last executing test programs: 1m13.369494623s ago: executing program 1 (id=97): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[]) chmod(&(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000640)={{0x6, @rose, 0x80001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) creat(&(0x7f0000000300)='./file0\x00', 0x0) 1m13.352978397s ago: executing program 1 (id=98): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$pptp(0x18, 0x1, 0x2) socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x2d}, 0x28) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) writev(r5, &(0x7f0000002300)=[{&(0x7f0000000040)="0148a09a1f", 0x5}, {&(0x7f0000000080)="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", 0x1001}], 0x2) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x140f, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 1m12.458879183s ago: executing program 1 (id=103): socket$kcm(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x48a82, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x240}], 0x1}}], 0x1, 0x4000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd70f0bc000000010000000500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) r5 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r6 = socket(0x400000000010, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x40001) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0x10, 0x3, 0x0) 1m11.027385706s ago: executing program 1 (id=114): syz_io_uring_setup(0xec2, &(0x7f00000008c0)={0x0, 0x68a5}, 0x0, 0x0) inotify_init() memfd_create(&(0x7f0000000400)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\x02\x00\x10r\x9b~n`m:]#\x989\xc3psjO\x80n\\\xb9\x9b\xeami\xd1\x9cSL\xb6\x87\t\x9bg\xd3\xcf\xc0F\x8c\x9b\x12O\xac`\xb4\x94IH\xb0\xcd\xe9eC\xb1\x8d{\x19\xde\x19\x8e\xb5l\xa6\x1e\r)j\xec\x02\x19SM\xa6\xcf\xb9b)\xe7\xa8\x03~{\xc5\x9b\xa8I\x19j\xa5g\x877Xa\x91\x144\x064w\xc1\xe7J)\xean\xfd\xc6\xa5Y\x84\x82U\xdc\x1bQ\xd54\x01\x98\x88\xc8\xce\x94\xf8d\x9c\xba\x1e\xf3o\x87\xbc\xbaL\x87\b<\xb8o\xc8nd\xe0\xea-5P\xa0\xc7\x18\xdb\\O\xb8xT\xa1', 0x0) unshare(0x24020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x2000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r2, 0x2030}], 0x1, 0x0, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r2}}, 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="25d7fe", 0x3, 0xe044, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$packet(0x11, 0x2, 0x300) timerfd_create(0x0, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x3, 0xc, 0x3, 0xffffffffffffffff, 0x0, 0xe}, 0x0, &(0x7f00000000c0)={0x3fe, 0x7e7, 0x7, 0x6, 0x4, 0x100, 0x7fffffff, 0xe}, 0x0, 0x0) 1m10.128923516s ago: executing program 1 (id=117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x1, @broadcast, 'ip6_vti0\x00'}}, 0x1e) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x407, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @multicast, 'veth0_virt_wifi\x00'}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x17, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001f8000/0x1000)=nil, 0x1000}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000200)={0xfffffff9, 0x2, 0x7, 0x200, 0x0, "5f9c50d766ef21e188cc21e2a9a92db6bb3a11"}) 1m9.305710295s ago: executing program 1 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) eventfd(0xc) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f00000001c0), 0x5005) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000400)=[{0x1, 0xf8, 0x0, 0x0, @tick=0xe, {0xff, 0x70}, {0x9, 0xfe}, @addr={0xff, 0x7}}, {0x0, 0x4, 0xf7, 0x80, @tick=0x148, {0x1, 0xf}, {0x7, 0xcc}, @connect={{0x5, 0x5}, {0xf7, 0x3}}}, {0x9, 0x6, 0x1, 0x4, @time={0x0, 0x3}, {0x6, 0x8}, {0x2, 0x3}, @time=@time={0x2, 0x9}}, {0x2, 0x5, 0xf4, 0x4, @time={0x5, 0x5}, {0x8, 0xd}, {0x0, 0x1}, @note={0x17, 0x7, 0x0, 0x6, 0x3}}, {0x2, 0x40, 0x9, 0x67, @time={0x5, 0x7}, {0x7, 0xcb}, {0x70, 0x8}, @queue={0x0, {0x100, 0x5}}}, {0x7, 0x6, 0x7f, 0x2, @tick=0xfffffffd, {0x5, 0x9}, {0x7, 0x67}, @ext={0x77, &(0x7f0000000380)="89c19c0853655082aacf569a11fffb60c1d00536233e674ae6d7c9508aadde50c836399dfc4484010ed0e612bbfac8b193b90a3606969da088fff3fd08143e086903200dee286bac3f802ec1517c86e12b15363c0090a204766159b1f30a0d7303c6bb563aa3696a4750f773dcce3d4b0aa034b2ff58b8"}}, {0xfe, 0x6, 0x0, 0x6, @tick=0x1, {0x9, 0x8}, {0x3, 0x9}, @raw32={[0x9, 0x5, 0x2]}}], 0xc4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 54.290992603s ago: executing program 32 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) eventfd(0xc) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210281ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f00000001c0), 0x5005) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000400)=[{0x1, 0xf8, 0x0, 0x0, @tick=0xe, {0xff, 0x70}, {0x9, 0xfe}, @addr={0xff, 0x7}}, {0x0, 0x4, 0xf7, 0x80, @tick=0x148, {0x1, 0xf}, {0x7, 0xcc}, @connect={{0x5, 0x5}, {0xf7, 0x3}}}, {0x9, 0x6, 0x1, 0x4, @time={0x0, 0x3}, {0x6, 0x8}, {0x2, 0x3}, @time=@time={0x2, 0x9}}, {0x2, 0x5, 0xf4, 0x4, @time={0x5, 0x5}, {0x8, 0xd}, {0x0, 0x1}, @note={0x17, 0x7, 0x0, 0x6, 0x3}}, {0x2, 0x40, 0x9, 0x67, @time={0x5, 0x7}, {0x7, 0xcb}, {0x70, 0x8}, @queue={0x0, {0x100, 0x5}}}, {0x7, 0x6, 0x7f, 0x2, @tick=0xfffffffd, {0x5, 0x9}, {0x7, 0x67}, @ext={0x77, &(0x7f0000000380)="89c19c0853655082aacf569a11fffb60c1d00536233e674ae6d7c9508aadde50c836399dfc4484010ed0e612bbfac8b193b90a3606969da088fff3fd08143e086903200dee286bac3f802ec1517c86e12b15363c0090a204766159b1f30a0d7303c6bb563aa3696a4750f773dcce3d4b0aa034b2ff58b8"}}, {0xfe, 0x6, 0x0, 0x6, @tick=0x1, {0x9, 0x8}, {0x3, 0x9}, @raw32={[0x9, 0x5, 0x2]}}], 0xc4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.451460789s ago: executing program 2 (id=547): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x8, 0x4, 0xe, @dev={0xfe, 0x80, '\x00', 0x36}, @private1, 0x1, 0x700, 0xfffffff2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x7800, 0x700, 0xb, 0x1, {{0x20, 0x4, 0x2, 0x5, 0x80, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @multicast2, {[@generic={0x88, 0x2}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x9, "870be6a6b66766"}, @generic={0x82, 0x12, "6c40cc0ee21b4e5fecb22d6eaf68667c"}, @lsrr={0x83, 0xf, 0xac, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2]}, @rr={0x7, 0x17, 0xe, [@local, @rand_addr=0x64010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}]}, @timestamp_prespec={0x44, 0x24, 0xbf, 0x3, 0x0, [{@multicast1, 0x6}, {@broadcast, 0x1}, {@empty, 0x8}, {@multicast1, 0xff}]}, @end]}}}}}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r4, 0x894b, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 5.37323559s ago: executing program 2 (id=548): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6001144e00183a00fe80f0396ba7ef711b890000000000bbff0200000000000000000000000000010000907800000000fe8000"/78], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x3}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x4001000b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000005c0)) msgrcv(0x0, 0x0, 0x0, 0x5, 0x5c00) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x7, 0x2, 0x1, 0xdc}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x7e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 4.390811559s ago: executing program 2 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61880}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x497, &(0x7f0000000780)={0x0, 0x7079, 0x400, 0x3, 0x28c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000140)={0x60, 0xc, &(0x7f0000000380)="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"}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2, 0x2, 0x1) r10 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r10, 0x1e, &(0x7f0000000500)={r9}, 0x1) ioctl$TCFLSH(r8, 0x80047456, 0xffefff1f00000000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r11}, 0xc) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x83, &(0x7f0000000140), 0x8) 4.376849408s ago: executing program 3 (id=553): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/129, 0x81) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r3, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000580)=0x32) 3.891632017s ago: executing program 3 (id=557): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f804090581030000040000b5e45136581643ff7432fed2bf955c8746b82de634a0badd47c5f13c30de24331d1444279f3b7b139fadee09acec5c6291d9effa5d59b9237aecadade25608e8f1a643d78048e888306b688dd28bd8e8de91d5d7c067cd356c1750663643f0744047ff9fabca64c13f74828bd69faed22a2bdf09c3f706aa9272e21121fbe77f90813fb5f65292ecd9b6dd7fd369a1a40fee98607526570275581794e5b54116850fd28037555a70"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000200)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="3ccab05ef460ff0c0e1a9fe7eb31759c4e", 0x11}, {&(0x7f00000000c0)="18954be2f52eb6fc4bab8e9e41732903a2c6", 0x12}, {&(0x7f0000000280)="da9e2c02a0d15dccd566e5", 0xb}], 0x3, &(0x7f00000024c0)=[{0xdc, 0x5a95dcc31e0b6a91, 0x5, "b0bd9f9abb6cdd396f91074a9aaa9f3f8a2edf6943f8d0c7ad86a18adb86a2aa89a5e742cabbbb90df9901155addfd36f7e689c045aade027b10f631c794f3e5e4f42219ce1d2ba0cb547077f077f0eb860d0ea7af5609985eb06c236e5b610030a82846c779ae3753fea443968e4cb104c234930136ed1a3c461844b64f1a322694d98c076c37eefe4e02b5ea4d978f8674871d5e7f8c32dc9b90836248bc296002b831804a5deb271a86e3b92ab8821f72dcc72d58417546dd0a30287dea0114e764de7ab154fa31e92a1da7af6610"}, {0x100c, 0x10d, 0x3, "8fbfdfc06c32bb5c01cedb7ca21bf5a05d7e0c2b8f0ee15bf3c014036cdf71c518009f351f3ca0597f5c5bf78468f9b3d7a450edbf2ebc8450e13c132fc7f0aa858e3901f52a4c4837fa7aed2f19fbf4d617640730d5ca404bded74b8dc7da4f0ac0f1d5a85c4f2067b7effa8e2f38d32639303cc7f2b8a4897ea014d65986fff42a55373de228b7eb32dbcd6a4dbffdece8360d09500adc9584a85952a894adb7c7bd823cf9935bcb1c84a779c59b842ea17522b8a704b16cc26a99420fae651c3821029d2da6987b0bb590982bdda6ff51c2d7cb480000b08a5bab2a66af1e2630762b0cc9a41a5a5c58ae97f66b996ff709df5a6ad57e8908ed694ab56f57402c92ffc7fbf5a22905285a203246ac8ac05eb722eb9330cc998042112ceb27905a42bd0ba9904383e1619c763c1ae9f1894df768bf23f050de447e6a2a625c744d49bcfffcf96de344423b1f3ee1909271c0af9d43fe1f5b508fc5cf2448b2f022c2f2a67148f443eea589c598a2797c0d60c2337532b50572aed53751ffb5ac84f19b0d77af573f45eb7e4d46eb8e4a8fd5f477c81007202f2aab9518d46187c76ed9b892f5f21f603f63ea324196c311a5bbb934e01d1c11c663a9f4d591b5f63568089c9c26ca3ae0953a0d631fdd0cb012ee243ab53f2b61bf28f6db4aca6dad24d7fbf02846780409e37d655361bcbfc2dc118cd8ad5c9245c8d33c84de2647241181feaf0a917524584803720c2a79298e4e707dbf8785b48dfccdd730ec091be183ee4c614ce3dd2e3846710b4984fa402a1c6c0ab03aa312bd192419190638f97ca788cecb8f98789b138d791bfdb0ccece3e8102e93f34a766d715071312ce1599f00ed37cc32e0c4c4a631fc4d510087cd3cb557f11168375dbb791c4380fed3ceb112616a333d3005d65afc71b0cac9fcff397b581b453ef0701d8390ca1fc31048019a1c5ac5910cab78ecce9eae82d240d0f6abcd2bc5824c56b4e74e17085448d50b0b5592e2c8fbcae632fd5bc04026a56b4fb7efc10c584a3244edf416db26e71af9cc0de8f4c832017bb674e2d886adeed157b1772a1d1b1f3efbbc706d58f432030b0a63586b255348ffcc15336a71752ab83407ae1faa2e2d175635e6ec8975181de06ba3cd29f2c4d463e1839fd7bcf80e44dd576ca2817591c3e54576c8625ed19a7d57881c23f960a2cffb3091bb35da4ee8f253b90c1bc5acc28e0cee3888b4269023f731af29541875896b996e79dd5ecceb550073ba59fb91cb501e16f4684e82214f44c714ab3f22c41f8f57dfd45da08d7924a3b971adc336df447bb7785927cf82e1dd322e0d1ee26c98915fec7e0d43fccd3bde7510f777162e767f7165ce3efe59b7771ac34abe5aba83e142a791977580bb823f740a18806b91e99dfdda4f57e71f27bbb6041efc5512c68ee4e1497b8fa0da334969d4f7e6ed52bc89f30dee2fc1dbf72f9c8d8969bb95ad00e0f40e615bbc509b693cfea5510b65c598268b2c5b401b3b91ea2618ea344014bcb56e3ad6169cd0540ac917dbc6db8ba931b929614352a350bdf2d25ba827a5d70235af63480ae2a07e06c106e08d23515afe7e3335a9131c3f4e9473ed16b0f46753e43aca0ad707c1eab87d4ca716a53df69e856dfa8317fdd50058ba062567a73a694aff0d28e7aa92ea1ff0586f712d07952254855d90ac470dd76f01eec79820f4130a1487ac1fd0a364c440b143b374f91b8ddffcde342c6e2088e8a8c389b71b9c3776ee92fcd1bb25b71f73ac68f272f26c4c09710a51fbc4ac2edbee4a6cda78e9477fc64c2096726c8b1ff18cc2675e3f88b61caaa5ed91bb7d810b3f64a2160ff30083e4629574102890c9dbbff493581711dc8fe269f508fa26d2f070be7149343117b7d24012b741290884e76fb68d8b7ea8dab7b8e9327752b6c64dd9675dffc210a8b225d666b38bfd422888f7621520150bef7becbf1594d171052cac4b8cdefa09c8c3ac91ce8154c19046a90f2deb5aa699a7b08b90856e12e078141631dfc98ec6385f2a54847df0c35e62aba2dd23173b4e1ffa3e4062c5e713b0e80048eb9d9a80968b959212bfcacf1e67228a1018b83f1c42220c9d98b4e8b3748871c72e52436288d66ac912ce7f2f487798b2b18c289af914bf01258d962b63191040504fccb33c0655ab702c490da6f6666232e5b1f65feb9963ee5afd46d350802d32d91b6d02204cbf0a981b1a31d33dbedd9fe676b7b7b9273e5b7b76d3cd21295cfb73529206d47529d88fe62dff394f130ce406a19c237284138849e9d7f5529fc0a50aa6bc6a60a4f60eb45f8c9c5099116eba846793800ba4834448fe7e5c13b141865184adbb5d9e606dc7871dc92021b3f8eda68b36c2fc675d45df81f524be746d8c173ab7283b42bc66ba819dbc6121e187cf2b86b29f27a66c8e425b2ad9422fad1d8f9b61441a495afb1d883a310e6eac3c8afa66a30499283f294cfbd1358cc459c84a94373955aef8a06f9d2fabfd68ae3e12047b197e3d715e42459cab18f26986ed08baafeab1c0aabc875e263bb42bcdeecb653f54212da38533d6497537102e4dd8e7758a26d02eb45aa0f9a355abe4d677253553901f65398f98c49d952b63221ab14de8c3dd3e2c7a58c020816ef41fe10450792eacc6866faa7f5192c18eb034ec72c7d29ff49ff78d52608827c7a9c5470c1ea75f1080b32e867fe314316f3f0038dc5c59db0e3f7ca64a8177579e2c1c0fa9a2f89ed49b61346b3a16af0f1e32b2f5e8c3885caddca8a7e5decd000401a29fbc28ca2950e138889512cc6eaf3b9789bc8ca34e4ba5c5014442ef01a08ef065d538f62750fedea03c2e914b8bac4d14c71499d0e5a282c01c49c7da2b0c4b50868ec12e35d68fd552ed2b2fd563dec5201a95767d93bca65632cc4bd41c6b97ebf9ac475707f4b2d1473d8cb89b83a776ab3ebc3d73f28c9844adc701c09bea1397975d079d038279bf75f7a4f6547eca28d216c5b833beb2552c89afb0dcb102d41d8f7b470bfd27d719644c2b11f670940ff86b21a1de3c2b247c0b3233451852cd277912fa5581d4e7d142e0613df1e41ded2099a53d379d3c70cbbb770baa7e83370ab3cf385055ed8176bc033ca8dc48b2e18067d5085e883323a67b9ccddd15271c53e74e634f3f72f613b5012c5879643abf9cbcf02992d8123280e0883ae9b6ff8d2c1786f2fe4d9f01fbb7ecf302164904f6cb46c7645448f30a92f3490abe8e59100ed75601ef156dc8b10a072c7d8f57b816a57d74decefd0a4a536376bf4fc0c369c3e6ce2d90ef65c5930981e6796576a1ef5b41a330bd34ace6a0f7398e73ffb6e5608e41ff3a1649e2b306358db29a6c30b8d17a73be7592ef296b17b271d12528394234445e9a8e71ac90a4eda283c028f4c5e5ca8c7f3324141942cfb597d8ef6b78fd6381bd5915460727c873b54f0165ab5ef67833f25d561ead86e4373b689bbf562119a43ae8e8aafe90cad450a64475cf85c63532e96e62b85d61d1fa96960fbd20956e4e3cc17d0db46fb46f752af904ba03325d613cd92c93c03e7fd02198d1d84a0fdc3963492933a5d7ad8edd902a69aeab9eb08bc89d777d7031e1f5d78386fae8f3557ca5b89a3600f5eca55705f1b70d84dad5307c5fc8e04d2872eb23196686c6d7f6b1c26415c108acb3e76ebc80553bfe8931d2e45706b2cf81a7cd507dd1fcc08070dddc10341b00ad3aba4d4a8b9dd8a3e23c0c1c88ec595ce7a7dd518396ac849fe9ab6e172758f4851751aff686871ef4e7ace255540766817e804d33f6df62d057b6c142301d9c337abeff6bd0f1ada40ec4cbf52f0f775d50554bf6fe1a2f6de366b9a2ea9094246e06fecaa60e057726459bc7fb27c0a9c1fa97bca5c6f867cedaff400e26bb121af053db86a109e8f61fafc435445cfc3ce51c4123417f2af9c639fe751c0d91648d4f56b95abd9b53dc02dd28027c5f06e66dea547af93ea91ddf5278906a29fb2a0297b5d16ba3c20c828463452c184e19a6b93add533a6b3bfc84d077ba4afe559a460f00c1adb04f902c48faaa008770b738412f009f7ad7db224c7a34d5efc05b10c545ca3eff36ec1e0c72019c4f2816fc95a404217194c5332d6acd3ab5a4e79cd6fa2343efa96ed8db0e26221506b674899009056d4d228345b0490ab23bb5fa1a97d79b5fcbb5782790abde32b4d5494d84f8e331c05f3726e7e0f2d00ecadde62886471f5537dfca23d3c968cda18c3c529faa64c8c85bf0efeda5744d7acae0b9e03b368472d72f7a9fb9769badadf0cda831b06ad5fec69bf0bbf2b4190e9f7a602db1ddfd746710dc63b27e318a3ea105bb2b1eb152846d784be5cd1c9fd3c3dcb29b0befd9e90e9f2849909850d3774e795831c0f2fa8e3f31d2524b041b77b67fcd2c7a7c55f10f8c2248657680724aebe055273dbb258bd56a361b56e9cdf79e16f8470d044251b75ceaa84e6541ea83d93537e20bb1ca078d07359bd66bd581813a74135ba056f1541c2bae74cdabe5a8056b77848ff695de965bf27313c1dce9c553d553c658165a2f0db1ba9a07b4786fffd179d4cb662b7c3f7221f16635f04e494c9182ce88cf2191618a6ac86ff28e6c5f37bfa8ea1a18c428145b468757461d1d6356716b26c18071aa438a38f1f8c6a2f4ccad197775067e9f9e72b6f67c5f050d3df940103eab1829cee743936b80e804fb354a6ab149d79844192b00c7e6ac7a441739467c8ac166cc2bab8c9a4bfe00a421b9189c6c1ff1dd60459907f6f636568a7b17ef936f459aa1b046062aef986283741a719e1ed13d0e9dc7e3335040378592bcd82070d0e20ba1bcf64abf9d6f6b4ce15e815e20d1e5ac8f5cba9a2737ca192034c170792aa541bd7dbe458a16ea5447ee623aaf357a5c353831b3712f8f7d0596ce9d2173b23cb3c5e8a04f889c48d6b63fd3f685d907ea658d0b437b711b8e4278d5162512d8c9b58177b75fbd842db7be685badaeb7186166486d5ee1bef1d18d4db81e60b4d47aca62ceac6023a7dbbb9b0881dfe903a671ed33a0aae0ce4cbe53029882a37756b486edee2fc94edb1b9140af160798cb4a4b0bd8c59e180b3d852938ef7ef3c922d69c67ea8b86c0476b7b4707622ffe727b789f5d9854c5495ded990e10af6e06bc9227117d3031fd32e9a6c7538d447b910075c636f24bfbddc0d6f939bb7836b7bdb8836a5fd877f433ad95a7acabd034ce3c97b4dd7aaf55d66f4a3ede4f4eb42967699c6b6c38dce72faa736d37f9143699a30d9dac64e3adf9205bb25d76edd9fd04fab321ecb86b1911c934fad2ede2a140f8327f05a515e108b33c224798bd0e82ff22c4de4f40eca793123ec8dd170d5011a158663235079356bc83d8ebd764f3bf544dc4006179fa4a79284f1e2927c3bb53b58c76350f3557580277eac2fe06d65d0ebee04468cd72f2c0a24508bc76ffebdf3ca6fc081e0996052a820ab4c2e0b6dc3452e170bf46c411e7862c0dd2104c0731f1ae067ff85af5a1674726b9d50e5a44e8fb5f50058c0f7413fa8b6722bbdc492601d1e95bbe0e2c808d36bf31e73b239422d901fa00a225b0fcd4f2c9e6e99adec15e582142f7a9d0d8f0f5af51499aa03236b5e346d546850bb3e2818cffdb7e7789dff07a97279277ba0ebd7f3ccb3621bb96e83ee5adb7255e8fc0d2d491bc9a77bacdbf7fba6f5c4dee2257b4de2577fa8e980ff7bd6fd08727a334e4345779e62d6411d08352f4016297ff0393"}, {0x64, 