last executing test programs: 37.534752906s ago: executing program 1 (id=1154): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r1, &(0x7f00000013c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 36.999532053s ago: executing program 2 (id=1162): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 36.75235344s ago: executing program 2 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 36.658526961s ago: executing program 2 (id=1164): r0 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) r1 = syz_io_uring_setup(0xa91, &(0x7f0000000280)={0x0, 0xb3fe, 0x2, 0xfffffffc, 0x363}, &(0x7f00000000c0), &(0x7f00000005c0), &(0x7f0000000000)) io_uring_enter(r1, 0x50d2, 0x6db7, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x200, 0x4], 0x2) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 35.774326537s ago: executing program 2 (id=1173): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 35.344113732s ago: executing program 2 (id=1178): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10002, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 35.211924005s ago: executing program 2 (id=1181): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x1, 0x140, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) 35.157361678s ago: executing program 1 (id=1182): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 35.045590059s ago: executing program 1 (id=1185): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) 34.912125692s ago: executing program 1 (id=1186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 34.799123745s ago: executing program 1 (id=1190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001136d00000000000040000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 34.712603408s ago: executing program 1 (id=1192): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 31.251314196s ago: executing program 3 (id=1210): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b07, 0x0) 29.653070861s ago: executing program 3 (id=1213): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa2, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb707864"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, &(0x7f00000001c0), 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x81) 28.225224747s ago: executing program 0 (id=1218): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x13, 0xfffffffffffffe86) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.085754563s ago: executing program 0 (id=1220): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, &(0x7f00000001c0), 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x81) 27.929347273s ago: executing program 3 (id=1222): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[], 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.386237143s ago: executing program 3 (id=1223): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 26.733669055s ago: executing program 3 (id=1226): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 26.709518435s ago: executing program 0 (id=1227): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)=""/49, 0xff3a}, {&(0x7f0000000400)=""/55, 0x37}], 0x2}}], 0x1, 0x101, 0x0) 26.543990319s ago: executing program 3 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) 25.80921002s ago: executing program 0 (id=1231): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 25.72250413s ago: executing program 0 (id=1232): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05", 0x1, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 25.554916499s ago: executing program 0 (id=1235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 20.162804034s ago: executing program 32 (id=1181): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x1, 0x140, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) 19.647865098s ago: executing program 33 (id=1192): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 16.366585719s ago: executing program 4 (id=1269): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0xf5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f0000004000)={0x2020}, 0x2020) 16.275094507s ago: executing program 4 (id=1270): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x3c24, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x3bec, 0x2, [@TCA_CGROUP_ACT={0x3be8, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x1cb8, 0x5, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0xc01, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x0, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0x1, 0x9, 0x0, 0x0, 0x1, 0x2}, {0x3, 0xe, 0x1, 0x1, 0x7, 0x51b}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x0, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x4, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x10001, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x1de0, 0xb, 0x0, 0x0, {{0xa}, {0x1db4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x1, 0x1, 0x20000000, 0xfffffffa, 0x3}, 0x9, 0x3, [{0x3, 0x3, 0x7, 0x5, 0x2, 0x3}, {0x2470, 0xfffffff9, 0x3, 0x100, 0x8001, 0x9}, {0x200, 0x1, 0xc, 0x5, 0x9, 0x52e}, {0x3, 0x8382, 0x8, 0x3ff, 0x5, 0x764}, {0xa, 0x0, 0x10, 0x0, 0xfffffff3, 0xe}, {0x7f, 0xd, 0xae6c, 0x401, 0x100, 0x7}]}, [{0x9, 0x2, 0xc, 0x0, 0x7, 0x5}, {0x5, 0x40, 0x0, 0xda2, 0x8, 0x2db}, {0x10000, 0x3, 0xfff, 0x7, 0x0, 0xffffffff}, {0x1, 0x9, 0x2, 0x4a, 0x8, 0x10001}, {0x1000, 0x3, 0x1, 0x80, 0x7ff, 0xffffffff}, {0x8000, 0x81, 0xe, 0x6cdc, 0x9, 0xb5a7}, {0x2, 0x9, 0x40, 0x9, 0x2, 0xff}, {0x4, 0xfaa, 0x81, 0x400, 0xa395, 0x81}, {0x20000000, 0x0, 0x1, 0x8, 0x100, 0x2}, {0x2, 0x9, 0x5, 0x7, 0x0, 0xf33}, {0xb7a, 0x2, 0x3fe0000, 0x9, 0x2, 0x1}, {0x3, 0xff, 0x9, 0x4, 0xffff, 0x1}, {0x3, 0x4, 0xff, 0x3, 0x101, 0xfff}, {0x9, 0x2, 0x1000, 0x8001, 0x3, 0x3}, {0xc8, 0xffff8001, 0x9, 0x3, 0x1, 0x5}, {0x8, 0x8, 0x8, 0xff, 0x8001, 0x5}, {0x4, 0xffffffff, 0xda, 0x7, 0xfffffffc, 0xfffffff5}, {0x6, 0x8e91, 0xbea8, 0xfd4a, 0x0, 0xb07}, {0x3, 0x3, 0x5325, 0x9, 0x1, 0x8}, {0x2, 0xa97, 0x6, 0x0, 0x2000, 0x9}, {0x101, 0x5, 0x8d60, 0x0, 0x64, 0xb4}, {0x6, 0xda34, 0x3, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x8, 0x1ff, 0x7, 0x4}, {0xeb6, 0x4, 0x8, 0x9, 0xfffffff0, 0xfffffff9}, {0xe2d, 0x2, 0x6, 0x5, 0xa, 0x8}, {0x2, 0xbc15, 0x1, 0x2, 0x6, 0xffffffff}, {0x6, 0x6, 0x5, 0x7, 0x1000, 0x4}, {0xb, 0x9, 0x5, 0x0, 0xfffffffa, 0x8}, {0x0, 0x9, 0x7, 0x6, 0x9850, 0x7ff}, {0xffffffff, 0x7, 0xffff, 0x3}, {0x4, 0x9, 0x6c, 0xaa6, 0x62, 0xff}, {0x7ff, 0x5, 0x4, 0x7, 0x1, 0x2ee}, {0xfff, 0x4, 0x7f, 0xffffffff, 0xa26, 0x628}, {0x3, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x6, 0x3, 0x8, 0xa7c, 0x5795}, {0x2, 0x72a44795, 0x6da, 0x6, 0x2, 0x3}, {0xe48, 0x1, 0x8, 0x10000, 0xe7, 0x6}, {0x7, 0x0, 0xdaac, 0xe, 0xc66, 0xe4b}, {0x8, 0xb, 0x0, 0x8, 0x2, 0x3}, {0x989, 0x4, 0x24b6, 0x6, 0x7, 0x1}, {0x93, 0x0, 0x72a, 0x8, 0x8, 0x9}, {0x6, 0x1, 0x32, 0x8, 0x3, 0x4}, {0xf, 0x3, 0x401, 0x9, 0x1}, {0x2, 0x5, 0x5, 0xf, 0x7, 0x74ee}, {0x80000001, 0x23d, 0x5, 0x10000, 0x60a9, 0x2000000}, {0x9, 0x5, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x2, 0xff, 0x80000001, 0x8, 0x5}, {0x8001, 0xfffffc01, 0x1, 0x22, 0x2, 0x9}, {0x1, 0x0, 0x0, 0xfff, 0x8000, 0x5}, {0x7, 0xc, 0x80000001, 0x6, 0xfffffffc, 0x401}, {0xfffffffb, 0x1, 0x8, 0x7, 0x2437}, {0x8, 0x80, 0x1, 0xc1, 0x3, 0x1}, {0x8000, 0x7, 0x2, 0xffffffc0, 0x5, 0x9}, {0x7fff, 0x6, 0x7, 0x0, 0x100, 0x9}, {0x8001, 0xd, 0x80, 0x0, 0x172, 0x9652}, {0x6, 0x4, 0x1, 0x3, 0x680c, 0xfffffeff}, {0xff, 0x1, 0xa24, 0x9, 0x0, 0xfffff2cb}, {0x980d, 0x4, 0x4, 0x8f, 0x3, 0x4}, {0x8, 0x100000, 0x4, 0x0, 0x7f, 0x4}, {0x6, 0x3813, 0x6, 0x9, 0xfffffffb, 0x7ff}, {0x7, 0x7, 0xfffffffa, 0x80010000, 0x7ff, 0xffff0000}, {0x8, 0x7de, 0x40, 0xff, 0x3, 0x99}, {0x101, 0x2, 0x9, 0xb4df, 0x7fff}, {0x2, 0x7, 0x5, 0x1, 0xffffffff, 0x5}, {0x6, 0x1, 0x7, 0x4, 0xdb, 0x20f9}, {0x80, 0xfffffffc, 0xc, 0x2, 0x5, 0x8000}, {0x9, 0x4, 0x4, 0x2, 0x3, 0x9}, {0x0, 0x10001, 0x200, 0x8000, 0xffffffff, 0x4}, {0x8, 0xf, 0x9, 0xf, 0xa15e, 0x3}, {0x4, 0x1, 0x8000, 0x1, 0x400a715, 0x3}, {0x9, 0x8, 0x80000001, 0x1b, 0xffff, 0x3}, {0x7, 0x6, 0x3, 0x6, 0x9, 0x7}, {0x1ff, 0x8, 0x6, 0x0, 0x0, 0x9}, {0x9, 0xace2, 0x7, 0x2, 0x71e37c09, 0x73ed}, {0x3, 0x8, 0x7, 0x7, 0x2, 0x6}, {0x1, 0x4e7, 0x6, 0xaf86, 0x5, 0x198c}, {0x400, 0x80000000, 0x8, 0x5, 0xac7, 0x40}, {0x7, 0x9, 0x400, 0x2, 0xfffffff2, 0x8000}, {0x10, 0x2, 0x9de, 0xa, 0x0, 0x80000000}, {0x1, 0x5, 0x3, 0xe, 0x200, 0x2}, {0x8, 0x7fff, 0x4, 0x8, 0xb, 0xfe}, {0x7, 0x5, 0x8, 0x7f, 0xfa, 0x8}, {0x7, 0x4, 0x2, 0x0, 0x88e, 0x200}, {0x7f, 0x8, 0xd11, 0x6, 0x1, 0x1}, {0x8, 0x285895c5, 0xc, 0x5e, 0x58, 0x101}, {0x1, 0x400000, 0x10, 0x3, 0x2, 0x40}, {0x7, 0x770, 0x9, 0x8, 0xf5b, 0x401}, {0x0, 0x7c700000, 0xfffffffa, 0x7, 0x401, 0x8}, {0x3, 0x2, 0x3, 0x3, 0x10000, 0x7fff}, {0xf, 0x8, 0x2, 0x27, 0x2, 0x40}, {0x2, 0x80000001, 0x1e, 0xfffffff7, 0x0, 0x9}, {0x2, 0x7, 0xf7, 0xd, 0x8001, 0x81}, {0x1e, 0x2, 0xfff, 0x0, 0xf39, 0x2d4}, {0xc, 0x3, 0x84a, 0x5, 0xb7, 0x5ba}, {0x3a8fee8e, 0x983, 0x8, 0xc44, 0x4, 0x2}, {0x1, 0x2, 0x1ff, 0x4, 0x1, 0x80}, {0xb, 0x7, 0x3ff, 0xc, 0x6, 0x6}, {0x2, 0x200, 0x1800000, 0x7, 0xe9a1, 0x7}, {0xfffffb02, 0x0, 0x4, 0x0, 0x1, 0x1}, {0x5, 0xffff04ed, 0x7, 0x7, 0x13a, 0xc}, {0x0, 0xffffff01, 0x3, 0xb, 0x0, 0x9aa9}, {0x6, 0x4, 0x401, 0xffff8000, 0x5, 0x100}, {0x9, 0x8, 0x0, 0x42, 0x7f, 0x4}, {0x7, 0x7fff00, 0x101, 0x7ff, 0x10000, 0x9}, {0x846, 0x52e, 0x5, 0x900000, 0x0, 0x9}, {0x413e, 0x5, 0x4, 0x1, 0x1, 0x2}, {0xfffff2dd, 0x1, 0x5a, 0x4, 0x8, 0x4b92}, {0x7, 0x3, 0x2, 0x5, 0x447, 0xfffffff8}, {0x7b388a4c, 0xfffffffc, 0x3, 0xd31, 0x6, 0xc81}, {0x4, 0x77d4, 0xd14, 0x200, 0x7fffffff, 0x1}, {0x8, 0x6, 0x9, 0x1, 0x4, 0xfff}, {0xffffffff, 0x6, 0xf143928, 0x5, 0x6, 0x8}, {0x81, 0xb07, 0xa, 0x6, 0x0, 0xd}, {0x7168, 0x6, 0x5, 0x1, 0x0, 0x8001}, {0x4, 0x4, 0x8, 0x23, 0x77, 0x5}, {0x308, 0xeeb1, 0xf, 0x9, 0x1}, {0x8, 0x5, 0x4, 0x3, 0x3}, {0xfffffffb, 0x4e7d, 0x80000000, 0x9, 0x8, 0xa97e}, {0x2, 0x0, 0x7fffffff, 0x1, 0x81, 0xb80}, {0x3, 0x3, 0x1, 0xffffffff, 0x0, 0x9}, {0xb, 0xfffffff8, 0x4, 0x2, 0xa, 0x4}, {0xfffffffc, 0x7, 0x9, 0x10000, 0x2, 0x1000000}, {0x0, 0x6, 0x8, 0xab, 0x3, 0xffff}, {0x3, 0x3, 0x4, 0x0, 0x6, 0x9}, {0xf, 0x80, 0x7, 0x9, 0x40, 0x9}, {0xffff, 0x8, 0x6, 0xe, 0xffffffff, 0xfff}, {0x2, 0x1ff, 0x2, 0x10000, 0x1, 0x1}, {0x7fffffff, 0xf5, 0xffffffff, 0x7f, 0x800, 0xfd000000}], [{0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x7}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x8b4eeeead0db8b2f, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x9ebe581e91105dc7, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x3}, {0x4}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1}, {0x3}, {0x2}, {0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0xeb1, 0xab, 0x0, 0x200, 0x4}, 0x2, 0xb, [{0xd, 0x3, 0x300000, 0x0, 0x128e, 0x4d}, {0x5, 0x4, 0xb, 0x3, 0xfff, 0x5}, {0xdbb0, 0x20, 0x6, 0x2, 0x0, 0x80000001}, {0xfffffffb, 0x7, 0x5, 0x5, 0x3, 0x7}, {0x200, 0xa, 0x4, 0x4, 0x6, 0x23}, {0xee, 0x9dea, 0x8, 0x7, 0xfb, 0x3}]}, [{0x101, 0x9, 0xd391, 0x9984, 0x9, 0x40}, {0x4, 0x80000000, 0x5, 0x1000, 0x69d, 0x2}, {0x1ff, 0x4, 0xd882, 0x10001, 0x4f0000, 0xe}, {0x4, 0x0, 0xfa05, 0x7, 0x1, 0x1}, {0x20000000, 0x0, 0x5, 0x9, 0x6, 0xffff}, {0x6807, 0x39, 0x58, 0x7, 0x7fff, 0x2}, {0x0, 0xa, 0x9, 0x210, 0x9, 0x3ff}, {0x9, 0x7, 0x6, 0xb, 0x9, 0x8}, {0x4, 0xf7, 0x0, 0x1, 0x80000000, 0x4}, {0x80, 0x2, 0x9, 0x200, 0x0, 0x3}, {0x3, 0x80000000, 0x7f, 0x8, 0xb7ff3dc4, 0x1ff}, {0x51f3, 0xd8, 0x5, 0xd, 0x20fddc53, 0x4}, {0x9, 0xebb8, 0x8001, 0x66, 0x0, 0xffff}, {0x1, 0x3, 0xc58, 0x1, 0x2, 0xc92}, {0x9, 0x9, 0x0, 0x40, 0x9, 0x7ff}, {0xc, 0xffffffc1, 0x705ebea4, 0x101, 0x8, 0x400}, {0x4a6a, 0x364202e0, 0x400, 0x9, 0x3, 0x10001}, {0x8, 0x3, 0x2, 0x7, 0x2, 0x7}, {0xfffff37c, 0xf, 0x5, 0x8, 0x3, 0x5ae}, {0x1a, 0xc, 0x9, 0x14000000, 0x8, 0x5}, {0x9, 0x40, 0xb, 0xe, 0x3, 0x2}, {0xfffffffe, 0x5b, 0xb8ce, 0x7, 0x9, 0x2}, {0x4, 0x40, 0xdd70, 0x7984, 0x5, 0x4}, {0x4, 0x2, 0x80000001, 0x5, 0x55ba, 0xb9c}, {0x2, 0xd, 0x0, 0x2, 0x8000, 0x5}, {0x0, 0x0, 0xffff5f6a, 0x4, 0x5, 0x905e}, {0x5426, 0x1, 0x74, 0x4, 0x6, 0xfffffffb}, {0xffffffff, 0x800, 0xd, 0x1, 0x3, 0xfff}, {0x401, 0x9e7, 0x72a, 0x1c9, 0x2, 0x7}, {0xfffffff3, 0x7, 0x400, 0x8, 0xd, 0x3}, {0xe72, 0x5, 0x3, 0x0, 0x6, 0x80000001}, {0x6, 0xbfb, 0x8, 0x8001, 0x200, 0x3}, {0x6, 0x0, 0x2, 0x432f5969, 0x9, 0xffffff38}, {0xfffffff9, 0x9f, 0x6, 0xcd60, 0x9906, 0xf}, {0x0, 0x7, 0xd, 0xffff, 0x8001, 0x1}, {0x4, 0xffff8000, 0x7, 0x3, 0x7, 0x9dd}, {0x0, 0x9, 0x6, 0x5994d767, 0x9, 0x8}, {0x0, 0x5, 0x8, 0xfffffff9, 0x0, 0x8000}, {0xfffffffe, 0x2, 0x9, 0x1, 0x0, 0x7}, {0x7ff, 0x7, 0x1, 0x3, 0x200, 0x2}, {0xffff910d, 0xffff, 0xd58, 0x5, 0x10001, 0x1}, {0x1, 0x400, 0x4, 0xd9c8, 0x9, 0x101}, {0x3, 0x832, 0xd, 0x6, 0x7, 0x4}, {0x4, 0x8, 0x4, 0x5, 0x80}, {0x101, 0x0, 0x3, 0x5181, 0x2}, {0x4, 0x0, 0x1, 0x9, 0x3, 0xef}, {0xa6, 0x6, 0xffffffff, 0x8, 0x8, 0xff}, {0x2, 0x9, 0x1, 0x10001}, {0x282b421, 0x2, 0x4, 0x75, 0xd, 0x1}, {0x4, 0x0, 0x2, 0x36, 0x2, 0x4}, {0x1ff, 0x1, 0xb, 0x9, 0x4, 0x7ff}, {0x2, 0x7, 0xbba, 0x7, 0x6c11, 0x9}, {0x5, 0x7, 0x7ff, 0xffffffff, 0x4, 0x1}, {0x80000001, 0x79, 0x5, 0x100, 0x2, 0x6}, {0x2, 0x8, 0xffff, 0xffffffff, 0x80, 0x800}, {0x4, 0x8, 0x3, 0x4, 0x9, 0xf9fa}, {0x9, 0x5, 0x0, 0x40, 0x58, 0x95}, {0x8, 0x943, 0x1, 0x5, 0x101, 0x1}, {0x80000000, 0x7, 0xffffffff, 0x1, 0x0, 0xfffffff7}, {0x7, 0x4, 0xcc7e, 0xfffffffc, 0xa, 0x9}, {0xffff, 0x7fffffff, 0x270, 0x2, 0x1, 0x2}, {0x750, 0x4, 0x30000000, 0x3, 0x100, 0x7}, {0x8, 0x6b7, 0x2, 0xf3, 0x6, 0x2}, {0x0, 0x5, 0x1, 0xffffff00, 0x2, 0xfe}, {0x7, 0x8, 0x7, 0x5, 0x8, 0x10}, {0xc47b, 0x6, 0x5, 0x1, 0x2}, {0xcc8b, 0xffffffff, 0x5, 0x10000, 0xa1, 0xaf87}, {0x5, 0x7, 0x6, 0x2, 0xe1, 0x9}, {0x6, 0x3ff, 0x9, 0x7, 0x2a04, 0x80}, {0x1, 0x0, 0xfffffffb, 0xe, 0x1000, 0x7}, {0x30000000, 0x5e1, 0x4, 0x9, 0x6}, {0xb6, 0x2, 0x4, 0x9, 0x1, 0x3}, {0xfffffbff, 0x1, 0x8000, 0x4, 0x8001}, {0x10000, 0xdd7, 0x1c52, 0xfffff8b2, 0xb, 0x6}, {0x1, 0x0, 0x4, 0x80000000, 0x9}, {0xffff, 0xb, 0x2, 0x3, 0x2, 0x7}, {0x2, 0x1b, 0x800, 0xf97, 0xff76, 0x7}, {0xbda, 0x9, 0xd, 0x7, 0x8, 0x3}, {0x2, 0x631f, 0x5, 0xf68, 0x3, 0x100}, {0x710, 0x8, 0x1, 0x1000, 0x6b98, 0x7}, {0x6, 0x5, 0x4, 0x0, 0x0, 0x8}, {0x24, 0x4, 0x1, 0x0, 0x4ab, 0x5}, {0x401, 0x670, 0x0, 0x5, 0x1}, {0x64, 0xffffff81, 0xfffffffb, 0x80000001, 0xb2, 0x1}, {0x7, 0xfffffff6, 0x80000000, 0xb, 0xe, 0x40}, {0x44, 0x2f98b021, 0x52d, 0x8001, 0x6, 0x1ff}, {0x40, 0x1ff, 0x68bf7606, 0xcb2, 0x9}, {0x5, 0x9, 0x7f, 0x9, 0x7fff, 0x7}, {0x8, 0xd23c, 0x7, 0x3, 0x7, 0xfff}, {0x0, 0xf7, 0x368, 0xd, 0x401, 0x4}, {0x4, 0x4, 0x46, 0xff, 0xff, 0x81}, {0x5, 0xe5, 0x10000, 0x9, 0x8, 0x6}, {0x1, 0x8, 0x81, 0x1, 0x209019f9, 0x1ff}, {0x9, 0x1, 0x6, 0x0, 0x4, 0x8}, {0x9, 0x6, 0xdf, 0x7, 0x608, 0x8}, {0x5, 0x5, 0xf, 0x9, 0x3, 0x9}, {0xffff, 0x68, 0x4, 0x9, 0x3, 0xf}, {0x3, 0x8, 0x100, 0x40, 0x3, 0xa99}, {0x7, 0xaa40, 0x1ff, 0x7, 0x10000, 0x2}, {0x8, 0xffffff3f, 0x5, 0x8, 0x6, 0x9}, {0x3, 0x0, 0x2, 0x6, 0x1ba, 0x7}, {0x9, 0x46496795, 0x5, 0xfffffff6, 0x85, 0x4}, {0x8915, 0x3, 0x8000, 0x40, 0x6, 0x1}, {0x100, 0x2, 0x7fffffff, 0x1a, 0x9, 0x3}, {0x4, 0x1ea4, 0x23, 0xe, 0x6, 0x2}, {0x7, 0xff, 0x7, 0x81, 0x9, 0x4}, {0x40, 0x0, 0x1, 0xbb, 0x9, 0xad59}, {0x0, 0x8, 0xaaa, 0x0, 0x8, 0x4}, {0x2d4, 0x7, 0x7ff, 0x400, 0x6, 0xa82}, {0xc3f, 0x0, 0x9, 0x7, 0x9, 0x278}, {0xf3, 0x924, 0x55fa, 0x13d, 0x8}, {0x0, 0x401, 0xfffffffa, 0x9, 0x8, 0x1}, {0x3ff, 0xf80, 0xfffffffc, 0x5, 0x6, 0x6}, {0x10400, 0x9, 0x8, 0x38, 0x1ff, 0x8000}, {0x0, 0x2, 0x0, 0x2, 0x1, 0x1}, {0x8, 0x800, 0x800, 0x9, 0x20bf, 0x5}, {0x3ff, 0x8, 0x1000, 0x40, 0x3, 0xaea8}, {0x1, 0x0, 0x3cc, 0x7, 0x8000, 0x4}, {0x7, 0x9, 0x5, 0xbd4, 0x40, 0x7fffffff}, {0x7, 0x7fffffff, 0x5, 0x4, 0x6}, {0x100, 0xa36, 0x1, 0x6, 0x9, 0x4}, {0xfffffffe, 0xfa48, 0xfff, 0x2, 0x8, 0x8}, {0x3ff, 0xadfa, 0xa9b, 0x734, 0x0, 0xa8a}, {0x1, 0xa, 0x5, 0x5, 0x1, 0x2}, {0x200, 0x3, 0x50e, 0x6, 0x7, 0x7f}, {0xe, 0x10001, 0xfffffffa, 0xfffffffb, 0x2287, 0x1}, {0x6, 0x61, 0xd2, 0x3f2, 0x2, 0x7fffffff}, {0x81, 0x0, 0x1, 0x7d, 0x9, 0x401}], [{}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x29f6421361d28c94, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x9ac6f7233e9dfa24}, {0x5}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5}, {0x4}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x4b6467632728a66c, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x3c24}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.228369624s ago: executing program 4 (id=1271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 16.185497543s ago: executing program 4 (id=1272): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, 0x0, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, &(0x7f00000001c0), 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x81) 15.276934422s ago: executing program 4 (id=1273): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 15.205514593s ago: executing program 4 (id=1274): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x6, 0x2280) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x9}, 0x0) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048804}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x3ff, 0x20000) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000400)={0x1, &(0x7f0000000980)=[{0x2b, '\x00', @st={0x4, [{0x0, @svalue=0x7}, {0x1, @uvalue=0x8000000000000001}, {0x3, @uvalue=0x1}, {0x1, @uvalue=0xa}]}}]}) 11.512206133s ago: executing program 34 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) 10.510528817s ago: executing program 35 (id=1235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 0s ago: executing program 36 (id=1274): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x6, 0x2280) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) sched_getattr(0x0, &(0x7f0000000200)={0x38}, 0x38, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x9}, 0x0) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048804}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x3ff, 0x20000) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000400)={0x1, &(0x7f0000000980)=[{0x2b, '\x00', @st={0x4, [{0x0, @svalue=0x7}, {0x1, @uvalue=0x8000000000000001}, {0x3, @uvalue=0x1}, {0x1, @uvalue=0xa}]}}]}) kernel console output (not intermixed with test programs): [HID 04d9:a081] on usb-dummy_hcd.4-1/input1 [ 150.444283][ T9] usb 5-1: USB disconnect, device number 10 [ 150.515979][ T7373] syz.0.636 uses obsolete (PF_INET,SOCK_PACKET) [ 150.558406][ T7371] fido_id[7371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 150.598519][ T12] wlan1: Trigger new scan to find an IBSS to join [ 150.668545][ T1098] wlan1: Trigger new scan to find an IBSS to join [ 150.678910][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 