last executing test programs: 22.104948238s ago: executing program 3 (id=2522): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x2, 0x0, 0x0, 0x0, 0x3, "2f3e784b7cc0ab31e7fd3d1fa09814", "aadb641b", '\x00', "f500", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad35c6ed4500f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(0x0, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0xc8, 0x3}}}, 0x8) lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c8f0340030000100070604000e000800100604002a0507000a02020005000108020003000d0c08008d07feff71077b9007080400f8ff040064287b1f87515ae9"], 0x39) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x10d) socket$inet6(0xa, 0x6, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000000c0)=0x1) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r5 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$nl_netfilter(0x10, 0x3, 0xc) 21.150005215s ago: executing program 3 (id=2529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b68, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0xfa) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x6, 0x809}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r8 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r8, 0xc0045401, &(0x7f0000000100)=0x13c) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8012000800", @ANYRES32=0xffffffffffffffff, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES8, @ANYRES64=r6, @ANYRESHEX=r7, @ANYRES16=r9], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0xc000004) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 20.066178952s ago: executing program 3 (id=2535): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f00000002c0)) 19.984752004s ago: executing program 3 (id=2537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000001140)='smaps_rollup\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4109, 0x100d}], 0x1, 0x0, 0x0) 18.711220377s ago: executing program 3 (id=2543): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x8400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000240)="397149cb1157d0ff66bd11153bfb9aa5", 0x10}]) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000000)="82c8756229f4c2377875434b217a02f9", 0x10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) 17.522017607s ago: executing program 3 (id=2548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x468, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x420, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}]}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x468}}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x400, 0x4) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x118}, {&(0x7f00000007c0)=""/154, 0x14}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.844486469s ago: executing program 4 (id=2569): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x5, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000000000000290000003700000000f4861e865590face00000000000000290000003900"/48], 0x30}}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc0bc5310, &(0x7f0000000180)={0x9}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000280)={{0x0, 0x6}, 0x0, 0xfa, 0xffffffff, {0x80, 0x7}, 0xf0, 0x3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@weak_handle, @fda}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) 8.665124396s ago: executing program 4 (id=2572): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x634, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x608, 0x2, [@TCA_U32_SEL={0x5f4, 0x5, {0x10, 0x8, 0x4, 0x7fff, 0x5, 0x4, 0x4, 0x0, [{0x80, 0xab5, 0x5, 0x8}, {0x2, 0xc, 0x0, 0x4}, {0x5, 0x6, 0xfff, 0x4}, {0x5, 0x2, 0xffffffff, 0x3}, {0xffffffff, 0x6, 0xd, 0x5ce}, {0x6, 0x3, 0x10000, 0x5143}, {0x6, 0x6, 0xe19, 0xf}, {0x4bfb, 0x988, 0x8, 0x5}, {0x7fff, 0x0, 0x94dbd94c, 0x3}, {0x9, 0x1000, 0x9, 0x6c5}, {0x7c, 0x4, 0x40, 0x7cd}, {0x0, 0xfffffff1, 0x5, 0x1}, {0x6, 0x0, 0x401, 0x1}, {0x6a4, 0x6, 0x2f, 0x3}, {0x81, 0x3dae1502, 0x4, 0x1e}, {0x1, 0x5, 0x6, 0x2}, {0x6, 0x4, 0xd5, 0x7}, {0xf, 0x5, 0x2, 0xe}, {0x9, 0x83d7, 0x9, 0x80000001}, {0x5, 0x8, 0x5, 0x1f1}, {0x8001, 0xfffffff8, 0x1, 0xa58}, {0xffffffff, 0x10001, 0x8, 0x9eb2}, {0x101, 0x400, 0xce, 0x7fffffff}, {0x6, 0xffffd19b, 0x6, 0x8001}, {0x9, 0x114, 0x4, 0x10}, {0x8, 0x2, 0x0, 0x8}, {0x5, 0x0, 0x72dd, 0x5}, {0x8, 0x401, 0x446, 0x2}, {0x2, 0x1ff, 0x2}, {0xb1, 0xd, 0x8, 0x1}, {0xae3, 0x7ff, 0x0, 0x6}, {0x2a, 0x7fff, 0xfffffff8, 0x4}, {0x3, 0x0, 0x3, 0x4}, {0x1, 0xd5, 0xc, 0x4}, {0x40000000, 0xff, 0x5}, {0x8, 0x4, 0x6}, {0x4, 0x2, 0xfffff800, 0x2}, {0x1, 0x802a, 0xe, 0xe}, {0x0, 0x9, 0x9, 0x7}, {0x2, 0x3, 0xf, 0x5}, {0x9, 0x7, 0x2, 0x10001}, {0x9, 0x9515, 0x1, 0x1}, {0x80000001, 0x3, 0x800, 0x3}, {0x8, 0x1c85, 0x81, 0x3}, {0x3, 0x36, 0x7, 0x9}, {0x7, 0x68da, 0x81, 0x3}, {0x0, 0x0, 0x4, 0x8}, {0xffff, 0x7fff, 0x0, 0x1}, {0x7, 0x5, 0x32000000, 0xfc01}, {0x401, 0xbf48, 0xff, 0x4}, {0x4, 0x2, 0xf, 0xf6}, {0x1000, 0x2, 0x2, 0x6}, {0x9, 0xfff, 0x7, 0x6}, {0x3, 0x4, 0x80000000, 0x1}, {0x2, 0x0, 0x1000, 0x80000001}, {0x5, 0x4, 0x2, 0xfffffffd}, {0x0, 0xa, 0x4, 0x80}, {0x8307, 0x3, 0x8, 0x5d3a}, {0xfffff800, 0x40, 0x9, 0x800}, {0x8001, 0x2, 0x1, 0x787}, {0x7, 0x7d6, 0xb518, 0xdad}, {0x10001, 0x16b, 0x3, 0xffff}, {0x2, 0x6, 0x1, 0x4}, {0xce, 0x3, 0x8000, 0x3}, {0x9, 0x8, 0x80, 0x7}, {0xfff, 0x6, 0x2, 0x68}, {0x23, 0x80, 0x1, 0x3}, {0xef57, 0x8, 0x91, 0x13ee}, {0x6, 0x101, 0xfffffffa, 0x493}, {0x4, 0x80, 0x7, 0x4}, {0x0, 0x9, 0x6, 0x1}, {0x98, 0x5, 0x3, 0x5}, {0xf2, 0x3ff, 0x5, 0x5}, {0x2, 0x1, 0x5, 0x5}, {0x2, 0x53bc9500, 0x49, 0x1}, {0x5, 0x5, 0x4, 0xfe8}, {0xb3, 0x0, 0xd600, 0x5}, {0x9, 0xc2e0, 0x2, 0x6}, {0x7fffffff, 0x0, 0x80c00}, {0x7f, 0x0, 0x6, 0x80}, {0x27c, 0x0, 0xad, 0x7fff}, {0xb1, 0x4, 0x6, 0x4}, {0x401, 0x6, 0x3, 0x2}, {0x6, 0x100, 0x8, 0x5}, {0x4, 0x5, 0x7fffffff, 0xeab}, {0x9, 0xe, 0x8007, 0x10001}, {0x3, 0x1, 0x0, 0x5}, {0x0, 0x6, 0x39, 0x3060}, {0x400, 0xa0, 0x8001, 0x6}, {0x40, 0x5, 0x4, 0xfffffff8}, {0x7, 0x6, 0xedca}, {0x10000, 0x6, 0x8001, 0x9}, {0x7ff, 0x448, 0xd7, 0x101}, {0x80000001, 0x7, 0x2, 0xb375}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xfff3}}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x634}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.396484321s ago: executing program 4 (id=2575): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (fail_nth: 10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000000c0)={0x1fe}, 0x0, 0x0) 7.334013281s ago: executing program 1 (id=2576): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x8, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x40505330, &(0x7f0000000180)) tkill(r7, 0x7) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000100000002"]) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000040)={0x1}) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x2}, {}, @connect}], 0xc4) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000580)) 7.078050752s ago: executing program 2 (id=2579): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x22000a31) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x80) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast2}, 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x88, &(0x7f0000000640)=""/136, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x4, 0x523d, 0x20}, 0x10, 0x2c53c, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000b00)=[{0x0, 0x2, 0x10, 0x6}, {0x1, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x5, 0x1}, {0x1, 0x1, 0x4, 0x2}, {0x2, 0x5, 0x9, 0x2}], 0x10, 0x1}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x60}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffffe, 0x1) mount(&(0x7f0000000180)=@md0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='devpts\x00', 0x4010, &(0x7f00000003c0)='{+\xde[\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0x14, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) chmod(&(0x7f0000000040)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x416f, &(0x7f0000000540)={0x0, 0x0, 0x10100}, &(0x7f0000000600), &(0x7f00000000c0)) 5.122574331s ago: executing program 4 (id=2581): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa2}) write$binfmt_script(r0, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2dec, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000100)={0x0, "743fedd3add15c65712ea4c5a112f60f8377ba5089b34f08204569381985d16e9cfd3974fb09fa9fa4ff42a688e0302b715f37ed8ab4cc1e5f75db3bb5cfb510"}) 4.940079082s ago: executing program 2 (id=2583): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, 0x0, 0x0) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r4, 0x0, {}, 0xff}, 0x18) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x600}, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8100000086dd6008010800142f11c05ac9936d42a7000000000000000001fc0100"/54], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0285629, &(0x7f0000000140)={0x80000a, 0x0, 0x0, "1c21133df2f20d55806b2eb1d750185ff5ab6545a058e05b2197edb1439b1cc2"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 4.516691149s ago: executing program 1 (id=2585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c2", 0x7}], 0x2) 4.16626913s ago: executing program 1 (id=2586): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x2, 0x0, 0x0, 0x0, 0x3, "2f3e784b7cc0ab31e7fd3d1fa09814", "aadb641b", '\x00', "f500", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad35c6ed4500f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(0x0, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0xc8, 0x3}}}, 0x8) lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c8f0340030000100070604000e000800100604002a0507000a02020005000108020003000d0c08008d07feff71077b9007080400f8ff040064287b1f87515ae9"], 0x39) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x10d) socket$inet6(0xa, 0x6, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r5 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$nl_netfilter(0x10, 0x3, 0xc) 3.940171084s ago: executing program 2 (id=2587): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{0x0}], 0x1) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x6, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 3.553084877s ago: executing program 2 (id=2588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000100)={@local, @local, @val={@void, {0x8150}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, {[@eol, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}]}}}}}}}}, 0x0) 3.44608623s ago: executing program 2 (id=2590): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000f082521403c00000f0054bb4005b34864def2f6c3a851"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) r3 = dup3(r1, r2, 0x80000) r4 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) 3.210882991s ago: executing program 1 (id=2592): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x22000a31) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x80) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast2}, 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x88, &(0x7f0000000640)=""/136, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x4, 0x523d, 0x20}, 0x10, 0x2c53c, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000b00)=[{0x0, 0x2, 0x10, 0x6}, {0x1, 0x4, 0x3, 0x4}, {0x2, 0x1, 0x5, 0x1}, {0x1, 0x1, 0x4, 0x2}, {0x2, 0x5, 0x9, 0x2}], 0x10, 0x1}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x60}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffffe, 0x1) mount(&(0x7f0000000180)=@md0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='devpts\x00', 0x4010, &(0x7f00000003c0)='{+\xde[\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0x14, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) chmod(&(0x7f0000000040)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x416f, &(0x7f0000000540)={0x0, 0x0, 0x10100}, &(0x7f0000000600), &(0x7f00000000c0)) 3.121848438s ago: executing program 0 (id=2593): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000001c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]', 0x7) mremap(&(0x7f0000558000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f000009d000/0x4000)=nil) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) connect$can_bcm(r8, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000009a3c5514"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "38d99b8156a98263"}}, 0x48}}, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r9, r6, r7, 0x0, 0x600, 0x8effffff, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.943268362s ago: executing program 0 (id=2594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000002c0)) 2.261446515s ago: executing program 0 (id=2595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c298a289", 0xa}], 0x2) 2.146872549s ago: executing program 1 (id=2596): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x2, 0x9}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r0}, &(0x7f0000000000), &(0x7f0000001340)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000010c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/198, 0xb00}, 0x20) 2.137684195s ago: executing program 4 (id=2597): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{0x0}], 0x1) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x6, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 1.729966103s ago: executing program 1 (id=2598): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa614}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_shrink_slab_start\x00', r3}, 0x10) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x69, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r7}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r9, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000001680)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}, @sndrcv={0x30}], 0x50}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc08c5334, &(0x7f00000003c0)={0x0, 0x0, 'client0\x00', 0x0, "92c18f5458d5f54f", "c3e64652ce2dc415a5b53ac6429c8b50af67d6c99cdfe5c1e4dac9352c325f95"}) syz_usb_connect(0x2, 0x44e, &(0x7f0000000540)=ANY=[], &(0x7f0000000d80)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x3, 0x9, 0xf7, 0x40, 0xe7}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x8, [{0xc7, &(0x7f00000009c0)=@string={0xc7, 0x3, "f8d422c2adfd68a93c227a5fc43bc201e0eecb2a847bd432d64e8c28aac75cab63b13b1328b631fb99695292129d93f63fee4775d63b1e135176353c204b51c50f81fb1a6128f961ccb72f3587162c4d04b8ac3b124fffa0b30734f64a6acb9dce0877b30a1af51548f4a72185299f7c14d0b378f0a2f0a39e4ddc7497835c822639faefda311a191b7c59ffa8d8c3b5fca7bfbb1e67df89d4438c00152894f350e607828fd8a950cc6eb430443ab57744c6b30bf903ab3b45fbce91a71e7975ff0397cbc5"}}, {0x1f, &(0x7f0000000480)=@string={0x1f, 0x3, "c8413899f64786e4667e0cceb4abea1c5c422de7633e63303bb0db3486"}}, {0x52, &(0x7f0000000ac0)=@string={0x52, 0x3, "ef2205a12eb2d9368cf95ccb003492db9163a3082e8506417865e7df3735b5f349c705c071bde24c6df84b5d26d8b542835ca0e3e7b9555db82b918b4788dbe638ac1aa1f3013c09907ec1e517b9cb6a"}}, {0x84, &(0x7f0000000b40)=ANY=[@ANYBLOB="8403465daced7219797d77a4cb43ccc0005d2fe7d7b18772e21062494118f8330ec4a522243d1120c459e1fad56f5f791f696907ac8c9555fa0afbdb3e5e75f7d5635d9ceee70d0fd4a5ed47e58f1fa6b57e206ab49b447703e0a364e76bdd147d5350671e6366d0d7dd7e57b2f651358fe65f99c15e8b8ab62a503597e04f2ba6894bb9"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x41d}}, {0xe7, &(0x7f0000000c80)=@string={0xe7, 0x3, "faa5541a4afaf9ed1c04d818086726ce3151d1a77f13e4bad048a24fa1fde5eb4a8935bc879ef0df45f7838a6a7a1cb274acd879fa178d78f1429776f814833b0f26b3acb8c36b520c4db9ff495861b8d47ff195d51930ae048ac10e7cdbfa14fc90d0a6a01243f713e50aa59dcb0bdcd1a57d3063be90ee635c8eeedcf16b37c4abd373290620604bdb2a6830e1e5b636794bcbc85abb90f13ac1b7fe982b1936008b7a6d620683df1174a11dc1ef03985e12a4db54a0d3abd172bbc180cc3f773dc4aa8a93c28e7cc954978916154eccd44142ca57967768385fdf074c58cf8bfe317ab2"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) 1.637138862s ago: executing program 4 (id=2599): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0xfffffffffffffff5, 0x0, {{0x7fffffff, 0x899, 0x2}}}, 0x28) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e0001000000", @ANYRES32, @ANYBLOB="000002000a0002"], 0x28}}, 0x0) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111980000000000180000000000000000000000000000009500001000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffff94a, 0x9, 0x1, 0x1080, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xe}, 0x48) socket(0x10, 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0x3, 0x8) connect$inet(r1, 0x0, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000000ac80)=@newchain={0x65ec, 0x64, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xc}, {0x8, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3f18, 0x2, [@TCA_BPF_ACT={0x3f14, 0x1, [@m_pedit={0x3c58, 0x1c, 0x0, 0x0, {{0xa}, {0x2c2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0xc, 0x9, 0x4, 0x7, 0x1}, 0x21, 0x7, [{0xe37, 0x2, 0x6, 0x0, 0x0, 0x5}, {0x4d, 0x5, 0x6, 0x3, 0x6, 0x4}, {0x7, 0x1, 0x7, 0x2, 0x9c, 0x6}, {0xffff, 0x1, 0x9, 0x80000000, 0xffff0e19, 0x6}, {0x800, 0x1, 0xa, 0xc, 0x6, 0x7ff}, {0x7, 0xfffffe00, 0x7fff, 0x3, 0x7, 0x4}]}, [{0x2, 0x5, 0xf, 0x6, 0x2, 0x9}, {0x3, 0x7, 0xa, 0x2, 0x5, 0x81}, {0x6, 0xfffffffa, 0xabc, 0x9, 0x4, 0x2}, {0x400, 0xffff, 0xfffffff8, 0x4, 0x86c, 0x40}, {0x4, 0x8000, 0x7, 0x2, 0x0, 0x8}, {0x74e8, 0xfffffffe, 0x4, 0x4, 0x8000, 0x1}, {0x0, 0xffffff7f, 0x0, 0xad, 0x9, 0x6}, {0x80000000, 0x1, 0x8cee, 0x8, 0x1ff, 0x8}, {0x0, 0x81, 0x7c0d29c4, 0x78, 0x7, 0x2}, {0xff, 0x9, 0x4, 0x3, 0x6, 0x101}, {0x9, 0x0, 0x19e7, 0x8, 0x1, 0x4}, {0x9, 0xf, 0x3, 0x2, 0x45b3, 0x9}, {0x6, 0x3, 0xcf2, 0x9, 0x101}, {0x13, 0x6, 0x3, 0x8, 0x1ff, 0x8001}, {0x6, 0x5, 0x6, 0x7, 0x77, 0x6}, {0x8, 0xe, 0x2, 0x5, 0x800, 0x101}, {0x2, 0x8, 0x7fff, 0x10001, 0xa, 0x3}, {0x4, 0x8, 0xfffffbff, 0x6, 0x4, 0x87de}, {0x9, 0x5b3, 0xe, 0x5, 0x2, 0x8}, {0x8, 0x8, 0x2, 0x1, 0x4, 0x9}, {0x1, 0x2, 0xc9cd, 0x0, 0x8f, 0x800}, {0x3, 0x2, 0x4, 0xe4f3, 0x0, 0x9}, {0x1, 0xa00000, 0xc, 0x7, 0x8, 0x3}, {0x200, 0x1, 0x5, 0x1, 0x7, 0x9}, {0x2, 0x8df2, 0x6, 0x8, 0x0, 0x7}, {0x5, 0xfffffff7, 0x0, 0x401, 0x9, 0x10000}, {0x9, 0x8, 0x0, 0x1ff, 0x6, 0x3}, {0x6, 0x3, 0x8, 0xa6, 0xa15, 0xfffffffb}, {0x3, 0x7, 0xf5, 0xbee8, 0x7, 0x7268}, {0x0, 0x8c, 0x6, 0xa, 0x1, 0x1}, {0x0, 0xfb, 0x0, 0x100, 0x2a86, 0x3}, {0x3, 0x89b, 0x72e, 0x9, 0x9, 0x3}, {0x3, 0x100, 0x2, 0x3, 0x9b, 0x92}, {0x80, 0x1, 0xc83, 0x3, 0x80000000, 0x200}, {0xc1, 0x4, 0x4, 0x5, 0xfffffcf6, 0x2}, {0x10001, 0x69, 0x454, 0x6, 0x8, 0xe01}, {0x4, 0x1, 0x47, 0x5, 0x7ff, 0x6}, {0x9, 0x9, 0x6, 0x9a, 0x9, 0x8}, {0x10000, 0x1, 0x8, 0xde54, 0x7, 0x9fc}, {0x4, 0x80000000, 0x6, 0x4, 0x2, 0x401}, {0x3, 0x3, 0x5, 0x1, 0xc, 0x1}, {0x8a5, 0x5, 0xb2d8, 0x6, 0x6, 0x1}, {0x2, 0x1, 0xf1ea, 0x0, 0x19, 0x2}, {0x9, 0x4, 0xfffffc01, 0x7f, 0x5, 0x1}, {0x9, 0x3, 0x5, 0x8, 0x3, 0x3ff}, {0x1, 0xad9, 0x5, 0xfffffff9, 0x2b06, 0x40}, {0x1, 0x8d, 0x8, 0x7, 0x7, 0x1}, {0x800, 0x3, 0x10, 0x9, 0x3}, {0x3, 0x2, 0x2b1ade18, 0x2ae, 0x6, 0x9}, {0x3ff, 0x6, 0xdce, 0xa4, 0x1, 0x1}, {0xffffb29e, 0xffff0000, 0x7, 0xb, 0x8, 0x4f0e961c}, {0x2, 0x2, 0xfffffffa, 0x84, 0x7f}, {0xfff, 0x8, 0x3, 0xf, 0x10000, 0x8}, {0x800, 0x8, 0x80000001, 0x4, 0x7, 0x5}, {0x4b8, 0x9, 0x5, 0x3, 0x10, 0x80}, {0xd, 0x4, 0x2, 0x40000000, 0xd49, 0x6}, {0x6, 0xa, 0x1, 0x3, 0x9, 0x35}, {0x0, 0x7, 0x80000000, 0x3, 0x7, 0x8}, {0x5, 0x3, 0x4, 0x5, 0x3, 0x3}, {0xffff0186, 0x16, 0x7fff, 0x4, 0xff3e, 0x9}, {0xfffff0bd, 0x6, 0x8, 0x1, 0x3e508087, 0x4}, {0x3c8f, 0x7, 0x2, 0x823, 0xdd, 0x2}, {0x2, 0x10000, 0xfffffffa, 0x2, 0x6, 0x7fffffff}, {0xa, 0x4, 0x2, 0x7, 0x7fffffff, 0x46}, {0x2, 0x8, 0x1, 0x0, 0x7, 0xfffffffc}, {0x1000, 0x200, 0x400, 0x6, 0x0, 0x8}, {0x6, 0x2, 0x800, 0xb, 0x6, 0x2}, {0x6, 0xe, 0x2, 0x0, 0x77b4}, {0x2, 0x4c55, 0xfffff001, 0xf, 0x8, 0xfffff48d}, {0x1664d5, 0x1, 0x5b, 0x8, 0xfffffff9}, {0x0, 0xffff, 0xffffffff, 0x1, 0x3, 0xd7d}, {0xffffff96, 0xf, 0x9, 0x9, 0x80, 0x40}, {0x9, 0xfffffff9, 0x6, 0x3, 0xffffffff, 0x1}, {0x0, 0x80000000, 0x3, 0x9a7, 0x0, 0x33}, {0x95, 0x81, 0xffff4c82, 0x1ff}, {0x80000001, 0x4, 0x1, 0x2, 0x0, 0x7fffffff}, {0xf, 0x5, 0x6, 0x8001, 0x0, 0x4}, {0x4, 0xffffff01, 0xfffffff9, 0xa62, 0x6, 0x3}, {0x4, 0x1, 0x1, 0x92, 0x6, 0x2}, {0xa, 0xd3, 0x7, 0x5744, 0xbc, 0x2}, {0x101, 0x10, 0x80000001, 0xfffffff8, 0x3, 0x4}, {0x6, 0x6, 0xd043, 0x7, 0x7, 0x9}, {0x7fff, 0x40, 0x5, 0x3, 0x6, 0x2}, {0x3, 0xe463, 0x200, 0x6, 0x8, 0x30}, {0xdb, 0x69, 0x9, 0x401, 0x2, 0xa}, {0x5, 0x3, 0x8, 0x10, 0x5, 0x1}, {0x9, 0x80000000, 0x3, 0x3, 0x4937, 0x2}, {0x5, 0x75c6, 0x7, 0x0, 0x2, 0x1}, {0x81, 0x2, 0xe, 0x400, 0x9, 0xbf2}, {0xc53, 0x10000, 0x80000001, 0x57, 0xb6cb, 0x3}, {0x53, 0x7, 0x1, 0x0, 0x0, 0x8}, {0xb, 0x8, 0x8, 0x5, 0x4b, 0xdf}, {0x5, 0x7, 0x5, 0x8, 0x2e, 0x5}, {0xffff, 0x3, 0x200, 0x2, 0xfff, 0xfffffffa}, {0x80000001, 0xdf, 0x0, 0x80000000, 0x2, 0x9}, {0x8001, 0x8, 0x3, 0x9, 0x9, 