0x0, 0x3121, "23eae57413b5ad0f62c89fa6c56f9a71938883fc0f1620bde50ebb65341a9519d6e4d5065740972773375aa5c540a3b7a9479854abc0376afc4e98e0ec72b3b1442aec70412593c18f74b6338c317aec08a23a728d"}, {0x94, 0x116, 0x8, "21cdae46817d03c75b419561012a55b5fdd76e8ad618d98226085a385853d4d83c24c14dcd1157f5c32378c118e65f788a2e541625c8c08720b572227035884a759aa6873a414665524c92d8ac1d3013b28931c5243fdc6d34f52928073df000087b1a8b0c1af55261759d6b70a8c8ef994ac9c4692f1e66798fb388acf302cc9d0609b495c2396c"}], 0x11e0}, 0x48000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$cdrom(0xffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000000700)={0x7f, 0x9, 0x81, 0x2}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r3 = dup(r2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.782946694s ago: executing program 4 (id=559): syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$uac1(0x5020000, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 3.776994486s ago: executing program 2 (id=560): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12011001000000082505a8a440000102030109021b000101ff6008090400fd716600000000000002200004000b53f70789ecec1c63e8eaf264802524b98063eb040c06c1f808604c6fee4f3ca12ec6cde356920c7636"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00030600000004036c38"]}, 0x0) r1 = syz_io_uring_setup(0x171a, &(0x7f0000000400)={0x0, 0xd3ad, 0x1000, 0x1, 0x24f}, &(0x7f0000000040), &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x5954, &(0x7f0000000380)={0x0, 0xfffffffd, 0x13291, 0x0, 0x250, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000480)) io_uring_enter(r2, 0x1, 0xffffffff, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xfffffffffffffe3e, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x901) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x8, 0x8, 0x0, 0x40, 0x8, 0x3e, 0x6, 0x8, 0xb, 0x10, 0x10, 0x5, 0xf, 0x17}, 0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x2f, r1, {0x100}}, './file0/file0\x00'}) openat$audio1(0xffffff9c, &(0x7f0000000240), 0x10200, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r6], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2c800) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000008c0)={0x3, 0x100, 0x3, 0x7ffdffff, 0x9, 0x80}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) 2.677326528s ago: executing program 3 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) openat$pmem0(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 2.571358902s ago: executing program 3 (id=563): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6001144e00183a00fe80f0396ba7ef711b890000000000bbff0200000000000000000000000000010000907800000000fe8000"/78], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x3}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x4001000b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000005c0)) msgrcv(0x0, 0x0, 0x0, 0x5, 0x5c00) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x7, 0x2, 0x1, 0xdc}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x7e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 2.430677559s ago: executing program 4 (id=564): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000280)={0xfffffef7, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000101a81, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x14}, 0x10) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000030000000000000f0200000000005f6900"], 0x0, 0x29}, 0x28) close(0x3) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000003200)=ANY=[@ANYBLOB="0180c20000000000000000000800450000200e000000000000e000000100004e20000c907841070001"], 0x0) 1.662269608s ago: executing program 3 (id=566): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x4000) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44011}, 0x4000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) (async) 1.30887644s ago: executing program 0 (id=568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61880}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x497, &(0x7f0000000780)={0x0, 0x7079, 0x400, 0x3, 0x28c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000140)={0x60, 0xc, &(0x7f0000000380)="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"}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2, 0x2, 0x1) r10 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r10, 0x1e, &(0x7f0000000500)={r9}, 0x1) ioctl$TCFLSH(r8, 0x80047456, 0xffefff1f00000000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r11}, 0xc) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x83, &(0x7f0000000140), 0x8) 1.24654789s ago: executing program 4 (id=569): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x2a00, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000000)={@lba=0x4, 0x20, 0x1}) 1.193401557s ago: executing program 4 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0x7}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter={0x1000000000, 0x100000001, 0x2, 0x6, 0xb}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f00000000c0)={0x0, 0xfffffe2c, 0x0}, 0x2000) recvmsg$unix(r3, 0x0, 0x61) 1.112952171s ago: executing program 0 (id=571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) umount2(0x0, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x65, r3}) 1.100452481s ago: executing program 0 (id=572): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x97a15000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) listxattr(0x0, 0x0, 0x0) 983.799445ms ago: executing program 0 (id=573): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async, rerun: 32) r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) (rerun: 32) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000500)={'\x00', 0x2, 0x6, 0x2, 0x0, 0xffffffff, "bf0000002631000700fffdff84d900", "1a180200", "91d81e56", "be4d11a4", ["00000000000000000300", "22f3ed1a910080ffffcb0425", "2ce50f8a285d9500c522afe1", "80000000000f00"]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000000c0)="6a142e61ba28131c0000", 0xa}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r2, 0x541b, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x5, 0x7fff, 0x2f2, 0x6e, 0x73, 0x3}, {0xa, 0x4000002, 0xffe, 0x2, 0x7, 0x9}]}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 901.759147ms ago: executing program 0 (id=574): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6001144e00183a00fe80f0396ba7ef711b890000000000bbff0200000000000000000000000000010000907800000000fe8000"/78], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x3}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x4001000b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000005c0)) msgrcv(0x0, 0x0, 0x0, 0x5, 0x5c00) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x7, 0x2, 0x1, 0xdc}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x7e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 730.526711ms ago: executing program 2 (id=575): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000240)='./file0\x00', 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000640)={{0x6, @rose, 0x80001}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) creat(&(0x7f0000000300)='./file0\x00', 0x0) 709.289779ms ago: executing program 2 (id=576): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0xcf3, 0x1f, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c95239c, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffe, 0xb, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x3e14, 0x30, 0x1, 0x0, 0x0, {}, [{0x3e00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x3db8, 0x11, 0x0, 0x0, {{0xa}, {0x3d0c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x160, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x9, 0x6, 0x6, 0x9}, 0x40, 0xc}, [{0x6, 0x0, 0x400, 0x7, 0x0, 0x9}, {0x3, 0x10000000, 0x8000, 0x9, 0xa, 0x3}, {0x1, 0xfffffffd, 0x1000, 0x9, 0xb}, {0x100, 0x8, 0x8, 0x8, 0x9, 0x10000}, {0x6, 0x0, 0x4, 0x2, 0x6eb, 0xfffffffc}, {0x4, 0x0, 0x8, 0xbc, 0xb59d, 0x9}, {0x8, 0x7, 0x8, 0xa, 0x9, 0xb93}, {0xb9, 0x3, 0x7, 0x4f, 0xef2}, {0x6, 0x3, 0x7, 0x2, 0x3, 0xffff5303}, {0x1, 0x8, 0xfc38, 0xd07, 0x200, 0x3}, {0x8, 0x5, 0x2, 0x6, 0x80, 0x5}, {0x1, 0x1, 0x0, 0x2, 0x0, 0x4}, {0x5, 0x0, 0xa9a, 0x2, 0x1, 0x35d58e6d}, {0x7, 0xfff, 0x6, 0xf, 0xffffffff, 0x40}, {0x200, 0x3b6cb6a6, 0x5, 0x7f, 0xf, 0x1}, {0x4, 0x6, 0x2, 0x1, 0x2, 0xbb}, {0x8, 0x4, 0x774, 0x200, 0x7, 0x6}, {0x52, 0x4, 0x7ff, 0xb79, 0x57a6d656, 0x7fffffff}, {0x8, 0x3ff, 0x9, 0x1, 0xffffffff, 0x5}, {0x7, 0x4, 0x8, 0x0, 0x4, 0xa}, {0x8, 0x2, 0x2, 0x9, 0x0, 0x2}, {0x8, 0x2, 0x80, 0x777d, 0x1, 0x81}, {0x0, 0x2, 0xa, 0x34, 0x4, 0x40}, {0x3, 0xfffffffd, 0x7f, 0x81, 0x6, 0x9}, {0x5f1, 0x369, 0x7ff, 0x6, 0xb}, {0x5, 0x7, 0x9c67, 0x7, 0x1, 0x3}, {0x7, 0x5, 0x5, 0x1, 0x10, 0x4}, {0x7, 0x2, 0x5b, 0xf, 0x6, 0xb}, {0x43, 0x48, 0xba, 0xfffffff7, 0x200, 0x10000}, {0x7, 0x4, 0x5, 0x1, 0x3, 0x7f}, {0xef4, 0x9410, 0x7, 0x7fffffff, 0x81, 0xffff}, {0x8, 0x345b, 0xb4, 0x8, 0x4, 0x7fffffff}, {0x4, 0x0, 0x8000, 0x2, 0x6, 0x6}, {0xffffffff, 0x7, 0xc, 0x9, 0x1, 0x9}, {0x100, 0x7f, 0x0, 0x9, 0x819, 0x1}, {0x2, 0x10001, 0x932e28aa, 0xe, 0xaf01, 0x6}, {0x9, 0xdbb, 0x3ff, 0x57, 0x1, 0x4}, {0x9, 0x800, 0x52, 0x1, 0x3, 0xff}, {0xffff, 0x7ff, 0x5, 0x2, 0x9, 0x9b7}, {0x287c1ee5, 0x662, 0x9, 0xb13, 0x8, 0xfffffff7}, {0x9, 0x38, 0x0, 0x8, 0x6, 0x10000}, {0x3, 0x6, 0xfffffff8, 0x101, 0x1, 0x7018}, {0x6, 0x4, 0xffffffff, 0x2, 0x6, 0x2719d2a6}, {0x2, 0x9, 0x5, 0x6, 0x10b19a36, 0x5}, {0x7fffffff, 0x1453f559, 0x65, 0x2, 0x3, 0x8}, {0x3, 0x7, 0x3, 0x7, 0x3, 0xff}, {0xfffffff8, 0x7, 0x0, 0x3, 0xa, 0x4}, {0x8000, 0x0, 0x5, 0x80, 0x10001, 0x7}, {0x9, 0x7, 0x8001, 0x0, 0x7, 0x3}, {0xfbe6, 0xe58, 0x22cc, 0x42f7, 0x3ff, 0x6}, {0xe53, 0x5, 0x0, 0xf, 0x9, 0x5}, {0x0, 0xfffffa15, 0xffffffff, 0x10, 0x2868, 0xfffffe00}, {0xa2, 0x40, 0x3, 0x800, 0x2, 0x5}, {0xc91f, 0x4, 0xfffffffd, 0xffffa281, 0xd, 0xcbeb}, {0x4, 0xffffffff, 0x2, 0x6, 0x7fff, 0x6}, {0x5, 0x6, 0x1, 0x1ce, 0x3, 0xfffffff9}, {0x0, 0x1ff, 0x8, 0x1, 0xfcf, 0xf}, {0x4, 0x8000, 0x6, 0x5, 0x1, 0xfffffffa}, {0x2, 0x3, 0x8, 0x0, 0x80000001, 0x5c}, {0x8000, 0xee7, 0x7, 0x4b7c, 0x0, 0x10000}, {0xd, 0x8, 0x5, 0x7, 0x0, 0x80000001}, {0x6, 0x7, 0x7bab, 0x8, 0x2, 0x2}, {0x2, 0x6, 0x0, 0x1, 0x9, 0x6}, {0x3, 0x81, 0xd, 0x8, 0x3, 0x1}, {0x204, 0xfffffffa, 0xec, 0x5b6e, 0xfaf, 0xa10}, {0xc0, 0x8, 0x1, 0x3, 0x4, 0x9}, {0x9ad, 0x401, 0x2a, 0xb, 0x0, 0x7}, {0x0, 0x2, 0x4, 0x7, 0x1, 0x9}, {0x1, 0x400, 0x9, 0x400, 0x4, 0x2}, {0x4, 0x5, 0x1, 0xb, 0x401, 0x5}, {0x5, 0x9, 0x7, 0x7f, 0x9, 0x4}, {0x9, 0x9, 0x8000, 0x2, 0xb, 0x4}, {0x6, 0x0, 0x200, 0x8, 0x3, 0x5}, {0x4, 0xbfaf, 0x6, 0x0, 0xa, 0x6}, {0x9, 0x8, 0x2, 0x4, 0x6, 0x10000}, {0x401, 0x9, 0x9, 0xfffffffd, 0xffff, 0x5fe}, {0x6, 0x7, 0x2, 0x23a, 0x239, 0x6}, {0x9, 0x80000000, 0x1f, 0x1ff, 0x200800}, {0x1c4, 0x8, 0x101, 0x7ff, 0x3, 0x4}, {0xa788, 0x8, 0x0, 0x80000000, 0x80, 0x8}, {0x0, 0x8, 0xffff, 0x2, 0xfff, 0x80000}, {0x8, 0x43328d47, 0x0, 0x4, 0x7, 0xd9}, {0x80000000, 0x8, 0x6, 0x1, 0x6, 0x10000}, {0x80000001, 0x6469b35a, 0x29, 0x7, 0x5, 0x7}, {0x1, 0x0, 0x7, 0x400, 0x8}, {0x0, 0x101, 0x1, 0x1, 0x0, 0x3}, {0x2, 0xb37, 0x9, 0x10001, 0x2, 0x4}, {0x7, 0x8, 0x90000000, 0x18, 0x24c, 0x8000}, {0x9654, 0x6a8cf6aa, 0x1, 0xfff, 0x3a8d, 0x7}, {0x2, 0x1, 0x7fff, 0x723, 0x7fff, 0x7}, {0x1000, 0x0, 0xb, 0x7, 0x2, 0xffffffff}, {0xa56d, 0x1ff, 0x7, 0x200, 0xf, 0x9}, {0x670, 0xffff, 0x9, 0x8, 0xd, 0x1000}, {0x3ff, 0x4, 0x5, 0x5, 0x10000, 0x1}, {0x6, 0x5, 0x0, 0x0, 0x4, 0xb}, {0x3e, 0x9, 0x7fffffff, 0x5, 0x1, 0x385}, {0x1, 0x7, 0x7, 0xe, 0x6, 0x80000001}, {0x9, 0x6ae6ba32, 0x9, 0x9, 0xfffffffc, 0x80000000}, {0x6, 0x2, 0x7ff, 0x3ff, 0x1680, 0x2}, {0x0, 0x8, 0x9c, 0x2, 0x9, 0x3}, {0x3, 0xfffffff7, 0x3, 0x4, 0x6, 0x2}, {0x1, 0x6, 0x4, 0x3167, 0x40, 0x6}, {0x14b1, 0x2, 0xffff8001, 0x9, 0x8, 0x2}, {0x8, 0x7, 0x401, 0x5, 0x80000001, 0x627d}, {0x2, 0x7, 0x0, 0x7ff, 0x7}, {0x5, 0x8, 0x52a90057, 0x7, 0x9, 0x6}, {0x8f7, 0x9, 0x0, 0x5, 0xfffffffc, 0x2}, {0x7b4e, 0x7, 0x7, 0x2, 0xfffffffe, 0x4}, {0x63, 0x3, 0x2, 0xeaf1, 0xfffffff8, 0xf}, {0x4, 0x80000001, 0x138, 0xffff2d87, 0x8, 0x8001}, {0xfe25, 0x7fffffff, 0x1, 0x2b24, 0xc, 0x6}, {0x2, 0x2, 0x2df4, 0x6, 0x1, 0xa2b}, {0xffff, 0xffffffff, 0x81, 0x401, 0x3, 0x8000}, {0xea8, 0x3, 0x7, 0x200, 0xd}, {0x10001, 0x6, 0x8, 0xd51, 0x8c0, 0x1ff}, {0x0, 0xfffffffc, 0x7, 0x4, 0x3, 0x5}, {0x6, 0x4, 0x9, 0x7, 0x4, 0x5}, {0x8001, 0x1000, 0x4, 0x2, 0x5, 0x4}, {0x3, 0x4, 0x4, 0x6, 0x67, 0x682149f2}, {0x5, 0x1, 0x7ea41983, 0x6, 0x6, 0x9e}, {0x7, 0x80000000, 0xfffffff6, 0xffffff00, 0x7f, 0xcd}, {0x7, 0x3, 0xfffffffd, 0xb8c3, 0x0, 0x4}, {0x10, 0x4, 0x5, 0x8555, 0x6, 0x6}, {0x10000, 0x2, 0x8, 0x200, 0x77}, {0xffff, 0x8, 0x200, 0x5, 0x4, 0x83}, {0x74a8e3b8, 0x5, 0x8, 0x5, 0x2, 0xfffff800}, {0x4, 0x800, 0xecb5, 0xb, 0x3, 0x6a}, {0x8, 0xd9, 0x2, 0xffffffd8, 0xdbda, 0x2}], [{0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x3}, {0x4, 0xd36bd438fd9be00d}, {0x2}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x78f5003ef5be643c}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0xec51c73e30b47812}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x4}, {}, {0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5e25e0f9165e2229}, {0x2}, {}, {0x5}, {0x3}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x3}, {0x1}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0x610, 0x7, 0x1ff, 0x800}, 0xc0, 0xfc, [{0x1, 0x5, 0x6, 0x1, 0xfffffffb, 0x2}, {0x2, 0x4, 0x200, 0x2, 0x10001, 0x800}]}, [{0x10, 0x6, 0xb, 0x3, 0x7, 