150.813062][ T7380] netlink: 68 bytes leftover after parsing attributes in process `syz.1.638'. [ 150.835579][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 150.875773][ T29] audit: type=1400 audit(1778969492.214:383): avc: denied { map } for pid=7383 comm="syz.2.641" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 151.043861][ T29] audit: type=1400 audit(1778969492.384:384): avc: denied { mount } for pid=7389 comm="syz.2.644" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 151.113559][ T7392] netlink: 'syz.0.645': attribute type 9 has an invalid length. [ 151.468719][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.584877][ T29] audit: type=1400 audit(1778969492.914:385): avc: denied { write } for pid=7417 comm="syz.2.657" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.629886][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 151.640587][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.663799][ T9] usb 5-1: config 0 has no interface number 0 [ 151.687945][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.713087][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.745140][ T9] usb 5-1: Product: syz [ 151.752805][ T9] usb 5-1: Manufacturer: syz [ 151.759544][ T9] usb 5-1: SerialNumber: syz [ 152.076510][ T9] usb 5-1: config 0 descriptor?? [ 152.112082][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.167533][ T29] audit: type=1400 audit(1778969493.504:386): avc: denied { write } for pid=7432 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.214419][ T29] audit: type=1400 audit(1778969493.534:387): avc: denied { bind } for pid=7432 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.573608][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 152.871409][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.991647][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.301553][ T9] usb 5-1: USB disconnect, device number 11 [ 153.693512][ T48] wlan1: Trigger new scan to find an IBSS to join [ 153.700223][ T48] wlan1: Trigger new scan to find an IBSS to join [ 153.716509][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.790424][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.843390][ T9] quatech2 5-1:0.51: device disconnected [ 153.895180][ T29] audit: type=1400 audit(1778969495.234:388): avc: denied { append } for pid=7452 comm="syz.0.669" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.906156][ T7454] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 153.989325][ T7454] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.020654][ T7460] netlink: 196 bytes leftover after parsing attributes in process `syz.3.671'. [ 154.037105][ T29] audit: type=1400 audit(1778969495.384:389): avc: denied { append } for pid=7457 comm="syz.4.672" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.066914][ T7460] netlink: 196 bytes leftover after parsing attributes in process `syz.3.671'. [ 154.078531][ T7460] netlink: 19 bytes leftover after parsing attributes in process `syz.3.671'. [ 154.090558][ T7465] netlink: 'syz.1.673': attribute type 11 has an invalid length. [ 154.105772][ T7465] netlink: 'syz.1.673': attribute type 4 has an invalid length. [ 154.115648][ T7465] netlink: 'syz.1.673': attribute type 6 has an invalid length. [ 154.123720][ T29] audit: type=1400 audit(1778969495.384:390): avc: denied { open } for pid=7457 comm="syz.4.672" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.149693][ T7465] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.673'. [ 155.919644][ T48] wlan1: Creating new IBSS network, BSSID 42:77:6a:26:ec:97 [ 156.316983][ T7493] dummy0: entered allmulticast mode [ 156.954303][ T7523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.117508][ T29] audit: type=1400 audit(1778969498.454:391): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 157.140866][ T1219] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.339951][ T1219] usb 3-1: config 0 has no interfaces? [ 157.348572][ T1219] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.377846][ T1219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.411770][ T1219] usb 3-1: config 0 descriptor?? [ 157.431972][ T803] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 157.470378][ T803] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 157.498691][ T5728] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.629391][ T13] wlan1: Trigger new scan to find an IBSS to join [ 157.678697][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 157.686428][ T1219] usb 3-1: USB disconnect, device number 11 [ 157.709843][ T5728] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 157.728591][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.789198][ T5728] pvrusb2: Hardware description: Terratec Grabster AV400 [ 157.817068][ T5728] pvrusb2: ********** [ 157.825886][ T5728] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 157.837843][ T5728] pvrusb2: Important functionality might not be entirely working. [ 157.846180][ T5728] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 157.875139][ T5728] pvrusb2: ********** [ 157.970079][ T2355] pvrusb2: Invalid write control endpoint [ 158.100086][ T2355] pvrusb2: Invalid write control endpoint [ 158.120871][ T2355] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 158.144143][ T2355] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 158.158336][ T2355] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 158.211745][ T2355] pvrusb2: Device being rendered inoperable [ 158.261598][ T7533] pvrusb2: Attempted to execute control transfer when device not ok [ 158.295111][ T2355] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 158.296848][ T7562] xt_hashlimit: size too large, truncated to 1048576 [ 158.305074][ T5728] usb 4-1: USB disconnect, device number 13 [ 158.336163][ T2355] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 158.374002][ T2355] pvrusb2: Attached sub-driver cx25840 [ 158.394307][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 158.428321][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 158.535826][ T7571] netlink: 27 bytes leftover after parsing attributes in process `syz.2.718'. [ 158.559895][ T1173] wlan1: Creating new IBSS network, BSSID ca:5c:52:fe:07:5c [ 158.644527][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 158.676166][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 158.971917][ T29] audit: type=1400 audit(1778969500.304:392): avc: denied { create } for pid=7584 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.036384][ T29] audit: type=1400 audit(1778969500.344:393): avc: denied { setopt } for pid=7584 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.368523][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.539568][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 159.553413][ T24] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 159.566551][ T24] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 159.577655][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 159.587537][ T24] usb 3-1: config 1 has no interface number 0 [ 159.595405][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.607385][ T24] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 159.621098][ T5728] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.631986][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 159.643519][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.683167][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 159.742939][ T5624] Bluetooth: hci0: unexpected event 0x03 length: 6 < 11 [ 159.788491][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 159.798626][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.813343][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.825185][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 159.838834][ T5728] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 159.860183][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.877195][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 159.888918][ T5728] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 159.904475][ T5728] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.930174][ T5728] usb 1-1: Manufacturer: syz [ 159.945853][ T5728] usb 1-1: config 0 descriptor?? [ 160.116483][ T7611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.734'. [ 160.154676][ T7611] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 160.219274][ T7614] netlink: 'syz.4.735': attribute type 3 has an invalid length. [ 160.248833][ T7614] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 160.264016][ T7614] netlink: 'syz.4.735': attribute type 29 has an invalid length. [ 160.284463][ T7614] netlink: 3860 bytes leftover after parsing attributes in process `syz.4.735'. [ 160.295702][ T5745] usb 3-1: USB disconnect, device number 12 [ 160.305887][ T5745] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 160.318833][ T5728] rc_core: IR keymap rc-hauppauge not found [ 160.330140][ T5728] Registered IR keymap rc-empty [ 160.343475][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.370484][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.422015][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 160.473650][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 160.496053][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.534825][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.568676][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.598402][ T29] audit: type=1400 audit(1778969501.904:394): avc: denied { open } for pid=7629 comm="syz.4.741" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 160.622833][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.639151][ T29] audit: type=1400 audit(1778969501.914:395): avc: denied { ioctl } for pid=7629 comm="syz.4.741" path="/dev/ttyqc" dev="devtmpfs" ino=387 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 160.668916][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.701414][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.747804][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 160.780836][ T7634] NILFS (nullb0): couldn't find nilfs on the device [ 160.972025][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.077301][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.131867][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 161.199947][ T5728] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 161.210209][ T5728] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.235036][ T5728] usb 1-1: USB disconnect, device number 7 [ 161.452335][ T5745] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 161.505955][ T5745] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 161.631779][ T7654] input: syz0 as /devices/virtual/input/input12 [ 161.816125][ T29] audit: type=1400 audit(1778969503.154:396): avc: denied { bind } for pid=7656 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.890783][ T29] audit: type=1400 audit(1778969503.234:397): avc: denied { ioctl } for pid=7658 comm="syz.1.752" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16741 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.052172][ T7665] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 162.311885][ T7670] nbd0: detected capacity change from 0 to 63 [ 162.365205][ T5624] block nbd0: Receive control failed (result -104) [ 162.478737][ T5745] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.495550][ T5713] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 162.533650][ T5713] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 162.676085][ T5745] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 162.712009][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.733224][ T5745] usb 2-1: Product: syz [ 162.754029][ T5745] usb 2-1: Manufacturer: syz [ 162.777505][ T5745] usb 2-1: SerialNumber: syz [ 162.967287][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 163.622666][ T5745] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 163.641826][ T5745] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.657341][ T5745] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.670895][ T5745] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 163.679070][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 163.689299][ T5713] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.704675][ T5745] usb 2-1: USB disconnect, device number 7 [ 163.828757][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 163.839924][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.842658][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.864702][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.885563][ T5713] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 163.886756][ T24] usb 3-1: config 0 has no interfaces? [ 163.908697][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.920640][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 163.938552][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.941586][ T5713] usb 5-1: config 0 descriptor?? [ 163.957576][ T24] usb 3-1: Product: syz [ 163.968481][ T24] usb 3-1: Manufacturer: syz [ 163.979974][ T24] usb 3-1: SerialNumber: syz [ 163.997549][ T24] usb 3-1: config 0 descriptor?? [ 164.095132][ T7732] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.132567][ T7734] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 164.144711][ T29] audit: type=1400 audit(1778969505.494:398): avc: denied { map } for pid=7733 comm="syz.0.784" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.173216][ T29] audit: type=1400 audit(1778969505.494:399): avc: denied { execute } for pid=7733 comm="syz.0.784" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.410957][ T5713] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 164.427026][ T5713] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 164.448987][ T5713] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 164.478618][ T5713] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 164.486301][ T5713] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 164.493947][ T5713] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 164.520981][ T5713] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 164.544895][ T5713] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 164.623045][ T5713] arvo 0003:1E7D:30D4.0013: couldn't init struct arvo_device [ 164.671218][ T5713] arvo 0003:1E7D:30D4.0013: couldn't install keyboard [ 165.167240][ T5713] arvo 0003:1E7D:30D4.0013: probe with driver arvo failed with error -71 [ 165.194374][ T5713] usb 5-1: USB disconnect, device number 12 [ 165.632598][ T29] audit: type=1400 audit(1778969506.964:400): avc: denied { bind } for pid=7777 comm="syz.4.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.697152][ T29] audit: type=1400 audit(1778969506.974:401): avc: denied { listen } for pid=7777 comm="syz.4.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.614043][ T5728] usb 3-1: USB disconnect, device number 13 [ 166.703342][ T7806] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 166.849756][ T29] audit: type=1400 audit(1778969508.194:402): avc: denied { read } for pid=7810 comm="syz.2.819" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.878045][ T29] audit: type=1400 audit(1778969508.194:403): avc: denied { open } for pid=7810 comm="syz.2.819" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.923397][ T29] audit: type=1400 audit(1778969508.254:404): avc: denied { ioctl } for pid=7810 comm="syz.2.819" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.975092][ T29] audit: type=1400 audit(1778969508.314:405): avc: denied { watch } for pid=7812 comm="syz.0.818" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=16084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 167.356186][ T29] audit: type=1400 audit(1778969508.694:406): avc: denied { read } for pid=7822 comm="syz.2.821" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.429065][ T29] audit: type=1400 audit(1778969508.734:407): avc: denied { map } for pid=7822 comm="syz.2.821" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.788581][ T1219] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 167.808518][ T803] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 167.950829][ T1219] usb 3-1: Using ep0 maxpacket: 8 [ 167.962062][ T1219] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 167.972649][ T1219] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 167.973330][ T803] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 167.982373][ T1219] usb 3-1: Product: syz [ 167.997408][ T5713] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 168.009326][ T1219] usb 3-1: Manufacturer: syz [ 168.016767][ T1219] usb 3-1: SerialNumber: syz [ 168.020598][ T803] usb 2-1: config 0 has no interface number 0 [ 168.028293][ T1219] usb 3-1: config 0 descriptor?? [ 168.046338][ T1219] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 168.054028][ T803] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.074208][ T803] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 168.085451][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.093845][ T803] usb 2-1: Product: syz [ 168.103886][ T803] usb 2-1: Manufacturer: syz [ 168.188714][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 168.232970][ T803] usb 2-1: SerialNumber: syz [ 168.268209][ T803] usb 2-1: config 0 descriptor?? [ 168.346231][ T7853] NILFS (nullb0): couldn't find nilfs on the device [ 168.507829][ T803] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 168.751922][ T1219] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 169.148595][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.742074][ T5713] usb 4-1: config 0 has no interfaces? [ 169.752657][ T5713] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 169.773982][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.787015][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 169.787030][ T29] audit: type=1400 audit(1778969511.114:410): avc: denied { ioctl } for pid=7859 comm="syz.2.835" path="socket:[17127]" dev="sockfs" ino=17127 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.788606][ T1219] usb 3-1: USB disconnect, device number 14 [ 169.827434][ T5713] usb 4-1: Product: syz [ 169.833748][ T5713] usb 4-1: Manufacturer: syz [ 169.838909][ T5713] usb 4-1: SerialNumber: syz [ 169.845659][ T5713] usb 4-1: config 0 descriptor?? [ 170.086032][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 170.140003][ T7839] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 170.192692][ T24] usb 4-1: USB disconnect, device number 14 [ 170.610582][ T1219] usb 2-1: USB