0xbd99}, {0x4, 0x7, 0x1, 0x8, 0x10001, 0x9}, {0x1, 0x1, 0x9, 0x31, 0xd7e00000, 0xa}, {0x3, 0xd, 0x4, 0x8, 0x3211cfbe, 0x2}, {0x30e, 0xffffffff, 0xdd, 0x100, 0x40, 0x3}, {0x1, 0x5, 0x1, 0xa, 0x7, 0x200}, {0x5, 0xfffffff3, 0xfffffff8, 0xe, 0x3fb, 0x5}, {0x926, 0x8, 0x7fffffff, 0x0, 0xfffffeff, 0x6}, {0x1, 0x7f, 0x5, 0x401, 0xffff, 0x8}, {0x34f, 0x100, 0x5dc9, 0x0, 0x3e, 0x8}, {0xffff, 0x779203b, 0x7, 0x5, 0x5e, 0x6d}, {0x2d5, 0x6, 0xc0000, 0x1, 0x0, 0x4}, {0x4, 0x4, 0x8, 0x2, 0x1}, {0x28, 0x1, 0x7, 0x3, 0x1, 0x3}, {0x8, 0x2, 0x7, 0xff, 0x9, 0x1a88}, {0x4, 0x8, 0x200, 0x9, 0x6e, 0x62}, {0x3bf, 0x5d, 0xaa2a, 0x1, 0x2}, {0x9, 0x5, 0x5, 0xfffffff8, 0x26c, 0xff}, {0x3, 0x8001, 0x7, 0x0, 0xffffff88, 0xd}, {0xa57c, 0xd, 0x10003, 0x9, 0x4, 0xd49}, {0x2, 0x7fff, 0x2, 0x3ff, 0x7, 0x7ff}, {0x7, 0xe96, 0x9, 0x8, 0x5}, {0x1, 0x4, 0xffffffff, 0x4, 0xfffffe00, 0x5}, {0x6, 0xf, 0x7, 0x1000, 0x1, 0x200}, {0x7, 0x7, 0x795d, 0x1, 0x800, 0x8}, {0x3, 0x400000, 0x0, 0x7, 0x1ff}, {0xb9b3, 0x8, 0x6, 0x7fff, 0x1, 0x5}, {0x0, 0x8, 0x401, 0x6, 0x3, 0xaf}, {0x2, 0x6, 0x1, 0x6, 0xff, 0xb}, {0x1, 0x800, 0x6, 0x9, 0x0, 0x6}, {0x3, 0x5, 0x3, 0x4, 0x81, 0x3}, {0x2, 0x401, 0x0, 0x4, 0x400, 0x38000000}, {0x0, 0x1, 0x3, 0xe, 0x1, 0x96}], [{}, {0x367c88a09a496fc2, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2}, {0x4}, {0x3}, {0x3, 0xede3dee19f152828}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x858c704ebf893ae8}, {0x3, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0xe, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x1}, {0x1, 0xdb89a156d598d2c7}, {0x3}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x5}, {}, {0x5}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0xaac4e07df0b1fe65}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x9a2, 0x9b, 0x4, 0x2, 0x7f}, 0x4, 0x8, [{0x94, 0x6, 0xfffffffd, 0x0, 0xffff}, {0x81, 0xa00, 0x3, 0xd, 0x40, 0x249}, {0x4, 0xb, 0x8c, 0xffa, 0x4, 0x1}, {0xd3, 0x1, 0x7, 0x2, 0x7, 0x7}, {0x2fb, 0xfffffffa, 0xfffffff7, 0x3, 0x9, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x5}]}, [{0x5, 0xfffffff7, 0x3, 0x1bf, 0x719f593b}, {0x8000, 0x10fc, 0x10, 0x5, 0xa, 0x50}, {0x5, 0xfffffff4, 0x2, 0xfffffff8, 0x9, 0x26435613}, {0x8001, 0xa79, 0x2, 0x81, 0x0, 0x2}, {0x5, 0x1, 0x6, 0x1, 0x80000001, 0x8}, {0x1, 0x81, 0x90, 0x0, 0x4, 0xffffffff}, {0x6, 0x81, 0xffff, 0x3, 0x9, 0x40}, {0x9, 0x9, 0x9, 0x9, 0x7, 0x80000000}, {0x4, 0x2, 0x0, 0x4, 0xb, 0x5b77}, {0x0, 0xfffffffb, 0x3, 0x9, 0x3, 0xfff}, {0x9, 0x2, 0x6, 0x4, 0xfffffc01}, {0x5, 0xc000000, 0x2, 0x8, 0x2, 0x9}, {0xb095, 0x0, 0xb, 0x0, 0x200, 0xb212}, {0x88b, 0x4, 0x3, 0x5, 0x1}, {0xffff8000, 0x9, 0x1, 0x3, 0xc000000, 0x8}, {0x18000, 0x9, 0x4, 0x4, 0x8, 0x4}, {0x7, 0x6, 0x2, 0x0, 0x5d1, 0x10001}, {0x5, 0x703c, 0x2, 0x9, 0xffff8000, 0x7}, {0xbd5c, 0xa, 0x1, 0x3, 0x6, 0x9}, {0x122, 0x6a6, 0xd0c, 0x5, 0x3, 0x4}, {0xe, 0x9, 0x9, 0x0, 0x5, 0x3}, {0x0, 0x0, 0x9, 0xa, 0x5, 0x7ff}, {0x1, 0x1000, 0xb9d4, 0x5, 0x7fffffff, 0x4}, {0x4, 0xfff, 0x8, 0x6, 0x9371}, {0xee4, 0x1, 0x0, 0x1ff, 0xffff, 0x1}, {0x6, 0x211f28c1, 0xffffff7f, 0x5, 0xc6, 0x4}, {0x2, 0xf25, 0x7b, 0x80, 0x55bf, 0x8}, {0x0, 0x8, 0x7, 0x0, 0xfffffffa, 0x5}, {0x1ff, 0x43c9329a, 0x3, 0x38c0000, 0x3, 0x8e0}, {0x4, 0xfffffffe, 0x6, 0x5, 0x2, 0x1}, {0x8, 0x2, 0x3, 0x40, 0x9, 0x1}, {0x7, 0x9, 0x1b5, 0x9, 0xe4f, 0x42}, {0x7fffffff, 0x200, 0x80000000, 0xfff, 0x401, 0x3}, {0x3, 0x4, 0x1, 0x2, 0x3ff, 0x2}, {0x6, 0x7ff, 0x7ff, 0x4a5, 0x1, 0x3}, {0x80, 0x5, 0x7, 0xe, 0x945, 0x8}, {0xbc7, 0x10000, 0x2, 0xd9, 0x0, 0x6}, {0xe378, 0x8, 0x200, 0x200, 0x101, 0x22}, {0x85, 0x40, 0x4, 0x1a, 0xffffffff, 0x4}, {0x6, 0xd, 0xffff, 0xfffffff8, 0x3, 0xe}, {0x56, 0x4, 0x2, 0x600, 0x7, 0x401}, {0xfffffff8, 0x7, 0x1, 0x7fffffff, 0xab85, 0x2bad}, {0xfffffff9, 0xffff, 0x100, 0x5, 0x4, 0xffff}, {0x7, 0x7, 0x7, 0x9cf6, 0x4, 0x3}, {0xdf23, 0x0, 0x100, 0x1, 0x8}, {0x4, 0x7, 0xeeaa, 0x69190524, 0x4, 0x6}, {0xc3, 0x8, 0xfffffade, 0x80000001, 0x4, 0x8}, {0x0, 0x10000, 0x1, 0x81, 0x6, 0x5}, {0x2, 0x8, 0x4, 0xffff0001, 0x5, 0x1191}, {0x7, 0x800, 0x5, 0x4, 0x0, 0xfffffffb}, {0x7fff, 0xd, 0x9, 0x2, 0x96f7, 0x3}, {0x3, 0x63, 0x5, 0x5a, 0xfffffffe}, {0x3, 0xfffffffb, 0xfffffbc2, 0x1ff, 0x6, 0x9}, {0x8, 0x7fff, 0x2, 0xfffff801, 0x7f}, {0x8f67, 0x4, 0x5, 0x3, 0x101, 0x1}, {0x1, 0x1a, 0x8, 0x0, 0x2, 0x2c9}, {0xd, 0x3, 0xa8, 0x78, 0x800, 0x2}, {0x3, 0x10001, 0x3, 0x6, 0x3, 0xa8a}, {0x40, 0xfffffe01, 0x5, 0xb0b, 0x3, 0x1}, {0x6, 0x4f, 0x3, 0x8, 0x0, 0xe8}, {0xffffff7d, 0x200, 0xfffffff7, 0x4, 0x2, 0x400}, {0xd52, 0x2, 0x4, 0x1, 0x5, 0x8}, {0x0, 0x5, 0x100, 0x7, 0xdf3e, 0x3ff}, {0x1, 0xfffff800, 0x8, 0x2, 0xffff5eb4, 0x5}, {0x3, 0x0, 0x557, 0x259b, 0x4, 0x8001}, {0x800, 0x6, 0x4, 0x4, 0x3, 0x7fffffff}, {0x9, 0x2, 0x11ecc28e, 0x10, 0x5, 0x1}, {0x3, 0x9, 0x100, 0x8, 0x8}, {0x1, 0x4, 0x800, 0x0, 0x7, 0xc0000000}, {0x400, 0x6, 0x80, 0x3aae, 0x0, 0x10}, {0xfffffffa, 0x40, 0x3, 0x4, 0x0, 0xa}, {0x400, 0x1f56, 0xc0, 0xa7fa, 0x6, 0xfffffffe}, {0x5, 0x2a3, 0x7fffffff, 0x10001, 0x9, 0x2}, {0x200, 0x500, 0x400, 0x2000000, 0xffff, 0x10}, {0x7, 0x6, 0x2110, 0x9, 0x2ee135b0, 0x9}, {0x573fcfe8, 0x9, 0xffff, 0x5, 0x4000059, 0x7}, {0x7fffffff, 0x5, 0x8, 0xfffffe00, 0x10001, 0x8}, {0x101, 0x8, 0x4, 0x100, 0x188, 0xa}, {0x80, 0x8, 0x0, 0x0, 0x2, 0x800}, {0x400000, 0x0, 0x13, 0x6, 0xcb2}, {0x90b, 0x8, 0x42, 0x3, 0x1, 0x7}, {0x9, 0x1a, 0x10001, 0x1000, 0x4, 0x3}, {0x80, 0x5, 0x6, 0x80, 0x573, 0x200}, {0x7701, 0x7, 0x4, 0xa, 0x5, 0x832f}, {0x6, 0x4, 0x3, 0xaae, 0x2248, 0x400}, {0x1, 0x0, 0xab0, 0x1, 0x4, 0x10001}, {0x7, 0x4, 0x7, 0x2, 0xa, 0x80}, {0x7, 0x0, 0xb1, 0x1, 0x7dd, 0x9}, {0x4ff, 0x1, 0x5, 0x7, 0x0, 0x80000000}, {0x6, 0x5, 0x7, 0x9, 0x80000000, 0x40}, {0x9, 0x7, 0xffff, 0x10, 0x1, 0xe}, {0xfffffffd, 0x1754, 0x3, 0xffffff7d, 0x974e, 0x1000}, {0x8000, 0xa, 0x6, 0x2576, 0x7f}, {0x3, 0x0, 0xbda, 0xc, 0x3, 0xd939}, {0x2, 0x0, 0x9, 0x6, 0xe874, 0x3}, {0x2, 0x5, 0xe, 0x4, 0x8, 0x80000000}, {0x4, 0x10, 0x598b241e, 0x4, 0x6, 0x4}, {0xbc30, 0xf1e, 0x2, 0x539d, 0x9f5e, 0x5}, {0x3, 0x519f, 0x6, 0x7, 0x6, 0x6}, {0x3, 0x5, 0x3, 0x7, 0xd9c0, 0xffffff5c}, {0xf, 0x0, 0x3, 0xfffffff9, 0x8, 0x2}, {0x8, 0xa8c, 0xffffff00, 0x1, 0x4, 0x7}, {0x4, 0x800, 0x6, 0x7, 0x6, 0x3}, {0x7, 0x4, 0x1, 0xfff, 0x7fff, 0xf96b}, {0x1, 0x2, 0x0, 0x80, 0x5}, {0x8001, 0x10001, 0x1, 0x0, 0x6, 0x2}, {0x40, 0x6, 0x5, 0x10a9fb3d, 0x7, 0x8}, {0x400, 0x0, 0x8e8, 0xe, 0x7bd8, 0x7}, {0x3, 0xd, 0x100, 0x9, 0xffff, 0x48}, {0x81, 0x5, 0x80000001, 0x6, 0x1, 0x7ff}, {0x28, 0x8, 0x7a, 0x7, 0x1, 0x2}, {0x100, 0x8, 0x8, 0x3, 0x7, 0xcc}, {0x9, 0xffff, 0x86, 0x6, 0x6, 0x6}, {0x81, 0x1, 0x100, 0x8000, 0x5, 0x67c4}, {0x2dda41a8, 0x800, 0x8, 0xe3, 0x80}, {0x8, 0x80000000, 0x8, 0x13b8, 0x8, 0x5}, {0xfff, 0x1, 0x4ebd706f, 0x13e, 0x9, 0x3}, {0x8, 0x2, 0x4, 0x6, 0x101, 0x1}, {0x6, 0x8000, 0x81, 0x7, 0x3, 0x10}, {0xfffffffe, 0x97cb, 0x9, 0x9, 0x8, 0xfff}, {0x9, 0x5, 0x46f4, 0x3, 0x2, 0xa29}, {0x5, 0x1, 0x74, 0x3, 0x9, 0x2}, {0x2, 0x9, 0x4, 0x1, 0x6, 0x1}, {0x8, 0x6867, 0x9, 0x8, 0x1ff, 0x8}, {0x2f79, 0x66, 0x6, 0x5, 0xf27, 0x5}, {0x20, 0x1200, 0x11e0098d, 0x8000, 0x3ff, 0x5}, {0x0, 0x100, 0xa, 0x9, 0x1, 0x8}, {0xf, 0x2d98, 0x4, 0x2, 0x6, 0x5}], [{0x5}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x3}, {0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x5, 0xeb5abf2f943736e2}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x5}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xcfd910830dc10d65}, {0x5, 0x1}, {0x6, 0x1}, {0xc6f7810b0179d162}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0xc8, 0x400, 0x3, 0xfff, 0x1}, 0x6, 0xfd, [{0xb0, 0x1, 0x5, 0x81, 0x6, 0x2}, {0x5, 0xe74, 0x800, 0x4, 0x81, 0xfffffff8}, {0x9, 0x5, 0x400, 0x3fd46392, 0x1000, 0xd92}, {0xfffff8db, 0x4, 0x3, 0x2, 0x1}, {0x0, 0x20000, 0x101, 0x1000, 0x81, 0x5}, {0x8, 0x4, 0xfffffff8, 0x81b4, 0x3, 0x7d14297d}, {0x6c, 0x6, 0x1, 0x9, 0x3d, 0x3}]}, [{0x6, 0x6, 0x6d0b, 0x6, 0x8, 0x8}, {0x3, 0x2, 0x8000, 0xfffffffa, 0x5de3, 0x1}, {0x3, 0xade, 0x4, 0x0, 0x685a, 0xad73}, {0x7, 0x3c0000, 0x6, 0x7f, 0x6, 0x200}, {0x0, 0x4, 0x77c, 0x7, 0x2, 0x5}, {0x1, 0x5, 0x9, 0x0, 0x81, 0x101}, {0x10001, 0xffffffff, 0x5, 0x9, 0xffff8001, 0x8}, {0x5, 0x5, 0x8, 0x75f, 0x7, 0x1}, {0x0, 0x6000, 0xf6c, 0x7, 0xbf, 0x6}, {0x9, 0x4, 0x1, 0x6, 0xf800, 0x80000001}, {0xfffffff7, 0x0, 0xc, 0x401, 0xa76, 0x7}, {0x4, 0xaea, 0x2, 0x6, 0x3, 0x9}, {0x5, 0xe4c, 0x2, 0x8, 0x0, 0x3}, {0x3, 0x73, 0x80000001, 0xffff88c0, 0x2, 0x3ff}, {0x24af, 0x4, 0x400, 0x0, 0x8000}, {0x6, 0xfffffff8, 0xf5, 0x6, 0xde, 0x1}, {0x8, 0x89, 0x6, 0x7ff, 0x7fffffff, 0xbb08}, {0xd, 0x7fffffff, 0x6, 0x7ff, 0x2, 0xe}, {0x0, 0x5, 0xf7, 0x101, 0x2, 0x2}, {0x3ff, 0x9, 0x4, 0x7, 0x0, 0x2}, {0xffffffff, 0x48e3, 0x8, 0x1, 0x7fff, 0x7}, {0x2, 0x3, 0x9376, 0xf, 0x9, 0xffff7fff}, {0x101, 0x2, 0x10000, 0x3f, 0x5, 0xfffffffd}, {0xff, 0x4, 0x70e, 0xffff, 0xd1ab, 0x2}, {0x6, 0xd8, 0xec8a, 0xa39, 0x8001, 0x29}, {0xfff, 0xe5, 0x48a, 0x0, 0x2, 0x6}, {0x800, 0x4, 0xb, 0x0, 0x8, 0x7}, {0xffffffff, 0x6, 0x4, 0x8, 0x9, 0x8}, {0x7f, 0x0, 0x2, 0xedf, 0x683, 0x101}, {0x2, 0x7, 0x7fff, 0x9, 0x0, 0x5}, {0x2563, 0x6, 0x6, 0x4, 0x0, 0x4}, {0x1, 0x5, 0x1, 0x9, 0x3, 0x30a5}, {0x3, 0xb, 0xc5c, 0x27, 0x1, 0x4}, {0x6, 0xf6, 0x8, 0x5, 0x7fff, 0x10}, {0x3, 0x3, 0xd0a, 0x2, 0x1, 0x400}, {0x0, 0x6db0, 0x401, 0xc7, 0x9, 0xffffffff}, {0x9, 0x7, 0x3, 0xcf8, 0x5, 0x6}, {0x6, 0x9, 0x400, 0x6}, {0x3, 0x81, 0xfffffffc, 0x2, 0xffffff00, 0x48c}, {0x66de, 0x8, 0x1, 0x3, 0x3, 0x4}, {0x2, 0xfa, 0x0, 0x4, 0x8, 0x2}, {0x3, 0x800, 0x3, 0x0, 0x5, 0x3}, {0x10001, 0x5, 0x8, 0x8b10, 0x0, 0x10001}, {0x7, 0x1, 0xff, 0x1000, 0x100, 0xff}, {0x7, 0x1, 0x8, 0x5384, 0x7, 0x6}, {0xbd, 0x180, 0x8, 0x8, 0x3, 0x81}, {0x9, 0x6, 0x1, 0x6, 0x9, 0x3400000}, {0x9, 0x3, 0x4, 0x0, 0x3, 0x7}, {0x7, 0x2, 0x6, 0x3, 0x7aa, 0xd}, {0x800, 0x3, 0x0, 0x0, 0x4d3277b1, 0x9}, {0x7, 0x3, 0x6, 0x1, 0xb2, 0x6}, {0x2, 0x6, 0x2, 0x7, 0x7, 0x4}, {0xd6, 0x0, 0x100, 0x8, 0xe, 0x6}, {0xffffffff, 0x9, 0x2ad1, 0x9, 0x7fffffff, 0x5}, {0x9, 0x3, 0x5, 0x6, 0xefdf, 0x80000000}, {0x8, 0x4, 0x7, 0x7fff, 0x8, 0x7}, {0xf82, 0x8, 0xffff7fff, 0x5db9, 0x7, 0x2}, {0x4, 0x2, 0x0, 0x3800, 0x35, 0x6}, {0x0, 0xad80, 0x9, 0x5, 0x9, 0x2}, {0x1099, 0xfffffff9, 0xb, 0x6, 0x4, 0x5}, {0xf, 0x9, 0x4, 0x5, 0x10001, 0x948}, {0xa, 0x0, 0x2, 0x9, 0x121e, 0x5}, {0x5, 0x7, 0xce, 0x4, 0x618, 0x6f}, {0x9, 0x2, 0xffffff81, 0xf, 0x10001}, {0x4, 0xfffffff9, 0x1, 0xe4, 0x5, 0x3ff}, {0x9, 0x6e00, 0xffff, 0x80000001, 0x1ff, 0x101}, {0xfbcf, 0x4, 0x7, 0x7, 0x5, 0x393a}, {0x8001, 0x1, 0x42a3, 0x0, 0x1, 0x1}, {0x8c1, 0x4, 0x0, 0x9d12, 0x3, 0xadc0}, {0x1, 0x8, 0xfff, 0x2, 0x3, 0x7ff}, {0x18, 0x3, 0x401, 0x2, 0x6, 0x5}, {0xff, 0x9eee, 0x7fff, 0xb, 0x5, 0x8}, {0xe, 0xe, 0x9, 0x4, 0x16, 0x400000}, {0x2, 0x0, 0x0, 0x3, 0x100, 0xdda0}, {0x8, 0xe7, 0x2, 0x7, 0xffffffff, 0x1}, {0x2, 0x7, 0x1800000, 0x800, 0x1000, 0x6102}, {0x3, 0xf8, 0x6d65, 0x0, 0x7, 0x2}, {0x7, 0xbf, 0xb, 0x4, 0x0, 0x4}, {0x8, 0x24e, 0x3, 0xfffffffa, 0x8000, 0x10000}, {0x6, 0x1, 0x8000, 0x7f, 0x1, 0x10000}, {0x598, 0x4, 0x1, 0x9, 0xfffffffb, 0x8367}, {0x64, 0xda72, 0x800, 0x6, 0x4, 0x321}, {0x401, 0x40, 0xfffff604, 0x10001, 0x28, 0x9}, {0x4c, 0x5, 0xfde, 0xcae, 0x101, 0xb}, {0x7f, 0xfffffffc, 0x8, 0x2, 0x6, 0x2}, {0x3, 0xe, 0x3, 0x4, 0xa6, 0xc}, {0x7, 0x3, 0x2, 0xd22b, 0x8, 0x2}, {0x2c116129, 0x1ff, 0xc, 0x3ae9, 0x2, 0x10}, {0x0, 0x5, 0xf, 0x5, 0x9, 0x3}, {0x6, 0x1, 0x400, 0xa86, 0x1056d3c2, 0x2}, {0xff, 0x8, 0x7fff, 0x0, 0x9, 0x9}, {0x5, 0xfffffbff, 0xfffffffc, 0x1, 0x5, 0xffff}, {0x800, 0x14f, 0x155d074c, 0x1000, 0x0, 0x10}, {0x1, 0x8, 0x4, 0x91, 0x3, 0xa}, {0x1, 0xffffffff, 0x2, 0xa7c4, 0xb, 0x4b8}, {0x0, 0xfffff85e, 0x3, 0x2, 0x7, 0x6}, {0x0, 0x6, 0x6, 0xa, 0x6, 0xbf}, {0x2, 0xfff00, 0x3, 0x7, 0x7, 0x5}, {0x4, 0x235a, 0x7, 0xff, 0xf3a, 0xe00000}, {0x0, 0x8, 0x400, 0x2}, {0x5, 0x5b6a70d8, 0x6, 0x81, 0x5, 0x4d}, {0x8, 0xfffffff8, 0x0, 0x3ff, 0x9, 0x91}, {0x81, 0x77e, 0x0, 0x9cc2, 0x1ff, 0xffffffff}, {0x4, 0x1, 0x0, 0x2, 0xf, 0x6}, {0x9, 0x7, 0x5, 0x91b1, 0x7, 0xe}, {0xb, 0x10001, 0x5, 0x3, 0x575, 0x71b2}, {0x8, 0x80000000, 0xfff, 0xff, 0x4, 0x40000000}, {0x9, 0x8001, 0xfffffffb, 0x7, 0x80000000, 0x1}, {0x8, 0x101, 0x2, 0x68a3, 0x7fff, 0x1}, {0xe, 0x3, 0x4, 0x7, 0xac9f, 0x7923}, {0x49, 0xfffffff9, 0x1400000, 0x7, 0x222, 0x10}, {0x40, 0x5, 0x4, 0x5, 0xe0000, 0x1}, {0x7, 0x9, 0x8, 0x5, 0x7, 0x401}, {0x1, 0x3, 0x8000, 0x3, 0x2, 0x4}, {0x2, 0x0, 0x0, 0x2, 0xc7, 0xfffffff8}, {0x4, 0x9, 0x7, 0x3b0, 0xffffffff, 0x4}, {0x2, 0x9, 0xd, 0xd24, 0x4, 0x3}, {0x42, 0x3, 0x3, 0x7, 0x10001, 0x2}, {0xd6ae, 0x2, 0xc, 0xffff97a5, 0x6, 0x9e}, {0x7, 0x1, 0x2, 0xad, 0xd8c8, 0x7}, {0xf, 0x2, 0x742dc9fc, 0x7, 0x2, 0x5}, {0x4, 0x938, 0x85, 0x3, 0x7, 0x1}, {0x1, 0x5, 0x7, 0x4e6cb292, 0x7, 0x4258}, {0x4, 0x1ff, 0x6, 0x8001, 0x678d, 0x3}, {0x9, 0xc168, 0x8, 0x366, 0x1000, 0xffffffff}, {0x5, 0xfffffffc, 0x80, 0x6, 0xb096, 0xaa}, {0x2000000, 0xf8000000, 0x9, 0xb, 0x5, 0xe23}, {0x8, 0x0, 0x695, 0x6, 0xba83, 0x8}], [{0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0xc9ee964f15591a2c}, {0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {}, {}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x8206b0f45785f3e2}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x4}, {0x1}, {0x2}, {0xb76fdc1602ae7306}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x4}, {0x7}, {0x3}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x3}]}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xac, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x84, 0x6, "ab7ac497dda62ba64e6a5ad5849d350ac1aea07ef8c9679c95f76a90d35d916ba409e8ce41b926c6fe4db8a0b930bc8bd76c03c06090b65663b90b064c4a804e672988b4947d5b2961b8679ae3ffbe234a83418ab52e34442766feaa0340de6f54e1572d29c88fae70962879ff3d8790e34147ab70cd900079bb8eb9ba518649"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x130, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1c3b, 0x8, 0x0, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0xd3, 0x6, "401cf9d4960cbbffa65375b29cebed316b85ecfb4865991e771a731358bcfd578ac05fe8e2bf514a27007c4012f35f80301bf6a61f8b717782fdef186b1c09dde1d5447111869efbb0d93eaa8b2a27ea31fcafa566f8c5b71c7eb24da4638b54fdc13da6b8a4c2c9ad730b55525f29c5320f63500a2c27e909dc5b596bfbcfdca5a7b47576a1d2ff30edf84041e4c9fd2a1c6f193821ae5370a63a06c4dacb240ee14eb46ba2a086fa8c26a825935e345bb51340b8d9a01e7acad4efc7a8a88a0bdd85e1e2bd61e9d0d2967806db86"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x50, 0x15, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x7, 0x79, 0x8}}}]}, {0x9, 0x6, "949f0b9308"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x8c, 0x20, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x5, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xdd3, 0x3}}]}, {0x3a, 0x6, "10b74b9682206948887c5fd771014d0ed6c0917eaf97a49ed4047766ef679f4a360805239630269233bef2e00cd7b625e110b0ba5bec"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x454, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x3}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x3d8, 0x1, [@m_nat={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x480, 0x6, 0x6, 0x5, 0x4}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1f, 0x401, 0x0, 0x1, 0x7}, @loopback, @private=0xa010101, 0x0, 0x1}}]}, {0x34, 0x6, "eaa4c30d7c9af24a58a6896a413202c47b63c4e64e66516988ae4cab8d802d26b80da663019e2a462a5dc1d0e8f7a049"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_skbmod={0x140, 0x14, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x45e8424b, 0x3, 0x0, 0x800, 0xba1}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xc5, 0x6, "60104fe276bfba419d09cbf3e144492093d5815e67466f359e8d2e30a24c5c1a6f8a53d5a6a27508af006b9fe8b0ac6aa2c51cc8d7466114a38eb3b48e8d2177066c3a22a07f23e9d799aaf1485406cb039b9848dddf1927b06afbd93291b558713484e40c9189715f04dcbd5d780a17fe6f1730e11f46e8fc938b18b82b667b2a0037adbf43fedb405c68f68a52fe92066ec822ce8ffa628f1b2f2da0423a03584ed6ef70e831711e41df5bb7a661d99947bbc9a2a412546f4a1304fdc879918e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x3ff, 0x3, 0x0, 0x4}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffb, 0x6, 0x2, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x5c, 0x6, "ee005c3b4af769911e69d26ed572da405dba122d285ba4b064c485f06cb09b12a1f097d283c96d76e62d30740b4a879218f3c96566780526e51f18654cd388743c639768c0fb13dd079cc1a7d592254c5fe68fd19ffe6a20"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x108, 0x1, 0x0, 0x0, {{0x7}, {0x98, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "54736bc749aed2535214392121287aca"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x1f}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_PARMS={0x18, 0x1, {0xffffff06, 0x6, 0x4, 0x1, 0x7}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "4ed3d8a4cdd54765818899e663440d7f"}, @TCA_CT_LABELS={0x14, 0x7, "754e51d47207ee19e2818d101092d891"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, {0x4b, 0x6, "ccb589d553b0209f5ff60471b943669f8284350d5e97da9a17d0674f695f55de08f42bb9b57341906cb80eaa14bb86813f5aa504255ba38daa702a6d293f00b6810afa435306bf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x5, 0x0, 0x2, 0xfffffffa}, {0x5, 0x30, 0x1, 0xc}, {0x10, 0x6, 0x9, 0x3}, {0x2, 0x3, 0x15, 0x89dc}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x9, 0x67, 0x7f, 0x74}, {0x7, 0x50, 0x1}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1580, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xb, 0xe8, 0x30, 0x5}, {0x0, 0xf, 0x6, 0x7}, {0x8000, 0x2, 0x10}]}}, @TCA_BPF_ACT={0x1550, 0x1, [@m_xt={0x1b8, 0x1, 0x0, 0x0, {{0x7}, {0x13c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xa2}, @TCA_IPT_INDEX={0x8, 0x3, 0xb104}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xa5, 0x6, {0xc, 'raw\x00', 0x1, 0x3, "99ca76f12d39b342975464fb8d2c61b946dbfad62ed2cb60015479873b5ac61d2acc6778463da911bb7cd6cdf84d9b0b576000b540ccb67eed6c32399fb46855f967764d8a64a16b79ecb432a4d252875f4b74e3353c0cfe14aea4a4679e54bec45810e58bcdfd62e189a0ae4db2f8e7c82071037dc1f5e839b987"}}, @TCA_IPT_TARG={0x52, 0x6, {0xa9b1, 'security\x00', 0x10, 0x7, "0e44840300bbac42c90043597cede07227a68432fc4b81be6dd0261ccee1aa6510ce253d075e2620"}}]}, {0x55, 0x6, "8338dd9bfb0e0f28775623012f685cda93bb01180867b5b42a132c243edbe5adc292c4d5e8eb7a1baed4ebbdebea108d234ab4d40d3c32ef73795143ec57d3d05e9177ae8fa3e319033eba38fef630700b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xf0, 0x13, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe49a}, @TCA_CTINFO_ACT={0x18, 0x3, {0xb1, 0xb8, 0x6, 0x80, 0xfffffe71}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0xaba5, 0x4, 0xdd, 0x80}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x87fa}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7fff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x6, 0x5, 0x800, 0x40}}]}, {0x4b, 0x6, "069b7613152885b045f9216c6bf0d82ac7dea00e8cf4a070b4a025975085461cecc75d81fcb9965c075e9cf4a0977b33fd6873fe02cc149340f870b8320d977cd94600fd6a5071"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x1060, 0xc, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1e68, 0x8, 0x20000000, 0x8, 0xf}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x401}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x118, 0x18, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x400, 0x5, 0x9, 0x3ff}, 0xec02}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7028fe77, 0x8, 0x6, 0xfffff694}, 0x1}}]}, {0xaf, 0x6, "40b25559ed4350cd7beb49291f28d0db346f4f1b7096ca876ac2ea2fbf8829498fd87b038e1947446c60adbfc8cffee7971db3159c4e35e77dd2b62a4ec657d3c06467891c055710534f1dfd018aed650e4850504f7dadd132b94ac93b2fa3a96144f7475702f4ddb317a6a1dc68259b3a43275466cb2e9da94ecf632ef25d96616ab7b430526bb109a975f9dacf134aa816d4713235978e24339bff9b23255ba38cde0f245ab5d09be0c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_vlan={0x12c, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x992}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x78, 0x2, 0x6, 0x8, 0x1}, 0x2}}]}, {0xc3, 0x6, "8a62072a074264277c55933a69580ee6caa429265f6e9856eadd443c0568c7722e02d130a0c12f61af1b00ada415856c061dcf4399c7af9baf6c72ba8570cc00a155ebbeeb4cf19615b1fb404c5742323fc2af979146103d5b2b35a09d1969cd4a5ef92693287a21d41e69f2be5e8e17872ce49495e2319573e71bfb6dde1f129cf45a59dde517181ce864adfc382de00a21fcc25a5e34c15ea09ea3dbf6ba75c334d42846f7a9f62e8d0357374436e1ce3a54e02eea05ccbcea0b430a4d16"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4f}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x2}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xffff}}]}}, @TCA_RATE={0x6, 0x5, {0xcc, 0x9}}, @filter_kind_options=@f_fw={{0x7}, {0xc50, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_ACT={0x84, 0x4, [@m_simple={0x80, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x92e, 0x8, 0x2, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x6, 0x7, 0x5, 0x7}}, @TCA_DEF_DATA={0x7, 0x3, ':&\x00'}]}, {0x12, 0x6, "f7b877f8a44e01523c5794517e91"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x81}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0xb74, 