+0x1a/0x20 [ 126.466982][ T7715] RIP: 0010:path_noexec+0x1af/0x200 [ 126.472168][ T7715] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 126.491752][ T7715] RSP: 0018:ffffc90002e47bd8 EFLAGS: 00010287 [ 126.497806][ T7715] RAX: ffffffff823813ce RBX: ffff888032da9200 RCX: 0000000000080000 [ 126.505759][ T7715] RDX: ffffc9000bf51000 RSI: 000000000000006b RDI: 000000000000006c [ 126.513714][ T7715] RBP: 0000000000080000 R08: ffff888031900000 R09: 0000000000000003 [ 126.521756][ T7715] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 126.529728][ T7715] R13: 1ffff920005c8f90 R14: 0000000000000000 R15: dffffc0000000000 [ 126.537736][ T7715] ? path_noexec+0x1ae/0x200 [ 126.542323][ T7715] ? path_noexec+0x1ae/0x200 [ 126.546903][ T7715] do_mmap+0xa43/0x10d0 [ 126.551053][ T7715] ? __pfx_do_mmap+0x10/0x10 [ 126.555627][ T7715] ? down_write_killable+0x178/0x230 [ 126.560894][ T7715] ? __pfx_down_write_killable+0x10/0x10 [ 126.566504][ T7715] ? common_file_perm+0x1b5/0x230 [ 126.571551][ T7715] vm_mmap_pgoff+0x2a6/0x4d0 [ 126.576129][ T7715] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 126.581225][ T7715] ? lock_release+0x4b/0x3e0 [ 126.585796][ T7715] ? __se_sys_futex+0x36f/0x400 [ 126.590634][ T7715] ? __fget_files+0x2a/0x420 [ 126.595205][ T7715] ? __fget_files+0x2a/0x420 [ 126.599780][ T7715] ksys_mmap_pgoff+0x51f/0x760 [ 126.604545][ T7715] do_syscall_64+0xfa/0xfa0 [ 126.609067][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.615285][ T7715] ? clear_bhb_loop+0x60/0xb0 [ 126.619948][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.625825][ T7715] RIP: 0033:0x7ff3dab8ebe9 [ 126.630228][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.650688][ T7715] RSP: 002b:00007ff3db959038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 126.659097][ T7715] RAX: ffffffffffffffda RBX: 00007ff3dadc5fa0 RCX: 00007ff3dab8ebe9 [ 126.667062][ T7715] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 126.675029][ T7715] RBP: 00007ff3dac11e19 R08: 0000000000000003 R09: 0000000100000000 [ 126.682992][ T7715] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 126.690951][ T7715] R13: 00007ff3dadc6038 R14: 00007ff3dadc5fa0 R15: 00007fff6afc4a58 [ 126.698915][ T7715] [ 126.702162][ T7715] Kernel Offset: disabled [ 126.706466][ T7715] Rebooting in 86400 seconds..