0xd0ad}, {0x7, 0x2, 0x3, 0x3, 0xffff, 0x4}, {0x4fd2, 0xffffffff, 0xb, 0x4, 0xd23a, 0x2}, {0x1, 0x9, 0x6, 0xef3a, 0x400, 0x5}, {0x1428, 0x9, 0x58b2, 0x10001, 0x4, 0xce}, {0x8, 0xe, 0x7, 0x2, 0x9, 0xfa67}, {0x6, 0x36, 0x7, 0x6, 0x6, 0x3}, {0x9, 0x2, 0x1ff, 0x9, 0xffff, 0x8}, {0x3, 0x47, 0x6, 0xc88, 0x25800000, 0x4}, {0x8, 0x2, 0xcc8f, 0xba, 0x2, 0xfff}, {0x8000, 0x9, 0xf67c, 0x3, 0x63ba7130, 0x4}, {0x4, 0x8, 0x5, 0x0, 0x0, 0x9bb4}, {0x8, 0x8, 0x9, 0x1}, {0x3b, 0x1, 0x2, 0x40, 0x9, 0x9}, {0x6, 0x2, 0x6, 0xfff, 0x10000, 0x1}, {0x8, 0x7fff, 0x7fff, 0x100000, 0x2, 0xffff}, {0x942, 0x1, 0x1, 0x0, 0x0, 0x4}, {0xf, 0x8, 0x9, 0xb, 0x8ac3, 0x8001}, {0xff, 0x0, 0x2, 0xec, 0x76, 0x7}, {0x4, 0x438b, 0x2521, 0x1226ddd3, 0x7cf, 0x3ff}, {0xff, 0x5, 0xb, 0x6, 0x5, 0xf97}, {0x6, 0x6, 0x6158, 0x5, 0x3, 0xd69}, {0x8, 0x9, 0xa, 0x85, 0x3, 0x1}, {0x18a0043a, 0x7000, 0xa0000000, 0xe18, 0xffffffff, 0x3}, {0xfffffffa, 0x3, 0x10001, 0x5, 0x5, 0x81}, {0x1, 0x870, 0x10001, 0x1, 0x1, 0x4}, {0x5, 0x401, 0x8, 0x5, 0x1}, {0x2d, 0x10001, 0x6, 0x6, 0x1, 0x8000}, {0x0, 0x5, 0x7, 0xfffffffe, 0x0, 0x7}, {0x9, 0x0, 0x0, 0x1, 0xd, 0x4018}, {0x5, 0x6, 0x9, 0x39, 0x200, 0x5ceb}, {0x1ff, 0x9, 0x7fffffff, 0xfd, 0x8, 0x1}, {0x9, 0x5, 0x81, 0x10000, 0x4}, {0x6, 0x10001, 0x5, 0xda9b, 0x3, 0x6}, {0x40, 0x7, 0x7, 0xd666, 0x20000000, 0x3}, {0xfffffffb, 0x2, 0x7, 0x6, 0x0, 0x2}, {0x7f, 0x2, 0x359, 0x7, 0x1, 0x5}, {0x6, 0x0, 0x9, 0x3, 0x4, 0x1ff}, {0xfff, 0x1, 0x7, 0x642, 0xfbf, 0x9}, {0x8, 0x4, 0x6, 0x9, 0xee, 0x7fff}, {0x80000001, 0x0, 0x6, 0x5, 0x2, 0x4}, {0xff, 0x9, 0x8, 0x9, 0x8, 0x3}, {0x1ff, 0x3, 0x8, 0x8001, 0x4, 0x9f2}, {0x7, 0x0, 0x3ff, 0x8, 0x6, 0x8}, {0x9, 0xfffffffd, 0x2c, 0x7f, 0xb, 0x8}, {0x0, 0x20d, 0x2, 0x6, 0x1000, 0xb5}, {0x1, 0x3, 0xa, 0x5, 0x5, 0xaeb}, {0xd, 0xfffffffe, 0xffffffff, 0x101, 0x6, 0xfc7}, {0x8, 0x9, 0x1, 0x5, 0x7f, 0xe}, {0x64eb, 0x3ff, 0x7, 0x5, 0x9, 0x7}, {0xd, 0xd, 0x6, 0xdd, 0x3, 0x8}, {0xfff, 0x3, 0x7fffffff, 0x2, 0x3, 0x9}, {0x1, 0x100, 0x3ff, 0x80000001, 0x6, 0x400}, {0x5, 0x7, 0xce99, 0x0, 0xa7, 0x62}, {0xbac7, 0x1, 0x1, 0x9, 0xba, 0x9}, {0x0, 0x9, 0x5, 0x3, 0x0, 0x9}, {0x0, 0x6, 0x4, 0x1, 0x6, 0x699}, {0x0, 0x4, 0x7, 0x4, 0x2, 0x8}, {0xa0, 0x8, 0x5, 0x5, 0xfffffffc, 0x8}, {0xe8, 0xfffff293, 0x1000, 0x7fff, 0x9, 0x10000}, {0x7, 0x5b5523a2, 0x11, 0x3}, {0x4, 0x9, 0x3, 0x5, 0x4, 0x200}, {0x9, 0xdb, 0xb0, 0x6f33, 0x1, 0x1}, {0x4, 0x0, 0x401, 0xe0be, 0x7, 0x7}, {0x4, 0x7, 0x0, 0x7, 0x224e, 0x2}, {0x1, 0x1, 0x3, 0x892ab4, 0x2, 0x7c0}, {0x2, 0x6, 0xbe0f, 0x7, 0x7ff, 0x9}, {0x9, 0x7, 0x3, 0x400, 0x7, 0x4}, {0x0, 0xffffffff, 0xb2, 0xf4, 0x1000, 0x8000}, {0x667a, 0x2, 0xe89, 0x8000, 0xa58, 0x8000}, {0x5, 0x1000, 0x9, 0x4, 0x9, 0x7}, {0x3, 0x10001, 0x0, 0x7ca, 0x1, 0xa944}, {0xd, 0x3800, 0x6e10, 0x2, 0x0, 0x9}, {0x10000, 0x4f1, 0x5, 0x8, 0x5, 0x5}, {0x8, 0xd1, 0x4, 0x9, 0x0, 0x3ff}, {0x10001, 0x48d, 0x2, 0x5, 0x4f, 0x7b95}, {0x263d, 0xa, 0x7, 0xe, 0x3, 0x4}, {0x588, 0x56, 0x2, 0x8001, 0x4, 0x3}, {0xcb76, 0x2, 0xd, 0xf932, 0xbc, 0x5}, {0x7, 0x1, 0x3, 0xfffffffc, 0x6, 0x1}, {0x0, 0xe, 0xc3, 0x0, 0x9, 0x6}, {0x9, 0xc, 0xffff, 0x9, 0x7, 0x4}, {0x7fff, 0x2, 0x9, 0x8, 0x100, 0x6}, {0x20, 0x5, 0x2, 0x6, 0xfffffffa, 0x3}, {0xfffffffa, 0x2, 0x4b6a, 0x1, 0x1, 0xfffffffb}, {0xf, 0x80000000, 0x1, 0x8, 0x5, 0x5}, {0x8, 0x7f, 0x4, 0x5, 0x4112, 0x2}, {0x4, 0x2, 0x8001, 0x8, 0x4, 0xfffffff8}, {0xd, 0x2ac2, 0x9, 0x5, 0x8, 0x80}, {0x6a, 0x9, 0xff, 0xa8f, 0x39a, 0x766}, {0x81, 0xfffffffb, 0x3, 0x1, 0x9fa, 0x8}, {0xc, 0x8, 0xa, 0x4, 0x413a, 0x8}, {0x5, 0x1000, 0xa6e9, 0x3, 0x1, 0x4}, {0x9, 0x10000, 0x2, 0x6, 0x0, 0x81}, {0x6, 0x4, 0x7ff000, 0x4, 0x5ea, 0x5}, {0x9, 0x7ff, 0xffff, 0x7ff, 0xf, 0x9}, {0x0, 0x2a, 0x3, 0x5e}, {0x40, 0x7ff, 0x7, 0x6, 0x5, 0x6}, {0xb7d, 0x8001, 0x5, 0x3, 0xfffffff8, 0x4}, {0x3, 0x0, 0x0, 0x4, 0x8, 0xe4e}, {0x5, 0x1, 0x9, 0x4, 0x100, 0x4861}, {0x0, 0xf, 0x6, 0xd182, 0x4, 0x1ff}, {0x9, 0x0, 0x474, 0xf584, 0x3, 0x2}, {0x0, 0x7, 0x8000, 0x5, 0xee, 0x2}, {0x97, 0xffffffff, 0x8, 0x0, 0x800, 0x8}, {0x364f7bb9, 0x9, 0xe, 0x6, 0x2, 0x6}, {0xb9, 0x1, 0x0, 0xc81, 0x4c1}, {0xfffffff9, 0x6, 0xffff, 0x5, 0x0, 0x8000}, {0x5, 0x1, 0xb, 0x0, 0x6, 0xf04}, {0x9, 0xd, 0x4, 0x200, 0x9, 0x2}, {0x5, 0xa, 0x1, 0x47d, 0x1, 0x3}, {0xef8, 0xf3f, 0xf, 0xa, 0x8, 0x2}, {0xacf6, 0x1, 0x35340, 0x6, 0x80000001, 0x9}, {0x4, 0xf, 0x80000000, 0x8, 0x0, 0x101}, {0x4, 0xd160, 0xfffffffa, 0x80000000, 0x4ef454fc, 0x1000}, {0x0, 0x0, 0x7, 0x9, 0xfff, 0xb}, {0x2, 0xfff, 0x0, 0x2, 0x7, 0x6}, {0x13f703d4, 0x8, 0x7fffffff, 0x9, 0x80, 0x8}, {0x0, 0x9, 0x7ff, 0x7, 0x0, 0x5}, {0x4, 0xbd, 0x3, 0x3f3, 0xfffffc00, 0x6}, {0x6bb9, 0xa36, 0x3, 0xb, 0x7, 0x8}, {0x6, 0x8001, 0x1, 0xfffffff6, 0xc, 0x5}, {0xce8f, 0x8, 0xe, 0x8001, 0x4, 0x10000}, {0xcd4, 0x3, 0xbe6, 0x1, 0x101, 0x7f}, {0x0, 0xa, 0x615, 0x6, 0x8000, 0x5}, {0xe5d, 0x1, 0x9, 0x1, 0x95b1, 0x1}, {0x8000, 0x1, 0x4, 0x5, 0x800, 0xfedd}, {0x13e3, 0x2f0e, 0x7, 0x0, 0x7, 0x885}], [{0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x6, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x3}, {0x3}, {0x1}, {0x9}, {0x1, 0x1}, {}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x5746c657438084e0, 0x1}, {0x4}, {0x5}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4, 0x2}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x4}, {0x4}, {}, {0x1}, {0x4}, {0x3}, {0x1}, {0x4}, {0x3}, {0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x6342aaf35f6b11d6}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x3c5b0c3329c3ae95}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x1}, {}, {0x3}, {0x3}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x4}, {0x1}, {0x2, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x1b8, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x9, 0x1, 0x6, 0xb587, 0x7fffffff}, 0x0, 0x4, [{0x1, 0x9, 0x0, 0x4, 0x0, 0xe}, {0x9d20, 0x80000001, 0xffffff01, 0x5, 0xfffffff7, 0x8000}, {0x5, 0x9, 0x101, 0x2, 0x1, 0x6}, {0x1, 0xfffffc01, 0x3, 0xffffff7f, 0x6}, {0xfffffffa, 0xf, 0x0, 0x5, 0x0, 0x6}, {0x1, 0x2, 0x7fff, 0x8b, 0x3}, {0x2, 0x8, 0x7, 0x0, 0xc, 0xb}, {0x1, 0x7, 0x7, 0x361, 0x9, 0x1}]}, [{0x5, 0x4, 0x4, 0x7, 0x5, 0x100}, {0x18, 0x0, 0x0, 0xfe, 0x4, 0x1}, {0x20, 0x3, 0x2, 0xb1aad23a, 0x10, 0xfe28}, {0xff, 0x42a3, 0x8, 0x5, 0x7ff, 0x9}, {0x231, 0x80000001, 0x40, 0x7, 0x7, 0x14e}, {0x1, 0xd086, 0x7, 0x100, 0x1, 0x2}, {0x6, 0xffff, 0xba, 0x101, 0x5, 0x3}, {0x9, 0x0, 0xffffd3ca, 0x5, 0x80000000}, {0x8, 0xc3e, 0x5, 0x80000001, 0x1a000000, 0x1a2}, {0x7, 0x2, 0x8, 0x8b, 0x3b864c4, 0xffff}, {0x3, 0x359, 0x3, 0x3, 0x8000, 0x175c}, {0x8, 0x5, 0x4, 0x1, 0x4, 0x10000000}, {0xfffffffc, 0x7, 0x5, 0x5, 0x1ff, 0xe193}, {0x82, 0xfffffffe, 0x17b6, 0x5, 0x1, 0x9}, {0x1, 0x2, 0x50000, 0x6, 0x3, 0x9}, {0x401, 0x5, 0x7, 0xe, 0x400, 0x7}, {0xfff, 0x1, 0x4, 0x7fff, 0x8, 0xd3}, {0x0, 0x7, 0x1, 0x7, 0x59, 0x7}, {0x7fffffff, 0x2, 0x1, 0xb0, 0x5, 0xd087}, {0x3ff, 0x8, 0x1, 0x0, 0xd3b, 0xffff}, {0x4, 0xffffffff, 0x2, 0x3ff, 0x7, 0x6}, {0xc1, 0x33, 0xffffff00, 0x1, 0x0, 0x77c}, {0x452, 0x6, 0x8, 0x8, 0x3, 0x7}, {0x4, 0x5, 0xf82b, 0x84, 0x5, 0x2}, {0x3, 0xb, 0x8, 0x6, 0x8, 0x100}, {0x6, 0x1, 0x8001, 0x4800000, 0x3, 0x1}, {0x2, 0x0, 0x2, 0x8, 0xfffffffe, 0xfff}, {0x7, 0x8, 0x8001, 0x32, 0x6, 0x8}, {0x72a2, 0x5, 0x80000000, 0x3, 0x4, 0x9}, {0x101, 0x1, 0x6c1e, 0x4, 0x7, 0x59}, {0x9, 0x0, 0x3d02d901, 0x274a, 0x8, 0x8}, {0x80000000, 0x6, 0xf2, 0xfffffffb, 0xffffffff}, {0x80000000, 0x5, 0x1ff, 0x1000, 0x80, 0x3}, {0x2, 0x40, 0x81, 0x8, 0xfffffffb, 0x9ba}, {0x401, 0xffff0001, 0x2, 0x1, 0x3, 0x4}, {0x3, 0x5, 0x714, 0xbcf5, 0x751, 0x2}, {0x3, 0x8, 0x10, 0x2, 0x80, 0x2c5}, {0xd, 0x3, 0x1da, 0x0, 0x324c, 0x300000}, {0xbc81, 0x1, 0xfffffff7, 0x4d, 0x1, 0x3}, {0x2, 0x7, 0x1, 0x0, 0x0, 0xffe00000}, {0x0, 0xfffffeff, 0x8, 0x9, 0x6400, 0x6}, {0x13, 0xfffffff9, 0xb, 0x2, 0xffff, 0x5}, {0xa, 0x0, 0x8, 0x1, 0x4a88, 0xa4}, {0x1, 0x401, 0x40, 0x3ff, 0x5, 0x8}, {0x1, 0x9, 0x2f1, 0xb, 0x9, 0xb}, {0x9, 0x2, 0x7b, 0x4, 0x43}, {0x66, 0x5, 0x800, 0x0, 0x81a3, 0x5}, {0x2, 0x3ff, 0x8, 0x9, 0x3, 0x7ff}, {0xc37f, 0x80000000, 0x5, 0x1, 0x66, 0x401}, {0x7, 0x2, 0x1, 0x0, 0x5, 0x2}, {0x1, 0x1, 0x3, 0x49c4, 0x3, 0xa19}, {0x1, 0xa, 0x200, 0x50000, 0x8, 0x5}, {0x800, 0x5, 0xfeb6, 0xe, 0x480000, 0x8c13}, {0x51d4, 0x8, 0x2, 0x100, 0x2, 0x7}, {0xfffffffc, 0x4, 0x1, 0x2, 0x1, 0x9794}, {0x2, 0x7fffffff, 0x6, 0x6, 0x81, 0xc}, {0x1, 0x9, 0x2, 0x7f6ac4bc, 0x3, 0x6a5b}, {0x4, 0x7, 0x291, 0x1, 0x7ff, 0x66d3}, {0x1000, 0xd03, 0xb741, 0x5, 0x89, 0x81a3}, {0x4, 0x3, 0x401, 0x40a, 0x7, 0x5}, {0x80000001, 0x2, 0x6, 0xb4, 0x83, 0x7}, {0x8, 0x3, 0xee, 0x1, 0x8, 0x8}, {0x3d5, 0x7, 0x0, 0xd, 0xf, 0x4}, {0xfffffff8, 0xffffffff, 0x200, 0x17, 0x81, 0x6}, {0x7, 0x1, 0x3b, 0x9, 0x2, 0x7de}, {0xdda, 0x2, 0x7fff, 0x9, 0x4, 0x1}, {0x2, 0x6, 0x8001, 0xfff, 0x7, 0x9}, {0x401, 0x2120, 0xebcf, 0x101, 0x1000, 0x81}, {0x0, 0x1b, 0xce, 0x6b5, 0x3, 0xe}, {0x8, 0x2, 0x1, 0x3, 0x4, 0x200}, {0x0, 0x7, 0xfffffff7, 0x7fff, 0x6, 0x8}, {0x3, 0x1, 0x5, 0xb9, 0x1, 0xa}, {0x4, 0x8000, 0x6, 0xfff, 0x1, 0x9}, {0x9, 0x9, 0x1ff, 0xffffff00, 0xffffff01, 0x460}, {0x68fa, 0x4, 0xfffffffb, 0x401, 0x7fff}, {0x6, 0x6, 0x9, 0x3ff, 0x9, 0x3}, {0xd7, 0x0, 0x8f9, 0xdf0a, 0x101, 0x9}, {0x4, 0x6, 0xaa, 0x1ff, 0x3, 0x6}, {0x0, 0x6, 0x3, 0x7b2e, 0x5, 0x4769}, {0x8000, 0x9, 0x88, 0xfffff520, 0x9, 0x6}, {0x8, 0x1, 0x2, 0x55c9, 0x6, 0x10000}, {0x4, 0x8001, 0xdf, 0x5, 0x5, 0x5}, {0x7, 0x7, 0xc, 0xcd, 0x8, 0x1}, {0x2, 0xfffffffd, 0xbb, 0x177f, 0x1, 0x9d}, {0x4, 0x44d, 0xffffffff, 0x2, 0x5, 0x1}, {0x1, 0x8, 0x297, 0xe, 0x3, 0x3}, {0x7f, 0xca, 0xb, 0x3c, 0x8, 0x6}, {0x8, 0x0, 0x5, 0x4, 0xff, 0x60a}, {0x5, 0x6387, 0x0, 0x4, 0x600000, 0xfff}, {0x4, 0x10, 0xfffff000, 0x38e, 0x15fb, 0x3}, {0x4, 0x9, 0x0, 0x7, 0x400, 0x9}, {0xffff0664, 0x9, 0x8, 0x3, 0x3, 0xfffffffe}, {0xe, 0x3, 0xdbc, 0x81, 0x7, 0x3}, {0x200, 0x4, 0x3, 0x9, 0x8, 0x6}, {0xffffff6d, 0x100, 0xffffe7aa, 0x3, 0x9, 0x9}, {0x2f, 0xfffffffc, 0x4, 0x0, 0xc72, 0xa5}, {0x3, 0x5a0, 0x9, 0x9, 0xc, 0x6}, {0x10000, 0xd0760000, 0x9, 0x0, 0x3, 0x6}, {0x1ff, 0x121, 0xb, 0x8, 0xfff, 0x2}, {0x6, 0x100, 0xf3, 0xffffffff, 0x2, 0x2}, {0x80000001, 0x0, 0xd3, 0x8, 0xb, 0xffff}, {0x8b, 0x8, 0x3, 0xbe31, 0x6, 0x1}, {0xffffff0e, 0x4, 0x3c0, 0xc, 0x29, 0x9}, {0x1, 0xb63, 0x7, 0xd02, 0x3, 0x1}, {0xfffffff8, 0x1, 0x8, 0xfffffff7, 0x3, 0x3ff}, {0x8, 0x59a4, 0x1, 0xffffffff, 0x2, 0x9}, {0x10, 0xc3, 0x7f, 0x0, 0x4, 0x8}, {0x27, 0x6, 0x4, 0x3, 0xffffffff, 0x80000000}, {0x2a4, 0x20000000, 0xfffffffa, 0x8, 0x4f31, 0x7ff}, {0x1, 0x10, 0x1ff, 0x8, 0x4, 0x1}, {0x200, 0x10b, 0x7, 0x3ff, 0x800, 0x8}, {0xe, 0xe, 0x0, 0x9, 0x7}, {0x2, 0x4, 0x2, 0xd5, 0x8, 0x2}, {0x6, 0x0, 0x4, 0xff2, 0x5, 0x26b}, {0x5, 0xed, 0xee0, 0xee0, 0x0, 0x5}, {0x4, 0x3, 0x2, 0x77, 0x494e, 0x7ff}, {0x4, 0x0, 0x4, 0x0, 0x5, 0x101}, {0x0, 0x4, 0x3, 0x1, 0x8, 0x4}, {0x10, 0x0, 0x7, 0x7, 0x1, 0x3}, {0x55, 0x5, 0x6, 0x10, 0x2000}, {0x800, 0x5, 0x10, 0x0, 0x2, 0x1000}, {0xd, 0x9, 0x9, 0x2, 0x5, 0x2}, {0x200, 0x5, 0x3, 0x2, 0x401, 0x29d5}, {0xd, 0x2, 0x7f, 0x80, 0x7, 0x8a79}, {0x3, 0x6, 0x80000001, 0x342, 0xd, 0xfffffff9}, {0x3, 0x3, 0x73, 0x8000, 0xff, 0x2}, {0x3, 0xffffffad, 0x41b, 0x2, 0x7, 0x4}, {0x8, 0x6, 0x10001, 0x5, 0x9, 0x2}], [{0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x159fb2a17e816499}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x752ff791e60f868f}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x75a83f38599315de}, {}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x6347b8f4ca454b2a, 0x1}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5}, {0x5}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x6}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xc96a, 0x5e1, 0x6, 0x6, 0x5}, 0xe, 0x0, [{0x3, 0x83, 0x631, 0x8, 0x6, 0xbb4}, {0x8, 0x1, 0x6, 0x2, 0x2, 0x7}, {0xab56, 0x4, 0x0, 0xe, 0xa9, 0x2}]}, [{0x7, 0x8, 0x4, 0x1, 0x728, 0xe}, {0x2, 0x401, 0x6e, 0x9, 0x1, 0x1}, {0x8001, 0x3, 0x5, 0x6, 0x6, 0xdd}, {0x40, 0x5, 0x80000001, 0x2, 0xa, 0xf929}, {0x9, 0x5afc53ad, 0x2, 0x7, 0x9, 0xe478}, {0xff, 0x0, 0x1, 0xfff, 0x3, 0x4}, {0xc5, 0xa, 0x95, 0xf9e, 0x6, 0x4}, {0x6, 0x5, 0xd77, 0x98efea2, 0x0, 0xa8}, {0x101, 0xd, 0x1, 0xfffffffb, 0x2, 0x1}, {0x1, 0x6, 0xffff, 0x6, 0x4, 0x5e}, {0x6, 0xff, 0x100, 0x80000001, 0xdf8, 0x3}, {0x4, 0x2fc, 0xffffffff, 0x6, 0x22c80970, 0xfffffffe}, {0x48000, 0x1, 0x6, 0x1, 0x1, 0x13}, {0x8, 0x4, 0x81, 0x7, 0x1, 0x5}, {0x4e, 0xbbd4, 0x0, 0x7, 0x6, 0x176}, {0x3, 0x9, 0x9, 0xea1, 0x2, 0x2}, {0x401, 0x8, 0x10001, 0x0, 0x8001, 0x9}, {0x0, 0x8000, 0x1, 0xfffffffe, 0x800, 0x100}, {0x1c000, 0x9, 0x9, 0x6, 0x1, 0xfffffffb}, {0x3, 0x2, 0x9, 0x8, 0xfffffff9, 0x4}, {0x101, 0xa2d, 0x7853c6bf, 0x8, 0x2e8c, 0xce}, {0x8, 0x400, 0x7f, 0x8, 0x6, 0x3}, {0x5, 0xfffffff8, 0x0, 0x2, 0x9, 0x800}, {0xcf0, 0x1, 0x3, 0x3, 0x200, 0x5}, {0x55, 0x3ff, 0x4, 0x8001, 0x100, 0xa87}, {0x8, 0x101, 0xffffffff, 0x10, 0xfca8, 0x7f}, {0x1000, 0x3e9, 0x1, 0x8, 0x10000000, 0x6}, {0x100, 0x9, 0x200, 0xd51f, 0x7fffffff, 0xffffffff}, {0x10001, 0xfffffff3, 0x8, 0x2, 0x9, 0x2}, {0xb0, 0x55f1d7aa, 0x3, 0x1, 0x8}, {0x95ef, 0x80000001, 0x800, 0xa7}, {0x9, 0xbc3, 0xb276, 0x40, 0x9ca, 0x5}, {0xe0000000, 0x1, 0x1, 0x1d32, 0x3, 0x7}, {0x3, 0x2, 0x800, 0x2caaaa8f, 0x2, 0x2}, {0x8, 0x6, 0x40, 0x9, 0x6}, {0x2, 0x7ff, 0x7c49, 0x1, 0x8ae, 0x558}, {0x0, 0x9, 0x3, 0x2, 0x1ff, 0xb63}, {0xfffffffc, 0x8, 0xff, 0x7, 0x7, 0x7ff}, {0x1, 0x80000000, 0x1, 0x3, 0x4, 0x3}, {0x5, 0x7, 0xa, 0x7, 0x8, 0x18f}, {0xc, 0x50e, 0x7, 0xe42, 0x3, 0x4}, {0x1c0, 0xc527, 0x0, 0xcffa, 0x20000010, 0x9b}, {0xf, 0x8, 0x5, 0x6, 0x3800000, 0x9}, {0x6, 0x800, 0x1, 0xf9, 0x7, 0x80000}, {0x7, 0x3, 0x1000, 0x8000, 0x4, 0x7}, {0x1, 0x8001, 0x8, 0x8000, 0x6, 0xf}, {0x1, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {0x1, 0x6, 0xa05, 0x2, 0x658e, 0x3}, {0x7, 0x3, 0xce0f, 0xfffffffc, 0x3, 0x7}, {0x8, 0x3, 0x5, 0xd57, 0xc, 0x6}, {0x7fffffff, 0x4, 0x81, 0x1, 0xfffffffb}, {0x1, 0x4, 0x0, 0x7c4af32f, 0x3, 0xfffffff7}, {0x28c98bda, 0x1ff, 0x6, 0x3, 0xf, 0x2}, {0x78adde10, 0x8, 0x4583, 0x2, 0x6, 0x8}, {0x2, 0x81, 0x0, 0x5, 0x3, 0x2}, {0x1, 0x5, 0x19491d8a, 0x5, 0xffffffff, 0x7}, {0xa9, 0x2, 0x6, 0x7fff, 0x8, 0x2}, {0x4, 0x9, 0x6, 0x8, 0x2, 0x4}, {0x7fffffff, 0x0, 0x5, 0xb, 0x80000000, 0x6a}, {0x1, 0x3, 0x4, 0x6, 0xd8}, {0x7f, 0x2, 0x401, 0x3, 0x200, 0xfffffff7}, {0xda, 0x6, 0x44, 0xd, 0x5, 0x3}, {0x4, 0x3, 0xffffffb4, 0x81, 0x9, 0x74d}, {0x1000, 0x6, 0x8, 0x0, 0x0, 0xa}, {0x7c67, 0xfffffffb, 0x8001, 0x7, 0x1a394251, 0x89e5}, {0x400, 0x23d, 0x6, 0x5, 0x0, 0xc7}, {0x4, 0x1ff, 0x5, 0xb6, 0x9, 0x8}, {0x3, 0x3, 0x7, 0x40, 0x6, 0xef8}, {0x400, 0xf30, 0x4, 0x67, 0x7, 0x2}, {0x8, 0x5e2b, 0x9, 0x10000, 0xc, 0x2}, {0x8000, 0x200, 0x1, 0x3, 0x6, 0x33}, {0x0, 0xd576, 0x3, 0x4, 0x1ff, 0x9}, {0x6, 0x7, 0x100, 0xe6, 0x5, 0x7}, {0x7, 0x9, 0x3, 0x4, 0x8001, 0x4}, {0xaf, 0xa58d, 0x1, 0xfffffffc, 0x7, 0x2}, {0xffffffff, 0x0, 0x2, 0x4, 0x1000}, {0x0, 0x7, 0x2, 0x1, 0x42a6, 0x3}, {0x3, 0x6, 0x74, 0xb7, 0x6, 0x2}, {0x2, 0xc8, 0x2799, 0x749, 0x4309, 0x2}, {0x10, 0x4, 0x4, 0x5, 0x7, 0x6}, {0x9, 0x6, 0x8, 0x81, 0x2, 0x4}, {0xfff, 0x5, 0x5, 0x7de, 0x8a, 0x5cd5}, {0x6, 0xab93, 0x8, 0x303f, 0x9, 0x6}, {0x5, 0xe, 0x4, 0xa5f, 0x9, 0x29}, {0x5, 0xb6, 0x4, 0x1e6, 0x9, 0x40}, {0x2, 0x10000, 0x400, 0x7fffffff, 0x3, 0x1}, {0x8, 0x9, 0x2, 0x6689d3c1, 0x6, 0x3}, {0x4, 0xb12, 0x1000, 0x7fff, 0x8, 0x10001}, {0x3, 0xf, 0xd, 0x4, 0xd04, 0x7}, {0xfffffff9, 0x3, 0x50f, 0x1, 0x7, 0x8}, {0x8, 0x4, 0xe, 0x6, 0x6, 0x100}, {0x8001, 0xfffffff9, 0xd0440000, 0x54b2, 0xd75, 0x2}, {0x0, 0x1000, 0x9, 0x7, 0x0, 0x10001}, {0x0, 0x2, 0x8e, 0x9, 0x1000, 0x100000}, {0x3, 0x98bd, 0xa6600000, 0x7fff, 0x10000, 0x58}, {0xd, 0x8, 0x92, 0x7, 0x9, 0xd}, {0xde82, 0xfffffe01, 0x60, 0x2, 0x9, 