0x4, [@m_bpf={0xa8, 0x1a, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x4811, 0x0, 0x2, 0x3}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4d, 0x6, "27d19c0562c07fb261df707c05980932ca207e9ad4f547a774d976da2b055e9691e96284326618642751a541b5406937adb69fcb011aea384bd4604111718d64e6d201af33a9f03cc3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x934, 0x3, 0x0, 0x0, {{0xb}, {0x8a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0xb7b, 0x6, 0x8, {0xa, 0x0, 0x6, 0x3, 0x2}, {0x5, 0x2, 0x6, 0x200, 0x8, 0xb80}, 0x0, 0xfffffffc, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x799, 0xb, 0x80000001, 0x9, 0xffffffff, 0xa1536f9, 0x4, 0x4, 0x5a, 0x1ff, 0x3, 0x7, 0x5, 0x5, 0x80000000, 0x3, 0x80000001, 0x7, 0x2, 0x5, 0x56c1, 0x2, 0xffff880e, 0x7424, 0x4, 0x7, 0x2a69, 0xb94, 0x401, 0x4, 0x0, 0xc, 0x8, 0x7fff, 0x9, 0x7fffffff, 0x5f9820b6, 0xc14, 0x0, 0x9, 0x0, 0x1ff, 0x1b, 0x6, 0x5519, 0x7, 0x2, 0x40, 0xfff, 0x200, 0x3, 0x80, 0x1, 0xf1, 0x4, 0x3, 0x4, 0x8001, 0x577, 0xc26e, 0x1000, 0x2, 0x4, 0x8000, 0xffff, 0x200, 0x6, 0x4ea, 0x4, 0xb, 0x6, 0x8, 0x1, 0x534, 0x4, 0xd, 0x1000, 0x200, 0x7, 0x1, 0x7ff, 0xc7d1, 0x9, 0x1, 0x1, 0x9a, 0x4, 0x0, 0x9, 0x10000, 0x4, 0xa, 0x73, 0x80, 0x8, 0x9, 0x0, 0x2, 0x8, 0x1, 0x3, 0xcb, 0x6, 0x40, 0x6, 0x8000, 0x0, 0x5, 0x8, 0x6, 0x6, 0xffc0000, 0x8, 0x4, 0x5, 0x4, 0xd, 0x9, 0x3, 0xd7, 0x10000, 0xa53d, 0x2, 0x9, 0xfffffffc, 0xb, 0x0, 0x1000, 0x5, 0x10000, 0xb, 0x8001, 0x6, 0x8, 0x2, 0x3, 0x7f, 0x30000, 0x1, 0x7, 0x127e, 0x8, 0x6, 0x7bd, 0x40, 0x5, 0x5, 0x400, 0x0, 0x800000, 0xe4, 0x4, 0x2, 0x3ff, 0x400, 0xd6, 0x3, 0xb9, 0x4, 0x6, 0x48000, 0x5, 0x7, 0x1, 0x2, 0x5, 0xa, 0x3, 0x2, 0x6a, 0xc6, 0x9, 0x80000001, 0x0, 0xc168, 0x3e4d, 0x8001, 0x1, 0x505, 0x4, 0x9bf, 0xaf6, 0x6, 0x80, 0x4, 0x80000001, 0x6, 0x3, 0x7, 0x0, 0xff, 0x7, 0x4, 0xe473, 0x1, 0x1, 0x6, 0x66, 0x10001, 0x80000000, 0x7fff, 0x80000001, 0x6, 0x6, 0x7, 0x1, 0x8, 0x8001, 0x1, 0x4, 0x4, 0x6, 0x2, 0x739b17d9, 0x10000, 0x0, 0x0, 0x8, 0x7, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x1, 0x0, 0x8, 0x7, 0xae, 0x4, 0x2c8, 0xfffff542, 0x3, 0x4, 0x8, 0x6, 0x3, 0x509c1f9, 0x4, 0x7, 0x74, 0xffffff62, 0x6, 0x1, 0x0, 0xb, 0x2, 0xcb0ff63b, 0xe4e, 0x0, 0x3, 0x7, 0x6, 0x1, 0xa7d0, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x574a4bce, 0x6, 0x8, 0x800, 0x4, 0x2, 0x9, 0x7, 0x3, 0x7, 0x9, 0x6, 0x1, 0xbca, 0x1ff, 0x0, 0x4, 0xffffffff, 0x7, 0x4, 0x5, 0x3, 0x3, 0x7, 0x4, 0xa, 0x2, 0x40, 0x8, 0x7ff, 0x487, 0x4, 0x1, 0x4, 0x2, 0x9, 0x3, 0x7, 0x8, 0x9, 0x2d, 0x3, 0x1, 0x6, 0x8, 0xfff, 0x8, 0x1, 0xf47, 0xa2ab, 0xce5f, 0x0, 0x4, 0x7, 0x423, 0xd, 0x0, 0x9, 0x328, 0x9, 0x9, 0x8b6, 0x6, 0x5, 0x6, 0xe, 0x3, 0x49, 0x8000, 0x10001, 0x200, 0x401, 0xde, 0x0, 0x5, 0x870, 0x0, 0xe2d, 0x7f, 0x0, 0x200, 0xbb4, 0x2, 0xfffffff3, 0x4, 0x3, 0x9, 0x2, 0x6, 0x0, 0x4, 0x1, 0x4, 0x40, 0x2, 0xfb41, 0x4, 0x1, 0x8, 0xffffff42, 0x80, 0x8, 0x2, 0x5, 0x3, 0xfffffffc, 0x1a3e, 0x1, 0x4, 0x80000000, 0x1000, 0x0, 0x9, 0x2, 0x16c6b331, 0x3, 0x8000, 0x3, 0x2, 0x6, 0x9, 0x3, 0x0, 0x7fffffff, 0x0, 0x7, 0x0, 0x7, 0x7, 0x8000, 0x4, 0x10, 0xe0, 0x1000, 0x3, 0x8, 0x5, 0x7, 0x4, 0xff, 0x9, 0xd4, 0x401, 0x0, 0x0, 0xfffffff7, 0x4, 0x4, 0x897, 0x3, 0x8000, 0x4, 0x10, 0x10, 0xe, 0xb9, 0xfc8, 0xf, 0x1952, 0x80000001, 0x0, 0x8a4, 0x2, 0xca6, 0x8, 0xd, 0x7fffffff, 0x400, 0x9, 0x7, 0x5, 0x2, 0x8, 0xffffff8d, 0x7, 0x0, 0xf, 0x1, 0x81, 0x4, 0x2, 0x100, 0x400, 0xf, 0x800, 0x6, 0x3, 0x6, 0x401, 0xf8, 0x3, 0x4, 0x3, 0x101, 0x1, 0x8, 0x101, 0xa3f8, 0x10000, 0x100, 0x5, 0xffff, 0x8, 0xd42, 0x80, 0x9, 0x8471, 0xa1ac, 0x0, 0x7fffffff, 0x5, 0xb, 0x4, 0x60ab, 0xfffffffa, 0x4, 0x5, 0x10000, 0xd, 0x3217192d, 0x6, 0x6, 0x8c, 0x73, 0xfff, 0xfffffd7a, 0x7, 0x5e, 0x9, 0x0, 0x1, 0x9, 0x1, 0x2, 0x1, 0x8b, 0xef16, 0x5c7a, 0x5, 0xfc4, 0x5, 0x10001, 0xe, 0xf1b, 0x9, 0xfffffab0, 0xf30, 0x2, 0x7, 0x0, 0x40, 0x1, 0xfff, 0x698efaad, 0x828b, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0xfffffffb, 0x4, 0x7a26, {0x2, 0x3, 0xffff, 0xcd3, 0xa8fa, 0x8}, {0x1, 0x2, 0x1, 0x24, 0x48, 0x7}, 0x6, 0x81, 0x8}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0x6a, 0x6, "ce08d130c8d6c1875054ba8732d6c973ab9c62a761855a425a9c72861d9bde3f0451ce0b3a2cfa9b28a6311e41a4b787df7b89842e05776574a069a6637e3c38af35418817112df60162578cd9ed1df2f97437d9c1ec5e394c1b550be9374b580cae7743283d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x68, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}]}, {0x34, 0x6, "6ad7f22d953fc6188663a8837ed9d2c81a79f3cfabddd12412756296e3947804c0f7c0653f9920d6035b7b6b74ee34fd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x12c, 0x8, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_LABELS_MASK={0x14, 0x8, "beab9c141169dee36e15300e9284c37d"}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x6, 0x10000000, 0xc0000, 0x40}}]}, {0xcd, 0x6, "e6c944a01eef87e493adfd0cc1e4491f707d37353cfeb7067ca56b0971575d1804b45c9268ecdc3efc53f04d2ddcf18becb479fbf162eea821817613bd9ccef44ceb22115f66e70dbe1b7551e68baee55859a64135f18c0d269c82fb8e4702242283948ce820ba70da4d41ad938ae25a43e7d0399977d2bcdc412997292325cb92819a7835fcf4b7de43009fe9330458144204f36399780f48835ee13c78d19c1df5cfe887c88a246c193bbff5425c724aa289dac4327e0abf4a1e2700a96af6331ca0380dddf34a55"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_POLICE={0x18, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9a6}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xc}]}}]}, 0x65ec}}, 0x0) 1.423365102s ago: executing program 0 (id=2600): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="61050905e504060605010a3d56332f077cecf90ab915e101260d"], 0x1a) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fstat(0xffffffffffffffff, &(0x7f00000004c0)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f00000007c0), 0x0, 0x0) 1.026051435s ago: executing program 2 (id=2601): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000a00)) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"84db8cb4", 0x2, 0x0, 0x0, 0x0, 0x3, "2f3e784b7cc0ab31e7fd3d1fa09814", "aadb641b", '\x00', "f500", ["f56f1a42e3d0ab344d8bc6cc", "22147745eb9df6cf6a880d29", "9ad35c6ed4500f52938453c9", "ac562047f08f7537b6597721"]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f630664"], 0xd) syz_emit_vhci(0x0, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x6}}, 0x20) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_dump}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0xc8, 0x3}}}, 0x8) lseek(r3, 0x4, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001, 0xfffffffffffff924], 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c8f0340030000100070604000e000800100604002a0507000a02020005000108020003000d0c08008d07feff71077b9007080400f8ff040064287b1f87515ae9"], 0x39) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x10d) socket$inet6(0xa, 0x6, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r5 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.025741459s ago: executing program 0 (id=2602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x1000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mkdir(0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fadvise64(r4, 0x8, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0xfffffffffffffe8a, 0x0, &(0x7f00000002c0)=[@free_buffer, @dead_binder_done, @exit_looper, @enter_looper, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 0 (id=2603): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) read$smackfs_logging(r0, &(0x7f0000000000), 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) pipe2(&(0x7f0000000040), 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) (async) read$smackfs_logging(r0, &(0x7f0000000000), 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x44}}, 0x0) (async) kernel console output (not intermixed with test programs): 0x10 [ 669.438165][ T5093] Bluetooth: Wrong link type (-22) [ 669.443373][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 669.449865][ T5093] Bluetooth: Wrong link type (-22) [ 669.455162][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 669.461646][ T5093] Bluetooth: Wrong link type (-22) [ 669.502117][ T5093] Bluetooth: hci0: command 0x0406 tx timeout [ 669.561185][T13237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.579396][T13237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.597794][T13329] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 669.606496][T13329] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 669.628281][T13237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.984113][T13237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.045379][T13237] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.085820][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.093075][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.146911][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.154176][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.412364][ T5093] Bluetooth: hci7: command tx timeout [ 671.414502][T13351] FAULT_INJECTION: forcing a failure. [ 671.414502][T13351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.438237][T13351] CPU: 1 PID: 13351 Comm: syz.0.2188 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 671.448432][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 671.458506][T13351] Call Trace: [ 671.461793][T13351] [ 671.464714][T13351] dump_stack_lvl+0x241/0x360 [ 671.469409][T13351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.474604][T13351] ? __pfx__printk+0x10/0x10 [ 671.479183][T13351] ? __pfx_lock_release+0x10/0x10 [ 671.484196][T13351] ? rcu_is_watching+0x15/0xb0 [ 671.488951][T13351] should_fail_ex+0x3b0/0x4e0 [ 671.493625][T13351] _copy_from_iter+0x1f6/0x1960 [ 671.498490][T13351] ? alloc_pages_mpol_noprof+0x417/0x680 [ 671.504139][T13351] ? __pfx__copy_from_iter+0x10/0x10 [ 671.509416][T13351] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 671.515384][T13351] ? alloc_pages_noprof+0xef/0x170 [ 671.520476][T13351] ? page_copy_sane+0x46/0x260 [ 671.525227][T13351] copy_page_from_iter+0x7a/0x100 [ 671.530249][T13351] tun_get_user+0x1f48/0x4560 [ 671.534919][T13351] ? tun_get_user+0x84c/0x4560 [ 671.539676][T13351] ? __pfx_tun_get_user+0x10/0x10 [ 671.544717][T13351] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 671.550160][T13351] ? tun_get+0x1e/0x2f0 [ 671.554315][T13351] ? tun_get+0x1e/0x2f0 [ 671.558474][T13351] ? tun_get+0x27d/0x2f0 [ 671.562708][T13351] tun_chr_write_iter+0x113/0x1f0 [ 671.567720][T13351] vfs_write+0xa72/0xc90 [ 671.571964][T13351] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 671.572145][ T5093] Bluetooth: hci0: command 0x0406 tx timeout [ 671.577523][T13351] ? __pfx_vfs_write+0x10/0x10 [ 671.588255][T13351] ksys_write+0x1a0/0x2c0 [ 671.592582][T13351] ? __pfx_ksys_write+0x10/0x10 [ 671.597444][T13351] ? do_syscall_64+0x100/0x230 [ 671.602208][T13351] ? do_syscall_64+0xb6/0x230 [ 671.606899][T13351] do_syscall_64+0xf3/0x230 [ 671.611388][T13351] ? clear_bhb_loop+0x35/0x90 [ 671.616057][T13351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.621949][T13351] RIP: 0033:0x7f1b7bb7475f [ 671.626380][T13351] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 671.646015][T13351] RSP: 002b:00007f1b7c948010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 671.654423][T13351] RAX: ffffffffffffffda RBX: 00007f1b7bd03f60 RCX: 00007f1b7bb7475f [ 671.662383][T13351] RDX: 00000000000000ae RSI: 0000000020000200 RDI: 00000000000000c8 [ 671.670336][T13351] RBP: 00007f1b7c9480a0 R08: 0000000000000000 R09: 0000000000000000 [ 671.678294][T13351] R10: 00000000000000ae R11: 0000000000000293 R12: 0000000000000001 [ 671.686254][T13351] R13: 000000000000000b R14: 00007f1b7bd03f60 R15: 00007ffc6a903a58 [ 671.694224][T13351] [ 671.705850][T13237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.770121][T13356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2189'. [ 671.992550][T13237] veth0_vlan: entered promiscuous mode [ 672.032037][ T5132] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 672.044120][T13237] veth1_vlan: entered promiscuous mode [ 672.097897][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 672.107703][ T5093] Bluetooth: Wrong link type (-22) [ 672.113490][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 672.120077][ T5093] Bluetooth: Wrong link type (-22) [ 672.125773][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 672.132910][ T5093] Bluetooth: Wrong link type (-22) [ 672.176098][T13368] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 672.179053][T13237] veth0_macvtap: entered promiscuous mode [ 672.206470][T13368] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 672.218560][T13237] veth1_macvtap: entered promiscuous mode [ 672.232075][ T5132] usb 4-1: Using ep0 maxpacket: 8 [ 672.248826][ T5132] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 672.262040][ T5132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.271819][ T5132] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 672.284668][ T5132] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=cb.d8 [ 672.292478][ T785] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 672.302153][ T5132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.311426][ T5132] usb 4-1: Product: syz [ 672.333398][ T5132] usb 4-1: Manufacturer: syz [ 672.345784][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.349224][ T5132] usb 4-1: SerialNumber: syz [ 672.368069][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.385945][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.403430][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.424717][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.441985][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.457475][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.476911][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.495404][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.504054][ T5132] usb 4-1: config 0 descriptor?? [ 672.508440][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.523038][ T785] usb 5-1: Using ep0 maxpacket: 16 [ 672.534084][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.545816][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.560103][ T785] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 672.570024][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.578397][ T785] usb 5-1: Product: syz [ 672.599915][ T785] usb 5-1: Manufacturer: syz [ 672.605277][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.622116][ T785] usb 5-1: SerialNumber: syz [ 672.637710][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.638465][ T785] usb 5-1: config 0 descriptor?? [ 672.661143][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.665076][ T785] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 672.676906][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.681538][ T785] dvb-usb: bulk message failed: -22 (2/0) [ 672.707914][ T785] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 672.713737][T13237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.747318][ T785] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 672.764149][ T785] usb 5-1: media controller created [ 672.765558][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.784353][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.809507][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.823678][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 672.848173][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.884593][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.898527][ T785] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 672.921267][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.933316][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.949913][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.961216][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.983853][ T785] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 672.993106][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.008846][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.021094][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.039574][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.060051][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.118906][T13237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.169365][T13237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.172311][ T785] rc_core: IR keymap rc-dtt200u not found [ 673.198712][ T785] Registered IR keymap rc-empty [ 673.208753][T13237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.208767][T13372] program syz.0.2195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.212848][ T785] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 673.268586][T13237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.273425][ T785] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input65 [ 673.288206][T13237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.299826][T13237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.308648][T13237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.313073][ T785] dvb-usb: schedule remote query interval to 300 msecs. [ 673.328670][ T785] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 673.353226][ T785] usb 5-1: USB disconnect, device number 70 [ 673.378892][ T785] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 673.511999][ T5136] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 673.533326][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.556667][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.616027][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.633553][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.696271][ T5136] usb 1-1: config 0 has no interfaces? [ 673.702981][ T5136] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 673.732052][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.763681][ T5136] usb 1-1: config 0 descriptor?? [ 673.951260][ T5136] usb 4-1: USB disconnect, device number 90 [ 674.133239][ T5093] Bluetooth: hci6: command tx timeout [ 674.827679][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 674.834359][ T5093] Bluetooth: Wrong link type (-22) [ 674.839529][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 674.846525][ T5093] Bluetooth: Wrong link type (-22) [ 674.966797][ T5132] usb 1-1: USB disconnect, device number 63 [ 675.054226][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2201'. [ 675.924954][T13409] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 675.937925][T13409] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 676.643581][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 677.832069][ T5132] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 678.031073][T13447] syz.2.2214: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 678.081818][T13447] CPU: 0 PID: 13447 Comm: syz.2.2214 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 678.092046][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 678.102123][T13447] Call Trace: [ 678.105424][T13447] [ 678.108369][T13447] dump_stack_lvl+0x241/0x360 [ 678.113079][T13447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.118299][T13447] ? __pfx__printk+0x10/0x10 [ 678.121975][ T5132] usb 2-1: Using ep0 maxpacket: 16 [ 678.122902][T13447] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 678.134419][T13447] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 678.140946][T13447] warn_alloc+0x278/0x410 [ 678.145312][T13447] ? __pfx_warn_alloc+0x10/0x10 [ 678.150198][T13447] ? vb2_vmalloc_alloc+0xf2/0x340 [ 678.155251][T13447] ? __get_vm_area_node+0x23d/0x270 [ 678.160479][T13447] __vmalloc_node_range_noprof+0x69f/0x1460 [ 678.166431][T13447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 678.172798][T13447] ? __kasan_kmalloc+0x98/0xb0 [ 678.177579][T13447] ? vb2_vmalloc_alloc+0xb5/0x340 [ 678.182641][T13447] vmalloc_user_noprof+0x74/0x80 [ 678.187616][T13447] ? vb2_vmalloc_alloc+0xf2/0x340 [ 678.192673][T13447] vb2_vmalloc_alloc+0xf2/0x340 [ 678.197557][T13447] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 678.203039][T13447] __vb2_queue_alloc+0xa0f/0x16f0 [ 678.208128][T13447] vb2_core_reqbufs+0xd2e/0x17c0 [ 678.213122][T13447] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 678.218522][T13447] ? vb2_verify_memory_type+0x92/0x570 [ 678.224034][T13447] v4l2_m2m_ioctl_reqbufs+0x14e/0x230 [ 678.229446][T13447] __video_do_ioctl+0xc26/0xde0 [ 678.234341][T13447] ? __pfx___video_do_ioctl+0x10/0x10 [ 678.239751][T13447] ? __sanitizer_cov_trace_switch+0x9d/0x120 [ 678.245771][T13447] video_usercopy+0x89b/0x1180 [ 678.250568][T13447] ? __pfx___video_do_ioctl+0x10/0x10 [ 678.255963][T13447] ? __pfx_video_usercopy+0x10/0x10 [ 678.261183][T13447] ? smack_file_ioctl+0x2fa/0x3a0 [ 678.266254][T13447] ? __fget_files+0x3f6/0x470 [ 678.270949][T13447] ? __fget_files+0x29/0x470 [ 678.275655][T13447] v4l2_ioctl+0x18c/0x1e0 [ 678.280014][T13447] ? __pfx_v4l2_ioctl+0x10/0x10 [ 678.284908][T13447] __se_sys_ioctl+0xfc/0x170 [ 678.289544][T13447] do_syscall_64+0xf3/0x230 [ 678.294083][T13447] ? clear_bhb_loop+0x35/0x90 [ 678.298789][T13447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.304712][T13447] RIP: 0033:0x7f61ef175bd9 [ 678.309159][T13447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.328791][T13447] RSP: 002b:00007f61effc6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.337071][ T5132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 678.337210][T13447] RAX: ffffffffffffffda RBX: 00007f61ef303f60 RCX: 00007f61ef175bd9 [ 678.354907][T13447] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 678.362901][T13447] RBP: 00007f61ef1e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 678.370884][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.378871][T13447] R13: 000000000000000b R14: 00007f61ef303f60 R15: 00007ffe279e8948 [ 678.386888][T13447] [ 678.397935][ T5132] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 678.430687][T13447] Mem-Info: [ 678.434070][T13456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2216'. [ 678.434289][ T5132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.452152][T13447] active_anon:263 inactive_anon:6919 isolated_anon:0 [ 678.452152][T13447] active_file:13753 inactive_file:38863 isolated_file:0 [ 678.452152][T13447] unevictable:0 dirty:347 writeback:0 [ 678.452152][T13447] slab_reclaimable:6021 slab_unreclaimable:107814 [ 678.452152][T13447] mapped:21645 shmem:4124 pagetables:731 [ 678.452152][T13447] sec_pagetables:0 bounce:0 [ 678.452152][T13447] kernel_misc_reclaimable:0 [ 678.452152][T13447] free:1359787 free_pcp:4051 free_cma:0 [ 678.520061][ T5132] usb 2-1: Product: syz [ 678.530174][ T5132] usb 2-1: Manufacturer: syz [ 678.539577][ T5132] usb 2-1: SerialNumber: syz [ 678.570725][ T5132] usb 2-1: config 0 descriptor?? [ 678.572879][T13447] Node 0 active_anon:1052kB inactive_anon:26140kB active_file:54936kB inactive_file:155452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84580kB dirty:1388kB writeback:0kB shmem:14960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10704kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no [ 678.591551][ T5132] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 678.666792][T13447] Node 1 active_anon:0kB inactive_anon:1536kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 678.719048][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 678.726100][ T5093] Bluetooth: Wrong link type (-22) [ 678.731340][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 678.732153][T13447] Node 0 [ 678.738043][ T5093] Bluetooth: Wrong link type (-22) [ 678.742072][T13447] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.852579][T13447] lowmem_reserve[]: 0 2571 2571 0 0 [ 678.857946][T13447] Node 0 DMA32 free:1476144kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:1048kB inactive_anon:26404kB active_file:54688kB inactive_file:155400kB unevictable:0kB writepending:1388kB present:3129332kB managed:2659848kB mlocked:0kB bounce:0kB free_pcp:15652kB local_pcp:14984kB free_cma:0kB [ 678.893941][T13447] lowmem_reserve[]: 0 0 0 0 0 [ 678.898701][T13447] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:248kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 678.949787][T13447] lowmem_reserve[]: 0 0 0 0 0 [ 678.961563][T13447] Node 1 Normal free:3947256kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:1536kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 679.048786][T13447] lowmem_reserve[]: 0 0 0 0 0 [ 679.065443][T13447] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 679.091076][T13447] Node 0 DMA32: 5*4kB (UME) 48*8kB (UME) 5*16kB (UE) 144*32kB (UME) 271*64kB (UME) 56*128kB (UME) 20*256kB (UME) 10*512kB (ME) 8*1024kB (ME) 7*2048kB (UME) 345*4096kB (M) = 1475492kB [ 679.126525][T13447] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 679.156713][T13447] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 5*64kB (U) 3*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3947308kB [ 679.180891][T13447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 679.191581][T13447] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 679.201243][ T5132] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 679.232118][T13447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 679.246342][T13447] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 679.262097][T13447] 56742 total pagecache pages [ 679.287889][T13447] 0 pages in swap cache [ 679.303660][T13447] Free swap = 124512kB [ 679.313764][T13447] Total swap = 124996kB [ 679.331366][T13447] 2097051 pages RAM [ 679.344369][T13447] 0 pages HighMem/MovableOnly [ 679.360948][T13447] 400879 pages reserved [ 679.371814][T13447] 0 pages cma reserved [ 679.403842][ T5132] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 679.423150][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.452899][ T5132] usb 1-1: config 0 descriptor?? [ 679.743489][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.775918][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.051718][ T5135] usb 2-1: USB disconnect, device number 60 [ 680.129075][ T5134] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 680.158975][ T5132] kaweth 1-1:0.0: Firmware present in device. [ 680.344762][ T5132] kaweth 1-1:0.0: Statistics collection: 0 [ 680.350631][ T5132] kaweth 1-1:0.0: Multicast filter limit: 0 [ 680.359363][ T5134] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 680.378414][ T5132] kaweth 1-1:0.0: MTU: 0 [ 680.383196][ T5134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.398610][ T5132] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 680.423628][ T5134] usb 3-1: config 0 descriptor?? [ 680.448586][ T5134] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 680.582411][ T5132] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 680.615056][ T5132] usb 1-1: USB disconnect, device number 64 [ 680.888059][T13493] netlink: 'syz.4.2226': attribute type 8 has an invalid length. [ 680.897457][T13493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.424530][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.452272][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.567392][ T5134] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 681.582911][ T5134] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 681.604225][ T5134] usb 3-1: USB disconnect, device number 67 [ 681.842122][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 681.848675][ T5093] Bluetooth: Wrong link type (-22) [ 681.853911][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 681.860475][ T5093] Bluetooth: Wrong link type (-22) [ 682.148252][ T9879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.291099][ T9879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.449050][ T9879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.699750][ T9879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.937537][T13508] program syz.4.2231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.073318][T13133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.091208][T13133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.113652][T13133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.124292][T13133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.152538][T13133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 683.162415][T13133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.210101][ T9879] bridge_slave_1: left allmulticast mode [ 683.228988][ T9879] bridge_slave_1: left promiscuous mode [ 683.408496][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.522842][ T9879] bridge_slave_0: left allmulticast mode [ 683.528533][ T9879] bridge_slave_0: left promiscuous mode [ 684.222390][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.139470][ T9879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.170264][ T9879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.197451][ T9879] bond0 (unregistering): Released all slaves [ 685.252511][ T5093] Bluetooth: hci3: command tx timeout [ 685.282113][T13510] lo speed is unknown, defaulting to 1000 [ 686.384529][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.391041][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.667291][ T9879] tipc: Left network mode [ 686.867621][T13548] tmpfs: Unknown parameter '' [ 687.363815][ T5093] Bluetooth: hci3: command tx timeout [ 687.585025][T13549] hub 9-0:1.0: USB hub found [ 687.590290][ T29] audit: type=1326 audit(1720840574.429:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13537 comm="syz.1.2240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x0 [ 687.646457][T13549] hub 9-0:1.0: 8 ports detected [ 688.892081][ T5136] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 688.929951][T13510] chnl_net:caif_netlink_parms(): no params data found [ 689.075792][T13575] loop0: detected capacity change from 0 to 6 [ 689.142418][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 689.148659][ T9879] hsr_slave_0: left promiscuous mode [ 689.161391][ T5136] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 689.164899][T13575] Dev loop0: unable to read RDB block 6 [ 689.175470][ T5136] usb 5-1: config 179 has no interface number 0 [ 689.192006][ T5136] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 689.204977][ T5136] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 689.223775][ T5136] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 689.235134][ T9879] hsr_slave_1: left promiscuous mode [ 689.251452][ T5136] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 689.253365][T13575] loop0: AHDI p1 [ 689.292397][T13575] loop0: partition table partially beyond EOD, truncated [ 689.306766][ T5136] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 689.326597][ T9879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.344783][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.362350][ T9879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.388507][T13563] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 689.396689][ T9879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.424986][ T9879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.428175][ T5093] Bluetooth: hci3: command tx timeout [ 689.592938][ T9879] veth1_macvtap: left promiscuous mode [ 689.600122][ T9879] veth0_macvtap: left promiscuous mode [ 689.617176][ T9879] veth1_vlan: left promiscuous mode [ 689.652186][ T9879] veth0_vlan: left promiscuous mode [ 690.452862][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input67 [ 691.492026][ T5093] Bluetooth: hci3: command tx timeout [ 692.822881][ T5131] usb 5-1: USB disconnect, device number 71 [ 692.823052][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 692.837115][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 692.854648][ T5131] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 693.129684][ T9879] team0 (unregistering): Port device team_slave_1 removed [ 693.335197][ T9879] team0 (unregistering): Port device team_slave_0 removed [ 694.648069][T13510] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.678550][T13510] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.709222][T13510] bridge_slave_0: entered allmulticast mode [ 694.878480][T13510] bridge_slave_0: entered promiscuous mode [ 695.663797][T13510] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.680398][T13510] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.730650][T13510] bridge_slave_1: entered allmulticast mode [ 695.758433][T13510] bridge_slave_1: entered promiscuous mode [ 695.948671][T13510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.978745][T13510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.127638][T13510] team0: Port device team_slave_0 added [ 696.139755][T13510] team0: Port device team_slave_1 added [ 696.192581][ T785] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 696.276387][T13510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.303150][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.345620][T13510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.364713][T13510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.371711][T13510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.189390][ T785] usb 4-1: Using ep0 maxpacket: 16 [ 697.217991][ T785] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 697.232041][T13510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.251986][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.278924][ T785] usb 4-1: Product: syz [ 697.299662][ T785] usb 4-1: Manufacturer: syz [ 697.326354][ T785] usb 4-1: SerialNumber: syz [ 697.337206][ T785] usb 4-1: config 0 descriptor?? [ 697.350747][ T785] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 697.372318][T13647] tmpfs: Unknown parameter '' [ 697.378527][ T785] dvb-usb: bulk message failed: -22 (2/0) [ 697.395832][ T785] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 697.441845][ T785] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 697.471366][ T785] usb 4-1: media controller created [ 697.490880][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.503268][T13510] hsr_slave_0: entered promiscuous mode [ 697.544779][T13510] hsr_slave_1: entered promiscuous mode [ 697.574952][ T785] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 697.596729][T13510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.617694][T13624] loop0: detected capacity change from 0 to 6 [ 697.632993][ T785] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 697.642444][T13510] Cannot create hsr debugfs directory [ 697.649036][T13624] Dev loop0: unable to read RDB block 6 [ 697.685212][T13624] loop0: AHDI p1 [ 697.712245][T13624] loop0: partition table partially beyond EOD, truncated [ 697.835880][ T785] rc_core: IR keymap rc-dtt200u not found [ 697.848343][ T785] Registered IR keymap rc-empty [ 697.886074][ T785] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 697.940579][ T785] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input68 [ 697.977752][ T785] dvb-usb: schedule remote query interval to 300 msecs. [ 698.013126][ T785] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 698.073976][ T785] usb 4-1: USB disconnect, device number 91 [ 698.122125][ T930] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 698.147207][ T785] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 698.332847][ T930] usb 2-1: Using ep0 maxpacket: 8 [ 698.383489][ T930] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 698.409236][ T930] usb 2-1: config 179 has no interface number 0 [ 698.443273][ T930] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 698.487107][ T930] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 698.540711][ T930] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 698.730898][ T930] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 701.717935][ T930] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 701.727265][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.867318][T13661] FAULT_INJECTION: forcing a failure. [ 701.867318][T13661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.911395][T13661] CPU: 1 PID: 13661 Comm: syz.3.2268 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 701.921713][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 701.924353][T13510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 701.931769][T13661] Call Trace: [ 701.931790][T13661] [ 701.931800][T13661] dump_stack_lvl+0x241/0x360 [ 701.949348][T13661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.954543][T13661] ? __pfx__printk+0x10/0x10 [ 701.959124][T13661] ? snprintf+0xda/0x120 [ 701.963355][T13661] should_fail_ex+0x3b0/0x4e0 [ 701.968028][T13661] _copy_to_user+0x2f/0xb0 [ 701.972432][T13661] simple_read_from_buffer+0xca/0x150 [ 701.977795][T13661] proc_fail_nth_read+0x1e9/0x250 [ 701.982811][T13661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 701.988343][T13661] ? rw_verify_area+0x520/0x6b0 [ 701.993182][T13661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 701.998713][T13661] vfs_read+0x204/0xbc0 [ 702.002873][T13661] ? __pfx_lock_release+0x10/0x10 [ 702.007978][T13661] ? __pfx_vfs_read+0x10/0x10 [ 702.012644][T13661] ? __fget_files+0x29/0x470 [ 702.017221][T13661] ? __fget_files+0x3f6/0x470 [ 702.021910][T13661] ksys_read+0x1a0/0x2c0 [ 702.026194][T13661] ? __pfx_ksys_read+0x10/0x10 [ 702.030958][T13661] ? do_syscall_64+0x100/0x230 [ 702.035709][T13661] ? do_syscall_64+0xb6/0x230 [ 702.040369][T13661] do_syscall_64+0xf3/0x230 [ 702.044855][T13661] ? clear_bhb_loop+0x35/0x90 [ 702.049524][T13661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.055410][T13661] RIP: 0033:0x7fc8893746bc [ 702.059808][T13661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 702.079396][T13661] RSP: 002b:00007fc88a19a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.087795][T13661] RAX: ffffffffffffffda RBX: 00007fc889503f60 RCX: 00007fc8893746bc [ 702.095749][T13661] RDX: 000000000000000f RSI: 00007fc88a19a0b0 RDI: 0000000000000004 [ 702.103703][T13661] RBP: 00007fc88a19a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 702.111682][T13661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.119660][T13661] R13: 000000000000000b R14: 00007fc889503f60 R15: 00007ffd7ef0aa38 [ 702.127629][T13661] [ 702.256391][T13510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 702.350436][T13510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 702.399130][ T930] usb 2-1: can't set config #179, error -71 [ 702.413599][T13510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 702.422360][ T930] usb 2-1: USB disconnect, device number 61 [ 702.622040][T13510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.637029][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 702.643680][ T5093] Bluetooth: Wrong link type (-22) [ 702.648816][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 702.655476][ T5093] Bluetooth: Wrong link type (-22) [ 702.700489][T13510] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.809512][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.816756][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.873734][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.880832][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.288052][T13510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.320980][T13696] lo speed is unknown, defaulting to 1000 [ 704.374056][ T29] audit: type=1326 audit(1720840591.189:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13695 comm="syz.4.