disconnect, device number 8 [ 170.652024][ T1219] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 171.317678][ T7893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.849'. [ 171.458499][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 171.907129][ T5713] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 172.050167][ T24] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 172.391927][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 172.499150][ T5713] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.543053][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.564411][ T5713] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 172.600571][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.728394][ T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 172.730799][ T5713] usb 3-1: config 0 descriptor?? [ 172.742976][ T24] usb 2-1: config 4 has no interface number 0 [ 172.751527][ T24] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.770419][ T24] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 172.780159][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.789091][ T24] usb 2-1: Product: syz [ 172.795986][ T24] usb 2-1: Manufacturer: syz [ 172.800853][ T24] usb 2-1: SerialNumber: syz [ 172.850498][ T29] audit: type=1400 audit(1778969514.134:411): avc: denied { connect } for pid=7905 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.157647][ T29] audit: type=1400 audit(1778969514.494:412): avc: denied { ioctl } for pid=7913 comm="syz.4.858" path="socket:[17193]" dev="sockfs" ino=17193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.233985][ T24] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 173.250633][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 173.268508][ T5713] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 173.281772][ T24] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 173.302052][ T29] audit: type=1400 audit(1778969514.634:413): avc: denied { read } for pid=7915 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.329684][ T24] usb 2-1: media controller created [ 173.349393][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.367326][ T29] audit: type=1400 audit(1778969514.704:414): avc: denied { read } for pid=7919 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.504138][ T24] DVB: Unable to find symbol dib7000p_attach() [ 173.513634][ T24] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 173.608671][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 173.615016][ T24] Registered IR keymap rc-empty [ 173.625678][ T24] dvb-usb: could not initialize remote control. [ 173.644018][ T24] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 173.738549][ T5745] usb 3-1: USB disconnect, device number 15 [ 173.790134][ T7937] vivid-007: disconnect [ 173.797223][ T7936] vivid-007: reconnect [ 173.892086][ T7939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.902643][ T7939] IPv6: NLM_F_CREATE should be set when creating new route [ 173.911063][ T7939] IPv6: NLM_F_CREATE should be set when creating new route [ 173.919105][ T7939] IPv6: NLM_F_CREATE should be set when creating new route [ 173.954805][ T24] usb 2-1: USB disconnect, device number 9 [ 173.969548][ T7943] netlink: 196 bytes leftover after parsing attributes in process `syz.0.869'. [ 173.994214][ T7943] netlink: 196 bytes leftover after parsing attributes in process `syz.0.869'. [ 174.005228][ T7943] netlink: 19 bytes leftover after parsing attributes in process `syz.0.869'. [ 174.015719][ T24] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 174.060050][ T29] audit: type=1400 audit(1778969515.394:415): avc: denied { write } for pid=7945 comm="syz.4.870" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.391695][ T7957] netlink: 196 bytes leftover after parsing attributes in process `syz.3.874'. [ 174.422381][ T29] audit: type=1400 audit(1778969515.764:416): avc: denied { remount } for pid=7958 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.427945][ T7957] netlink: 196 bytes leftover after parsing attributes in process `syz.3.874'. [ 174.447043][ T7959] overlayfs: failed to resolve './bus': -2 [ 174.486390][ T7957] netlink: 19 bytes leftover after parsing attributes in process `syz.3.874'. [ 174.532119][ T29] audit: type=1400 audit(1778969515.874:417): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.746871][ T7976] capability: warning: `syz.4.883' uses deprecated v2 capabilities in a way that may be insecure [ 175.043735][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 175.169015][ T5745] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 175.274333][ T29] audit: type=1400 audit(1778969516.614:418): avc: denied { connect } for pid=7995 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.350757][ T5745] usb 3-1: Using ep0 maxpacket: 16 [ 175.366105][ T5745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.404684][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.431810][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.455655][ T5745] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.473553][ T5745] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.490389][ T5713] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.491114][ T8007] geneve2: entered promiscuous mode [ 175.514889][ T5745] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.536563][ T5745] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 175.555934][ T5745] usb 3-1: Manufacturer: syz [ 175.572277][ T5745] usb 3-1: config 0 descriptor?? [ 175.649800][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 175.663707][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.693989][ T5713] usb 1-1: config 0 has no interfaces? [ 175.708046][ T5713] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 175.717866][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.740078][ T5713] usb 1-1: config 0 descriptor?? [ 175.849037][ T5745] rc_core: IR keymap rc-hauppauge not found [ 175.857541][ T5745] Registered IR keymap rc-empty [ 175.866626][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.888701][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.919996][ T5745] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 175.929463][ T803] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 175.946851][ T5745] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 175.970348][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.978613][ T1219] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.003804][ T24] usb 1-1: USB disconnect, device number 8 [ 176.020111][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.071902][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.098554][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.098584][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 176.122594][ T803] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 176.127753][ T29] audit: type=1400 audit(1778969517.464:419): avc: denied { bind } for pid=8026 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 176.132729][ T803] usb 4-1: config 0 has no interface number 0 [ 176.152570][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.156678][ T803] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 176.176629][ T803] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.186770][ T803] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.190191][ T1219] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.208167][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.215925][ T803] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 176.215951][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.215968][ T803] usb 4-1: Product: syz [ 176.215981][ T803] usb 4-1: Manufacturer: syz [ 176.215994][ T803] usb 4-1: SerialNumber: syz [ 176.222784][ T803] usb 4-1: config 0 descriptor?? [ 176.231718][ T1219] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 176.244729][ T8014] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 176.250182][ T1219] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.279326][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.286583][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.298805][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.306520][ T8016] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 176.313794][ T29] audit: type=1400 audit(1778969517.654:420): avc: denied { read } for pid=8030 comm="syz.4.910" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.339655][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.347723][ T29] audit: type=1400 audit(1778969517.654:421): avc: denied { open } for pid=8030 comm="syz.4.910" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.371392][ T5745] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.382059][ T1219] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.391904][ T29] audit: type=1400 audit(1778969517.654:422): avc: denied { ioctl } for pid=8030 comm="syz.4.910" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.422643][ T5745] mceusb 3-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 176.432677][ T5745] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.504319][ T5745] usb 3-1: USB disconnect, device number 16 [ 176.511549][ T803] usb-storage 4-1:0.20: USB Mass Storage device detected [ 176.563530][ T803] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 176.644444][ T1219] usb 2-1: USB disconnect, device number 10 [ 176.694268][ T803] scsi host1: usb-storage 4-1:0.20 [ 176.730224][ T8040] hpfs: Bad magic ... probably not HPFS [ 176.887244][ T8046] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.915'. [ 176.987146][ T1219] usb 4-1: USB disconnect, device number 15 [ 177.041092][ T5624] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 177.048835][ T5624] Bluetooth: Wrong link type (-22) [ 177.054067][ T5624] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 177.062341][ T5624] Bluetooth: Wrong link type (-22) [ 177.067869][ T5624] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 177.074855][ T5624] Bluetooth: Wrong link type (-22) [ 177.080507][ T5624] Bluetooth: hci4: link tx timeout [ 177.087247][ T5624] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 177.099945][ T5624] Bluetooth: hci4: link tx timeout [ 177.105476][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.112272][ T8055] netlink: 'syz.4.920': attribute type 12 has an invalid length. [ 177.127916][ T8055] netlink: 'syz.4.920': attribute type 29 has an invalid length. [ 177.137985][ T8055] netlink: 148 bytes leftover after parsing attributes in process `syz.4.920'. [ 177.147875][ T8055] netlink: 'syz.4.920': attribute type 2 has an invalid length. [ 177.157367][ T8055] netlink: 'syz.4.920': attribute type 3 has an invalid length. [ 177.165556][ T8055] netlink: 19 bytes leftover after parsing attributes in process `syz.4.920'. [ 177.573210][ T5745] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 177.759911][ T5745] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 177.784120][ T5745] usb 5-1: config 0 has no interface number 0 [ 177.803286][ T5745] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 43297, setting to 64 [ 177.835410][ T5745] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 177.872463][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 177.888344][ T8087] binder: BC_ACQUIRE_RESULT not supported [ 177.906425][ T5745] usb 5-1: Product: syz [ 177.925833][ T5745] usb 5-1: SerialNumber: syz [ 177.939073][ T8087] binder: 8086:8087 ioctl c0306201 2000000001c0 returned -22 [ 177.950599][ T8089] netlink: 136 bytes leftover after parsing attributes in process `syz.2.932'. [ 177.972001][ T5745] usb 5-1: config 0 descriptor?? [ 177.991331][ T8066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.000967][ T29] audit: type=1400 audit(1778969519.334:423): avc: denied { mount } for pid=8090 comm="syz.1.933" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 178.071668][ T5745] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 178.366637][ T5745] usb 5-1: USB disconnect, device number 13 [ 178.780377][ T29] audit: type=1400 audit(1778969520.114:424): avc: denied { create } for pid=8113 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.178635][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 179.276806][ T29] audit: type=1400 audit(1778969520.174:425): avc: denied { ioctl } for pid=8113 comm="syz.0.944" path="socket:[18824]" dev="sockfs" ino=18824 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.390138][ T8129] netlink: 56 bytes leftover after parsing attributes in process `syz.4.949'. [ 179.445306][ T29] audit: type=1400 audit(1778969520.784:426): avc: denied { append } for pid=8126 comm="syz.0.950" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.656187][ T29] audit: type=1400 audit(1778969520.784:427): avc: denied { open } for pid=8126 comm="syz.0.950" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.710512][ T24] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 180.201203][ T24] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 181.489205][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 181.491588][ T8144] fido_id[8144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 182.877647][ T8173] ªªªªªª: renamed from vlan0 (while UP) [ 182.966385][ T29] audit: type=1400 audit(1778969524.304:428): avc: denied { read write } for pid=8175 comm="syz.2.964" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 183.039333][ T29] audit: type=1400 audit(1778969524.304:429): avc: denied { ioctl } for pid=8175 comm="syz.2.964" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 183.197602][ T8182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.966'. [ 183.535895][ T29] audit: type=1400 audit(1778969524.874:430): avc: denied { name_bind } for pid=8192 comm="syz.4.971" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 183.674841][ T29] audit: type=1400 audit(1778969525.014:431): avc: denied { setopt } for pid=8197 comm="syz.4.973" lport=60595 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 183.674989][ T8198] sctp: [Deprecated]: syz.4.973 (pid 8198) Use of int in maxseg socket option. [ 183.674989][ T8198] Use struct sctp_assoc_value instead [ 183.793840][ T1219] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.819238][ T29] audit: type=1400 audit(1778969525.154:432): avc: denied { watch watch_reads } for pid=8204 comm="syz.3.976" path="/192" dev="tmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.978625][ T5745] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.008825][ T1219] usb 1-1: Using ep0 maxpacket: 8 [ 184.020983][ T1219] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.031612][ T1219] usb 1-1: config 4 interface 0 has no altsetting 0 [ 184.043161][ T1219] usb 1-1: string descriptor 0 read error: -22 [ 184.049888][ T1219] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 184.070999][ T1219] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 184.102496][ T1219] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 184.143800][ T1219] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.154860][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 184.168581][ T5745] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.186593][ T1219] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 184.205908][ T5745] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.221631][ T1219] usb 1-1: media controller created [ 184.232311][ T5745] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.248269][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.259799][ T5745] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 184.269470][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.281622][ T5745] usb 2-1: Product: syz [ 184.309053][ T8191] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 184.319081][ T5745] usb 2-1: Manufacturer: syz [ 184.325828][ T5745] usb 2-1: SerialNumber: syz [ 184.342447][ T1219] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.357414][ T5745] usb 2-1: config 0 descriptor?? [ 184.416978][ T1219] usb 1-1: USB disconnect, device number 9 [ 184.634114][ T29] audit: type=1400 audit(1778969525.974:433): avc: denied { create } for pid=8218 comm="syz.2.984" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 184.775943][ T5745] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 184.783142][ T8231] netlink: 'syz.2.988': attribute type 29 has an invalid length. [ 184.796562][ T8231] netlink: 'syz.2.988': attribute type 29 has an invalid length. [ 184.807790][ T8231] netlink: 508 bytes leftover after parsing attributes in process `syz.2.988'. [ 185.178602][ T1219] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 185.305090][ T29] audit: type=1400 audit(1778969526.644:434): avc: denied { accept } for pid=8244 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.340241][ T1219] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.355083][ T1219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.366936][ T1219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 185.380519][ T5745] usb 2-1: USB disconnect, device number 11 [ 185.401780][ T29] audit: type=1400 audit(1778969526.734:435): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.427270][ T1219] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.447305][ T1219] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.464967][ T29] audit: type=1400 audit(1778969526.734:436): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.495331][ T1219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.510199][ T1219] usb 3-1: config 0 descriptor?? [ 185.518550][ T29] audit: type=1400 audit(1778969526.734:437): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.941747][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.957235][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 185.997711][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.042174][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.075595][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.108145][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.136346][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.165158][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.190201][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.224648][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.246187][ T1219] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 186.312242][ T1219] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 186.360867][ T1219] usb 3-1: USB disconnect, device number 17 [ 186.498394][ T8279] fido_id[8279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 186.522324][ T8285] netlink: 'syz.1.1006': attribute type 11 has an invalid length. [ 186.561967][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 186.850509][ T5728] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 186.921181][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 186.957237][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 187.060065][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.134555][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.146939][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 187.162913][ T5728] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.232621][ T5728] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.244769][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.264725][ T5728] usb 4-1: config 0 descriptor?? [ 187.503541][ T8321] syzkaller1: entered promiscuous mode [ 187.524525][ T8321] syzkaller1: entered allmulticast mode [ 188.577397][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 189.006436][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 189.006462][ T29] audit: type=1400 audit(1778969530.194:459): avc: denied { write } for pid=8331 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.587808][ T5728] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 189.653660][ T5728] usb 4-1: USB disconnect, device number 16 [ 189.953879][ T8346] fido_id[8346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 190.146104][ T29] audit: type=1400 audit(1778969531.484:460): avc: denied { create } for pid=8359 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 190.322385][ T5706] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.506432][ T29] audit: type=1400 audit(1778969531.844:461): avc: denied { node_bind } for pid=8379 comm="syz.0.1039" saddr=172.20.20.187 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 190.549012][ T5728] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.581635][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1041'. [ 190.719193][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 190.736785][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 190.756850][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.786743][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.824872][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 190.853375][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 190.882742][ T5728] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 190.914917][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.937353][ T5728] usb 2-1: config 0 descriptor?? [ 190.962038][ T8372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.113139][ T8405] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1051'. [ 191.276191][ T8413] syzkaller1: entered promiscuous mode [ 191.283141][ T8413] syzkaller1: entered allmulticast mode [ 191.312028][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 191.312072][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.318251][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 191.324428][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 191.340525][ T5706] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 191.385617][ T5621] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 191.386719][ T5728] usb 2-1: USB disconnect, device number 12 [ 191.527271][ T5706] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.548243][ T5706] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.584254][ T5706] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.609109][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.851704][ T5706] usb 5-1: usb_control_msg returned -32 [ 191.875145][ T5706] usbtmc 5-1:16.0: can't read capabilities [ 192.261612][ T8439] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 192.462050][ T1219] usb 5-1: USB disconnect, device number 14 [ 192.774362][ T2489] block nbd0: Possible stuck request ffff888028b5e000: control (read@0,1024B). Runtime 30 seconds [ 192.793058][ T2489] block nbd0: Possible stuck request ffff888028b5e1c0: control (read@1024,1024B). Runtime 30 seconds [ 192.811587][ T2489] block nbd0: Possible stuck request ffff888028b5e380: control (read@2048,1024B). Runtime 30 seconds [ 192.829233][ T2489] block nbd0: Possible stuck request ffff888028b5e540: control (read@3072,1024B). Runtime 30 seconds [ 193.296261][ T8463] netlink: 'syz.2.1075': attribute type 4 has an invalid length. [ 193.466604][ T29] audit: type=1400 audit(1778969534.804:462): avc: denied { getopt } for pid=8469 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.906489][ T5621] Bluetooth: hci1: Malformed LE Event: 0x0b [ 194.042954][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.050311][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.095924][ T8486] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1085'. [ 194.144579][ T8486] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1085'. [ 194.168123][ T8486] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1085'. [ 194.461469][ T24] hid_parser_main: 21 callbacks suppressed [ 194.461489][ T24] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 194.610045][ T24] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.764826][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 195.876035][ T8507] netlink: 'syz.4.1092': attribute type 9 has an invalid length. [ 195.899692][ T29] audit: type=1400 audit(1778969536.984:463): avc: denied { create } for pid=8506 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.964601][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 195.983457][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 196.009785][ T8508] netlink: 'syz.4.1092': attribute type 9 has an invalid length. [ 196.031737][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 196.116432][ T29] audit: type=1400 audit(1778969537.454:464): avc: denied { create } for pid=8516 comm="syz.4.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.120116][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 196.146584][ T8517] block nbd1: Unsupported socket: should be TCP or UNIX. [ 196.149598][ T8518] netlink: 'syz.1.1094': attribute type 13 has an invalid length. [ 196.163077][ T8518] netlink: 'syz.1.1094': attribute type 17 has an invalid length. [ 196.279114][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 196.344812][ T29] audit: type=1400 audit(1778969537.684:465): avc: denied { read write } for pid=8521 comm="syz.0.1098" name="file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.382375][ T29] audit: type=1400 audit(1778969537.714:466): avc: denied { open } for pid=8521 comm="syz.0.1098" path="/204/file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.439490][ T29] audit: type=1400 audit(1778969537.774:467): avc: denied { ioctl } for pid=8523 comm="syz.3.1099" path="socket:[19820]" dev="sockfs" ino=19820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.471288][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 196.507409][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.518746][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.534265][ T29] audit: type=1400 audit(1778969537.774:468): avc: denied { bind } for pid=8523 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.555189][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.564987][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.576272][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.586458][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.602216][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.628515][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.649377][ T24] usb 3-1: config 0 descriptor?? [ 196.784079][ T29] audit: type=1400 audit(1778969538.124:469): avc: denied { connect } for pid=8536 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.818056][ T8540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1103'. [ 196.844724][ T29] audit: type=1400 audit(1778969538.124:470): avc: denied { write } for pid=8536 comm="syz.4.1104" path="socket:[20708]" dev="sockfs" ino=20708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 196.882621][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 197.024303][ T8549] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1107'. [ 197.036959][ T8549] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1107'. [ 197.050771][ T8549] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1107'. [ 197.104514][ T29] audit: type=1400 audit(1778969538.444:471): avc: denied { read write } for pid=8511 comm="syz.2.1095" name="lp0" dev="devtmpfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 197.139122][ T29] audit: type=1400 audit(1778969538.474:472): avc: denied { open } for pid=8511 comm="syz.2.1095" path="/dev/usb/lp0" dev="devtmpfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 197.169955][ T24] usb 3-1: USB disconnect, device number 18 [ 197.185571][ T24] usblp0: removed [ 200.009100][ T5706] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.187135][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.238164][ T5706] usb 5-1: Using ep0 maxpacket: 16 [ 200.262095][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.283423][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.317435][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.446969][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.689908][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.729599][ T5706] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.754522][ T5706] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.795024][ T5706] usb 5-1: Manufacturer: syz [ 200.830420][ T5706] usb 5-1: config 0 descriptor?? [ 201.149230][ T5706] rc_core: IR keymap rc-hauppauge not found [ 201.170159][ T5706] Registered IR keymap rc-empty [ 201.198332][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.249184][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.290344][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 201.306329][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 201.306346][ T29] audit: type=1400 audit(1778969542.654:479): avc: denied { watch_mount } for pid=8619 comm="syz.3.1137" path="/232" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 201.376974][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 201.457958][ T29] audit: type=1400 audit(1778969542.794:480): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=3085 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.502134][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.561557][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.591436][ T29] audit: type=1400 audit(1778969542.794:481): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3085 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.620996][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.672369][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.698369][ T29] audit: type=1400 audit(1778969542.794:482): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3085 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.731740][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 201.779810][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.098329][ T8640] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 202.107223][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.116899][ T29] audit: type=1400 audit(1778969542.994:483): avc: denied { mount } for pid=8633 comm="syz.1.1142" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 202.163127][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.191714][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.216122][ T29] audit: type=1400 audit(1778969542.994:484): avc: denied { mounton } for pid=8633 comm="syz.1.1142" path="/226/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 202.258245][ T5706] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.307290][ T5706] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.331961][ T5706] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.393869][ T5706] usb 5-1: USB disconnect, device number 15 [ 202.411230][ T29] audit: type=1400 audit(1778969543.754:485): avc: denied { append } for pid=8646 comm="syz.4.1146" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 202.444062][ T8647] input: syz0 as /devices/virtual/input/input17 [ 202.614898][ T29] audit: type=1400 audit(1778969543.944:486): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 202.703174][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 202.804068][ T8651] Invalid argument reading file caps for ./file0 [ 202.812800][ T8652] netem: incorrect gi model size [ 202.848776][ T8652] netem: change failed [ 202.898575][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 202.937219][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.974044][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 203.025898][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.071871][ T29] audit: type=1400 audit(1778969544.414:487): avc: denied { mounton } for pid=8657 comm="syz.1.1151" path="/228/file0" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 203.101139][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 203.104544][ T9] usb 4-1: config 0 descriptor?? [ 203.289962][ T24] usb 1-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.319021][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.340734][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 203.354714][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.356183][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 203.375651][ T24] usb 1-1: config 0 descriptor?? [ 203.455294][ T29] audit: type=1400 audit(1778969544.794:488): avc: denied { read } for pid=8666 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.477628][ T5728] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 203.672738][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.683928][ T5728] usb 5-1: config 0 has no interfaces? [ 203.689969][ T5728] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 203.700356][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.716210][ T5728] usb 5-1: config 0 descriptor?? [ 203.822673][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.830079][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.833513][ T5745] usb 4-1: USB disconnect, device number 17 [ 203.837661][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.857373][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.865882][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.875002][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.882422][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.890018][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.897132][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.904538][ T24] apple 0003:05AC:027C.001A: unknown main item tag 0x0 [ 203.920991][ T24] apple 0003:05AC:027C.001A: hidraw0: USB HID v4.08 Device [HID 05ac:027c] on usb-dummy_hcd.0-1/input0 [ 204.074187][ T5745] usb 1-1: USB disconnect, device number 10 [ 204.142999][ T24] usb 5-1: USB disconnect, device number 16 [ 205.687126][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1181'. [ 205.693348][ T8732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.066503][ T8751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1191'. [ 206.084516][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 206.248638][ T803] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 206.256353][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 206.328841][ T5728] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 206.408643][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 206.415613][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.427202][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.437826][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.446021][ T803] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.455490][ T24] usb 1-1: config 0 has no interface number 0 [ 206.461894][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.473392][ T803] usb 5-1: config 0 descriptor?? [ 206.479584][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.490259][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 206.495991][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.504138][ T24] usb 1-1: Product: syz [ 206.508345][ T24] usb 1-1: Manufacturer: syz [ 206.514733][ T24] usb 1-1: SerialNumber: syz [ 206.520130][ T5728] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 206.532126][ T5728] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 206.544097][ T24] usb 1-1: config 0 descriptor?? [ 206.552158][ T5728] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 206.561498][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.569970][ T5728] usb 4-1: Product: syz [ 206.574226][ T5728] usb 4-1: Manufacturer: syz [ 206.578858][ T5728] usb 4-1: SerialNumber: syz [ 206.797430][ T5728] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 206.806275][ T5728] usb 4-1: unit 255 not found! [ 206.835503][ T5728] usb 4-1: disable ehci-hcd to run US-144 [ 206.844507][ T5728] usb 4-1: disable ehci-hcd to run US-144 [ 206.852840][ T5728] usb 4-1: USB disconnect, device number 18 [ 206.875729][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.903952][ T803] elan 0003:04F3:0755.001B: failed to start in urb: -90 [ 206.916546][ T803] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 206.957380][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 206.974868][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.109543][ T9] usb 5-1: USB disconnect, device number 17 [ 207.186814][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 207.198391][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 207.414241][ T9] usb 1-1: USB disconnect, device number 11 [ 207.645686][ T8761] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1194'. [ 207.655357][ T8761] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1194'. [ 207.665307][ T8761] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1194'. [ 208.802276][ T8771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.825846][ T8773] syzkaller1: entered promiscuous mode [ 208.832337][ T8773] syzkaller1: entered allmulticast mode [ 209.074058][ T8781] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 209.351704][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 209.351731][ T29] audit: type=1400 audit(1778969550.694:494): avc: denied { setopt } for pid=8793 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.379071][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 209.449297][ T5745] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 209.530726][ T9] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.543973][ T9] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 160, setting to 64 [ 209.559550][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.571381][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.586584][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.597401][ T9] usb 1-1: Product: syz [ 209.603409][ T9] usb 1-1: Manufacturer: syz [ 209.608231][ T9] usb 1-1: SerialNumber: syz [ 209.615263][ T9] usb 1-1: config 0 descriptor?? [ 209.623191][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 209.632989][ T9] usb 1-1: selecting invalid altsetting 0 [ 209.642899][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.661219][ T5745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.676516][ T5745] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.692913][ T5745] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 209.722840][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.755665][ T5745] usb 5-1: config 0 descriptor?? [ 209.829138][ T5728] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 209.864593][ T8786] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.873284][ T8786] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.882030][ T8786] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.890606][ T8786] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.898829][ T8786] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.907534][ T8786] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.916375][ T8786] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 209.916800][ T9] usb 1-1: USB disconnect, device number 12 [ 209.927343][ T8786] usb 1-1: cannot submit urb 0, error -19: no device [ 209.939943][ T8786] usb 1-1: cannot submit urb 0, error -19: no device [ 209.947295][ T8786] usb 1-1: cannot submit urb 0, error -19: no device [ 210.008724][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 210.015478][ T5728] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.027905][ T5728] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.038625][ T5728] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.049680][ T5728] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.062898][ T5728] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.072529][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.191456][ T5745] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.001C/input/input18 [ 210.288860][ T5728] usb 4-1: GET_CAPABILITIES returned 0 [ 210.292003][ T5745] sony 0003:054C:03D5.001C: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 210.315316][ T5728] usbtmc 4-1:16.0: can't read capabilities [ 210.404289][ T5745] usb 5-1: USB disconnect, device number 18 [ 210.507715][ T8799] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 210.515865][ T5728] usb 4-1: USB disconnect, device number 19 [ 212.757706][ T8825] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1220'. [ 212.772525][ T8825] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1220'. [ 212.783297][ T8825] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1220'. [ 214.053725][ T8838] bridge1: entered promiscuous mode [ 214.065341][ T8838] bridge1: entered allmulticast mode [ 215.186246][ T29] audit: type=1400 audit(1778969556.524:495): avc: denied { watch } for pid=8859 comm="syz.4.1234" path="/266/blkio.throttle.io_serviced" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 215.217967][ T29] audit: type=1400 audit(1778969556.524:496): avc: denied { watch_sb watch_reads } for pid=8859 comm="syz.4.1234" path="/266/blkio.throttle.io_serviced" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.438873][ T803] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 216.608653][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 216.615195][ T803] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 216.623415][ T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 216.634527][ T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 216.644641][ T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 216.656096][ T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 216.666646][ T803] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.679762][ T803] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.688891][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.904286][ T803] usb 5-1: usb_control_msg returned -32 [ 216.911321][ T803] usbtmc 5-1:16.0: can't read capabilities [ 216.969437][ T1007] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 217.274590][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 217.285758][ T8869] usbtmc 5-1:16.0: Unable to send data, error -71 [ 217.293553][ T8869] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 217.302873][ T1219] usb 5-1: USB disconnect, device number 19 [ 218.278951][ T1219] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 218.430513][ T1219] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 218.439791][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.449638][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.461010][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.468998][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.477977][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.489725][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.497327][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.507555][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.521012][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.530909][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.540400][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.551789][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.559794][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.569190][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.580485][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.587761][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.598073][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.610467][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.618046][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.627169][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.638375][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.646235][ T1219] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.655748][ T1219] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.667082][ T1219] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.676493][ T1219] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.686106][ T1219] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.695186][ T1219] usb 5-1: Product: syz [ 218.699764][ T1219] usb 5-1: Manufacturer: syz [ 218.704338][ T1219] usb 5-1: SerialNumber: syz [ 218.712443][ T1219] usb 5-1: config 0 descriptor?? [ 218.724075][ T1219] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 218.938443][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 218.948696][ T803] usb 5-1: USB disconnect, device number 20 [ 218.957007][ T803] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 219.939753][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.803499][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.821459][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.833006][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.842085][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.852410][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.869136][ T8908] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2149952964 (4299905928 ns) > initial count (33554432 ns). Using initial count to start timer. [ 220.885239][ T29] audit: type=1400 audit(1778969562.214:497): avc: denied { module_request } for pid=8905 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 221.309316][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.322490][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.335998][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.344369][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.353346][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.586221][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.594024][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.606711][ T8905] bridge_slave_0: entered allmulticast mode [ 221.615087][ T8905] bridge_slave_0: entered promiscuous mode [ 221.625092][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.638248][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.648062][ T8905] bridge_slave_1: entered allmulticast mode [ 221.656059][ T8905] bridge_slave_1: entered promiscuous mode [ 221.714051][ T8905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.733365][ T8905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.806508][ T8905] team0: Port device team_slave_0 added [ 221.821045][ T8905] team0: Port device team_slave_1 added [ 221.855899][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.863129][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.893479][ T8905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.911239][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.918873][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.947062][ T8905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.994931][ T8905] hsr_slave_0: entered promiscuous mode [ 222.002567][ T8905] hsr_slave_1: entered promiscuous mode [ 222.009693][ T8905] debugfs: 'hsr0' already exists in 'hsr' [ 222.015501][ T8905] Cannot create hsr debugfs directory [ 222.230164][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.237670][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.245374][ T8928] bridge_slave_0: entered allmulticast mode [ 222.252205][ T8928] bridge_slave_0: entered promiscuous mode [ 222.265972][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.273979][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.281842][ T8928] bridge_slave_1: entered allmulticast mode [ 222.289636][ T8928] bridge_slave_1: entered promiscuous mode [ 222.323854][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.336502][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.360166][ T8928] team0: Port device team_slave_0 added [ 222.367525][ T8928] team0: Port device team_slave_1 added [ 222.386557][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.394192][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.421839][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.437770][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.445427][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.472487][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.505324][ T8928] hsr_slave_0: entered promiscuous mode [ 222.512032][ T8928] hsr_slave_1: entered promiscuous mode [ 222.517966][ T8928] debugfs: 'hsr0' already exists in 'hsr' [ 222.524287][ T8928] Cannot create hsr debugfs directory [ 222.832758][ T2489] block nbd0: Possible stuck request ffff888028b5e000: control (read@0,1024B). Runtime 60 seconds [ 222.845770][ T2489] block nbd0: Possible stuck request ffff888028b5e1c0: control (read@1024,1024B). Runtime 60 seconds [ 222.858290][ T2489] block nbd0: Possible stuck request ffff888028b5e380: control (read@2048,1024B). Runtime 60 seconds [ 222.880182][ T2489] block nbd0: Possible stuck request ffff888028b5e540: control (read@3072,1024B). Runtime 60 seconds [ 222.918569][ T803] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 222.919295][ T5619] Bluetooth: hci5: command tx timeout [ 223.068558][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 223.076417][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 223.089671][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 223.104058][ T803] usb 5-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 223.115975][ T803] usb 5-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 223.126076][ T803] usb 5-1: Product: syz [ 223.130379][ T803] usb 5-1: Manufacturer: syz [ 223.137635][ T803] usb 5-1: config 0 descriptor?? [ 223.143308][ T8962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.398675][ T5619] Bluetooth: hci6: command tx timeout [ 223.562136][ T803] hid-generic 0003:25DD:F3D2.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 223.822193][ T803] usb 5-1: USB disconnect, device number 21 [ 224.664463][ T8977] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1272'. [ 224.676707][ T8977] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1272'. [ 224.687338][ T8977] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1272'. [ 224.991073][ T5619] Bluetooth: hci5: command tx timeout [ 225.469804][ T5619] Bluetooth: hci6: command tx timeout [ 226.853784][ T4978] udevd[4978]: worker [5600] /devices/virtual/block/nbd0 is taking a long time [ 227.069287][ T5619] Bluetooth: hci5: command tx timeout [ 227.548892][ T5619] Bluetooth: hci6: command tx timeout [ 229.148584][ T5619] Bluetooth: hci5: command tx timeout [ 229.377083][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.385671][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.396123][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.404442][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.415383][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.629179][ T5619] Bluetooth: hci6: command tx timeout [ 229.710627][ T8994] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.717916][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.725312][ T8994] bridge_slave_0: entered allmulticast mode [ 229.732697][ T8994] bridge_slave_0: entered promiscuous mode [ 229.740578][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.747881][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.756259][ T8994] bridge_slave_1: entered allmulticast mode [ 229.763079][ T8994] bridge_slave_1: entered promiscuous mode [ 229.782840][ T8994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.793775][ T8994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.820416][ T8994] team0: Port device team_slave_0 added [ 229.827835][ T8994] team0: Port device team_slave_1 added [ 229.847181][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.854997][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.887146][ T8994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.900004][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.906971][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.935928][ T8994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.972677][ T8994] hsr_slave_0: entered promiscuous mode [ 229.980575][ T8994] hsr_slave_1: entered promiscuous mode [ 229.987421][ T8994] debugfs: 'hsr0' already exists in 'hsr' [ 229.993601][ T8994] Cannot create hsr debugfs directory [ 230.376460][ T5621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 230.387464][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 230.396016][ T5621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 230.405925][ T5621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 230.414685][ T5621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 230.713992][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.721967][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.729637][ T9012] bridge_slave_0: entered allmulticast mode [ 230.736351][ T9012] bridge_slave_0: entered promiscuous mode [ 230.744204][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.752847][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.761549][ T9012] bridge_slave_1: entered allmulticast mode [ 230.768272][ T9012] bridge_slave_1: entered promiscuous mode [ 230.789522][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.802960][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.831832][ T9012] team0: Port device team_slave_0 added [ 230.840219][ T9012] team0: Port device team_slave_1 added [ 230.859697][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.867737][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.899946][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.912913][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.921587][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.950322][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.985930][ T9012] hsr_slave_0: entered promiscuous mode [ 230.994961][ T9012] hsr_slave_1: entered promiscuous mode [ 231.003474][ T9012] debugfs: 'hsr0' already exists in 'hsr' [ 231.009706][ T9012] Cannot create hsr debugfs directory [ 231.203024][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 231.469782][ T5619] Bluetooth: hci7: command tx timeout [ 232.429500][ T5619] Bluetooth: hci8: command tx timeout [ 233.548722][ T5619] Bluetooth: hci7: command tx timeout [ 234.508628][ T5619] Bluetooth: hci8: command tx timeout [ 235.628701][ T5619] Bluetooth: hci7: command tx timeout [ 236.588593][ T5619] Bluetooth: hci8: command tx timeout [ 237.708717][ T5619] Bluetooth: hci7: command tx timeout [ 238.668617][ T5619] Bluetooth: hci8: command tx timeout [ 240.904374][ T5621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 240.916634][ T5621] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 240.926120][ T5621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 240.938040][ T5621] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 240.946043][ T5621] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 241.253506][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.261974][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.270955][ T9030] bridge_slave_0: entered allmulticast mode [ 241.279201][ T9030] bridge_slave_0: entered promiscuous mode [ 241.286803][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.294935][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.303089][ T9030] bridge_slave_1: entered allmulticast mode [ 241.312272][ T9030] bridge_slave_1: entered promiscuous mode [ 241.334720][ T9030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.346875][ T9030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.370736][ T9030] team0: Port device team_slave_0 added [ 241.377828][ T9030] team0: Port device team_slave_1 added [ 241.397458][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.406575][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.434625][ T9030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.448660][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.455647][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.482348][ T9030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.513588][ T9030] hsr_slave_0: entered promiscuous mode [ 241.520147][ T9030] hsr_slave_1: entered promiscuous mode [ 241.526092][ T9030] debugfs: 'hsr0' already exists in 'hsr' [ 241.532407][ T9030] Cannot create hsr debugfs