0xffffffff}, {0x101, 0xd, 0x9, 0xc5, 0x1000, 0x5}, {0x3, 0x7, 0xffffffff, 0x2, 0x80000000, 0xc1ac}, {0x6, 0x246dbc00, 0x4, 0x3, 0x4, 0x4}, {0x6, 0xa4, 0xfffff615, 0x7, 0xf54, 0x6}, {0x8, 0x9, 0xcfe, 0x7, 0x5, 0xfffffff8}, {0x4dc6fcb9, 0x3, 0xf, 0x0, 0x4, 0x6}, {0x541, 0x6, 0x7, 0x6a8b, 0x6, 0x455d}, {0x32d3, 0x7, 0x4, 0x5, 0x5, 0x4}, {0xffff8f3f, 0x1, 0x5, 0x10001, 0x9, 0x2}, {0x2e, 0xa6e0, 0x4e3a, 0xe, 0x7, 0x8}, {0x3ff, 0x1, 0x0, 0x1, 0x2, 0x8}, {0x3, 0x5, 0x2, 0x1f, 0x1, 0xf82b}, {0xb, 0x3, 0x2, 0xffffffff, 0x2, 0x4}, {0xe, 0x8, 0x2, 0x0, 0x3, 0x4}, {0x0, 0xfffffffe, 0x9, 0x5, 0x5, 0xb}, {0x3ff, 0x761d, 0x7, 0xfffffffd, 0x3, 0x2000000}, {0x81a, 0x18f0, 0x1, 0x0, 0x7f, 0x74}, {0x1, 0x8, 0x3, 0x4, 0x4, 0xb}, {0x0, 0x1, 0x8, 0x84b8, 0x43a91fe9, 0x8}, {0x1, 0x5, 0x7966, 0x0, 0xaf7, 0x7}, {0x4, 0x8, 0x2bed, 0x8, 0x3, 0x7}, {0x80, 0x5, 0x0, 0x5, 0x7ff, 0x10001}, {0x3, 0x3, 0x8, 0x0, 0x1000, 0x6}, {0x8, 0x247c602e, 0x8, 0xfffffffd, 0x8}, {0x98, 0x0, 0x0, 0x531, 0xa5d9, 0xfffffffe}, {0x0, 0x6d, 0x4, 0x8001, 0x2, 0xf}, {0x40, 0x10001, 0x7, 0x1, 0x3}, {0xfff, 0xe, 0x10903fd, 0x2, 0x0, 0xfffffffe}, {0x1340e3da, 0xa9, 0x202, 0x7f, 0x44118df9, 0xff}, {0xfffffffa, 0x7, 0x8, 0x6, 0x8, 0x3}, {0x6, 0xdc, 0x7, 0xfffffff8, 0x10, 0x6}], [{0x5}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x3}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x81, 0x6, "4ad81291871b8f1d7375bca84b6d6d24c3d84ec8ebd98eb97194b8befd1e584698e552fc9b4be8a60cc2f8322b66241e87cd8e687751fcf9cc1a3b98b8958b7335926cf048e2d40646cf9635af724d58285ee27aaf3aabccb5538b0c104bce177b9fe7bbde80a3ca684b3d1ccbd54a0ed071a517b85d1269ebfc68e1b6"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x3e14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r7, r6, 0x8, 0x0, 0x0, 0x9, 0x1, 0x1, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x1, 0x2, 0x1}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000d953c5fcad0feab00004196a08979cca634d00696e6e65720000003800028008000240000000840800434000000007080004011000000f080001400000000014000580090001006d657461000000000400ecd664ca02800900010073797a300000000009000200732a0252bb8d22cea320b49ea4797a32b100000014000000"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x6}, {0xd}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000887}, 0x10) 351.69931ms ago: executing program 3 (id=577): syz_open_dev$sg(&(0x7f0000000340), 0x9, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, &(0x7f00000001c0)='F', 0x1, 0x1, 0x7f, 0xfffffffe, 0x28, 0x1, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000000001004440000010000000008001300e0000002"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc884}, 0x0) r5 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x80000) connect$unix(r6, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="48ae049c"], 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 213.58925ms ago: executing program 4 (id=578): syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) 65.964369ms ago: executing program 0 (id=579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) r2 = gettid() tkill(r2, 0x11) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8f6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 0s ago: executing program 4 (id=580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61880}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x497, &(0x7f0000000780)={0x0, 0x7079, 0x400, 0x3, 0x28c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000140)={0x60, 0xc, &(0x7f0000000380)="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"}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2, 0x2, 0x1) r10 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r10, 0x1e, &(0x7f0000000500)={r9}, 0x1) ioctl$TCFLSH(r8, 0x80047456, 0xffefff1f00000000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r11}, 0xc) r12 = socket(0x2, 0x80805, 0x0) r13 = openat$ptp1(0xffffff9c, &(0x7f0000000180), 0x82401, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r13, 0xc0403d08, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x83, &(0x7f0000000140), 0x8) kernel console output (not intermixed with test programs): n0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.986471][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.990131][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.995484][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.999585][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.002375][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.004888][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.006244][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.006351][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.012294][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.018511][ T5977] veth0_macvtap: entered promiscuous mode [ 46.023403][ T5977] veth1_macvtap: entered promiscuous mode [ 46.027554][ T5972] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.040756][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.050868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.053806][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.054108][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.061702][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.064934][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.071428][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.075565][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.084454][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.087000][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.099710][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.102618][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.116406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.118885][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.284477][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.534654][ T5975] Bluetooth: hci0: command tx timeout [ 46.537246][ T5975] Bluetooth: hci1: command tx timeout [ 46.540278][ T5975] Bluetooth: hci2: command tx timeout [ 46.542731][ T5975] Bluetooth: hci3: command tx timeout [ 46.554842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.701029][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 46.704190][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.708733][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.711748][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 46.715885][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 46.718718][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.722354][ T10] usb 7-1: config 0 descriptor?? [ 47.004872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 47.009833][ T6063] pim6reg: entered allmulticast mode [ 47.019284][ T6063] pim6reg: left allmulticast mode [ 47.109269][ T6086] netlink: 22864 bytes leftover after parsing attributes in process `syz.2.3'. [ 47.165898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 47.173554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 47.176343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.204395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 47.364410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 47.424997][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.476115][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 47.478772][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 47.481040][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 47.483296][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 47.580064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.615249][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 47.618731][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.622017][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.625008][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 47.628461][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 47.631859][ T34] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 47.634129][ T10] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 47.637028][ T6063] random: crng reseeded on system resumption [ 47.638647][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 47.646798][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.652451][ T10] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 47.654945][ T34] hub 5-1:1.0: bad descriptor, ignoring hub [ 47.655979][ T10] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 47.657434][ T34] hub 5-1:1.0: probe with driver hub failed with error -5 [ 47.670530][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 47.673615][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 47.676076][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 47.678147][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 47.710808][ T6082] usb 2-1: USB disconnect, device number 2 [ 47.714663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.805172][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 47.805190][ T6041] usb 7-1: USB disconnect, device number 2 [ 47.808692][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 47.814835][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 47.818269][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 47.915248][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.918448][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.935729][ T34] usb 5-1: USB disconnect, device number 2 [ 47.998322][ T6100] veth0_to_bridge: entered promiscuous mode [ 48.004558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.601982][ T6109] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 48.623262][ T5987] Bluetooth: hci3: command tx timeout [ 48.623322][ T5975] Bluetooth: hci2: command tx timeout [ 48.625667][ T5988] Bluetooth: hci1: command tx timeout [ 48.625694][ T5988] Bluetooth: hci0: command tx timeout [ 48.744489][ T6041] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.894487][ T6041] usb 5-1: Using ep0 maxpacket: 8 [ 48.902389][ T6041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.911636][ T6041] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 48.914698][ T6041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 48.921660][ T6041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 48.925327][ T6041] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 48.928145][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.939225][ T6041] hub 5-1:1.0: bad descriptor, ignoring hub [ 48.941755][ T6041] hub 5-1:1.0: probe with driver hub failed with error -5 [ 48.954688][ T6041] cdc_wdm 5-1:1.0: skipping garbage [ 48.956919][ T6041] cdc_wdm 5-1:1.0: skipping garbage [ 48.971585][ T6099] veth0_to_bridge: left promiscuous mode [ 48.974336][ T6041] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 48.977203][ T6041] cdc_wdm 5-1:1.0: Unknown control protocol [ 49.271330][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.277007][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.445381][ T6041] usb 5-1: USB disconnect, device number 3 [ 50.060344][ T6110] delete_channel: no stack [ 50.594472][ T6132] nbd3: detected capacity change from 0 to 4 [ 50.598282][ T6134] block nbd3: shutting down sockets [ 50.603566][ C2] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.607345][ C2] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.610724][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.616393][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.620160][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.624023][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.628378][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.632085][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.636550][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.640254][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.643524][ T5983] ldm_validate_partition_table(): Disk read failed. [ 50.646393][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.650122][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.653795][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.658573][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.661894][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.667199][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.670505][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.674145][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.677519][ T5983] Dev nbd3: unable to read RDB block 0 [ 50.679829][ T5983] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.683421][ T5983] Buffer I/O error on dev nbd3, logical block 0, async page read [ 50.687011][ T5983] nbd3: unable to read partition table [ 50.689624][ T5983] nbd3: partition table beyond EOD, truncated [ 50.693432][ T5386] ldm_validate_partition_table(): Disk read failed. [ 50.694849][ T5988] Bluetooth: hci3: command tx timeout [ 50.694903][ T5984] Bluetooth: hci2: command tx timeout [ 50.694928][ T5984] Bluetooth: hci1: command tx timeout [ 50.696227][ T5984] Bluetooth: hci0: command tx timeout [ 50.696882][ T5386] Dev nbd3: unable to read RDB block 0 [ 50.697000][ T5386] nbd3: unable to read partition table [ 50.697060][ T5386] nbd3: partition table beyond EOD, truncated [ 50.701022][ T5983] ldm_validate_partition_table(): Disk read failed. [ 50.716203][ T5983] Dev nbd3: unable to read RDB block 0 [ 50.718389][ T5983] nbd3: unable to read partition table [ 50.720419][ T5983] nbd3: partition table beyond EOD, truncated [ 50.841344][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.361069][ T6148] ALSA: mixer_oss: invalid index 40000 [ 52.629008][ T6186] o2cb: This node has not been configured. [ 52.631332][ T6186] o2cb: Cluster check failed. Fix errors before retrying. [ 52.634286][ T6186] (syz.1.35,6186,3):user_dlm_register:674 ERROR: status = -22 [ 52.640418][ T6186] (syz.1.35,6186,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 52.774501][ T5984] Bluetooth: hci3: command tx timeout [ 52.776378][ T5984] Bluetooth: hci2: command tx timeout [ 52.778095][ T5984] Bluetooth: hci0: command tx timeout [ 52.779771][ T5984] Bluetooth: hci1: command tx timeout [ 53.700080][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 53.761812][ T6224] random: crng reseeded on system resumption [ 54.025593][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 54.064166][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 54.140506][ T6232] hub 8-0:1.0: USB hub found [ 54.142459][ T6232] hub 8-0:1.0: 1 port detected [ 54.668699][ T6248] FAULT_INJECTION: forcing a failure. [ 54.668699][ T6248] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.675334][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(full) [ 54.675368][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.675377][ T6248] Call Trace: [ 54.675382][ T6248] [ 54.675388][ T6248] dump_stack_lvl+0x16c/0x1f0 [ 54.675411][ T6248] should_fail_ex+0x512/0x640 [ 54.675435][ T6248] _copy_from_iter+0x29f/0x16f0 [ 54.675462][ T6248] ? __pfx__copy_from_iter+0x10/0x10 [ 54.675486][ T6248] ? rcu_is_watching+0x12/0xc0 [ 54.675502][ T6248] ? rcu_is_watching+0x12/0xc0 [ 54.675517][ T6248] ? kfree+0x24f/0x4d0 [ 54.675543][ T6248] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 54.675569][ T6248] file_tty_write.constprop.0+0x488/0x9b0 [ 54.675592][ T6248] vfs_write+0x7d3/0x11d0 [ 54.675611][ T6248] ? __pfx_tty_write+0x10/0x10 [ 54.675631][ T6248] ? __pfx_vfs_write+0x10/0x10 [ 54.675649][ T6248] ? lock_release+0x201/0x2f0 [ 54.675679][ T6248] ksys_write+0x12a/0x250 [ 54.675696][ T6248] ? __pfx_ksys_write+0x10/0x10 [ 54.675713][ T6248] ? syscall_user_dispatch+0x78/0x140 [ 54.675737][ T6248] ? rcu_is_watching+0x12/0xc0 [ 54.675754][ T6248] __do_fast_syscall_32+0x7c/0x3a0 [ 54.675776][ T6248] do_fast_syscall_32+0x32/0x80 [ 54.675796][ T6248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.675816][ T6248] RIP: 0023:0xf70be579 [ 54.675827][ T6248] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 54.675841][ T6248] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 54.675856][ T6248] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 54.675866][ T6248] RDX: 000000000000ff2e RSI: 0000000000000000 RDI: 0000000000000000 [ 54.675875][ T6248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.675883][ T6248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 54.675892][ T6248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.675906][ T6248] [ 54.768668][ T6250] wg2: entered allmulticast mode [ 54.773499][ T6250] capability: warning: `syz.2.50' uses 32-bit capabilities (legacy support in use) [ 54.884595][ T9] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 55.009096][ T6265] tipc: Started in network mode [ 55.010827][ T6265] tipc: Node identity 1af0b4c1ad8a, cluster identity 4711 [ 55.013397][ T6265] tipc: Enabled bearer , priority 0 [ 55.016937][ T6265] syzkaller0: entered promiscuous mode [ 55.018527][ T6265] syzkaller0: entered allmulticast mode [ 55.026282][ T6265] tipc: Resetting bearer [ 55.030276][ T6264] tipc: Resetting bearer [ 55.032737][ T6264] tipc: Disabling bearer [ 55.035765][ T9] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 55.038469][ T9] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 55.041043][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 55.043853][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 55.047410][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 55.050434][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 55.057042][ T9] usb 8-1: string descriptor 0 read error: -22 [ 55.059300][ T9] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 55.062115][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.068902][ T9] usb 8-1: config 0 descriptor?? [ 55.070909][ T6245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 55.075032][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 55.078006][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 55.083243][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input6 [ 55.234478][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.286669][ T6041] usb 8-1: USB disconnect, device number 2 [ 55.404460][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 55.408126][ T6274] autofs: Unknown parameter 'contention_end' [ 55.408187][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 55.414601][ T29] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 55.417544][ T29] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 55.420643][ T29] usb 7-1: Product: syz [ 55.422051][ T29] usb 7-1: Manufacturer: syz [ 55.423676][ T29] usb 7-1: SerialNumber: syz [ 55.426142][ T29] usb 7-1: config 0 descriptor?? [ 55.428543][ T6263] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.644460][ T59] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 55.774437][ T59] usb 5-1: device descriptor read/64, error -71 [ 55.805502][ T141] usb 7-1: USB disconnect, device number 3 [ 55.945598][ T6289] syz.3.63 uses obsolete (PF_INET,SOCK_PACKET) [ 55.949748][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 55.956362][ T6289] dummy0: entered promiscuous mode [ 55.958912][ T6289] bridge0: port 3(macvlan2) entered blocking state [ 55.961119][ T6289] bridge0: port 3(macvlan2) entered disabled state [ 55.963187][ T6289] macvlan2: entered allmulticast mode [ 55.966354][ T6289] dummy0: entered allmulticast mode [ 55.969089][ T6289] macvlan2: entered promiscuous mode [ 55.971078][ T6289] bridge0: port 3(macvlan2) entered blocking state [ 55.973184][ T6289] bridge0: port 3(macvlan2) entered forwarding state [ 56.034752][ T59] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 56.174439][ T59] usb 5-1: device descriptor read/64, error -71 [ 56.242177][ T6293] netlink: 4860 bytes leftover after parsing attributes in process `syz.3.65'. [ 56.284720][ T59] usb usb5-port1: attempt power cycle [ 56.517762][ T6302] netlink: 4860 bytes leftover after parsing attributes in process `syz.2.66'. [ 56.624567][ T59] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 56.655264][ T59] usb 5-1: device descriptor read/8, error -71 [ 56.963785][ T6315] ata1.00: invalid multi_count 1 ignored [ 57.024414][ T59] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 57.044931][ T59] usb 5-1: device descriptor read/8, error -71 [ 57.071234][ T141] hid-generic 00A0:0008:0003.0003: item fetching failed at offset 0/2 [ 57.077081][ T141] hid-generic 00A0:0008:0003.0003: probe with driver hid-generic failed with error -22 [ 57.154573][ T59] usb usb5-port1: unable to enumerate USB device [ 57.205192][ T6319] tipc: Enabling of bearer rejected, failed to enable media [ 58.025507][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 58.079752][ T6348] ======================================================= [ 58.079752][ T6348] WARNING: The mand mount option has been deprecated and [ 58.079752][ T6348] and is ignored by this kernel. Remove the mand [ 58.079752][ T6348] option from the mount to silence this warning. [ 58.079752][ T6348] ======================================================= [ 58.241918][ T6353] netlink: 68 bytes leftover after parsing attributes in process `syz.2.78'. [ 58.350490][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'. [ 58.354299][ T6358] gtp0: entered promiscuous mode [ 58.356804][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 58.542110][ T6382] netlink: 'syz.0.89': attribute type 21 has an invalid length. [ 58.787193][ T6390] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 58.796098][ T6390] CIFS mount error: No usable UNC path provided in device string! [ 58.796098][ T6390] [ 58.798831][ T6390] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 58.884463][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.034688][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 59.037553][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.040892][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.043667][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 59.047717][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 59.051732][ T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 59.054697][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.061315][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 59.063299][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 59.068722][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 59.070437][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 59.072488][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 59.075764][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 59.126685][ T6411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.313794][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.316689][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.327100][ T6372] Zero length message leads to an empty skb [ 59.687950][ T6423] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.101'. [ 59.865720][ T6425] binder: 6424:6425 ioctl c018620c 80000080 returned -1 [ 59.983821][ T6425] fuse: Bad value for 'fd' [ 60.130100][ T6431] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 60.622405][ T6459] 9pnet_fd: Insufficient options for proto=fd [ 60.743336][ T6445] netlink: 4860 bytes leftover after parsing attributes in process `syz.0.108'. [ 61.573314][ T6477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.113'. [ 62.370660][ T6488] binder: 6485:6488 ioctl c0306201 80000040 returned -14 [ 62.374330][ T6488] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 62.457537][ T6489] 9pnet_virtio: no channels available for device syz [ 62.636245][ T4332] usb 7-1: USB disconnect, device number 4 [ 62.689736][ T6494] usb usb9: usbfs: process 6494 (syz.2.119) did not claim interface 0 before use [ 62.758621][ T6495] 9pnet_fd: Insufficient options for proto=fd [ 62.761780][ T6495] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 62.802278][ T6497] netlink: 830 bytes leftover after parsing attributes in process `syz.3.120'. [ 63.003619][ T6510] 9pnet: Could not find request transport: fd0x0000000000000003 [ 63.124415][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.274420][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 63.277129][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.315465][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.320189][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 63.324715][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 63.330262][ T59] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 63.336016][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.342590][ T59] hub 7-1:1.0: bad descriptor, ignoring hub [ 63.345243][ T59] hub 7-1:1.0: probe with driver hub failed with error -5 [ 63.348213][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 63.350442][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 63.372568][ T59] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 63.374956][ T59] cdc_wdm 7-1:1.0: Unknown control protocol [ 63.445608][ T6526] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 63.594323][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.597650][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.682258][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 63.692361][ T6547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.012495][ T6567] 9pnet_fd: Insufficient options for proto=fd [ 64.032164][ T6569] 9pnet_fd: Insufficient options for proto=fd [ 64.405008][ T59] usb 7-1: USB disconnect, device number 5 [ 64.407871][ T6504] cdc_wdm 7-1:1.0: Error autopm - -16 [ 64.724785][ T53] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 64.898692][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.906064][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 64.914251][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.917397][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 64.922031][ T53] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 64.929911][ T53] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 64.934503][ T53] usb 5-1: Manufacturer: syz [ 64.937658][ T6585] FAULT_INJECTION: forcing a failure. [ 64.937658][ T6585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.937682][ T6585] CPU: 1 UID: 0 PID: 6585 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) [ 64.937701][ T6585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.937710][ T6585] Call Trace: [ 64.937715][ T6585] [ 64.937721][ T6585] dump_stack_lvl+0x16c/0x1f0 [ 64.937745][ T6585] should_fail_ex+0x512/0x640 [ 64.937768][ T6585] ? __pfx_binder_ioctl+0x10/0x10 [ 64.937783][ T6585] _copy_to_user+0x32/0xd0 [ 64.937797][ T6585] ? __pfx_binder_ioctl+0x10/0x10 [ 64.937811][ T6585] binder_ioctl+0x24f6/0x71f0 [ 64.937826][ T6585] ? tomoyo_path_number_perm+0x295/0x580 [ 64.937847][ T6585] ? rcu_is_watching+0x12/0xc0 [ 64.937866][ T6585] ? tomoyo_path_number_perm+0x18d/0x580 [ 64.937886][ T6585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 64.937904][ T6585] ? __pfx_binder_ioctl+0x10/0x10 [ 64.937920][ T6585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 64.937945][ T6585] ? do_vfs_ioctl+0x128/0x14f0 [ 64.937970][ T6585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 64.937997][ T6585] ? __fget_files+0x204/0x3c0 [ 64.938014][ T6585] ? hook_file_ioctl_common+0x145/0x410 [ 64.938038][ T6585] ? __fget_files+0x20e/0x3c0 [ 64.938056][ T6585] ? __pfx_binder_ioctl+0x10/0x10 [ 64.938070][ T6585] compat_ptr_ioctl+0x6b/0xa0 [ 64.938091][ T6585] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 64.938116][ T6585] __ia32_compat_sys_ioctl+0x23f/0x370 [ 64.938141][ T6585] __do_fast_syscall_32+0x7c/0x3a0 [ 64.938164][ T6585] do_fast_syscall_32+0x32/0x80 [ 64.938185][ T6585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.938206][ T6585] RIP: 0023:0xf70be579 [ 64.938218][ T6585] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.938233][ T6585] RSP: 002b:00000000f54ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 64.938256][ T6585] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 64.938266][ T6585] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.938275][ T6585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.938284][ T6585] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.938294][ T6585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.938308][ T6585] [ 64.938314][ T6585] binder: 6584:6585 ioctl c0306201 80000080 returned -14 [ 64.966244][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 65.034985][ T53] usb 5-1: config 0 descriptor?? [ 65.052420][ T6594] 9pnet_fd: Insufficient options for proto=fd [ 65.085844][ T6599] 9pnet_fd: Insufficient options for proto=fd [ 65.107026][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'. [ 65.110321][ T6602] netlink: 'syz.3.140': attribute type 9 has an invalid length. [ 65.112637][ T6602] netlink: 'syz.3.140': attribute type 7 has an invalid length. [ 65.115175][ T6602] netlink: 'syz.3.140': attribute type 8 has an invalid length. [ 65.170465][ T6591] tmpfs: Bad value for 'mpol' [ 65.259091][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 65.262191][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 65.274742][ T53] rc_core: IR keymap rc-hauppauge not found [ 65.276634][ T53] Registered IR keymap rc-empty [ 65.278207][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.285903][ T6617] input: syz0 as /devices/virtual/input/input8 [ 65.295187][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.315052][ T53] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 65.319191][ T53] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 65.324090][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.344624][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.346422][ T6619] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 65.348899][ T6619] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.351276][ T6619] vhci_hcd vhci_hcd.0: Device attached [ 65.364604][ T4332] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.369809][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.384509][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.404535][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.424409][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.444500][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.464476][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.484459][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.504425][ T53] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 65.514573][ T4332] usb 7-1: Using ep0 maxpacket: 8 [ 65.520991][ T4332] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.525071][ T53] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 65.528008][ T53] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 65.533299][ T4332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.542945][ T4332] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.549234][ T4332] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.557397][ T4332] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.562044][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.594530][ T6058] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 