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb57f75bd9 code=0x0 [ 704.382367][ T785] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 704.473592][T13510] veth0_vlan: entered promiscuous mode [ 704.487754][T13510] veth1_vlan: entered promiscuous mode [ 704.561891][T13510] veth0_macvtap: entered promiscuous mode [ 704.578670][T13510] veth1_macvtap: entered promiscuous mode [ 704.598645][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.611769][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.612420][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 704.628527][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.647216][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.648559][ T785] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 704.662110][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.675854][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.686771][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.691354][ T785] usb 2-1: Product: syz [ 704.698778][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.715862][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.717510][ T785] usb 2-1: Manufacturer: syz [ 704.725821][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.746322][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.746371][ T785] usb 2-1: SerialNumber: syz [ 704.766578][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.778905][ T785] usb 2-1: config 0 descriptor?? [ 704.787980][ T785] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 704.794891][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.798201][ T785] dvb-usb: bulk message failed: -22 (2/0) [ 704.815983][ T785] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 704.825275][ T785] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 704.828591][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.835625][ T785] usb 2-1: media controller created [ 704.837086][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.868113][ T785] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 704.876910][ T785] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 704.882290][T13712] loop0: detected capacity change from 0 to 6 [ 704.886308][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.901946][T13712] Dev loop0: unable to read RDB block 6 [ 704.902527][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 704.907643][T13712] loop0: AHDI p1 [ 704.920025][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.934713][T13712] loop0: partition table partially beyond EOD, truncated [ 704.938794][T13510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.971208][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.996698][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.032135][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.054786][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.066942][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.079569][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.090424][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.099256][ T785] rc_core: IR keymap rc-dtt200u not found [ 705.108074][ T785] Registered IR keymap rc-empty [ 705.114553][ T785] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 705.117594][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.141811][ T785] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input69 [ 705.170519][ T785] dvb-usb: schedule remote query interval to 300 msecs. [ 705.171949][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.187718][ T785] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 705.206287][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.232027][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.252108][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.263824][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.286443][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.306530][T13510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.329641][T13510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.354933][T13510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.413191][ T785] usb 2-1: USB disconnect, device number 62 [ 705.447442][T13510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.461374][T13510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.470585][T13510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.570978][T13510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.774790][T13720] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2284'. [ 706.242046][ T785] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 706.763284][ T785] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 707.072005][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 707.132402][ T785] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 707.144960][ T9879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.166866][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.171717][ T9879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.180635][ T785] usb 2-1: Product: syz [ 707.234909][ T9879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.246307][ T785] usb 2-1: Manufacturer: syz [ 707.258062][ T9879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.273016][ T785] usb 2-1: SerialNumber: syz [ 707.296091][ T785] usb 2-1: config 0 descriptor?? [ 707.307675][ T785] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 707.348015][ T785] dvb-usb: bulk message failed: -22 (2/0) [ 707.371576][ T785] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 707.415100][ T785] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 707.586808][ T785] usb 2-1: media controller created [ 707.599822][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.830770][T13752] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2291'. [ 709.562214][ T785] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 709.570826][ T785] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 709.762023][ T785] rc_core: IR keymap rc-dtt200u not found [ 709.767819][ T785] Registered IR keymap rc-empty [ 709.805348][ T785] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 709.839300][ T785] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input70 [ 709.892499][ T785] dvb-usb: schedule remote query interval to 300 msecs. [ 709.902948][T13765] overlayfs: failed to resolve './file1': -2 [ 709.921147][ T785] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 709.988411][ T785] usb 2-1: USB disconnect, device number 63 [ 710.002112][ T5136] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 710.387100][T13772] netlink: 'syz.2.2294': attribute type 8 has an invalid length. [ 710.396993][T13772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.193912][T13776] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2298'. [ 711.684551][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 712.138283][ T5136] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 712.235523][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.259628][ T785] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 712.342201][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 712.445545][ T5136] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 712.502087][ T9] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 712.511167][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.523093][ T5136] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 712.531131][ T5136] usb 1-1: Manufacturer: syz [ 712.545021][ T9] usb 5-1: Product: syz [ 712.551646][ T5136] usb 1-1: config 0 descriptor?? [ 712.574065][ T9] usb 5-1: Manufacturer: syz [ 712.578730][ T9] usb 5-1: SerialNumber: syz [ 712.602182][ T9] usb 5-1: config 0 descriptor?? [ 712.618844][ T9] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 712.633933][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 712.639766][ T9] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 712.649680][ T9] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 712.660094][ T9] usb 5-1: media controller created [ 712.669703][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.682093][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 712.690640][ T9] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 713.614508][T13806] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2304'. [ 713.659098][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2304'. [ 713.822029][ T9] rc_core: IR keymap rc-dtt200u not found [ 713.829117][ T9] Registered IR keymap rc-empty [ 713.834280][ T5136] rc_core: IR keymap rc-hauppauge not found [ 713.840206][ T5136] Registered IR keymap rc-empty [ 713.860517][ T9] rc rc1: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1 [ 713.873385][ T5136] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 713.886527][ T9] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input72 [ 713.913572][ T5136] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input71 [ 713.949231][ T5136] usb 1-1: USB disconnect, device number 65 [ 713.957245][ T9] dvb-usb: schedule remote query interval to 300 msecs. [ 713.971766][ T9] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 714.006912][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 714.014059][ T5093] Bluetooth: Wrong link type (-22) [ 714.019296][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 714.025975][ T5093] Bluetooth: Wrong link type (-22) [ 714.032821][ T5093] Bluetooth: hci7: link tx timeout [ 714.039545][ T5093] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 714.101293][ T9] usb 5-1: USB disconnect, device number 72 [ 714.154450][ T9] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 714.648677][T13832] netlink: 'syz.3.2310': attribute type 8 has an invalid length. [ 714.658653][T13832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.498024][T13837] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2311'. [ 716.340573][ T5093] Bluetooth: hci7: command 0x0406 tx timeout [ 716.679040][ T5093] Bluetooth: hci6: sending frame failed (-49) [ 716.689526][T13133] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 717.793877][ T5136] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 718.022001][ T5136] usb 2-1: Using ep0 maxpacket: 16 [ 718.623403][ T5136] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 718.652338][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.672421][ T5136] usb 2-1: Product: syz [ 718.676736][ T5136] usb 2-1: Manufacturer: syz [ 718.681351][ T5136] usb 2-1: SerialNumber: syz [ 718.788779][ T5136] usb 2-1: config 0 descriptor?? [ 718.803371][ T5136] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 718.835146][T13884] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2324'. [ 718.859473][ T5136] dvb-usb: bulk message failed: -22 (2/0) [ 718.880683][ T5136] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 718.918741][ T5136] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 718.959799][ T5136] usb 2-1: media controller created [ 718.973863][ T5136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.191388][T13888] netlink: 'syz.2.2322': attribute type 8 has an invalid length. [ 719.201667][T13888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.554582][T13858] loop0: detected capacity change from 0 to 6 [ 719.605127][T13858] Dev loop0: unable to read RDB block 6 [ 719.645856][T13858] loop0: AHDI p1 [ 719.688428][ T5136] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 719.692035][T13858] loop0: partition table partially beyond EOD, [ 719.700134][ T5136] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 719.722188][T13858] truncated [ 719.812133][ T5136] rc_core: IR keymap rc-dtt200u not found [ 719.824206][ T5136] Registered IR keymap rc-empty [ 719.843240][ T5136] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 719.962883][ T5136] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input73 [ 719.978233][ T5136] dvb-usb: schedule remote query interval to 300 msecs. [ 719.985326][ T5136] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 720.001638][ T5136] usb 2-1: USB disconnect, device number 64 [ 720.822189][T13133] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 720.829239][T13133] Bluetooth: Wrong link type (-22) [ 720.834606][T13133] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 720.841206][T13133] Bluetooth: Wrong link type (-22) [ 720.896045][ T5136] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 721.177041][T13915] netlink: 'syz.1.2330': attribute type 29 has an invalid length. [ 721.238210][T13915] netlink: 'syz.1.2330': attribute type 29 has an invalid length. [ 721.268036][T13919] FAULT_INJECTION: forcing a failure. [ 721.268036][T13919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.312326][T13919] CPU: 1 PID: 13919 Comm: syz.3.2331 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 721.322532][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 721.332599][T13919] Call Trace: [ 721.335883][T13919] [ 721.338823][T13919] dump_stack_lvl+0x241/0x360 [ 721.343526][T13919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.348747][T13919] ? __pfx__printk+0x10/0x10 [ 721.353358][T13919] ? __pfx_lock_release+0x10/0x10 [ 721.358408][T13919] should_fail_ex+0x3b0/0x4e0 [ 721.363128][T13919] _copy_from_user+0x2f/0xe0 [ 721.367740][T13919] sctp_getsockopt_local_auth_chunks+0x100/0x780 [ 721.374094][T13919] ? __pfx_sctp_getsockopt_local_auth_chunks+0x10/0x10 [ 721.380983][T13919] sctp_getsockopt+0x3f3/0xbb0 [ 721.385763][T13919] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 721.391676][T13919] do_sock_getsockopt+0x373/0x850 [ 721.396725][T13919] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 721.402291][T13919] ? __fget_files+0x3f6/0x470 [ 721.406998][T13919] __sys_getsockopt+0x271/0x330 [ 721.411875][T13919] ? __pfx___sys_getsockopt+0x10/0x10 [ 721.417268][T13919] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 721.423605][T13919] ? do_syscall_64+0x100/0x230 [ 721.428364][T13919] __x64_sys_getsockopt+0xb5/0xd0 [ 721.433386][T13919] do_syscall_64+0xf3/0x230 [ 721.437878][T13919] ? clear_bhb_loop+0x35/0x90 [ 721.442546][T13919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.448435][T13919] RIP: 0033:0x7fc889375bd9 [ 721.452841][T13919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.472435][T13919] RSP: 002b:00007fc88a19a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 721.480838][T13919] RAX: ffffffffffffffda RBX: 00007fc889503f60 RCX: 00007fc889375bd9 [ 721.488808][T13919] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003 [ 721.496769][T13919] RBP: 00007fc88a19a0a0 R08: 0000000020000080 R09: 0000000000000000 [ 721.504823][T13919] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 721.512787][T13919] R13: 000000000000000b R14: 00007fc889503f60 R15: 00007ffd7ef0aa38 [ 721.520766][T13919] [ 722.519826][T13929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.397384][T13944] netlink: 'syz.3.2336': attribute type 8 has an invalid length. [ 723.405799][T13944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.839748][T13946] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2337'. [ 724.120512][T13948] FAULT_INJECTION: forcing a failure. [ 724.120512][T13948] name failslab, interval 1, probability 0, space 0, times 0 [ 724.144052][T13950] FAULT_INJECTION: forcing a failure. [ 724.144052][T13950] name failslab, interval 1, probability 0, space 0, times 0 [ 724.189653][T13950] CPU: 0 PID: 13950 Comm: syz.1.2339 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 724.199878][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 724.209954][T13950] Call Trace: [ 724.213243][T13950] [ 724.216180][T13950] dump_stack_lvl+0x241/0x360 [ 724.220869][T13950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.226072][T13950] ? __pfx__printk+0x10/0x10 [ 724.230670][T13950] ? __pfx___might_resched+0x10/0x10 [ 724.235954][T13950] ? dynamic_dname+0x141/0x1b0 [ 724.240724][T13950] should_fail_ex+0x3b0/0x4e0 [ 724.245425][T13950] ? tomoyo_encode+0x26f/0x540 [ 724.250190][T13950] should_failslab+0x9/0x20 [ 724.254707][T13950] __kmalloc_noprof+0xd8/0x400 [ 724.259506][T13950] tomoyo_encode+0x26f/0x540 [ 724.264124][T13950] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 724.269688][T13950] tomoyo_realpath_from_path+0x59e/0x5e0 [ 724.275350][T13950] tomoyo_path_number_perm+0x23a/0x880 [ 724.280826][T13950] ? tomoyo_path_number_perm+0x208/0x880 [ 724.286481][T13950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 724.292531][T13950] ? __fget_files+0x29/0x470 [ 724.297142][T13950] ? __fget_files+0x3f6/0x470 [ 724.301823][T13950] ? __fget_files+0x29/0x470 [ 724.306423][T13950] security_file_ioctl+0x75/0xb0 [ 724.311369][T13950] __se_sys_ioctl+0x47/0x170 [ 724.315981][T13950] do_syscall_64+0xf3/0x230 [ 724.320511][T13950] ? clear_bhb_loop+0x35/0x90 [ 724.325212][T13950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.331135][T13950] RIP: 0033:0x7f295af75bd9 [ 724.335557][T13950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.355170][T13950] RSP: 002b:00007f295bc9c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.363596][T13950] RAX: ffffffffffffffda RBX: 00007f295b103f60 RCX: 00007f295af75bd9 [ 724.371580][T13950] RDX: 0000000020000000 RSI: 00000000c00caee0 RDI: 0000000000000004 [ 724.379565][T13950] RBP: 00007f295bc9c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 724.387538][T13950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.395511][T13950] R13: 000000000000000b R14: 00007f295b103f60 R15: 00007ffc165e3978 [ 724.403761][T13950] [ 724.410582][T13948] CPU: 0 PID: 13948 Comm: syz.3.2340 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 724.420778][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 724.430852][T13948] Call Trace: [ 724.434151][T13948] [ 724.437097][T13948] dump_stack_lvl+0x241/0x360 [ 724.441808][T13948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.447032][T13948] ? __pfx__printk+0x10/0x10 [ 724.451745][T13948] ? __pfx___might_resched+0x10/0x10 [ 724.457076][T13948] should_fail_ex+0x3b0/0x4e0 [ 724.461801][T13948] should_failslab+0x9/0x20 [ 724.466333][T13948] __kmalloc_node_noprof+0xdf/0x440 [ 724.471558][T13948] ? kvmalloc_node_noprof+0x72/0x190 [ 724.476875][T13948] kvmalloc_node_noprof+0x72/0x190 [ 724.482106][T13948] bpf_test_run_xdp_live+0x234/0x1e60 [ 724.487512][T13948] ? stack_trace_save+0x118/0x1d0 [ 724.492562][T13948] ? __lock_acquire+0x1346/0x1fd0 [ 724.497606][T13948] ? __pfx_stack_trace_save+0x10/0x10 [ 724.503008][T13948] ? mark_lock+0x9a/0x350 [ 724.507361][T13948] ? __lock_acquire+0x1346/0x1fd0 [ 724.512406][T13948] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 724.518274][T13948] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 724.524199][T13948] ? __might_fault+0xaa/0x120 [ 724.528911][T13948] ? __might_fault+0xc6/0x120 [ 724.533609][T13948] ? _copy_from_user+0xa6/0xe0 [ 724.538389][T13948] ? bpf_test_init+0x15a/0x180 [ 724.543170][T13948] ? xdp_convert_md_to_buff+0x5b/0x330 [ 724.548653][T13948] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 724.554055][T13948] ? __pfx_lock_release+0x10/0x10 [ 724.558710][T13966] netlink: 'syz.2.2344': attribute type 29 has an invalid length. [ 724.559086][T13948] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 724.572102][T13966] netlink: 'syz.2.2344': attribute type 29 has an invalid length. [ 724.572642][T13948] ? __fget_files+0x29/0x470 [ 724.572680][T13948] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 724.590884][T13948] bpf_prog_test_run+0x33a/0x3b0 [ 724.595843][T13948] __sys_bpf+0x48d/0x810 [ 724.600116][T13948] ? __pfx___sys_bpf+0x10/0x10 [ 724.604915][T13948] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 724.610917][T13948] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 724.617271][T13948] ? do_syscall_64+0x100/0x230 [ 724.622064][T13948] __x64_sys_bpf+0x7c/0x90 [ 724.626510][T13948] do_syscall_64+0xf3/0x230 [ 724.631031][T13948] ? clear_bhb_loop+0x35/0x90 [ 724.635729][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.641644][T13948] RIP: 0033:0x7fc889375bd9 [ 724.642172][T13950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 724.646057][T13948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.646080][T13948] RSP: 002b:00007fc88a19a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 724.646103][T13948] RAX: ffffffffffffffda RBX: 00007fc889503f60 RCX: 00007fc889375bd9 [ 724.646119][T13948] RDX: 0000000000000048 RSI: 00000000200000c0 RDI: 000000000000000a [ 724.646133][T13948] RBP: 00007fc88a19a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 724.646145][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.646156][T13948] R13: 000000000000000b R14: 00007fc889503f60 R15: 00007ffd7ef0aa38 [ 724.646185][T13948] [ 725.562894][T13976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 726.622154][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.354611][T13989] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2352'. [ 728.414577][T13994] Bluetooth: MGMT ver 1.22 [ 728.419104][T13994] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 728.602041][ T930] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 728.776118][T13999] netlink: 'syz.4.2350': attribute type 8 has an invalid length. [ 728.786062][T13999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.460712][T14003] netlink: 'syz.4.2355': attribute type 29 has an invalid length. [ 729.485300][T14003] netlink: 'syz.4.2355': attribute type 29 has an invalid length. [ 729.532339][ T5134] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 729.571308][ T930] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 729.588313][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.610716][ T930] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice= 0.00 [ 729.629980][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.880096][ T930] usb 3-1: config 0 descriptor?? [ 730.172030][ T5134] usb 1-1: Using ep0 maxpacket: 16 [ 731.690816][ T5134] usb 1-1: device descriptor read/all, error -71 [ 731.707745][T13984] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2349'. [ 731.753560][ T930] rc_core: IR keymap rc-hauppauge not found [ 731.759538][ T930] Registered IR keymap rc-empty [ 731.785164][ T930] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 731.817008][ T930] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input74 [ 732.337760][ T5135] usb 3-1: USB disconnect, device number 68 [ 732.732127][T14051] netlink: 'syz.4.2365': attribute type 8 has an invalid length. [ 732.740450][T14051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.948783][T14060] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2367'. [ 732.993358][T14062] netlink: 'syz.4.2369': attribute type 29 has an invalid length. [ 733.028916][T14062] netlink: 'syz.4.2369': attribute type 29 has an invalid length. [ 733.234047][T14070] FAULT_INJECTION: forcing a failure. [ 733.234047][T14070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.284631][T14070] CPU: 1 PID: 14070 Comm: syz.1.2373 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 733.294837][T14070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 