directory [ 242.989255][ T5619] Bluetooth: hci9: command tx timeout [ 245.079281][ T5619] Bluetooth: hci9: command tx timeout [ 247.148717][ T5619] Bluetooth: hci9: command tx timeout [ 247.996506][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.228562][ T5619] Bluetooth: hci9: command tx timeout [ 250.864015][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.830203][ T5745] page_pool_release_retry() stalled pool shutdown: id 39, 1 inflight 60 sec [ 252.911195][ T2489] block nbd0: Possible stuck request ffff888028b5e000: control (read@0,1024B). Runtime 90 seconds [ 252.925453][ T2489] block nbd0: Possible stuck request ffff888028b5e1c0: control (read@1024,1024B). Runtime 90 seconds [ 252.937012][ T2489] block nbd0: Possible stuck request ffff888028b5e380: control (read@2048,1024B). Runtime 90 seconds [ 252.950259][ T2489] block nbd0: Possible stuck request ffff888028b5e540: control (read@3072,1024B). Runtime 90 seconds [ 255.469160][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.476787][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.230063][ T7855] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.921436][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.939920][ T5621] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 280.948811][ T5621] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 280.957203][ T5621] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 280.966923][ T5621] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 280.979828][ T5621] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 281.288652][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.295822][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.303189][ T9048] bridge_slave_0: entered allmulticast mode [ 281.310724][ T9048] bridge_slave_0: entered promiscuous mode [ 281.318455][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.325564][ T9048] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.333295][ T9048] bridge_slave_1: entered allmulticast mode [ 281.340525][ T9048] bridge_slave_1: entered promiscuous mode [ 281.370377][ T9048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.383396][ T9048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.426286][ T9048] team0: Port device team_slave_0 added [ 281.435753][ T9048] team0: Port device team_slave_1 added [ 281.464534][ T5619] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 281.470639][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.475780][ T5619] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 281.481928][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.489706][ T5619] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 281.512998][ T9048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.533917][ T5619] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 281.535130][ T9048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.549135][ T9048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.577932][ T9048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.589998][ T5619] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 281.644787][ T9048] hsr_slave_0: entered promiscuous mode [ 281.651589][ T9048] hsr_slave_1: entered promiscuous mode [ 281.657819][ T9048] debugfs: 'hsr0' already exists in 'hsr' [ 281.663825][ T9048] Cannot create hsr debugfs directory [ 281.890936][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.131487][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.140077][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.147867][ T9066] bridge_slave_0: entered allmulticast mode [ 282.157331][ T9066] bridge_slave_0: entered promiscuous mode [ 282.166053][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.173862][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.182487][ T9066] bridge_slave_1: entered allmulticast mode [ 282.191110][ T9066] bridge_slave_1: entered promiscuous mode [ 282.213140][ T9066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.225716][ T9066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.250191][ T9066] team0: Port device team_slave_0 added [ 282.257420][ T9066] team0: Port device team_slave_1 added [ 282.280331][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.287592][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.317442][ T9066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.329973][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.336931][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.364258][ T9066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.394761][ T9066] hsr_slave_0: entered promiscuous mode [ 282.401131][ T9066] hsr_slave_1: entered promiscuous mode [ 282.407865][ T9066] debugfs: 'hsr0' already exists in 'hsr' [ 282.413672][ T9066] Cannot create hsr debugfs directory [ 282.992485][ T2489] block nbd0: Possible stuck request ffff888028b5e000: control (read@0,1024B). Runtime 120 seconds [ 283.004244][ T2489] block nbd0: Possible stuck request ffff888028b5e1c0: control (read@1024,1024B). Runtime 120 seconds [ 283.015890][ T2489] block nbd0: Possible stuck request ffff888028b5e380: control (read@2048,1024B). Runtime 120 seconds [ 283.029114][ T2489] block nbd0: Possible stuck request ffff888028b5e540: control (read@3072,1024B). Runtime 120 seconds [ 283.068636][ T5619] Bluetooth: hci10: command tx timeout [ 283.629234][ T5619] Bluetooth: hci11: command tx timeout [ 285.149075][ T5619] Bluetooth: hci10: command tx timeout [ 285.709190][ T5619] Bluetooth: hci11: command tx timeout [ 287.228971][ T5619] Bluetooth: hci10: command tx timeout [ 287.789101][ T5619] Bluetooth: hci11: command tx timeout [ 289.319052][ T5619] Bluetooth: hci10: command tx timeout [ 289.440256][ T5621] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 289.451006][ T5621] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 289.461572][ T5621] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 289.472215][ T5621] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 289.480792][ T5621] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 289.781862][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.789364][ T9084] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.796542][ T9084] bridge_slave_0: entered allmulticast mode [ 289.803901][ T9084] bridge_slave_0: entered promiscuous mode [ 289.812331][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.819914][ T9084] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.827078][ T9084] bridge_slave_1: entered allmulticast mode [ 289.834342][ T9084] bridge_slave_1: entered promiscuous mode [ 289.854850][ T9084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.870218][ T5621] Bluetooth: hci11: command tx timeout [ 289.879949][ T9084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.903574][ T9084] team0: Port device team_slave_0 added [ 289.911512][ T9084] team0: Port device team_slave_1 added [ 289.932664][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.939679][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.970203][ T9084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.987468][ T9084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.997717][ T9084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.027810][ T9084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.063269][ T9084] hsr_slave_0: entered promiscuous mode [ 290.070584][ T9084] hsr_slave_1: entered promiscuous mode [ 290.076633][ T9084] debugfs: 'hsr0' already exists in 'hsr' [ 290.083835][ T9084] Cannot create hsr debugfs directory [ 290.465722][ T5619] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 290.475087][ T5619] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 290.484548][ T5619] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 290.494032][ T5619] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 290.504709][ T5619] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 290.805266][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.812908][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.820637][ T9103] bridge_slave_0: entered allmulticast mode [ 290.827385][ T9103] bridge_slave_0: entered promiscuous mode [ 290.836009][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.843504][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.850880][ T9103] bridge_slave_1: entered allmulticast mode [ 290.859291][ T9103] bridge_slave_1: entered promiscuous mode [ 290.883915][ T9103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.896954][ T9103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.923559][ T9103] team0: Port device team_slave_0 added [ 290.932094][ T9103] team0: Port device team_slave_1 added [ 290.953189][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.962344][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.990845][ T9103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.007609][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.016251][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.049107][ T9103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.089712][ T9103] hsr_slave_0: entered promiscuous mode [ 291.096397][ T9103] hsr_slave_1: entered promiscuous mode [ 291.104112][ T9103] debugfs: 'hsr0' already exists in 'hsr' [ 291.112108][ T9103] Cannot create hsr debugfs directory [ 291.548704][ T5621] Bluetooth: hci12: command tx timeout [ 292.589148][ T5621] Bluetooth: hci13: command tx timeout [ 293.155109][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.628622][ T5621] Bluetooth: hci12: command tx timeout [ 294.678690][ T5621] Bluetooth: hci13: command tx timeout [ 295.708599][ T5621] Bluetooth: hci12: command tx timeout [ 296.749583][ T5621] Bluetooth: hci13: command tx timeout [ 297.799420][ T5621] Bluetooth: hci12: command tx timeout [ 298.828599][ T5621] Bluetooth: hci13: command tx timeout [ 300.961975][ T5619] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 300.977132][ T5619] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 300.987754][ T5619] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 300.998007][ T5619] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 301.005837][ T5619] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 301.314633][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.322329][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.329663][ T9126] bridge_slave_0: entered allmulticast mode [ 301.336674][ T9126] bridge_slave_0: entered promiscuous mode [ 301.344469][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.352518][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.360730][ T9126] bridge_slave_1: entered allmulticast mode [ 301.367654][ T9126] bridge_slave_1: entered promiscuous mode [ 301.389861][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.400934][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.424011][ T9126] team0: Port device team_slave_0 added [ 301.431577][ T9126] team0: Port device team_slave_1 added [ 301.451615][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.459917][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.486553][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.498559][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.505929][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.532781][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.571193][ T9126] hsr_slave_0: entered promiscuous mode [ 301.577383][ T9126] hsr_slave_1: entered promiscuous mode [ 301.583631][ T9126] debugfs: 'hsr0' already exists in 'hsr' [ 301.589406][ T9126] Cannot create hsr debugfs directory [ 303.069611][ T5621] Bluetooth: hci14: command tx timeout [ 305.149245][ T5621] Bluetooth: hci14: command tx timeout [ 307.229211][ T5621] Bluetooth: hci14: command tx timeout [ 309.309136][ T5621] Bluetooth: hci14: command tx timeout [ 309.948817][ T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 312.815978][ T81] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.070575][ T2489] block nbd0: Possible stuck request ffff888028b5e000: control (read@0,1024B). Runtime 150 seconds [ 313.082752][ T2489] block nbd0: Possible stuck request ffff888028b5e1c0: control (read@1024,1024B). Runtime 150 seconds [ 313.095082][ T2489] block nbd0: Possible stuck request ffff888028b5e380: control (read@2048,1024B). Runtime 150 seconds [ 313.106700][ T2489] block nbd0: Possible stuck request ffff888028b5e540: control (read@3072,1024B). Runtime 150 seconds [ 316.919579][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.926758][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.080141][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.873314][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 341.008480][ T5619] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 341.016609][ T5619] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 341.026211][ T5619] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 341.035345][ T5619] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 341.043138][ T5619] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 341.372170][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.379446][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.389437][ T9144] bridge_slave_0: entered allmulticast mode [ 341.396437][ T9144] bridge_slave_0: entered promiscuous mode [ 341.403682][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.410929][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.418118][ T9144] bridge_slave_1: entered allmulticast mode [ 341.425021][ T9144] bridge_slave_1: entered promiscuous mode [ 341.450749][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.462850][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.495598][ T9144] team0: Port device team_slave_0 added [ 341.504261][ T9144] team0: Port device team_slave_1 added [ 341.530900][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.537874][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.571789][ T5619] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 341.581113][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.593359][ T5619] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 341.601523][ T5619] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 341.611562][ T5619] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 341.621483][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.629452][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.657324][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.668170][ T5619] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 341.715157][ T9144] hsr_slave_0: entered promiscuous mode [ 341.726033][ T9144] hsr_slave_1: entered promiscuous mode [ 341.733537][ T9144] debugfs: 'hsr0' already exists in 'hsr' [ 341.740210][ T9144] Cannot create hsr debugfs directory [ 342.095013][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.105607][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.114197][ T9162] bridge_slave_0: entered allmulticast mode [ 342.122544][ T9162] bridge_slave_0: entered promiscuous mode [ 342.132053][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.139840][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.147288][ T9162] bridge_slave_1: entered allmulticast mode [ 342.155330][ T9162] bridge_slave_1: entered promiscuous mode [ 342.191095][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.207064][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.255940][ T9162] team0: Port device team_slave_0 added [ 342.272896][ T9162] team0: Port device team_slave_1 added [ 342.308028][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.316168][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.344697][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.362954][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.371272][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.399394][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.450658][ T9162] hsr_slave_0: entered promiscuous mode [ 342.456966][ T9162] hsr_slave_1: entered promiscuous mode [ 342.463304][ T9162] debugfs: 'hsr0' already exists in 'hsr' [ 342.469189][ T9162] Cannot create hsr debugfs directory [ 343.078809][ T5621] Bluetooth: hci15: command tx timeout [ 343.149396][ T2489] block nbd0: Possible stuck request ffff888028b5e000: control (read@0,1024B). Runtime 180 seconds [ 343.162729][ T2489] block nbd0: Possible stuck request ffff888028b5e1c0: control (read@1024,1024B). Runtime 180 seconds [ 343.177223][ T2489] block nbd0: Possible stuck request ffff888028b5e380: control (read@2048,1024B). Runtime 180 seconds [ 343.192244][ T2489] block nbd0: Possible stuck request ffff888028b5e540: control (read@3072,1024B). Runtime 180 seconds [ 343.708537][ T5621] Bluetooth: hci16: command tx timeout [ 343.843256][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.590842][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 344.600824][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 345.149257][ T5619] Bluetooth: hci15: command tx timeout [ 345.788539][ T5619] Bluetooth: hci16: command tx timeout [ 347.238633][ T5619] Bluetooth: hci15: command tx timeout [ 347.621952][ T4978] udevd[4978]: worker [5600] /devices/virtual/block/nbd0 timeout; kill it [ 347.636253][ T4978] udevd[4978]: seq 12211 '/devices/virtual/block/nbd0' killed [ 347.869759][ T5619] Bluetooth: hci16: command tx timeout [ 349.308668][ T5619] Bluetooth: hci15: command tx timeout [ 349.519918][ T5624] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 349.528638][ T5624] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 349.536924][ T5624] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 349.547420][ T5624] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 349.555646][ T5624] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 349.860348][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.867581][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.874960][ T9180] bridge_slave_0: entered allmulticast mode [ 349.881941][ T9180] bridge_slave_0: entered promiscuous mode [ 349.890210][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.897320][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.905092][ T9180] bridge_slave_1: entered allmulticast mode [ 349.912046][ T9180] bridge_slave_1: entered promiscuous mode [ 349.933162][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.945027][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.959120][ T5624] Bluetooth: hci16: command tx timeout [ 349.971887][ T9180] team0: Port device team_slave_0 added [ 349.979524][ T9180] team0: Port device team_slave_1 added [ 