65.784286][ T4332] usb 7-1: GET_CAPABILITIES returned 0 [ 65.795658][ T4332] usbtmc 7-1:16.0: can't read capabilities [ 65.898357][ T4332] usb 7-1: USB disconnect, device number 6 [ 66.098173][ T6620] vhci_hcd: connection reset by peer [ 66.100610][ T60] vhci_hcd: stop threads [ 66.102211][ T60] vhci_hcd: release socket [ 66.104150][ T60] vhci_hcd: disconnect device [ 66.254535][ T4332] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 66.414434][ T4332] usb 7-1: Using ep0 maxpacket: 8 [ 66.417180][ T4332] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.420515][ T4332] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.424490][ T4332] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 66.429038][ T4332] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 66.433389][ T4332] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 66.437182][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.446467][ T4332] hub 7-1:1.0: bad descriptor, ignoring hub [ 66.448938][ T4332] hub 7-1:1.0: probe with driver hub failed with error -5 [ 66.452094][ T4332] cdc_wdm 7-1:1.0: skipping garbage [ 66.454194][ T4332] cdc_wdm 7-1:1.0: skipping garbage [ 66.457564][ T4332] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 66.460079][ T4332] cdc_wdm 7-1:1.0: Unknown control protocol [ 66.695640][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.698630][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.885025][ T6631] 9pnet_fd: Insufficient options for proto=fd [ 66.909139][ T6633] 9pnet_fd: Insufficient options for proto=fd [ 67.427361][ T4332] usb 5-1: USB disconnect, device number 8 [ 67.485276][ T6624] cdc_wdm 7-1:1.0: Error autopm - -16 [ 67.485413][ T53] usb 7-1: USB disconnect, device number 7 [ 68.697236][ T40] audit: type=1326 audit(1755851816.356:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.706156][ T40] audit: type=1326 audit(1755851816.356:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.712694][ T40] audit: type=1326 audit(1755851816.356:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.719658][ T40] audit: type=1326 audit(1755851816.356:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f17598 code=0x7ffc0000 [ 68.726164][ T40] audit: type=1326 audit(1755851816.356:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f17598 code=0x7ffc0000 [ 68.732626][ T40] audit: type=1326 audit(1755851816.356:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.739240][ T40] audit: type=1326 audit(1755851816.356:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.745779][ T40] audit: type=1326 audit(1755851816.356:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.752255][ T40] audit: type=1326 audit(1755851816.356:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.759036][ T40] audit: type=1326 audit(1755851816.356:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.0.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 68.829721][ T6661] 9pnet_fd: Insufficient options for proto=fd [ 69.380469][ T6675] wireguard0: entered promiscuous mode [ 69.384505][ T6675] wireguard0: entered allmulticast mode [ 69.871847][ T6681] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 69.971155][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 70.274482][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 70.277591][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.280872][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.283762][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 70.289311][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 70.293061][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 70.296362][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.301407][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 70.310747][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 70.315639][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 70.317648][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 70.320497][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 70.323113][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 70.555537][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.559263][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.584655][ T53] usb 5-1: USB disconnect, device number 9 [ 70.694520][ T6058] vhci_hcd: vhci_device speed not set [ 70.947097][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.949832][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.235262][ T6696] tmpfs: Unknown parameter 'appraise' [ 72.542326][ T6726] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 72.544536][ T6726] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 72.553143][ T6726] vhci_hcd vhci_hcd.0: Device attached [ 72.713455][ T5988] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 72.713511][ T5988] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 72.716405][ T5988] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 72.718746][ T5988] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 72.721555][ T5988] Bluetooth: hci0: Malformed LE Event: 0x0d [ 72.747790][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 72.854637][ T6058] usb 38-1: SetAddress Request (2) to port 0 [ 72.857279][ T6058] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 72.994475][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 73.130285][ T6727] vhci_hcd: connection reset by peer [ 73.132686][ T60] vhci_hcd: stop threads [ 73.134525][ T60] vhci_hcd: release socket [ 73.136469][ T60] vhci_hcd: disconnect device [ 73.164514][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 73.168268][ T29] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 73.171471][ T29] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 73.174480][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.177911][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.387215][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.390377][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.398238][ T9] usb 7-1: USB disconnect, device number 8 [ 73.749684][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 73.980128][ T6744] 9pnet_fd: Insufficient options for proto=fd [ 75.130657][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 75.134054][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 75.138251][ T6761] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 75.140757][ T6762] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 75.145754][ T6762] syz_tun: entered promiscuous mode [ 75.149665][ T6762] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 75.166115][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 75.169248][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 75.282568][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.191'. [ 76.056150][ T6782] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 76.063248][ T6782] tmpfs: Bad value for 'mpol' [ 76.374482][ T6799] 9pnet_fd: Insufficient options for proto=fd [ 77.894581][ T6058] usb 38-1: device descriptor read/8, error -110 [ 78.270342][ T6823] 9pnet_fd: Insufficient options for proto=fd [ 78.300678][ T5984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.303557][ T5984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.306938][ T5984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.310135][ T5984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.312901][ T5984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.377394][ T6058] usb usb38-port1: attempt power cycle [ 78.408320][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 78.418066][ T6829] /dev/sr0: Can't open blockdev [ 78.434687][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 78.474677][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.477378][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.480070][ T6826] bridge_slave_0: entered allmulticast mode [ 78.482771][ T6826] bridge_slave_0: entered promiscuous mode [ 78.489083][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.493160][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.496756][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.499095][ T6826] bridge_slave_1: entered allmulticast mode [ 78.501536][ T6826] bridge_slave_1: entered promiscuous mode [ 78.503419][ T6829] netlink: 4860 bytes leftover after parsing attributes in process `syz.3.215'. [ 78.523579][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.530140][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.550365][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.559569][ T6826] team0: Port device team_slave_0 added [ 78.569010][ T6826] team0: Port device team_slave_1 added [ 78.614610][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 78.724968][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 78.727696][ T9] usb 5-1: config 0 has no interface number 0 [ 78.729718][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 78.736260][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 78.739125][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.741889][ T9] usb 5-1: Product: syz [ 78.743245][ T9] usb 5-1: Manufacturer: syz [ 78.745006][ T9] usb 5-1: SerialNumber: syz [ 78.747103][ T9] usb 5-1: config 0 descriptor?? [ 78.751998][ T9] smsc75xx v1.0.0 [ 78.756668][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 78.760339][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 78.766060][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.772789][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.776745][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.786651][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.791026][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.793500][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.802701][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.838931][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.845226][ T6826] hsr_slave_0: entered promiscuous mode [ 78.848055][ T6826] hsr_slave_1: entered promiscuous mode [ 78.850593][ T6826] debugfs: 'hsr0' already exists in 'hsr' [ 78.852899][ T6826] Cannot create hsr debugfs directory [ 78.925094][ T70] bridge_slave_1: left allmulticast mode [ 78.926941][ T70] bridge_slave_1: left promiscuous mode [ 78.928797][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.931713][ T70] bridge_slave_0: left allmulticast mode [ 78.933551][ T70] bridge_slave_0: left promiscuous mode [ 78.936211][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.965044][ T6058] usb usb38-port1: unable to enumerate USB device [ 79.029062][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.032124][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.035604][ T70] bond0 (unregistering): Released all slaves [ 79.054105][ T6826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.062407][ T6826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.067475][ T6826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.083835][ T6826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.136146][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.153803][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.158523][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.161183][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.171176][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.174431][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.246301][ T70] hsr_slave_0: left promiscuous mode [ 79.249136][ T70] hsr_slave_1: left promiscuous mode [ 79.251849][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.256611][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.260162][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.262998][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.267977][ T70] veth1_macvtap: left promiscuous mode [ 79.269667][ T70] veth0_macvtap: left promiscuous mode [ 79.271501][ T70] veth1_vlan: left promiscuous mode [ 79.273246][ T70] veth0_vlan: left promiscuous mode [ 79.352663][ T70] team0 (unregistering): Port device team_slave_1 removed [ 79.371933][ T70] team0 (unregistering): Port device team_slave_0 removed [ 79.446046][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.592935][ T6826] veth0_vlan: entered promiscuous mode [ 79.606696][ T6826] veth1_vlan: entered promiscuous mode [ 79.633177][ T6826] veth0_macvtap: entered promiscuous mode [ 79.637598][ T6826] veth1_macvtap: entered promiscuous mode [ 79.643808][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.656783][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.669905][ T1179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.676634][ T1179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.685050][ T1179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.695242][ T1179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.773675][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.780315][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.800372][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.813012][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.115025][ T6041] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 80.285153][ T6041] usb 9-1: Using ep0 maxpacket: 8 [ 80.291557][ T6041] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.296330][ T6041] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.300158][ T6041] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 80.305611][ T6041] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 80.310288][ T6041] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 80.314112][ T6041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.322839][ T6041] hub 9-1:1.0: bad descriptor, ignoring hub [ 80.327366][ T6041] hub 9-1:1.0: probe with driver hub failed with error -5 [ 80.327672][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 80.333419][ T6041] cdc_wdm 9-1:1.0: skipping garbage [ 80.341323][ T6041] cdc_wdm 9-1:1.0: skipping garbage [ 80.350159][ T6041] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 80.353865][ T6041] cdc_wdm 9-1:1.0: Unknown control protocol [ 80.384563][ T5984] Bluetooth: hci2: command tx timeout [ 80.585853][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.589107][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.615062][ T141] usb 9-1: USB disconnect, device number 2 [ 81.187531][ T61] cfg80211: failed to load regulatory.db [ 81.246175][ T6059] usb 5-1: USB disconnect, device number 10 [ 81.385494][ T6924] /dev/sr0: Can't open blockdev [ 81.421126][ T6924] netlink: 4860 bytes leftover after parsing attributes in process `syz.2.225'. [ 82.022329][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 82.026903][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 82.266658][ T6951] 9pnet_fd: Insufficient options for proto=fd [ 82.289321][ T40] kauditd_printk_skb: 483 callbacks suppressed [ 82.289336][ T40] audit: type=1107 audit(1755851829.946:495): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='·6†t˜ò7ðà¨fÁª[$ÌjŠ·ÈË`à‹eîìÁê»ÔÝÉ…I£YQ<ú¯µÉXuå?