733.304889][T14070] Call Trace: [ 733.308185][T14070] [ 733.311112][T14070] dump_stack_lvl+0x241/0x360 [ 733.315800][T14070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.320999][T14070] ? __pfx__printk+0x10/0x10 [ 733.325597][T14070] ? __pfx_lock_release+0x10/0x10 [ 733.330611][T14070] should_fail_ex+0x3b0/0x4e0 [ 733.335290][T14070] _copy_to_user+0x2f/0xb0 [ 733.339721][T14070] video_usercopy+0xe5e/0x1180 [ 733.344579][T14070] ? __pfx___video_do_ioctl+0x10/0x10 [ 733.349975][T14070] ? __pfx_video_usercopy+0x10/0x10 [ 733.355196][T14070] ? smack_file_ioctl+0x2fa/0x3a0 [ 733.360260][T14070] ? __fget_files+0x3f6/0x470 [ 733.364993][T14070] ? __fget_files+0x29/0x470 [ 733.369603][T14070] v4l2_ioctl+0x18c/0x1e0 [ 733.373955][T14070] ? __pfx_v4l2_ioctl+0x10/0x10 [ 733.378842][T14070] __se_sys_ioctl+0xfc/0x170 [ 733.383466][T14070] do_syscall_64+0xf3/0x230 [ 733.388006][T14070] ? clear_bhb_loop+0x35/0x90 [ 733.392697][T14070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.398589][T14070] RIP: 0033:0x7f295af75bd9 [ 733.402997][T14070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.422591][T14070] RSP: 002b:00007f295bc9c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.430996][T14070] RAX: ffffffffffffffda RBX: 00007f295b103f60 RCX: 00007f295af75bd9 [ 733.438955][T14070] RDX: 0000000020000000 RSI: 00000000c008561c RDI: 0000000000000004 [ 733.446919][T14070] RBP: 00007f295bc9c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 733.454882][T14070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.462843][T14070] R13: 000000000000000b R14: 00007f295b103f60 R15: 00007ffc165e3978 [ 733.470813][T14070] [ 733.626487][T13133] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3 [ 733.769372][T14078] binder: 14077:14078 ioctl c0306201 200003c0 returned -14 [ 733.977139][T14084] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2378'. [ 734.153251][ T5134] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 734.352467][ T5134] usb 1-1: Using ep0 maxpacket: 8 [ 734.379315][ T5134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.416930][ T5134] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 734.439408][ T5134] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 734.458572][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.481645][ T5134] usb 1-1: config 0 descriptor?? [ 734.779155][ T5134] usb 1-1: USB disconnect, device number 68 [ 734.796879][ T5132] IPVS: starting estimator thread 0... [ 734.861576][T14098] netlink: 'syz.4.2382': attribute type 29 has an invalid length. [ 734.870276][T14098] netlink: 'syz.4.2382': attribute type 29 has an invalid length. [ 734.902182][T14092] IPVS: using max 23 ests per chain, 55200 per kthread [ 734.960062][T14098] netlink: 'syz.4.2382': attribute type 29 has an invalid length. [ 735.042386][T14100] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 735.070642][T14100] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.2383'. [ 735.112015][T14100] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 735.130512][T14106] binder: 14105:14106 ioctl c0306201 200003c0 returned -14 [ 735.261306][T14112] FAULT_INJECTION: forcing a failure. [ 735.261306][T14112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.274686][T14112] CPU: 1 PID: 14112 Comm: syz.3.2385 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 735.284871][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 735.294937][T14112] Call Trace: [ 735.298221][T14112] [ 735.301134][T14112] dump_stack_lvl+0x241/0x360 [ 735.305809][T14112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.311013][T14112] ? __pfx__printk+0x10/0x10 [ 735.315590][T14112] ? __pfx_lock_release+0x10/0x10 [ 735.320602][T14112] should_fail_ex+0x3b0/0x4e0 [ 735.325270][T14112] _copy_from_user+0x2f/0xe0 [ 735.329853][T14112] copy_msghdr_from_user+0xae/0x680 [ 735.335053][T14112] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 735.340856][T14112] __sys_sendmsg+0x23d/0x3a0 [ 735.345437][T14112] ? __pfx___sys_sendmsg+0x10/0x10 [ 735.350532][T14112] ? vfs_write+0x7c4/0xc90 [ 735.354956][T14112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 735.361267][T14112] ? do_syscall_64+0x100/0x230 [ 735.366015][T14112] ? do_syscall_64+0xb6/0x230 [ 735.370672][T14112] do_syscall_64+0xf3/0x230 [ 735.375155][T14112] ? clear_bhb_loop+0x35/0x90 [ 735.379813][T14112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.385701][T14112] RIP: 0033:0x7fc889375bd9 [ 735.390099][T14112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.409703][T14112] RSP: 002b:00007fc88a179048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.418099][T14112] RAX: ffffffffffffffda RBX: 00007fc889504038 RCX: 00007fc889375bd9 [ 735.426051][T14112] RDX: 0000000000004040 RSI: 0000000020000480 RDI: 0000000000000006 [ 735.434014][T14112] RBP: 00007fc88a1790a0 R08: 0000000000000000 R09: 0000000000000000 [ 735.441972][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.449925][T14112] R13: 000000000000006e R14: 00007fc889504038 R15: 00007ffd7ef0aa38 [ 735.457886][T14112] [ 735.542191][T14112] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2385'. [ 735.622186][ T5134] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 735.695571][T14122] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2388'. [ 735.832003][ T5134] usb 5-1: Using ep0 maxpacket: 8 [ 735.849189][ T5134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.870062][ T5134] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 735.883772][ T5134] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 735.896117][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.918463][ T5134] usb 5-1: config 0 descriptor?? [ 736.182162][ T5132] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 736.301070][ T5136] IPVS: starting estimator thread 0... [ 736.382184][ T5132] usb 1-1: Using ep0 maxpacket: 16 [ 736.388742][ T5134] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 736.402098][T14132] IPVS: using max 33 ests per chain, 79200 per kthread [ 736.416897][ T5136] usb 5-1: USB disconnect, device number 73 [ 736.426494][ T5132] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 736.442077][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.460960][ T5132] usb 1-1: Product: syz [ 736.469766][ T5132] usb 1-1: Manufacturer: syz [ 736.475398][ T5132] usb 1-1: SerialNumber: syz [ 736.493093][ T5132] usb 1-1: config 0 descriptor?? [ 736.510009][ T5132] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 736.525786][ T5132] dvb-usb: bulk message failed: -22 (2/0) [ 736.531808][ T5132] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 736.550456][ T5132] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 736.564618][ T5132] usb 1-1: media controller created [ 736.583734][ T5132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.600968][ T5132] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 736.610067][ T5132] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 736.619803][ T5134] usb 4-1: Using ep0 maxpacket: 8 [ 736.627857][ T5134] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.648314][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.667031][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 736.679843][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 736.694138][ T5134] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 736.703470][ T5134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.733892][ T5134] usb 4-1: config 0 descriptor?? [ 736.747374][ T5134] hso 4-1:0.0: Can't find BULK IN endpoint [ 736.753429][ T5132] rc_core: IR keymap rc-dtt200u not found [ 736.759246][ T5132] Registered IR keymap rc-empty [ 736.778285][ T5132] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 736.792961][T14126] loop0: detected capacity change from 0 to 6 [ 736.811315][T14126] Dev loop0: unable to read RDB block 6 [ 736.819542][ T5132] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input75 [ 736.822653][T14126] loop0: AHDI p1 [ 736.843289][ T5132] dvb-usb: schedule remote query interval to 300 msecs. [ 736.843586][T14126] loop0: partition table partially beyond EOD, truncated [ 736.850348][ T5132] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 737.155001][ T5131] dvb-usb: bulk message failed: -22 (1/0) [ 737.198780][ T5131] dvb-usb: error -22 while querying for an remote control event. [ 737.280239][ T5131] usb 4-1: USB disconnect, device number 92 [ 737.330559][T14143] netlink: 'syz.1.2394': attribute type 29 has an invalid length. [ 737.342704][T14143] netlink: 'syz.1.2394': attribute type 29 has an invalid length. [ 737.469358][ T5134] usb 1-1: USB disconnect, device number 69 [ 737.540226][ T5134] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 737.628992][T14154] Driver unsupported XDP return value 0 on prog (id 396) dev N/A, expect packet loss! [ 737.647784][T14156] binder: 14155:14156 ioctl c0306201 200003c0 returned -14 [ 737.712155][ T5132] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 737.896388][ T5132] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 737.906463][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.920158][ T5132] usb 2-1: config 0 descriptor?? [ 737.927327][ T5132] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 737.933975][ T5131] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 738.122235][ T5131] usb 3-1: Using ep0 maxpacket: 8 [ 738.142691][ T5131] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.158412][ T5131] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 738.167590][ T5131] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 738.176783][ T5131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.187567][ T5131] usb 3-1: config 0 descriptor?? [ 738.429293][ T5136] IPVS: starting estimator thread 0... [ 738.449764][ T5136] usb 3-1: USB disconnect, device number 69 [ 738.542392][T14172] IPVS: using max 24 ests per chain, 57600 per kthread [ 738.560227][ T5132] gspca_sonixj: reg_w1 err -71 [ 738.570884][ T5132] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 738.592686][ T5132] usb 2-1: USB disconnect, device number 65 [ 738.872107][ T785] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 738.882474][T14179] kvm: pic: non byte write [ 738.893553][T14181] kvm: pic: non byte write [ 739.074999][ T785] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 739.096325][ T785] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 739.125978][ T785] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.135201][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.165685][T14174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 740.724014][T14212] binder: 14211:14212 ioctl c0306201 200003c0 returned -14 [ 740.739915][T14215] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x38414762, 8, 0, 0, 0) [ 740.792006][ T930] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 741.153543][ T5135] usb 5-1: USB disconnect, device number 74 [ 741.862155][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 741.877484][ T930] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 741.890260][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.900265][ T930] usb 4-1: Product: syz [ 741.904644][ T930] usb 4-1: Manufacturer: syz [ 741.909355][ T930] usb 4-1: SerialNumber: syz [ 741.914178][ T5132] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 741.924866][ T930] usb 4-1: config 0 descriptor?? [ 741.933813][ T930] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 741.943537][ T930] dvb-usb: bulk message failed: -22 (2/0) [ 741.944178][T14226] kvm: pic: non byte write [ 741.949251][ T930] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 741.949926][ T930] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 741.973384][ T930] usb 4-1: media controller created [ 741.980124][ T930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.998518][ T930] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 742.008451][ T930] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 742.082074][ T930] rc_core: IR keymap rc-dtt200u not found [ 742.089863][ T930] Registered IR keymap rc-empty [ 742.095897][ T930] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 742.110411][ T930] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input77 [ 742.124657][ T5132] usb 1-1: Using ep0 maxpacket: 8 [ 742.129843][ T5134] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 742.140255][ T5132] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.151431][ T930] dvb-usb: schedule remote query interval to 300 msecs. [ 742.158620][ T930] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 742.169951][ T5132] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.179593][ T5132] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 742.192435][ T930] usb 4-1: USB disconnect, device number 93 [ 742.198946][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.303190][ T5132] usb 1-1: config 0 descriptor?? [ 742.343537][ T930] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 742.399684][ T5134] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 742.408513][ T5134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.421379][ T5134] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 742.430776][ T5134] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 742.438791][ T5134] usb 3-1: Manufacturer: syz [ 742.445689][ T5134] usb 3-1: config 0 descriptor?? [ 742.511971][ T5134] rc_core: IR keymap rc-hauppauge not found [ 742.517919][ T5134] Registered IR keymap rc-empty [ 742.544582][ T5134] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 742.569120][ T930] usb 1-1: USB disconnect, device number 70 [ 742.580467][ T5134] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input78 [ 742.632823][ T5136] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 742.775263][T14224] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2419'. [ 742.844882][ T5136] usb 5-1: Using ep0 maxpacket: 16 [ 742.868960][ T5136] usb 5-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 742.889900][ T5136] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.908582][ T5136] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 742.928140][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.949092][ T5136] usb 5-1: config 0 descriptor?? [ 742.979835][ T5134] usb 3-1: USB disconnect, device number 70 [ 743.191234][ T5136] usb 5-1: string descriptor 0 read error: -71 [ 743.214155][ T5136] usb 5-1: USB disconnect, device number 75 [ 744.081360][T14264] random: crng reseeded on system resumption [ 744.655188][ T5093] Bluetooth: hci0: command 0x0406 tx timeout [ 745.990372][T14288] binder: 14287:14288 ioctl c0306201 200003c0 returned -14 [ 746.352007][ T785] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 746.502678][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'. [ 746.582146][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 746.804824][ T785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.815217][ T785] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.824824][ T785] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 746.833930][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.844230][ T785] usb 3-1: config 0 descriptor?? [ 746.882012][ T5135] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 747.061998][ T5135] usb 1-1: Using ep0 maxpacket: 16 [ 747.080581][ T5135] usb 1-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 747.106059][ T5135] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 747.115925][ T5135] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 747.125207][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.130617][ T5132] usb 3-1: USB disconnect, device number 71 [ 747.140517][ T5135] usb 1-1: config 0 descriptor?? [ 747.453649][ T5135] usb 1-1: string descriptor 0 read error: -71 [ 747.464101][ T5135] usb 1-1: USB disconnect, device number 71 [ 747.661179][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.668043][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.265662][T14324] FAULT_INJECTION: forcing a failure. [ 748.265662][T14324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.286334][T14324] CPU: 0 PID: 14324 Comm: syz.4.2446 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 748.296513][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 748.306570][T14324] Call Trace: [ 748.309851][T14324] [ 748.312790][T14324] dump_stack_lvl+0x241/0x360 [ 748.317489][T14324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.322702][T14324] ? __pfx__printk+0x10/0x10 [ 748.327309][T14324] ? __pfx_lock_release+0x10/0x10 [ 748.332348][T14324] should_fail_ex+0x3b0/0x4e0 [ 748.337051][T14324] _copy_from_user+0x2f/0xe0 [ 748.341656][T14324] copy_msghdr_from_user+0xae/0x680 [ 748.346866][T14324] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 748.352703][T14324] __sys_sendmsg+0x23d/0x3a0 [ 748.357306][T14324] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.362423][T14324] ? vfs_write+0x7c4/0xc90 [ 748.366893][T14324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.373233][T14324] ? do_syscall_64+0x100/0x230 [ 748.378003][T14324] ? do_syscall_64+0xb6/0x230 [ 748.382689][T14324] do_syscall_64+0xf3/0x230 [ 748.387198][T14324] ? clear_bhb_loop+0x35/0x90 [ 748.391881][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.397792][T14324] RIP: 0033:0x7fbb57f75bd9 [ 748.402215][T14324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.421825][T14324] RSP: 002b:00007fbb58dbc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.430250][T14324] RAX: ffffffffffffffda RBX: 00007fbb58103f60 RCX: 00007fbb57f75bd9 [ 748.438232][T14324] RDX: 0000000000000000 RSI: 0000000020004380 RDI: 0000000000000003 [ 748.446211][T14324] RBP: 00007fbb58dbc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 748.454197][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.462177][T14324] R13: 000000000000000b R14: 00007fbb58103f60 R15: 00007ffcaec0a308 [ 748.470171][T14324] [ 748.905621][T14328] program syz.0.2447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.283130][ T5132] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 749.463649][ T5132] usb 1-1: config 0 has no interfaces? [ 749.472301][ T5132] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 749.667040][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.684799][ T5132] usb 1-1: config 0 descriptor?? [ 749.924221][ T930] usb 1-1: USB disconnect, device number 72 [ 750.263452][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.281253][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.301771][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.321808][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.332160][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.339575][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.367410][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.385400][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.401960][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.419799][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.431953][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.439380][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.477391][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.518332][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.538659][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.558963][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.566665][ T5132] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 750.604272][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.611729][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.864551][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.872050][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.879469][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.886957][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.897263][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.904719][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.913204][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.920982][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.928708][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.984447][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 750.992118][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 751.002724][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 751.010158][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 751.017872][ T930] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 751.022080][ T5135] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 751.027056][ T5132] usb 3-1: config 0 has no interfaces? [ 751.038728][ T5132] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 751.048029][ T5132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.059239][ T930] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 