349.998783][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.005921][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.032320][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.044776][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.053019][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.079512][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.116605][ T9180] hsr_slave_0: entered promiscuous mode [ 350.122986][ T9180] hsr_slave_1: entered promiscuous mode [ 350.129237][ T9180] debugfs: 'hsr0' already exists in 'hsr' [ 350.135003][ T9180] Cannot create hsr debugfs directory [ 350.526808][ T5619] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 350.536216][ T5619] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 350.546113][ T5619] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 350.554079][ T5619] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 350.562621][ T5619] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 350.868013][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.875594][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.883323][ T9198] bridge_slave_0: entered allmulticast mode [ 350.890672][ T9198] bridge_slave_0: entered promiscuous mode [ 350.899998][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.907112][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.916532][ T9198] bridge_slave_1: entered allmulticast mode [ 350.926168][ T9198] bridge_slave_1: entered promiscuous mode [ 350.948629][ T9198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.963384][ T9198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.987365][ T9198] team0: Port device team_slave_0 added [ 350.995784][ T9198] team0: Port device team_slave_1 added [ 351.016434][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.023880][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.051635][ T9198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.063980][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.071944][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.103526][ T9198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.140570][ T9198] hsr_slave_0: entered promiscuous mode [ 351.147691][ T9198] hsr_slave_1: entered promiscuous mode [ 351.156593][ T9198] debugfs: 'hsr0' already exists in 'hsr' [ 351.164552][ T9198] Cannot create hsr debugfs directory [ 351.628849][ T5624] Bluetooth: hci17: command tx timeout [ 352.598588][ T5624] Bluetooth: hci18: command tx timeout [ 353.708658][ T5619] Bluetooth: hci17: command tx timeout [ 354.669459][ T5619] Bluetooth: hci18: command tx timeout [ 354.835574][ T5619] Bluetooth: hci8: command 0x0406 tx timeout [ 354.835581][ T50] Bluetooth: hci7: command 0x0406 tx timeout [ 355.107084][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.798597][ T5624] Bluetooth: hci17: command tx timeout [ 356.758646][ T5624] Bluetooth: hci18: command tx timeout [ 357.868987][ T5624] Bluetooth: hci17: command tx timeout [ 358.830602][ T5624] Bluetooth: hci18: command tx timeout [ 361.029812][ T5621] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 361.041613][ T5621] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 361.052324][ T5621] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 361.060229][ T5621] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 361.067726][ T5621] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 361.403599][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.411016][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.418282][ T9222] bridge_slave_0: entered allmulticast mode [ 361.425294][ T9222] bridge_slave_0: entered promiscuous mode [ 361.432769][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.441001][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.449122][ T9222] bridge_slave_1: entered allmulticast mode [ 361.457445][ T9222] bridge_slave_1: entered promiscuous mode [ 361.481511][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.494490][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.518207][ T9222] team0: Port device team_slave_0 added [ 361.525931][ T9222] team0: Port device team_slave_1 added [ 361.544497][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.551801][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.579351][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.591263][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.598831][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.626254][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.662382][ T9222] hsr_slave_0: entered promiscuous mode [ 361.668915][ T9222] hsr_slave_1: entered promiscuous mode [ 361.675014][ T9222] debugfs: 'hsr0' already exists in 'hsr' [ 361.680969][ T9222] Cannot create hsr debugfs directory [ 363.149127][ T5621] Bluetooth: hci19: command tx timeout [ 365.069082][ T5621] Bluetooth: hci9: command 0x0406 tx timeout [ 365.229030][ T5624] Bluetooth: hci19: command tx timeout [ 367.308886][ T5624] Bluetooth: hci19: command tx timeout [ 369.388733][ T5624] Bluetooth: hci19: command tx timeout [ 369.399416][ T30] INFO: task syz.2.1181:8733 blocked for more than 143 seconds. [ 369.407284][ T30] Not tainted syzkaller #0 [ 369.412722][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.422704][ T30] task:syz.2.1181 state:D stack:26600 pid:8733 tgid:8730 ppid:5608 task_flags:0x480140 flags:0x00080002 [ 369.435302][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.439081][ T30] [ 369.443676][ T30] __schedule+0x1295/0x67a0 [ 369.448818][ T30] ? __pfx___schedule+0x10/0x10 [ 369.453792][ T30] ? find_held_lock+0x2b/0x80 [ 369.459046][ T30] ? schedule+0x2bf/0x390 [ 369.499014][ T30] schedule+0xdd/0x390 [ 369.512297][ T30] blk_mq_freeze_queue_wait+0x14a/0x1b0 [ 369.526721][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 369.533675][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 369.541377][ T30] queue_limits_commit_update_frozen+0x60/0xd0 [ 369.548315][ T30] nbd_set_size+0x48d/0x6e0 [ 369.553854][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 369.559364][ T30] ? __asan_memcpy+0x3c/0x60 [ 369.563970][ T30] nbd_genl_size_set+0x2ab/0x3d0 [ 369.570127][ T30] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 369.576014][ T30] ? bpf_lsm_capable+0x9/0x10 [ 369.581259][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 369.586557][ T30] nbd_genl_reconfigure+0x548/0x1a00 [ 369.592350][ T30] ? rcu_is_watching+0x12/0xc0 [ 369.597392][ T30] ? trace_kmalloc+0xe3/0x110 [ 369.602709][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 369.609740][ T30] ? __nla_parse+0x40/0x60 [ 369.614788][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 369.622414][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 369.630143][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 369.635732][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.642376][ T30] ? genl_get_cmd+0x3e7/0x760 [ 369.647957][ T30] ? __alloc_skb+0x185/0x710 [ 369.653123][ T30] ? netlink_alloc_large_skb+0x69/0x150 [ 369.659096][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 369.664976][ T30] genl_rcv_msg+0x560/0x800 [ 369.669914][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.674937][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 369.681102][ T30] ? __lock_acquire+0x4a5/0x2630 [ 369.686041][ T30] netlink_rcv_skb+0x159/0x420 [ 369.691387][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.696883][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.702780][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 369.708091][ T30] genl_rcv+0x28/0x40 [ 369.712764][ T30] netlink_unicast+0x585/0x850 [ 369.717638][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 369.723394][ T30] netlink_sendmsg+0x8b0/0xda0 [ 369.728182][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.733926][ T30] ? __might_fault+0x30/0x140 [ 369.739208][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 369.743980][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.750275][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.755589][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 369.760897][ T30] ___sys_sendmsg+0x190/0x1e0 [ 369.765595][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.770881][ T30] __sys_sendmsg+0x170/0x220 [ 369.775492][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.781053][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 369.785984][ T30] ? rcu_is_watching+0x12/0xc0 [ 369.791527][ T30] do_syscall_64+0x10b/0xf80 [ 369.796165][ T30] ? clear_bhb_loop+0x40/0x90 [ 369.801267][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.807254][ T30] RIP: 0033:0x7f5591f9ce59 [ 369.812268][ T30] RSP: 002b:00007f5592e93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.821255][ T30] RAX: ffffffffffffffda RBX: 00007f5592215fa0 RCX: 00007f5591f9ce59 [ 369.829696][ T30] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 0000000000000005 [ 369.837656][ T30] RBP: 00007f5592032d6f R08: 0000000000000000 R09: 0000000000000000 [ 369.846069][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.854995][ T30] R13: 00007f5592216038 R14: 00007f5592215fa0 R15: 00007ffd92d2c1f8 [ 369.863814][ T30] [ 369.866923][ T30] INFO: task syz.1.1192:8755 blocked for more than 143 seconds. [ 369.875242][ T30] Not tainted syzkaller #0 [ 369.880609][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.889780][ T30] task:syz.1.1192 state:D stack:28808 pid:8755 tgid:8754 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 369.902127][ T30] Call Trace: [ 369.905397][ T30] [ 369.908309][ T30] __schedule+0x1295/0x67a0 [ 369.913308][ T30] ? __pfx___schedule+0x10/0x10 [ 369.918141][ T30] ? find_held_lock+0x2b/0x80 [ 369.923247][ T30] ? schedule+0x2bf/0x390 [ 369.927577][ T30] schedule+0xdd/0x390 [ 369.932171][ T30] schedule_preempt_disabled+0x13/0x30 [ 369.937643][ T30] __mutex_lock+0xced/0x1b10 [ 369.942700][ T30] ? genl_rcv_msg+0x57b/0x800 [ 369.947380][ T30] ? kfree_skbmem+0x19f/0x210 [ 369.952512][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 369.958066][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 369.963638][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 369.969321][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 369.974599][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 369.980272][ T30] ? __dev_queue_xmit+0xa10/0x4950 [ 369.985375][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 369.991114][ T30] ? genl_rcv_msg+0x57b/0x800 [ 369.995788][ T30] genl_rcv_msg+0x57b/0x800 [ 370.000887][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.005930][ T30] ? __lock_acquire+0x4a5/0x2630 [ 370.011574][ T30] netlink_rcv_skb+0x159/0x420 [ 370.016367][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.021889][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.027177][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 370.033417][ T30] genl_rcv+0x28/0x40 [ 370.037453][ T30] netlink_unicast+0x585/0x850 [ 370.042593][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 370.047918][ T30] netlink_sendmsg+0x8b0/0xda0 [ 370.052719][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.058562][ T30] __sys_sendto+0x468/0x4b0 [ 370.063075][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.068343][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 370.073983][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 370.081587][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 370.091269][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 370.097372][ T30] ? do_syscall_64+0x90/0xf80 [ 370.103238][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 370.109701][ T30] do_syscall_64+0x10b/0xf80 [ 370.114656][ T30] ? clear_bhb_loop+0x40/0x90 [ 370.120037][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.125952][ T30] RIP: 0033:0x7ff96af5d68e [ 370.130843][ T30] RSP: 002b:00007ff96bef3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 370.140321][ T30] RAX: ffffffffffffffda RBX: 00007ff96bef56c0 RCX: 00007ff96af5d68e [ 370.149473][ T30] RDX: 0000000000000020 RSI: 00007ff96bef4000 RDI: 0000000000000003 [ 370.157680][ T30] RBP: 0000000000000000 R08: 00007ff96bef3f04 R09: 000000000000000c [ 370.167043][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 370.177365][ T30] R13: 00007ff96bef3f58 R14: 00007ff96bef4000 R15: 0000000000000000 [ 370.186922][ T30] [ 370.190813][ T30] INFO: task syz.3.1230:8849 blocked for more than 144 seconds. [ 370.199884][ T30] Not tainted syzkaller #0 [ 370.204912][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.214509][ T30] task:syz.3.1230 state:D stack:28808 pid:8849 tgid:8848 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 370.228924][ T30] Call Trace: [ 370.232215][ T30] [ 370.235229][ T30] __schedule+0x1295/0x67a0 [ 370.240310][ T30] ? __pfx___schedule+0x10/0x10 [ 370.246135][ T30] ? find_held_lock+0x2b/0x80 [ 370.251952][ T30] ? schedule+0x2bf/0x390 [ 370.256322][ T30] schedule+0xdd/0x390 [ 370.260999][ T30] schedule_preempt_disabled+0x13/0x30 [ 370.267078][ T30] __mutex_lock+0xced/0x1b10 [ 370.272950][ T30] ? genl_rcv_msg+0x57b/0x800 [ 370.280303][ T30] ? kfree_skbmem+0x19f/0x210 [ 370.285799][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 370.291308][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 370.296962][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 370.302842][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 370.309728][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 370.314955][ T30] ? __dev_queue_xmit+0xa10/0x4950 [ 370.320887][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 370.326195][ T30] ? genl_rcv_msg+0x57b/0x800 [ 370.331701][ T30] genl_rcv_msg+0x57b/0x800 [ 370.336204][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.341428][ T30] ? __lock_acquire+0x4a5/0x2630 [ 370.346385][ T30] netlink_rcv_skb+0x159/0x420 [ 370.354032][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.360606][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.367089][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 370.372946][ T30] genl_rcv+0x28/0x40 [ 370.376933][ T30] netlink_unicast+0x585/0x850 [ 370.382153][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 370.387968][ T30] netlink_sendmsg+0x8b0/0xda0 [ 370.393463][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.399520][ T30] __sys_sendto+0x468/0x4b0 [ 370.404051][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.410183][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 370.415211][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 370.423027][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 370.431277][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 370.436097][ T30] ? do_syscall_64+0x90/0xf80 [ 370.442873][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 370.448076][ T30] do_syscall_64+0x10b/0xf80 [ 370.453138][ T30] ? clear_bhb_loop+0x40/0x90 [ 370.458247][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.464794][ T30] RIP: 0033:0x7fa2dad5d68e [ 370.470230][ T30] RSP: 002b:00007fa2dbb9de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 370.480116][ T30] RAX: ffffffffffffffda RBX: 00007fa2dbb9f6c0 RCX: 00007fa2dad5d68e [ 370.488129][ T30] RDX: 0000000000000020 RSI: 00007fa2dbb9e000 RDI: 0000000000000003 [ 370.496628][ T30] RBP: 0000000000000000 R08: 00007fa2dbb9df04 R09: 000000000000000c [ 370.505173][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 370.513852][ T30] R13: 00007fa2dbb9df58 R14: 00007fa2dbb9e000 R15: 0000000000000000 [ 370.522505][ T30] [ 370.525978][ T30] INFO: task syz.0.1235:8862 blocked for more than 144 seconds. [ 370.536970][ T30] Not tainted syzkaller #0 [ 370.542340][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.551445][ T30] task:syz.0.1235 state:D stack:27904 pid:8862 tgid:8861 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 370.563907][ T30] Call Trace: [ 370.567192][ T30] [ 370.571199][ T30] __schedule+0x1295/0x67a0 [ 370.575729][ T30] ? __pfx___schedule+0x10/0x10 [ 370.581042][ T30] ? find_held_lock+0x2b/0x80 [ 370.585879][ T30] ? schedule+0x2bf/0x390 [ 370.591426][ T30] schedule+0xdd/0x390 [ 370.595497][ T30] schedule_preempt_disabled+0x13/0x30 [ 370.601506][ T30] __mutex_lock+0xced/0x1b10 [ 370.606122][ T30] ? genl_rcv_msg+0x57b/0x800 [ 370.611292][ T30] ? kfree_skbmem+0x19f/0x210 [ 370.616423][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 370.621988][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 370.627112][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 370.632492][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 370.637886][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 370.643065][ T30] ? __dev_queue_xmit+0xa10/0x4950 [ 370.649077][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 370.654360][ T30] ? genl_rcv_msg+0x57b/0x800 [ 370.659531][ T30] genl_rcv_msg+0x57b/0x800 [ 370.664034][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.669897][ T30] ? __lock_acquire+0x4a5/0x2630 [ 370.675577][ T30] netlink_rcv_skb+0x159/0x420 [ 370.680974][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.686022][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.692252][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 370.697552][ T30] genl_rcv+0x28/0x40 [ 370.702245][ T30] netlink_unicast+0x585/0x850 [ 370.707057][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 370.712768][ T30] netlink_sendmsg+0x8b0/0xda0 [ 370.717538][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.723282][ T30] __sys_sendto+0x468/0x4b0 [ 370.728228][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.733992][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 370.739514][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 370.745942][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 370.752911][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 370.757711][ T30] ? do_syscall_64+0x90/0xf80 [ 370.762893][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 370.768089][ T30] do_syscall_64+0x10b/0xf80 [ 370.773897][ T30] ? clear_bhb_loop+0x40/0x90 [ 370.779210][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.785381][ T30] RIP: 0033:0x7f8ea2b5d68e [ 370.790355][ T30] RSP: 002b:00007f8ea3b19e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 370.799368][ T30] RAX: ffffffffffffffda RBX: 00007f8ea3b1b6c0 RCX: 00007f8ea2b5d68e [ 370.807412][ T30] RDX: 000000000000001c RSI: 00007f8ea3b1a000 RDI: 0000000000000003 [ 370.816133][ T30] RBP: 0000000000000000 R08: 00007f8ea3b19f04 R09: 000000000000000c [ 370.824544][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 370.833173][ T30] R13: 00007f8ea3b19f58 R14: 00007f8ea3b1a000 R15: 0000000000000000 [ 370.841667][ T30] [ 370.844705][ T30] INFO: task