751.071336][ T5132] usb 3-1: config 0 descriptor?? [ 751.222151][ T5135] usb 5-1: Using ep0 maxpacket: 16 [ 751.238460][ T5135] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 751.264893][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 751.284886][ T5135] usb 5-1: Product: syz [ 751.296480][ T5135] usb 5-1: Manufacturer: syz [ 751.310629][ T5135] usb 5-1: SerialNumber: syz [ 751.328573][ T5135] usb 5-1: config 0 descriptor?? [ 751.549808][T14365] binder: 14364:14365 ioctl c0306201 200003c0 returned -14 [ 751.573784][ T5135] usb 5-1: USB disconnect, device number 76 [ 751.672025][ T930] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 751.862246][ T5132] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 751.901966][ T930] usb 2-1: Using ep0 maxpacket: 16 [ 751.911164][ T930] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 751.941911][ T930] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 751.950029][ T930] usb 2-1: Product: syz [ 751.962448][ T930] usb 2-1: Manufacturer: syz [ 751.967060][ T930] usb 2-1: SerialNumber: syz [ 751.987233][ T930] usb 2-1: config 0 descriptor?? [ 752.072135][ T5132] usb 1-1: Using ep0 maxpacket: 8 [ 752.101209][ T5132] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.126181][ T5132] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 752.143151][ T5132] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 752.152877][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.175324][ T5132] usb 1-1: config 0 descriptor?? [ 752.294700][T14379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.414570][ T5134] usb 1-1: USB disconnect, device number 73 [ 752.841975][ T785] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 753.033884][ T785] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 753.051845][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.069618][ T785] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 753.079345][ T785] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 753.125247][ T785] usb 4-1: Manufacturer: syz [ 753.149851][ T785] usb 4-1: config 0 descriptor?? [ 753.230493][ T5135] usb 3-1: USB disconnect, device number 72 [ 753.359466][ T785] rc_core: IR keymap rc-hauppauge not found [ 753.386887][ T785] Registered IR keymap rc-empty [ 753.392069][T14386] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2465'. [ 753.427463][ T785] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 753.461305][ T785] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 753.517447][ T785] usb 4-1: USB disconnect, device number 94 [ 753.783367][T13133] Bluetooth: hci0: unexpected subevent 0x06 length: 5 < 10 [ 754.195206][T14420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.366285][ T5135] usb 2-1: USB disconnect, device number 66 [ 754.446022][T14426] binder: 14425:14426 ioctl c0306201 200003c0 returned -14 [ 754.572300][ T930] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 754.772679][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 754.795534][ T930] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 754.815334][ T5134] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 754.825426][ T930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.851222][ T930] usb 4-1: Product: syz [ 754.866726][ T930] usb 4-1: Manufacturer: syz [ 754.876812][ T930] usb 4-1: SerialNumber: syz [ 754.901363][ T930] usb 4-1: config 0 descriptor?? [ 754.920229][ T930] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 754.940910][ T930] dvb-usb: bulk message failed: -22 (2/0) [ 754.951321][ T930] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 754.991203][ T930] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 755.016771][ T930] usb 4-1: media controller created [ 755.028254][ T930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.052069][ T5134] usb 5-1: Using ep0 maxpacket: 8 [ 755.059660][ T5134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.094406][ T5134] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 755.105698][ T930] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 755.126583][ T5134] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 755.142070][ T930] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 755.171707][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.198274][ T5134] usb 5-1: config 0 descriptor?? [ 755.332609][ T930] rc_core: IR keymap rc-dtt200u not found [ 755.339096][ T930] Registered IR keymap rc-empty [ 755.366305][ T930] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 755.402028][ T930] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input80 [ 755.446432][ T930] dvb-usb: schedule remote query interval to 300 msecs. [ 755.474238][ T930] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 755.502972][ T5131] usb 5-1: USB disconnect, device number 77 [ 755.528236][ T930] usb 4-1: USB disconnect, device number 95 [ 755.585440][ T930] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 756.439595][T14454] overlayfs: failed to resolve './file0': -2 [ 756.564576][T14456] input: syz0 as /devices/virtual/input/input81 [ 757.253979][T14462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.327856][T13133] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 757.337864][T13133] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 757.414123][T14469] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 757.449469][T14469] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 757.832084][ T785] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 758.012275][ T785] usb 4-1: Using ep0 maxpacket: 16 [ 758.026784][ T785] usb 4-1: config 8 has an invalid interface number: 159 but max is 1 [ 758.045418][ T785] usb 4-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 758.072202][ T785] usb 4-1: config 8 has no interface number 0 [ 758.088936][ T785] usb 4-1: config 8 interface 159 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 758.130928][ T785] usb 4-1: config 8 interface 159 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 758.172128][ T785] usb 4-1: too many endpoints for config 8 interface 1 altsetting 1: 99, using maximum allowed: 30 [ 758.200752][ T785] usb 4-1: config 8 interface 1 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 758.231250][ T785] usb 4-1: config 8 interface 1 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 758.262361][ T785] usb 4-1: config 8 interface 1 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 758.290326][ T785] usb 4-1: config 8 interface 1 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 99 [ 758.332174][ T785] usb 4-1: config 8 interface 159 has no altsetting 0 [ 758.349731][ T785] usb 4-1: config 8 interface 1 has no altsetting 0 [ 758.366650][ T785] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 758.393466][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.401505][ T785] usb 4-1: Product: 䐊 [ 758.437115][ T785] usb 4-1: Manufacturer: ﻮ䨙഼ꏣ닁ꅼ䶸쨠걷찤匌奅瞽扡涨䧷厂ⵓ咐镼秊岓￞ῥ㠫⪍ạ⚠﫮㲤Ꞙە鵾쾘ຎffl留닪㾻谤網ᯀ銨儎甉둰䆼麁ꬭ醏Ұ庈蘻ꐱ畊⭠맲뒩ﾊ춮鶆Ⱚᑬꂗ초璾쑬꭫攃鍗ꈱ垺፻ﱔ넬䕜ꗪ攸孶⊱큥몯싶᳿䀖睤ᕢ崏뿇揉砡䈶 [ 758.557415][ T785] usb 4-1: SerialNumber: 躌ቷ糐疄⩛匎ꯀ퓡ᦙ놗萸兒日㍽첣⭩崛៫ᅄ즆中㻎䤠㰻ﾤ稐⣾됕쾫룦閩簾ई욺荜烂⯫阅ꮾ鄣庍壇㔫盕갽鿓铜퓹ﭏ虈黻ጊ⡃䷦蘢ǔ㔤<仡昪륏瑒ʑ≒૎僸賚Ҿ鐺⻊稬栻熩⮛ [ 759.332738][T13133] Bluetooth: hci0: command 0x0406 tx timeout [ 759.532180][ T785] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 759.564440][ T785] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 759.600444][ T785] dib0700: firmware download failed at 7 with -22 [ 759.637364][ T785] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 759.671024][ T785] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 759.703051][ T785] dib0700: firmware download failed at 7 with -22 [ 759.783846][ T785] usb 4-1: USB disconnect, device number 96 [ 760.042140][T14509] input: syz0 as /devices/virtual/input/input82 [ 760.570995][T14513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.935404][T14527] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 760.956664][T14527] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 761.374917][T14537] kvm: pic: non byte write [ 761.528108][T14546] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 761.581496][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 761.653940][ T29] audit: type=1326 audit(1720840648.489:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 761.702445][ T29] audit: type=1326 audit(1720840648.489:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 761.724019][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.746009][ T29] audit: type=1326 audit(1720840648.519:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 761.817872][ T29] audit: type=1326 audit(1720840648.519:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 761.839455][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.866222][ T29] audit: type=1326 audit(1720840648.519:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 761.887814][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.905360][ T29] audit: type=1326 audit(1720840648.519:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 761.937200][ T29] audit: type=1326 audit(1720840648.659:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 761.980374][ T29] audit: type=1326 audit(1720840648.659:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14545 comm="syz.1.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 762.861738][T14567] validate_nla: 1 callbacks suppressed [ 762.861759][T14567] netlink: 'syz.3.2515': attribute type 8 has an invalid length. [ 762.879457][T14567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.007784][T14567] syz.3.2515 (14567) used greatest stack depth: 18616 bytes left [ 763.784837][T14586] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 763.812042][T14586] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 764.477080][T14598] kvm: pic: non byte write [ 765.053386][T14613] netlink: 'syz.3.2529': attribute type 8 has an invalid length. [ 765.069013][T14613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.784035][T14631] program syz.0.2538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 765.932677][ T2882] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe5 [ 766.000696][ T5132] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 766.081967][ T5134] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 766.204870][ T5132] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 766.221943][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.257092][ T5132] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 766.272059][ T5132] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 766.280115][ T5132] usb 5-1: Manufacturer: syz [ 766.300109][ T5132] usb 5-1: config 0 descriptor?? [ 766.353764][ T5134] usb 1-1: config 0 has no interfaces? [ 766.365996][ T5134] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 766.726343][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.747837][ T5134] usb 1-1: config 0 descriptor?? [ 766.763291][T14626] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2534'. [ 766.892038][ T5132] rc_core: IR keymap rc-hauppauge not found [ 766.907841][ T5132] Registered IR keymap rc-empty [ 766.958131][ T5132] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 767.003365][ T5132] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input83 [ 767.111099][ T5134] usb 1-1: USB disconnect, device number 74 [ 767.131231][ T5132] usb 5-1: USB disconnect, device number 78 [ 767.762072][ T5132] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 767.981072][ T5132] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 768.005855][ T5132] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 768.022358][ T785] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 768.033034][ T5132] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 768.052150][ T5132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.074015][T14664] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 768.241981][ T785] usb 1-1: Using ep0 maxpacket: 16 [ 768.253108][ T785] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 768.271618][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.286094][ T785] usb 1-1: Product: syz [ 768.290334][ T785] usb 1-1: Manufacturer: syz [ 768.302959][ T785] usb 1-1: SerialNumber: syz [ 768.333036][ T785] usb 1-1: config 0 descriptor?? [ 768.365409][ T785] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 768.392676][ T785] dvb-usb: bulk message failed: -22 (2/0) [ 768.412097][ T785] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 768.441179][ T785] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 768.460361][ T785] usb 1-1: media controller created [ 768.483672][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 768.523464][ T785] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 768.532691][ T785] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 768.734521][ T785] rc_core: IR keymap rc-dtt200u not found [ 768.770032][ T785] Registered IR keymap rc-empty [ 769.039741][ T785] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 769.053510][ T785] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input84 [ 769.067720][ T785] dvb-usb: schedule remote query interval to 300 msecs. [ 769.074985][ T785] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 769.094780][ T785] usb 1-1: USB disconnect, device number 75 [ 769.119276][ T5093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 769.159754][ T5093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 769.265681][ T5093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 769.277314][ T5093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 769.288704][ T5093] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 769.298949][ T5093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 769.364722][ T5132] usb 3-1: USB disconnect, device number 73 [ 769.747485][ T785] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 769.886907][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.908014][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.986897][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 769.993763][ T5093] Bluetooth: Wrong link type (-22) [ 769.999077][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 770.006462][ T5093] Bluetooth: Wrong link type (-22) [ 770.012717][ T5093] Bluetooth: hci3: link tx timeout [ 770.020851][ T5093] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 770.049056][ T5093] Bluetooth: hci3: link tx timeout [ 770.054695][ T5093] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 770.109352][T14682] lo speed is unknown, defaulting to 1000 [ 770.405180][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.418300][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.565118][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.595837][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.642110][ T5132] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 770.795526][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 770.832183][ T5132] usb 5-1: Using ep0 maxpacket: 16 [ 770.854779][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.894854][ T5132] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 770.914008][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.924258][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.962455][ T5132] usb 5-1: Product: syz [ 770.979855][ T5132] usb 5-1: Manufacturer: syz [ 770.990053][ T5132] usb 5-1: SerialNumber: syz [ 771.006640][ T5132] usb 5-1: config 0 descriptor?? [ 771.025195][ T5132] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 771.493041][ T5093] Bluetooth: hci6: command tx timeout [ 771.511448][T14720] overlayfs: failed to resolve './file0': -2 [ 771.766270][ T51] bridge_slave_1: left allmulticast mode [ 771.774033][ T51] bridge_slave_1: left promiscuous mode [ 771.803457][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.837597][ T51] bridge_slave_0: left allmulticast mode [ 771.879930][ T51] bridge_slave_0: left promiscuous mode [ 771.912565][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.932461][ T5132] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 772.132333][ T5093] Bluetooth: hci3: command 0x0406 tx timeout [ 772.839215][T14731] devpts: called with bogus options [ 773.572028][ T5093] Bluetooth: hci6: command tx timeout [ 774.032182][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.045125][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.055670][ T51] bond0 (unregistering): Released all slaves [ 774.071441][ T51] bond1 (unregistering): Released all slaves [ 774.090284][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2553'. [ 774.111589][ T930] usb 5-1: USB disconnect, device number 79 [ 774.214267][ T5093] Bluetooth: hci3: command 0x0406 tx timeout [ 774.243622][ T51] tipc: Disabling bearer [ 774.266553][T14682] chnl_net:caif_netlink_parms(): no params data found [ 774.273506][ T51] tipc: Left network mode [ 774.817790][T13133] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 774.916619][T14682] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.931642][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.943399][T14682] bridge_slave_0: entered allmulticast mode [ 774.956026][T14682] bridge_slave_0: entered promiscuous mode [ 774.981610][T14682] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.999144][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.018169][T14682] bridge_slave_1: entered allmulticast mode [ 775.031699][T14682] bridge_slave_1: entered promiscuous mode [ 775.080454][ T51] hsr_slave_0: left promiscuous mode [ 775.098721][ T51] hsr_slave_1: left promiscuous mode [ 775.115071][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.144966][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.169420][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.187396][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.232497][ T51] veth1_macvtap: left promiscuous mode [ 775.242018][ T51] veth0_macvtap: left promiscuous mode [ 775.247701][ T51] veth1_vlan: left promiscuous mode [ 775.259160][ T51] veth0_vlan: left promiscuous mode [ 775.660480][T13133] Bluetooth: hci6: command tx timeout [ 776.056539][T14788] devpts: called with bogus options [ 776.827441][T14795] FAULT_INJECTION: forcing a failure. [ 776.827441][T14795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.848035][T14795] CPU: 1 PID: 14795 Comm: syz.0.2571 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 776.858218][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 776.868286][T14795] Call Trace: [ 776.871575][T14795] [ 776.874515][T14795] dump_stack_lvl+0x241/0x360 [ 776.879223][T14795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.884443][T14795] ? __pfx__printk+0x10/0x10 [ 776.889057][T14795] ? __pfx_lock_release+0x10/0x10 [ 776.894102][T14795] should_fail_ex+0x3b0/0x4e0 [ 776.898812][T14795] _copy_from_user+0x2f/0xe0 [ 776.903425][T14795] do_pagemap_cmd+0x112/0x1330 [ 776.908205][T14795] ? tomoyo_path_number_perm+0x208/0x880 [ 776.913864][T14795] ? smack_log+0x123/0x540 [ 776.918303][T14795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.924312][T14795] ? __pfx_smack_log+0x10/0x10 [ 776.929100][T14795] ? smk_access+0x4ab/0x4e0 [ 776.933639][T14795] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 776.938874][T14795] ? __fget_files+0x3f6/0x470 [ 776.943574][T14795] ? __fget_files+0x29/0x470 [ 776.948209][T14795] ? bpf_lsm_file_ioctl+0x9/0x10 [ 776.953183][T14795] ? security_file_ioctl+0x87/0xb0 [ 776.958317][T14795] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 776.963549][T14795] __se_sys_ioctl+0xfc/0x170 [ 776.968172][T14795] do_syscall_64+0xf3/0x230 [ 776.972701][T14795] ? clear_bhb_loop+0x35/0x90 [ 776.977397][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.983315][T14795] RIP: 0033:0x7f06c8975bd9 [ 776.987752][T14795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.007376][T14795] RSP: 002b:00007f06c9816048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.015799][T14795] RAX: ffffffffffffffda RBX: 00007f06c8b03f60 RCX: 00007f06c8975bd9 [ 777.023791][T14795] RDX: 0000000020000040 RSI: 00000000c0606610 RDI: 0000000000000003 [ 777.031770][T14795] RBP: 00007f06c98160a0 R08: 0000000000000000 R09: 0000000000000000 [ 777.039742][T14795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.047754][T14795] R13: 000000000000000b R14: 00007f06c8b03f60 R15: 00007ffc846b35b8 [ 777.055751][T14795] [ 777.598815][ T51] team0 (unregistering): Port device team_slave_1 removed [ 777.678802][ T51] team0 (unregistering): Port device team_slave_0 removed [ 777.732467][T13133] Bluetooth: hci6: command tx timeout [ 778.309733][T14682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.370472][T14682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.415016][T14809] FAULT_INJECTION: forcing a failure. [ 778.415016][T14809] name failslab, interval 1, probability 0, space 0, times 0 [ 