syz-executor:8905 blocked for more than 144 seconds. [ 370.853070][ T30] Not tainted syzkaller #0 [ 370.858003][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.867096][ T30] task:syz-executor state:D stack:23752 pid:8905 tgid:8905 ppid:1 task_flags:0x400140 flags:0x00080002 [ 370.880026][ T30] Call Trace: [ 370.884045][ T30] [ 370.886968][ T30] __schedule+0x1295/0x67a0 [ 370.891972][ T30] ? __pfx___schedule+0x10/0x10 [ 370.896828][ T30] ? find_held_lock+0x2b/0x80 [ 370.902096][ T30] ? schedule+0x2bf/0x390 [ 370.906440][ T30] schedule+0xdd/0x390 [ 370.911200][ T30] schedule_preempt_disabled+0x13/0x30 [ 370.917185][ T30] __mutex_lock+0xced/0x1b10 [ 370.922308][ T30] ? genl_rcv_msg+0x57b/0x800 [ 370.926993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 370.932233][ T30] ? stack_trace_save+0x8e/0xc0 [ 370.937093][ T30] ? kasan_save_track+0x14/0x30 [ 370.941994][ T30] ? __kasan_slab_alloc+0x89/0x90 [ 370.947021][ T30] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 370.953161][ T30] ? kmalloc_reserve+0x148/0x350 [ 370.958120][ T30] ? __alloc_skb+0x185/0x710 [ 370.963296][ T30] ? netlink_alloc_large_skb+0x69/0x150 [ 370.969260][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 370.974530][ T30] ? genl_rcv_msg+0x57b/0x800 [ 370.980268][ T30] genl_rcv_msg+0x57b/0x800 [ 370.984793][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.990662][ T30] ? __lock_acquire+0x4a5/0x2630 [ 370.995633][ T30] ? __lock_acquire+0x4a5/0x2630 [ 371.001084][ T30] netlink_rcv_skb+0x159/0x420 [ 371.005853][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.011451][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.016921][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 371.022671][ T30] genl_rcv+0x28/0x40 [ 371.026663][ T30] netlink_unicast+0x585/0x850 [ 371.031986][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 371.037273][ T30] netlink_sendmsg+0x8b0/0xda0 [ 371.042476][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.047766][ T30] __sys_sendto+0x468/0x4b0 [ 371.052725][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.058005][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 371.063490][ T30] ? fd_install+0x223/0x580 [ 371.068008][ T30] ? __pfx___sys_socket+0x10/0x10 [ 371.073499][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 371.078255][ T30] ? do_syscall_64+0x90/0xf80 [ 371.084308][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 371.092148][ T30] do_syscall_64+0x10b/0xf80 [ 371.099725][ T30] ? clear_bhb_loop+0x40/0x90 [ 371.105130][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.111879][ T30] RIP: 0033:0x7f1ba175d68e [ 371.117027][ T30] RSP: 002b:00007ffda795bce8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.126201][ T30] RAX: ffffffffffffffda RBX: 0000555587eff500 RCX: 00007f1ba175d68e [ 371.134829][ T30] RDX: 0000000000000020 RSI: 00007f1ba2544670 RDI: 0000000000000005 [ 371.144692][ T30] RBP: 0000000000000001 R08: 00007ffda795bd64 R09: 000000000000000c [ 371.153527][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 371.162036][ T30] R13: 00007ffda795bdb8 R14: 00007f1ba2544670 R15: 0000000000000000 [ 371.170778][ T30] [ 371.175479][ T30] INFO: task syz-executor:8928 blocked for more than 145 seconds. [ 371.185513][ T30] Not tainted syzkaller #0 [ 371.191115][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.200750][ T30] task:syz-executor state:D stack:24696 pid:8928 tgid:8928 ppid:1 task_flags:0x400140 flags:0x00080002 [ 371.213200][ T30] Call Trace: [ 371.216555][ T30] [ 371.219869][ T30] __schedule+0x1295/0x67a0 [ 371.225830][ T30] ? __pfx___schedule+0x10/0x10 [ 371.231269][ T30] ? find_held_lock+0x2b/0x80 [ 371.236183][ T30] ? schedule+0x2bf/0x390 [ 371.240731][ T30] schedule+0xdd/0x390 [ 371.245895][ T30] schedule_preempt_disabled+0x13/0x30 [ 371.252921][ T30] __mutex_lock+0xced/0x1b10 [ 371.258017][ T30] ? genl_rcv_msg+0x57b/0x800 [ 371.264277][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 371.270036][ T30] ? stack_trace_save+0x8e/0xc0 [ 371.276047][ T30] ? kasan_save_track+0x14/0x30 [ 371.281373][ T30] ? __kasan_slab_alloc+0x89/0x90 [ 371.287991][ T30] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 371.294820][ T30] ? kmalloc_reserve+0x148/0x350 [ 371.302169][ T30] ? __alloc_skb+0x185/0x710 [ 371.307860][ T30] ? netlink_alloc_large_skb+0x69/0x150 [ 371.315323][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 371.321088][ T30] ? genl_rcv_msg+0x57b/0x800 [ 371.325764][ T30] genl_rcv_msg+0x57b/0x800 [ 371.330783][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.336586][ T30] ? __lock_acquire+0x4a5/0x2630 [ 371.342398][ T30] ? __lock_acquire+0x4a5/0x2630 [ 371.347335][ T30] netlink_rcv_skb+0x159/0x420 [ 371.352686][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.359098][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.366000][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 371.373517][ T30] genl_rcv+0x28/0x40 [ 371.377742][ T30] netlink_unicast+0x585/0x850 [ 371.383200][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 371.393556][ T30] netlink_sendmsg+0x8b0/0xda0 [ 371.398993][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.404335][ T30] __sys_sendto+0x468/0x4b0 [ 371.409309][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.415273][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 371.421233][ T30] ? fd_install+0x223/0x580 [ 371.425739][ T30] ? __pfx___sys_socket+0x10/0x10 [ 371.431244][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 371.436023][ T30] ? do_syscall_64+0x90/0xf80 [ 371.442489][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 371.449145][ T30] do_syscall_64+0x10b/0xf80 [ 371.453930][ T30] ? clear_bhb_loop+0x40/0x90 [ 371.459192][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.465078][ T30] RIP: 0033:0x7eff7d95d68e [ 371.470245][ T30] RSP: 002b:00007fff60d245e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.479562][ T30] RAX: ffffffffffffffda RBX: 00005555857f4500 RCX: 00007eff7d95d68e [ 371.487579][ T30] RDX: 0000000000000020 RSI: 00007eff7e744670 RDI: 0000000000000005 [ 371.496642][ T30] RBP: 0000000000000001 R08: 00007fff60d24664 R09: 000000000000000c [ 371.505292][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 371.513503][ T30] R13: 00007fff60d246b8 R14: 00007eff7e744670 R15: 0000000000000000 [ 371.521533][ T30] [ 371.524586][ T30] INFO: task syz.4.1274:8986 blocked for more than 145 seconds. [ 371.532685][ T30] Not tainted syzkaller #0 [ 371.537602][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.546882][ T30] task:syz.4.1274 state:D stack:26808 pid:8986 tgid:8983 ppid:5614 task_flags:0x400040 flags:0x00080002 [ 371.559512][ T30] Call Trace: [ 371.562817][ T30] [ 371.565738][ T30] __schedule+0x1295/0x67a0 [ 371.570840][ T30] ? __pfx___schedule+0x10/0x10 [ 371.575693][ T30] ? find_held_lock+0x2b/0x80 [ 371.580915][ T30] ? schedule+0x2bf/0x390 [ 371.585278][ T30] schedule+0xdd/0x390 [ 371.589815][ T30] schedule_preempt_disabled+0x13/0x30 [ 371.595805][ T30] __mutex_lock+0xced/0x1b10 [ 371.601048][ T30] ? genl_rcv_msg+0x57b/0x800 [ 371.605736][ T30] ? kfree_skbmem+0x19f/0x210 [ 371.610994][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 371.616038][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 371.621626][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 371.626736][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 371.632652][ T30] ? __dev_queue_xmit+0x9ef/0x4950 [ 371.637807][ T30] ? __dev_queue_xmit+0xa10/0x4950 [ 371.643396][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 371.649227][ T30] ? genl_rcv_msg+0x57b/0x800 [ 371.653978][ T30] genl_rcv_msg+0x57b/0x800 [ 371.659166][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.664205][ T30] ? __lock_acquire+0x4a5/0x2630 [ 371.669607][ T30] netlink_rcv_skb+0x159/0x420 [ 371.674359][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.680027][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.685572][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 371.691503][ T30] genl_rcv+0x28/0x40 [ 371.696082][ T30] netlink_unicast+0x585/0x850 [ 371.701330][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 371.707394][ T30] netlink_sendmsg+0x8b0/0xda0 [ 371.712686][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.719147][ T30] __sys_sendto+0x468/0x4b0 [ 371.723673][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.729474][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 371.734504][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 371.741503][ T30] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 371.748026][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 371.753449][ T30] ? do_syscall_64+0x90/0xf80 [ 371.758132][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 371.764315][ T30] do_syscall_64+0x10b/0xf80 [ 371.769419][ T30] ? clear_bhb_loop+0x40/0x90 [ 371.774387][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.781015][ T30] RIP: 0033:0x7f4fda95d68e [ 371.785439][ T30] RSP: 002b:00007f4fdb900e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.794715][ T30] RAX: ffffffffffffffda RBX: 00007f4fdb9026c0 RCX: 00007f4fda95d68e [ 371.804477][ T30] RDX: 0000000000000024 RSI: 00007f4fdb901000 RDI: 000000000000000d [ 371.812738][ T30] RBP: 0000000000000000 R08: 00007f4fdb900f04 R09: 000000000000000c [ 371.820776][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 371.828915][ T30] R13: 00007f4fdb900f58 R14: 00007f4fdb901000 R15: 0000000000000000 [ 371.837449][ T30] [ 371.840994][ T30] [ 371.840994][ T30] Showing all locks held in the system: [ 371.849446][ T30] 1 lock held by khungtaskd/30: [ 371.854291][ T30] #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 371.864796][ T30] 2 locks held by getty/5363: [ 371.870313][ T30] #0: ffff888039ca10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 371.880506][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 371.891057][ T30] 1 lock held by udevd/5600: [ 371.896086][ T30] #0: ffff888028a6a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 371.900391][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 371.906760][ T30] 6 locks held by syz.2.1181/8733: [ 371.921692][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 371.930510][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 371.940193][ T30] #2: ffff888028a02a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a7/0x1a00 [ 371.952032][ T30] #3: ffff888028adc7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x299/0x6e0 [ 371.963410][ T30] #4: ffff888028adc190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 371.975549][ T30] #5: ffff888028adc1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 371.987968][ T30] 2 locks held by syz.1.1192/8755: [ 371.993521][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.002886][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.012274][ T30] 2 locks held by syz.3.1230/8849: [ 372.017449][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.026122][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.036301][ T30] 2 locks held by syz.0.1235/8862: [ 372.042049][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.051038][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.060494][ T30] 2 locks held by syz-executor/8905: [ 372.065782][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.074442][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.084434][ T30] 2 locks held by syz-executor/8928: [ 372.090995][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.102824][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.113652][ T30] 2 locks held by syz.4.1274/8986: [ 372.119777][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.130523][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.140419][ T30] 2 locks held by syz-executor/8994: [ 372.145752][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.155339][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.165824][ T30] 2 locks held by syz-executor/9012: [ 372.172471][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.182060][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.191980][ T30] 2 locks held by syz-executor/9030: [ 372.197925][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.208678][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.220075][ T30] 2 locks held by syz-executor/9048: [ 372.225370][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.234342][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.246081][ T30] 2 locks held by syz-executor/9066: [ 372.252491][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.261142][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.271129][ T30] 2 locks held by syz-executor/9084: [ 372.277657][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.287270][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.297811][ T30] 2 locks held by syz-executor/9103: [ 372.304031][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.313926][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.324827][ T30] 2 locks held by syz-executor/9126: [ 372.330823][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.341821][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.352542][ T30] 2 locks held by syz-executor/9144: [ 372.357846][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.368337][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.378948][ T30] 2 locks held by syz-executor/9162: [ 372.384340][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.395746][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.405705][ T30] 2 locks held by syz-executor/9180: [ 372.412518][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.423340][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.437990][ T30] 2 locks held by syz-executor/9198: [ 372.443363][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.452367][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.464209][ T30] 2 locks held by syz-executor/9222: [ 372.471127][ T30] #0: ffffffff906bbb88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.481387][ T30] #1: ffffffff906bbc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 372.491377][ T30] [ 372.495068][ T30] ============================================= [ 372.495068][ T30] [ 372.505295][ T30] NMI backtrace for cpu 0 [ 372.505307][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 372.505320][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.505327][ T30] Call Trace: [ 372.505330][ T30] [ 372.505334][ T30] dump_stack_lvl+0x100/0x190 [ 372.505352][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 372.505367][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 372.505381][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 372.505395][ T30] sys_info+0x141/0x190 [ 372.505404][ T30] watchdog+0xcb1/0x1030 [ 372.505419][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 372.505433][ T30] ? __pfx_watchdog+0x10/0x10 [ 372.505446][ T30] ? __kthread_parkme+0x18c/0x230 [ 372.505458][ T30] ? kthread+0x13a/0x450 [ 372.505470][ T30] ? __pfx_watchdog+0x10/0x10 [ 372.505481][ T30] kthread+0x370/0x450 [ 372.505493][ T30] ? __pfx_kthread+0x10/0x10 [ 372.505507][ T30] ret_from_fork+0x72b/0xd50 [ 372.505521][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 372.505535][ T30] ? __switch_to+0x800/0x1100 [ 372.505552][ T30] ? __pfx_kthread+0x10/0x10 [ 372.505565][ T30] ret_from_fork_asm+0x1a/0x30 [ 372.505585][ T30] [ 372.505589][ T30] Sending NMI from CPU 0 to CPUs 1: [ 372.641058][ C1] NMI backtrace for cpu 1 [ 372.641072][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 372.641088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.641096][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 372.641119][ C1] Code: 96 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 a1 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 372.641133][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 372.641145][ C1] RAX: 000000000066278d RBX: ffff88801e2c2500 RCX: ffffffff8b8af095 [ 372.641154][ C1] RDX: 0000000000000000 RSI: ffffffff8df22414 RDI: ffffffff8c1c3a00 [ 372.641163][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 372.641170][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 372.641179][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d7cf50 [ 372.641187][ C1] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 372.641201][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.641210][ C1] CR2: 00005589f1738170 CR3: 000000000e596000 CR4: 00000000003526f0 [ 372.641218][ C1] Call Trace: [ 372.641223][ C1] [ 372.641228][ C1] default_idle+0x9/0x10 [ 372.641240][ C1] default_idle_call+0x6c/0xb0 [ 372.641252][ C1] do_idle+0x464/0x590 [ 372.641267][ C1] ? __pfx_do_idle+0x10/0x10 [ 372.641278][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 372.641294][ C1] cpu_startup_entry+0x4f/0x60 [ 372.641307][ C1] start_secondary+0x21d/0x2d0 [ 372.641322][ C1] ? __pfx_start_secondary+0x10/0x10 [ 372.641338][ C1] common_startup_64+0x13e/0x148 [ 372.641361][ C1] [ 372.824327][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 372.831190][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 372.840287][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.850332][ T30] Call Trace: [ 372.853606][ T30] [ 372.856540][ T30] dump_stack_lvl+0x100/0x190 [ 372.861206][ T30] vpanic+0x552/0x970 [ 372.865174][ T30] ? __pfx_vpanic+0x10/0x10 [ 372.869658][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 372.875855][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 372.882000][ T30] panic+0xd1/0xe0 [ 372.885772][ T30] ? __pfx_panic+0x10/0x10 [ 372.890200][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 372.896350][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 372.902490][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 372.908808][ T30] ? watchdog.cold+0x1ec/0x234 [ 372.913573][ T30] ? watchdog+0xcc1/0x1030 [ 372.918004][ T30] watchdog.cold+0x1fd/0x234 [ 372.922588][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 372.928393][ T30] ? __pfx_watchdog+0x10/0x10 [ 372.933152][ T30] ? __kthread_parkme+0x18c/0x230 [ 372.938159][ T30] ? kthread+0x13a/0x450 [ 372.942386][ T30] ? __pfx_watchdog+0x10/0x10 [ 372.947047][ T30] kthread+0x370/0x450 [ 372.951107][ T30] ? __pfx_kthread+0x10/0x10 [ 372.955704][ T30] ret_from_fork+0x72b/0xd50 [ 372.960286][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 372.965401][ T30] ? __switch_to+0x800/0x1100 [ 372.970084][ T30] ? __pfx_kthread+0x10/0x10 [ 372.974676][ T30] ret_from_fork_asm+0x1a/0x30 [ 372.979439][ T30] [ 372.982812][ T30] Kernel Offset: disabled [ 372.987122][ T30] Rebooting in 86400 seconds..