778.523167][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'. [ 778.553538][T14809] CPU: 0 PID: 14809 Comm: syz.4.2575 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 778.563740][T14809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 778.573816][T14809] Call Trace: [ 778.577101][T14809] [ 778.580033][T14809] dump_stack_lvl+0x241/0x360 [ 778.584727][T14809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.589950][T14809] ? __pfx__printk+0x10/0x10 [ 778.594577][T14809] ? __pfx___might_resched+0x10/0x10 [ 778.599900][T14809] should_fail_ex+0x3b0/0x4e0 [ 778.604603][T14809] ? snd_hrtimer_open+0x51/0xf0 [ 778.609502][T14809] should_failslab+0x9/0x20 [ 778.614027][T14809] kmalloc_trace_noprof+0x6c/0x2c0 [ 778.619169][T14809] snd_hrtimer_open+0x51/0xf0 [ 778.623867][T14809] snd_timer_open+0xf7a/0x1280 [ 778.628669][T14809] ? trace_kmalloc+0x1f/0xd0 [ 778.633281][T14809] ? __pfx_snd_timer_open+0x10/0x10 [ 778.638505][T14809] ? __asan_memcpy+0x40/0x70 [ 778.643121][T14809] ? kstrdup+0x55/0x80 [ 778.647211][T14809] snd_seq_timer_open+0x2b6/0x6f0 [ 778.652263][T14809] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 778.657834][T14809] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 778.663749][T14809] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 778.670106][T14809] ? snd_seq_timer_defaults+0x30c/0x580 [ 778.675713][T14809] snd_seq_queue_alloc+0x44d/0x760 [ 778.680845][T14809] snd_seq_ioctl_create_queue+0x83/0x360 [ 778.686495][T14809] snd_seq_ioctl+0x232/0x400 [ 778.691109][T14809] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 778.696277][T14809] ? smack_file_ioctl+0x2fa/0x3a0 [ 778.701351][T14809] ? bpf_lsm_file_ioctl+0x9/0x10 [ 778.706304][T14809] ? security_file_ioctl+0x87/0xb0 [ 778.711431][T14809] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 778.716567][T14809] __se_sys_ioctl+0xfc/0x170 [ 778.721186][T14809] do_syscall_64+0xf3/0x230 [ 778.725706][T14809] ? clear_bhb_loop+0x35/0x90 [ 778.730391][T14809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.736275][T14809] RIP: 0033:0x7fbb57f75bd9 [ 778.740678][T14809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.760272][T14809] RSP: 002b:00007fbb58dbc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.768721][T14809] RAX: ffffffffffffffda RBX: 00007fbb58103f60 RCX: 00007fbb57f75bd9 [ 778.776774][T14809] RDX: 00000000200001c0 RSI: 00000000c08c5332 RDI: 0000000000000006 [ 778.784727][T14809] RBP: 00007fbb58dbc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 778.792683][T14809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 778.800641][T14809] R13: 000000000000000b R14: 00007fbb58103f60 R15: 00007ffcaec0a308 [ 778.808607][T14809] [ 780.478443][T14682] team0: Port device team_slave_0 added [ 780.515695][T14829] devpts: called with bogus options [ 780.543856][T14682] team0: Port device team_slave_1 added [ 780.845638][T14682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.876817][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.890147][T14837] program syz.4.2581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.964019][T14682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.992289][T14682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.002298][T14682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.076756][T14682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.257803][T14682] hsr_slave_0: entered promiscuous mode [ 781.267855][T14682] hsr_slave_1: entered promiscuous mode [ 781.291857][T14682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.318915][T14682] Cannot create hsr debugfs directory [ 781.357516][ T51] IPVS: stop unused estimator thread 0... [ 781.392061][ T8] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 781.579641][ T8] usb 5-1: config 0 has no interfaces? [ 781.587471][ T8] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 781.637331][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.675014][ T8] usb 5-1: config 0 descriptor?? [ 781.725945][T14850] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 781.773484][T14850] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 782.253039][ T5132] usb 5-1: USB disconnect, device number 80 [ 782.635628][T14682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 782.677835][T14682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 782.703411][T14682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 782.756795][T14682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 782.759720][ T8] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 782.955350][T14881] devpts: called with bogus options [ 783.060005][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.247263][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 783.472268][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 783.559842][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.591513][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.619195][ T8] usb 3-1: config 0 descriptor?? [ 783.704802][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.748826][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.756174][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.884299][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.891631][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.052282][ T8] usb 3-1: string descriptor 0 read error: -71 [ 784.091143][ T29] audit: type=1326 audit(1720840670.929:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.136768][ T8] usb 3-1: USB disconnect, device number 74 [ 784.167547][T14682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 784.195479][ T29] audit: type=1326 audit(1720840670.929:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.219766][ T29] audit: type=1326 audit(1720840670.929:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.241696][ T29] audit: type=1326 audit(1720840670.929:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.263280][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.317105][ T29] audit: type=1326 audit(1720840670.929:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.365628][ T29] audit: type=1326 audit(1720840670.929:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.409140][ T29] audit: type=1326 audit(1720840670.929:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.430718][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.437659][ T29] audit: type=1326 audit(1720840670.929:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.460921][ T29] audit: type=1326 audit(1720840670.929:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.516941][ T29] audit: type=1326 audit(1720840670.929:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.1.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f295af75bd9 code=0x7ffc0000 [ 784.603354][T14682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.702008][ T8] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 784.727370][T14682] veth0_vlan: entered promiscuous mode [ 784.768033][T14682] veth1_vlan: entered promiscuous mode [ 784.928199][ T8] usb 2-1: device descriptor read/64, error -71 [ 784.976607][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 784.979596][T14682] veth0_macvtap: entered promiscuous mode [ 785.706509][ T5093] Bluetooth: Wrong link type (-22) [ 785.712631][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 785.719327][ T5093] Bluetooth: Wrong link type (-22) [ 785.729764][ T5093] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 785.739051][ T5093] Bluetooth: Wrong link type (-22) [ 785.744395][ T5093] ================================================================== [ 785.752466][ T5093] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x679/0x8d0 [ 785.760102][ T5093] Read of size 4 at addr ffff88807927c010 by task kworker/u9:6/5093 [ 785.768059][ T5093] [ 785.770364][ T5093] CPU: 0 PID: 5093 Comm: kworker/u9:6 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 785.780577][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 785.790612][ T5093] Workqueue: hci7 hci_rx_work [ 785.795279][ T5093] Call Trace: [ 785.798539][ T5093] [ 785.801453][ T5093] dump_stack_lvl+0x241/0x360 [ 785.806124][ T5093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.811324][ T5093] ? __pfx__printk+0x10/0x10 [ 785.815926][ T5093] ? _printk+0xd5/0x120 [ 785.820068][ T5093] ? __virt_addr_valid+0x183/0x530 [ 785.825164][ T5093] ? __virt_addr_valid+0x183/0x530 [ 785.830259][ T5093] print_report+0x169/0x550 [ 785.834746][ T5093] ? __virt_addr_valid+0x183/0x530 [ 785.839862][ T5093] ? __virt_addr_valid+0x183/0x530 [ 785.844969][ T5093] ? __virt_addr_valid+0x45f/0x530 [ 785.850063][ T5093] ? __phys_addr+0xba/0x170 [ 785.854565][ T5093] ? l2cap_send_cmd+0x679/0x8d0 [ 785.859417][ T5093] kasan_report+0x143/0x180 [ 785.863914][ T5093] ? l2cap_send_cmd+0x679/0x8d0 [ 785.868761][ T5093] l2cap_send_cmd+0x679/0x8d0 [ 785.873430][ T5093] ? skb_pull+0xc1/0x1e0 [ 785.877667][ T5093] l2cap_recv_frame+0x22ed/0x10830 [ 785.882792][ T5093] ? validate_chain+0x11e/0x5900 [ 785.887736][ T5093] ? validate_chain+0x11e/0x5900 [ 785.892672][ T5093] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 785.898038][ T5093] ? __lock_acquire+0x1346/0x1fd0 [ 785.903055][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 785.908253][ T5093] ? __pfx_lock_acquire+0x10/0x10 [ 785.913266][ T5093] ? bpf_trace_run2+0x1fc/0x540 [ 785.918117][ T5093] ? __pfx_lock_release+0x10/0x10 [ 785.923141][ T5093] ? mark_lock+0x9a/0x350 [ 785.927472][ T5093] ? hci_rx_work+0x4e7/0xca0 [ 785.932059][ T5093] ? __pfx_lock_release+0x10/0x10 [ 785.937080][ T5093] ? __mutex_unlock_slowpath+0x21d/0x750 [ 785.942704][ T5093] ? __pfx_lock_release+0x10/0x10 [ 785.947716][ T5093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 785.953684][ T5093] ? hci_conn_enter_active_mode+0x260/0x370 [ 785.959573][ T5093] ? l2cap_recv_acldata+0x48e/0x1550 [ 785.964852][ T5093] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 785.970731][ T5093] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 785.976701][ T5093] hci_rx_work+0x50f/0xca0 [ 785.981114][ T5093] ? process_scheduled_works+0x945/0x1830 [ 785.986818][ T5093] process_scheduled_works+0xa2c/0x1830 [ 785.992360][ T5093] ? __pfx_process_scheduled_works+0x10/0x10 [ 785.998327][ T5093] ? assign_work+0x364/0x3d0 [ 786.002907][ T5093] worker_thread+0x86d/0xd50 [ 786.007489][ T5093] ? __kthread_parkme+0x169/0x1d0 [ 786.012502][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 786.017604][ T5093] kthread+0x2f0/0x390 [ 786.021661][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 786.026761][ T5093] ? __pfx_kthread+0x10/0x10 [ 786.031342][ T5093] ret_from_fork+0x4b/0x80 [ 786.035750][ T5093] ? __pfx_kthread+0x10/0x10 [ 786.040328][ T5093] ret_from_fork_asm+0x1a/0x30 [ 786.045091][ T5093] [ 786.048094][ T5093] [ 786.050398][ T5093] Allocated by task 5093: [ 786.054706][ T5093] kasan_save_track+0x3f/0x80 [ 786.059372][ T5093] __kasan_kmalloc+0x98/0xb0 [ 786.063948][ T5093] kmalloc_trace_noprof+0x19c/0x2c0 [ 786.069132][ T5093] l2cap_conn_add+0xa9/0x8e0 [ 786.073712][ T5093] l2cap_connect_cfm+0x136/0x1220 [ 786.078720][ T5093] hci_remote_features_evt+0x536/0xaf0 [ 786.084170][ T5093] hci_event_packet+0xac0/0x1540 [ 786.089096][ T5093] hci_rx_work+0x3e8/0xca0 [ 786.093499][ T5093] process_scheduled_works+0xa2c/0x1830 [ 786.099029][ T5093] worker_thread+0x86d/0xd50 [ 786.103604][ T5093] kthread+0x2f0/0x390 [ 786.107659][ T5093] ret_from_fork+0x4b/0x80 [ 786.112063][ T5093] ret_from_fork_asm+0x1a/0x30 [ 786.116813][ T5093] [ 786.119130][ T5093] Freed by task 13133: [ 786.123188][ T5093] kasan_save_track+0x3f/0x80 [ 786.127854][ T5093] kasan_save_free_info+0x40/0x50 [ 786.132866][ T5093] poison_slab_object+0xe0/0x150 [ 786.137793][ T5093] __kasan_slab_free+0x37/0x60 [ 786.142546][ T5093] kfree+0x149/0x360 [ 786.146426][ T5093] l2cap_connect_cfm+0x11f/0x1220 [ 786.151435][ T5093] hci_conn_failed+0x1f6/0x340 [ 786.156184][ T5093] hci_abort_conn_sync+0x583/0xde0 [ 786.161287][ T5093] hci_cmd_sync_work+0x22b/0x400 [ 786.166209][ T5093] process_scheduled_works+0xa2c/0x1830 [ 786.171739][ T5093] worker_thread+0x86d/0xd50 [ 786.176313][ T5093] kthread+0x2f0/0x390 [ 786.180369][ T5093] ret_from_fork+0x4b/0x80 [ 786.184776][ T5093] ret_from_fork_asm+0x1a/0x30 [ 786.189530][ T5093] [ 786.191838][ T5093] Last potentially related work creation: [ 786.197532][ T5093] kasan_save_stack+0x3f/0x60 [ 786.202200][ T5093] __kasan_record_aux_stack+0xac/0xc0 [ 786.207560][ T5093] insert_work+0x3e/0x330 [ 786.211873][ T5093] __queue_work+0xc16/0xee0 [ 786.216363][ T5093] call_timer_fn+0x18e/0x650 [ 786.220948][ T5093] __run_timer_base+0x695/0x8e0 [ 786.225795][ T5093] run_timer_softirq+0xb7/0x170 [ 786.230633][ T5093] handle_softirqs+0x2c4/0x970 [ 786.235381][ T5093] __irq_exit_rcu+0xf4/0x1c0 [ 786.239954][ T5093] irq_exit_rcu+0x9/0x30 [ 786.244176][ T5093] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 786.249797][ T5093] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 786.255769][ T5093] [ 786.258075][ T5093] Second to last potentially related work creation: [ 786.264640][ T5093] kasan_save_stack+0x3f/0x60 [ 786.269308][ T5093] __kasan_record_aux_stack+0xac/0xc0 [ 786.274668][ T5093] insert_work+0x3e/0x330 [ 786.278980][ T5093] __queue_work+0xaf2/0xee0 [ 786.283470][ T5093] queue_work_on+0x1c2/0x380 [ 786.288050][ T5093] l2cap_connect_cfm+0xec2/0x1220 [ 786.293056][ T5093] hci_remote_features_evt+0x536/0xaf0 [ 786.298508][ T5093] hci_event_packet+0xac0/0x1540 [ 786.303434][ T5093] hci_rx_work+0x3e8/0xca0 [ 786.307840][ T5093] process_scheduled_works+0xa2c/0x1830 [ 786.313371][ T5093] worker_thread+0x86d/0xd50 [ 786.317945][ T5093] kthread+0x2f0/0x390 [ 786.322002][ T5093] ret_from_fork+0x4b/0x80 [ 786.326406][ T5093] ret_from_fork_asm+0x1a/0x30 [ 786.331160][ T5093] [ 786.333556][ T5093] The buggy address belongs to the object at ffff88807927c000 [ 786.333556][ T5093] which belongs to the cache kmalloc-1k of size 1024 [ 786.347678][ T5093] The buggy address is located 16 bytes inside of [ 786.347678][ T5093] freed 1024-byte region [ffff88807927c000, ffff88807927c400) [ 786.361456][ T5093] [ 786.363764][ T5093] The buggy address belongs to the physical page: [ 786.370167][ T5093] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79278 [ 786.378913][ T5093] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 786.387395][ T5093] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 786.394920][ T5093] page_type: 0xffffefff(slab) [ 786.399582][ T5093] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 786.408156][ T5093] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 786.416727][ T5093] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 786.425385][ T5093] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 786.434047][ T5093] head: 00fff00000000003 ffffea0001e49e01 ffffffffffffffff 0000000000000000 [ 786.442704][ T5093] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 786.451352][ T5093] page dumped because: kasan: bad access detected [ 786.457756][ T5093] page_owner tracks the page as allocated [ 786.463453][ T5093] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 61, tgid 61 (kworker/u8:4), ts 405394155299, free_ts 405346137328 [ 786.485407][ T5093] post_alloc_hook+0x1f3/0x230 [ 786.490165][ T5093] get_page_from_freelist+0x2e4c/0x2f10 [ 786.495705][ T5093] __alloc_pages_noprof+0x256/0x6c0 [ 786.500891][ T5093] alloc_slab_page+0x5f/0x120 [ 786.505560][ T5093] allocate_slab+0x5a/0x2f0 [ 786.510052][ T5093] ___slab_alloc+0xcd1/0x14b0 [ 786.514716][ T5093] __slab_alloc+0x58/0xa0 [ 786.519033][ T5093] kmalloc_node_track_caller_noprof+0x281/0x440 [ 786.525262][ T5093] kmalloc_reserve+0x111/0x2a0 [ 786.530013][ T5093] pskb_expand_head+0x202/0x1390 [ 786.534946][ T5093] batadv_skb_head_push+0x164/0x200 [ 786.540135][ T5093] batadv_send_skb_packet+0xee/0x670 [ 786.545407][ T5093] batadv_iv_send_outstanding_bat_ogm_packet+0x673/0x810 [ 786.552415][ T5093] process_scheduled_works+0xa2c/0x1830 [ 786.557948][ T5093] worker_thread+0x86d/0xd50 [ 786.562523][ T5093] kthread+0x2f0/0x390 [ 786.566578][ T5093] page last free pid 9675 tgid 9675 stack trace: [ 786.572884][ T5093] free_unref_page+0xd19/0xea0 [ 786.577633][ T5093] __put_partials+0xeb/0x130 [ 786.582213][ T5093] put_cpu_partial+0x17c/0x250 [ 786.586968][ T5093] __slab_free+0x2ea/0x3d0 [ 786.591381][ T5093] qlist_free_all+0x9e/0x140 [ 786.595971][ T5093] kasan_quarantine_reduce+0x14f/0x170 [ 786.601422][ T5093] __kasan_slab_alloc+0x23/0x80 [ 786.606262][ T5093] __kmalloc_noprof+0x1a3/0x400 [ 786.611107][ T5093] tracepoint_probe_unregister+0x25f/0x990 [ 786.616908][ T5093] bpf_raw_tp_link_release+0x45/0x70 [ 786.622187][ T5093] bpf_link_free+0xf5/0x250 [ 786.626690][ T5093] bpf_link_release+0x7b/0x90 [ 786.631362][ T5093] __fput+0x24a/0x8a0 [ 786.635348][ T5093] task_work_run+0x24f/0x310 [ 786.639932][ T5093] syscall_exit_to_user_mode+0x168/0x360 [ 786.645555][ T5093] do_syscall_64+0x100/0x230 [ 786.650132][ T5093] [ 786.652442][ T5093] Memory state around the buggy address: [ 786.658054][ T5093] ffff88807927bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 786.666097][ T5093] ffff88807927bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 786.674140][ T5093] >ffff88807927c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 786.682182][ T5093] ^ [ 786.686751][ T5093] ffff88807927c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 786.694797][ T5093] ffff88807927c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 786.702841][ T5093] ================================================================== [ 786.790625][ T5093] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 786.797897][ T5093] CPU: 1 PID: 5093 Comm: kworker/u9:6 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 786.808121][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 786.818163][ T5093] Workqueue: hci7 hci_rx_work [ 786.822855][ T5093] Call Trace: [ 786.826153][ T5093] [ 786.829091][ T5093] dump_stack_lvl+0x241/0x360 [ 786.833798][ T5093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.839027][ T5093] ? __pfx__printk+0x10/0x10 [ 786.843697][ T5093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 786.849715][ T5093] ? vscnprintf+0x5d/0x90 [ 786.854076][ T5093] panic+0x349/0x860 [ 786.857993][ T5093] ? check_panic_on_warn+0x21/0xb0 [ 786.863105][ T5093] ? __pfx_panic+0x10/0x10 [ 786.867520][ T5093] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 786.873488][ T5093] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 786.879802][ T5093] check_panic_on_warn+0x86/0xb0 [ 786.884735][ T5093] ? l2cap_send_cmd+0x679/0x8d0 [ 786.889580][ T5093] end_report+0x77/0x160 [ 786.893814][ T5093] kasan_report+0x154/0x180 [ 786.898304][ T5093] ? l2cap_send_cmd+0x679/0x8d0 [ 786.903147][ T5093] l2cap_send_cmd+0x679/0x8d0 [ 786.907819][ T5093] ? skb_pull+0xc1/0x1e0 [ 786.912058][ T5093] l2cap_recv_frame+0x22ed/0x10830 [ 786.917165][ T5093] ? validate_chain+0x11e/0x5900 [ 786.922099][ T5093] ? validate_chain+0x11e/0x5900 [ 786.927036][ T5093] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 786.932413][ T5093] ? __lock_acquire+0x1346/0x1fd0 [ 786.937445][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 786.942662][ T5093] ? __pfx_lock_acquire+0x10/0x10 [ 786.947683][ T5093] ? bpf_trace_run2+0x1fc/0x540 [ 786.952530][ T5093] ? __pfx_lock_release+0x10/0x10 [ 786.957543][ T5093] ? mark_lock+0x9a/0x350 [ 786.961866][ T5093] ? hci_rx_work+0x4e7/0xca0 [ 786.966459][ T5093] ? __pfx_lock_release+0x10/0x10 [ 786.971478][ T5093] ? __mutex_unlock_slowpath+0x21d/0x750 [ 786.977101][ T5093] ? __pfx_lock_release+0x10/0x10 [ 786.982115][ T5093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 786.988088][ T5093] ? hci_conn_enter_active_mode+0x260/0x370 [ 786.994056][ T5093] ? l2cap_recv_acldata+0x48e/0x1550 [ 786.999333][ T5093] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 787.005214][ T5093] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 787.011186][ T5093] hci_rx_work+0x50f/0xca0 [ 787.015603][ T5093] ? process_scheduled_works+0x945/0x1830 [ 787.021312][ T5093] process_scheduled_works+0xa2c/0x1830 [ 787.026863][ T5093] ? __pfx_process_scheduled_works+0x10/0x10 [ 787.032833][ T5093] ? assign_work+0x364/0x3d0 [ 787.037409][ T5093] worker_thread+0x86d/0xd50 [ 787.042004][ T5093] ? __kthread_parkme+0x169/0x1d0 [ 787.047033][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 787.052138][ T5093] kthread+0x2f0/0x390 [ 787.056195][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 787.061290][ T5093] ? __pfx_kthread+0x10/0x10 [ 787.065871][ T5093] ret_from_fork+0x4b/0x80 [ 787.070283][ T5093] ? __pfx_kthread+0x10/0x10 [ 787.074861][ T5093] ret_from_fork_asm+0x1a/0x30 [ 787.079622][ T5093] [ 787.082754][ T5093] Kernel Offset: disabled [ 787.087067][ T5093] Rebooting in 86400 seconds..