€‚ïL [ 82.289336][ T40] ç¹ÂE9L6óɇ·„ŒÃÐM|´|I×ȹ\‚ØœðíŽYÁx÷tôÑV¯UG›Ü°™óµuvÅ' [ 82.307515][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 82.344644][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 82.347554][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 82.354763][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 82.448206][ T40] audit: type=1804 audit(1755851830.106:496): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.234" name="/newroot/77/bus/bus" dev="overlay" ino=439 res=1 errno=0 [ 82.454527][ T5984] Bluetooth: hci2: command tx timeout [ 82.624577][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 82.774488][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 82.777841][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.781753][ T9] usb 7-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.786056][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 82.790128][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 82.793122][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.795799][ T9] usb 7-1: Product: syz [ 82.797239][ T9] usb 7-1: Manufacturer: syz [ 82.799121][ T9] usb 7-1: SerialNumber: syz [ 82.802842][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 82.804875][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 83.574529][ T61] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.664029][ T6991] FAULT_INJECTION: forcing a failure. [ 83.664029][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 83.668481][ T6991] CPU: 2 UID: 0 PID: 6991 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 83.668496][ T6991] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.668502][ T6991] Call Trace: [ 83.668505][ T6991] [ 83.668509][ T6991] dump_stack_lvl+0x16c/0x1f0 [ 83.668526][ T6991] should_fail_ex+0x512/0x640 [ 83.668541][ T6991] should_failslab+0xc2/0x120 [ 83.668554][ T6991] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 83.668567][ T6991] ? __d_alloc+0x32/0xae0 [ 83.668579][ T6991] __d_alloc+0x32/0xae0 [ 83.668590][ T6991] ? trace_kmem_cache_alloc+0x28/0xc0 [ 83.668605][ T6991] d_alloc_pseudo+0x1c/0xc0 [ 83.668620][ T6991] alloc_file_pseudo+0xcf/0x230 [ 83.668635][ T6991] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 83.668651][ T6991] sock_alloc_file+0x50/0x210 [ 83.668665][ T6991] do_accept+0x240/0x530 [ 83.668675][ T6991] ? do_raw_spin_lock+0x12c/0x2b0 [ 83.668690][ T6991] ? __pfx_do_accept+0x10/0x10 [ 83.668699][ T6991] ? rcu_is_watching+0x12/0xc0 [ 83.668711][ T6991] ? kmem_cache_alloc_bulk_noprof+0x478/0xbc0 [ 83.668723][ T6991] io_accept+0x259/0x950 [ 83.668737][ T6991] ? __fget_files+0x204/0x3c0 [ 83.668747][ T6991] ? rcu_is_watching+0x12/0xc0 [ 83.668757][ T6991] ? __pfx_io_accept+0x10/0x10 [ 83.668771][ T6991] __io_issue_sqe+0xe5/0x7c0 [ 83.668787][ T6991] io_issue_sqe+0x86/0xe50 [ 83.668798][ T6991] io_submit_sqes+0x92d/0x2590 [ 83.668813][ T6991] __do_sys_io_uring_enter+0xd6a/0x1630 [ 83.668825][ T6991] ? __fget_files+0x20e/0x3c0 [ 83.668835][ T6991] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 83.668848][ T6991] ? fput+0x9b/0xd0 [ 83.668860][ T6991] ? ksys_write+0x1ac/0x250 [ 83.668871][ T6991] ? __pfx_ksys_write+0x10/0x10 [ 83.668882][ T6991] ? rcu_is_watching+0x12/0xc0 [ 83.668892][ T6991] __do_fast_syscall_32+0x7c/0x3a0 [ 83.668906][ T6991] do_fast_syscall_32+0x32/0x80 [ 83.668918][ T6991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.668932][ T6991] RIP: 0023:0xf7f17579 [ 83.668939][ T6991] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.668949][ T6991] RSP: 002b:00000000f541555c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 83.668959][ T6991] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000003516 [ 83.668965][ T6991] RDX: 000000000000c2de RSI: 0000000000000008 RDI: 0000000000000000 [ 83.668971][ T6991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.668976][ T6991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.668982][ T6991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.668990][ T6991] [ 83.784970][ T61] usb 8-1: Using ep0 maxpacket: 32 [ 83.788826][ T61] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.791907][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.796108][ T61] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.799196][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.813359][ T61] usb 8-1: config 0 descriptor?? [ 83.820816][ T61] hub 8-1:0.0: bad descriptor, ignoring hub [ 83.822725][ T61] hub 8-1:0.0: probe with driver hub failed with error -5 [ 83.827558][ T61] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 83.911947][ T6954] cdc_wdm 9-1:1.0: Error autopm - -16 [ 84.028503][ T6988] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.380970][ T7004] ksmbd: Unknown IPC event: 3, ignore. [ 84.534589][ T5984] Bluetooth: hci2: command tx timeout [ 84.538754][ T10] usb 7-1: USB disconnect, device number 9 [ 84.563683][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.250'. [ 84.824409][ T61] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 84.974518][ T61] usb 9-1: Using ep0 maxpacket: 32 [ 84.978134][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 84.982139][ T61] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 84.988174][ T61] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 84.992008][ T61] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 84.995670][ T61] usb 9-1: Product: syz [ 84.997638][ T61] usb 9-1: Manufacturer: syz [ 84.999679][ T61] usb 9-1: SerialNumber: syz [ 85.003908][ T61] usb 9-1: config 0 descriptor?? [ 85.008029][ T61] hub 9-1:0.0: bad descriptor, ignoring hub [ 85.010505][ T61] hub 9-1:0.0: probe with driver hub failed with error -5 [ 85.114526][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 85.265402][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 85.281508][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 85.285803][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.296442][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.312902][ T10] usb 5-1: config 0 descriptor?? [ 85.604508][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 85.734634][ T10] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 85.754674][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 85.759536][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.763759][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.768193][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 85.772823][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 85.777533][ T34] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 85.780680][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.785864][ T34] hub 7-1:1.0: bad descriptor, ignoring hub [ 85.787837][ T34] hub 7-1:1.0: probe with driver hub failed with error -5 [ 85.790806][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 85.792997][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 85.795480][ T34] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 85.798681][ T34] cdc_wdm 7-1:1.0: Unknown control protocol [ 85.980444][ T34] usb 5-1: USB disconnect, device number 11 [ 86.038441][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.041627][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.044551][ T53] usb 9-1: USB disconnect, device number 3 [ 86.084689][ T6059] usb 7-1: USB disconnect, device number 10 [ 86.434573][ T34] usb 8-1: USB disconnect, device number 3 [ 86.614456][ T5984] Bluetooth: hci2: command tx timeout [ 88.031556][ T7069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.259860][ T7086] overlay: Unknown parameter 'seclabel' [ 88.354458][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 88.495635][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 88.504573][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 88.507395][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.510505][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.513260][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 88.517069][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 88.520467][ T10] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 88.523247][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.529627][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 88.531508][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 88.533821][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 88.535733][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 88.538009][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 88.539869][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 88.793044][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.817827][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.956153][ T6059] usb 7-1: USB disconnect, device number 11 [ 89.810683][ T7143] netlink: 'syz.2.289': attribute type 4 has an invalid length. [ 90.112238][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 90.205451][ T7180] FAULT_INJECTION: forcing a failure. [ 90.205451][ T7180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.209808][ T7180] CPU: 2 UID: 0 PID: 7180 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(full) [ 90.209822][ T7180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.209829][ T7180] Call Trace: [ 90.209833][ T7180] [ 90.209837][ T7180] dump_stack_lvl+0x16c/0x1f0 [ 90.209853][ T7180] should_fail_ex+0x512/0x640 [ 90.209869][ T7180] _copy_from_iter+0x29f/0x16f0 [ 90.209886][ T7180] ? rcu_is_watching+0x12/0xc0 [ 90.209896][ T7180] ? __pfx__copy_from_iter+0x10/0x10 [ 90.209911][ T7180] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 90.209923][ T7180] ? __asan_memset+0x23/0x50 [ 90.209933][ T7180] ? __build_skb_around+0x278/0x3b0 [ 90.209943][ T7180] ? is_vmalloc_addr+0x86/0xa0 [ 90.209955][ T7180] netlink_sendmsg+0x829/0xdd0 [ 90.209970][ T7180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.209983][ T7180] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 90.209995][ T7180] ____sys_sendmsg+0xa98/0xc70 [ 90.210011][ T7180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.210027][ T7180] ? get_compat_msghdr+0x11a/0x170 [ 90.210041][ T7180] ? kstrtouint_from_user+0x13c/0x1d0 [ 90.210053][ T7180] ___sys_sendmsg+0x134/0x1d0 [ 90.210065][ T7180] ? get_pid_task+0xfc/0x250 [ 90.210079][ T7180] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.210093][ T7180] ? rcu_is_watching+0x12/0xc0 [ 90.210107][ T7180] __sys_sendmsg+0x16d/0x220 [ 90.210119][ T7180] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.210133][ T7180] ? rcu_is_watching+0x12/0xc0 [ 90.210143][ T7180] __do_fast_syscall_32+0x7c/0x3a0 [ 90.210158][ T7180] do_fast_syscall_32+0x32/0x80 [ 90.210170][ T7180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.210183][ T7180] RIP: 0023:0xf70ce579 [ 90.210191][ T7180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.210201][ T7180] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 90.210210][ T7180] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 90.210217][ T7180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.210222][ T7180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.210228][ T7180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.210233][ T7180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.210242][ T7180] [ 90.444449][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.826773][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 90.854834][ T59] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.428066][ T59] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.430834][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 91.433971][ T59] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 91.624803][ T59] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.627939][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.639898][ T59] hub 8-1:1.0: bad descriptor, ignoring hub [ 91.643746][ T59] hub 8-1:1.0: probe with driver hub failed with error -5 [ 91.648109][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 91.650321][ T59] cdc_wdm 8-1:1.0: skipping garbage [ 91.654227][ T59] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 91.656874][ T59] cdc_wdm 8-1:1.0: Unknown control protocol [ 91.750947][ T7206] loop8: detected capacity change from 0 to 7 [ 91.753672][ T5983] Dev loop8: unable to read RDB block 7 [ 91.755688][ T5983] loop8: unable to read partition table [ 91.757795][ T5983] loop8: partition table beyond EOD, truncated [ 91.760560][ T7206] Dev loop8: unable to read RDB block 7 [ 91.762328][ T7206] loop8: unable to read partition table [ 91.764159][ T7206] loop8: partition table beyond EOD, truncated [ 91.766385][ T7206] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.814445][ T9] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 91.825970][ T7207] netlink: 68 bytes leftover after parsing attributes in process `syz.4.299'. [ 91.891318][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.894068][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.965623][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 91.968795][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.971918][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 91.975125][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.979225][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.982117][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.986191][ T9] usbtmc 7-1:16.0: bulk endpoints not found [ 92.187537][ T40] audit: type=1326 audit(1755851839.846:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.195135][ T40] audit: type=1326 audit(1755851839.846:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.201882][ T40] audit: type=1326 audit(1755851839.856:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.208524][ T40] audit: type=1326 audit(1755851839.856:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.215208][ T40] audit: type=1326 audit(1755851839.856:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.221733][ T40] audit: type=1326 audit(1755851839.856:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.228486][ T40] audit: type=1326 audit(1755851839.856:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.235098][ T40] audit: type=1326 audit(1755851839.856:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.241400][ T40] audit: type=1326 audit(1755851839.856:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.248371][ T40] audit: type=1326 audit(1755851839.856:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.296" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 92.611083][ T7226] 9pnet_fd: Insufficient options for proto=fd [ 93.502655][ T7248] mmap: syz.0.306 (7248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.945960][ T7256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.309'. [ 94.524602][ T53] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 94.705081][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 94.721946][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.728240][ T53] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.732774][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.737581][ T53] usb 5-1: Product: syz [ 94.739385][ T53] usb 5-1: Manufacturer: syz [ 94.741325][ T53] usb 5-1: SerialNumber: syz [ 94.743842][ T7260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.744848][ T53] usb 5-1: config 0 descriptor?? [ 94.752811][ T53] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.755821][ T53] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 95.014841][ T53] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 95.076978][ T53] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 95.080590][ T53] em28xx 5-1:0.0: board has no eeprom [ 95.121223][ T7225] cdc_wdm 8-1:1.0: Error autopm - -16 [ 95.123970][ T6041] usb 8-1: USB disconnect, device number 4 [ 95.139389][ T59] usb 7-1: USB disconnect, device number 12 [ 95.147333][ T53] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 95.160973][ T53] em28xx 5-1:0.0: dvb set to bulk mode. [ 95.164135][ T6126] em28xx 5-1:0.0: Binding DVB extension [ 95.164150][ T7258] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 95.168726][ T53] usb 5-1: USB disconnect, device number 12 [ 95.171978][ T53] em28xx 5-1:0.0: Disconnecting em28xx [ 95.202372][ T6126] em28xx 5-1:0.0: Registering input extension [ 95.205092][ T53] em28xx 5-1:0.0: Closing input extension [ 95.209672][ T53] em28xx 5-1:0.0: Freeing device [ 95.786899][ T7284] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 95.844821][ T7289] FAULT_INJECTION: forcing a failure. [ 95.844821][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 95.850126][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.4.320 Not tainted syzkaller #0 PREEMPT(full) [ 95.850148][ T7289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.850158][ T7289] Call Trace: [ 95.850165][ T7289] [ 95.850170][ T7289] dump_stack_lvl+0x16c/0x1f0 [ 95.850196][ T7289] should_fail_ex+0x512/0x640 [ 95.850219][ T7289] ? tomoyo_encode2+0x100/0x3e0 [ 95.850240][ T7289] should_failslab+0xc2/0x120 [ 95.850261][ T7289] __kmalloc_noprof+0xd2/0x510 [ 95.850278][ T7289] ? d_absolute_path+0x136/0x1a0 [ 95.850302][ T7289] tomoyo_encode2+0x100/0x3e0 [ 95.850325][ T7289] tomoyo_encode+0x29/0x50 [ 95.850346][ T7289] tomoyo_realpath_from_path+0x18f/0x6e0 [ 95.850371][ T7289] tomoyo_path_number_perm+0x245/0x580 [ 95.850391][ T7289] ? tomoyo_path_number_perm+0x237/0x580 [ 95.850411][ T7289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.850435][ T7289] ? preempt_count_add+0x76/0x150 [ 95.850464][ T7289] ? rcu_is_watching+0x12/0xc0 [ 95.850482][ T7289] ? __fget_files+0x204/0x3c0 [ 95.850499][ T7289] ? hook_file_ioctl_common+0x145/0x410 [ 95.850521][ T7289] ? lock_release+0x201/0x2f0 [ 95.850543][ T7289] ? __fget_files+0x20e/0x3c0 [ 95.850562][ T7289] security_file_ioctl_compat+0x9b/0x240 [ 95.850585][ T7289] __ia32_compat_sys_ioctl+0xc3/0x370 [ 95.850614][ T7289] __do_fast_syscall_32+0x7c/0x3a0 [ 95.850637][ T7289] do_fast_syscall_32+0x32/0x80 [ 95.850658][ T7289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.850679][ T7289] RIP: 0023:0xf70ce579 [ 95.850692][ T7289] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.850707][ T7289] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 95.850724][ T7289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000009204 [ 95.850734][ T7289] RDX: 00000000000c397e RSI: 0000000000000000 RDI: 0000000000000000 [ 95.850743][ T7289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.850782][ T7289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.850792][ T7289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.850807][ T7289] [ 95.850824][ T7289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.145094][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 96.476677][ T59] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 96.664690][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 96.668359][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.671570][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.674968][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 96.683517][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 96.687390][ T59] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 96.690451][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.695560][ T59] hub 7-1:1.0: bad descriptor, ignoring hub [ 96.698422][ T59] hub 7-1:1.0: probe with driver hub failed with error -5 [ 96.701069][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 96.702776][ T59] cdc_wdm 7-1:1.0: skipping garbage [ 96.708164][ T59] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 96.710538][ T59] cdc_wdm 7-1:1.0: Unknown control protocol [ 96.948854][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.954815][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.984715][ T10] usb 7-1: USB disconnect, device number 13 [ 98.196221][ T7344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.212571][ T7344] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.338040][ T7343] FAULT_INJECTION: forcing a failure. [ 98.338040][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.355611][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.3.335 Not tainted syzkaller #0 PREEMPT(full) [ 98.355637][ T7343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.355644][ T7343] Call Trace: [ 98.355647][ T7343] [ 98.355651][ T7343] dump_stack_lvl+0x16c/0x1f0 [ 98.355668][ T7343] should_fail_ex+0x512/0x640 [ 98.355684][ T7343] _copy_to_user+0x32/0xd0 [ 98.355694][ T7343] simple_read_from_buffer+0xcb/0x170 [ 98.355705][ T7343] proc_fail_nth_read+0x197/0x240 [ 98.355716][ T7343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.355726][ T7343] ? security_file_permission+0x71/0x210 [ 98.355740][ T7343] ? rw_verify_area+0xcf/0x6c0 [ 98.355750][ T7343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.355759][ T7343] vfs_read+0x1e1/0xcf0 [ 98.355771][ T7343] ? __pfx_vfs_read+0x10/0x10 [ 98.355781][ T7343] ? rcu_is_watching+0x12/0xc0 [ 98.355793][ T7343] ? __fget_files+0x20e/0x3c0 [ 98.355805][ T7343] ksys_read+0x12a/0x250 [ 98.355816][ T7343] ? __pfx_ksys_read+0x10/0x10 [ 98.355826][ T7343] ? fput+0x9b/0xd0 [ 98.355839][ T7343] ? rcu_is_watching+0x12/0xc0 [ 98.355849][ T7343] __do_fast_syscall_32+0x7c/0x3a0 [ 98.355863][ T7343] do_fast_syscall_32+0x32/0x80 [ 98.355876][ T7343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.355888][ T7343] RIP: 0023:0xf7fe6579 [ 98.355897][ T7343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.355906][ T7343] RSP: 002b:00000000f5506590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 98.355917][ T7343] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f5506620 [ 98.355923][ T7343] RDX: 000000000000000f RSI: 00000000f7474ff4 RDI: 0000000000000000 [ 98.355929][ T7343] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 98.355935][ T7343] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 98.355941][ T7343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.355949][ T7343] [ 98.463653][ T7348] ata1.00: invalid multi_count 1 ignored [ 98.542184][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 98.572574][ T10] hid-generic 00A0:0008:0003.0005: item fetching failed at offset 0/2 [ 98.576701][ T10] hid-generic 00A0:0008:0003.0005: probe with driver hid-generic failed with error -22 [ 98.784480][ T6058] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 98.954438][ T6058] usb 8-1: Using ep0 maxpacket: 8 [ 98.957313][ T6058] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.963205][ T6058] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.973398][ T6058] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 99.034414][ T6058] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 99.037969][ T6058] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 99.040772][ T6058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.159433][ T6058] hub 8-1:1.0: bad descriptor, ignoring hub [ 99.161459][ T6058] hub 8-1:1.0: probe with driver hub failed with error -5 [ 99.163795][ T6058] cdc_wdm 8-1:1.0: skipping garbage [ 99.194485][ T6058] cdc_wdm 8-1:1.0: skipping garbage [ 99.204592][ T6058] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 99.206487][ T6058] cdc_wdm 8-1:1.0: Unknown control protocol [ 99.417667][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.422157][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.445716][ T59] usb 8-1: USB disconnect, device number 5 [ 99.453228][ T7382] siw: device registration error -23 [ 99.606187][ T7378] netlink: 'syz.2.345': attribute type 27 has an invalid length. [ 99.612895][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.615526][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.628352][ T7378] wg2: left allmulticast mode [ 99.640411][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.645184][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.678493][ T7378] wireguard0: left promiscuous mode [ 99.680132][ T7378] wireguard0: left allmulticast mode [ 99.703926][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.707960][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.719713][ T7384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.733084][ T1179] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.736477][ T1179] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.757215][ T1179] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.757489][ T7374] syz.4.339 (7374) used greatest stack depth: 19960 bytes left [ 99.760517][ T1179] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.948096][ T7447] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 101.963492][ T7447] batman_adv: batadv0: Adding interface: team0 [ 101.976012][ T7447] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.989597][ T7447] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 102.004444][ T7447] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 102.008585][ T7447] netlink: 2 bytes leftover after parsing attributes in process `syz.4.358'. [ 102.011522][ T7447] team0: entered promiscuous mode [ 102.013117][ T7447] team_slave_0: entered promiscuous mode [ 102.027018][ T7447] team_slave_1: entered promiscuous mode [ 102.045940][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.048236][ T7447] batman_adv: batadv0: Interface activated: team0 [ 102.050974][ T7447] batman_adv: batadv0: Interface deactivated: team0 [ 102.053207][ T7447] batman_adv: batadv0: Removing interface: team0 [ 102.092429][ T7447] bridge0: port 3(team0) entered blocking state [ 102.119507][ T7447] bridge0: port 3(team0) entered disabled state [ 102.122211][ T7447] team0: entered allmulticast mode [ 102.124083][ T7447] team_slave_0: entered allmulticast mode [ 102.126065][ T7447] team_slave_1: entered allmulticast mode [ 102.134258][ T7447] bridge0: port 3(team0) entered blocking state [ 102.136852][ T7447] bridge0: port 3(team0) entered forwarding state [ 102.830787][ T7465] CIFS: VFS: Malformed UNC in devname [ 102.834049][ T7461] netlink: 52 bytes leftover after parsing attributes in process `syz.3.365'. [ 102.854513][ T5988] Bluetooth: hci2: command 0x0405 tx timeout [ 102.909465][ T7470] bond0: (slave syz_tun): Releasing backup interface [ 102.938103][ T7470] bridge_slave_0: left allmulticast mode [ 102.966038][ T7470] bridge_slave_0: left promiscuous mode [ 102.997340][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.015376][ T7470] bridge_slave_1: left allmulticast mode [ 103.027416][ T7470] bridge_slave_1: left promiscuous mode [ 103.048247][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.105844][ T7470] bond0: (slave bond_slave_0): Releasing backup interface [ 103.179619][ T7470] bond0: (slave bond_slave_1): Releasing backup interface [ 103.201141][ T7470] team0: Port device team_slave_0 removed [ 103.208981][ T7470] team0: Port device team_slave_1 removed [ 103.211247][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.213701][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.217880][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.262562][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.560663][ T7470] macvlan2: left allmulticast mode [ 103.562340][ T7470] dummy0: left allmulticast mode [ 103.563899][ T7470] macvlan2: left promiscuous mode [ 103.565730][ T7470] bridge0: port 3(macvlan2) entered disabled state [ 103.590049][ T7472] team0: Mode changed to "loadbalance" [ 104.214506][ T53] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.364764][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 104.365727][ T53] usb 8-1: config 0 has no interfaces? [ 104.370452][ T53] usb 8-1: New USB device found, idVendor=8516, idProduct=3071, bcdDevice=22.2e [ 104.373337][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.376010][ T53] usb 8-1: Product: syz [ 104.377340][ T53] usb 8-1: Manufacturer: syz [ 104.378791][ T53] usb 8-1: SerialNumber: syz [ 104.381254][ T53] usb 8-1: config 0 descriptor?? [ 104.525042][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 104.529122][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.533193][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.536976][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 104.541448][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 104.545567][ T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.549165][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.558899][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 104.561294][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 104.565261][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 104.567824][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 104.572136][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 104.575463][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 104.586276][ T53] usb 8-1: USB disconnect, device number 6 [ 104.668105][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 104.811322][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.816113][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.137383][ T7520] syzkaller0: entered promiscuous mode [ 105.139722][ T7520] syzkaller0: entered allmulticast mode [ 105.297618][ T7528] FAULT_INJECTION: forcing a failure. [ 105.297618][ T7528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.302986][ T7528] CPU: 0 UID: 0 PID: 7528 Comm: syz.3.382 Not tainted syzkaller #0 PREEMPT(full) [ 105.303002][ T7528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.303008][ T7528] Call Trace: [ 105.303012][ T7528] [ 105.303016][ T7528] dump_stack_lvl+0x16c/0x1f0 [ 105.303033][ T7528] should_fail_ex+0x512/0x640 [ 105.303048][ T7528] _copy_from_iter+0x29f/0x16f0 [ 105.303064][ T7528] ? __alloc_skb+0x200/0x380 [ 105.303076][ T7528] ? __pfx__copy_from_iter+0x10/0x10 [ 105.303092][ T7528] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 105.303107][ T7528] netlink_sendmsg+0x829/0xdd0 [ 105.303121][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.303137][ T7528] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 105.303149][ T7528] ____sys_sendmsg+0xa98/0xc70 [ 105.303165][ T7528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.303182][ T7528] ? get_compat_msghdr+0x11a/0x170 [ 105.303195][ T7528] ? kstrtouint_from_user+0x13c/0x1d0 [ 105.303208][ T7528] ___sys_sendmsg+0x134/0x1d0 [ 105.303273][ T7528] ? get_pid_task+0xfc/0x250 [ 105.303290][ T7528] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.303306][ T7528] ? rcu_is_watching+0x12/0xc0 [ 105.303321][ T7528] __sys_sendmsg+0x16d/0x220 [ 105.303334][ T7528] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.303348][ T7528] ? rcu_is_watching+0x12/0xc0 [ 105.303359][ T7528] __do_fast_syscall_32+0x7c/0x3a0 [ 105.303375][ T7528] do_fast_syscall_32+0x32/0x80 [ 105.303388][ T7528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.303402][ T7528] RIP: 0023:0xf7fe6579 [ 105.303411][ T7528] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.303422][ T7528] RSP: 002b:00000000f550655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 105.303433][ T7528] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 105.303439][ T7528] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.303445][ T7528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.303451][ T7528] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.303457][ T7528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.303466][ T7528] [ 105.379050][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.615059][ T7501] cdc_wdm 9-1:1.0: Error autopm - -16 [ 105.615235][ T59] usb 9-1: USB disconnect, device number 4 [ 105.632632][ T7542] process 'syz.2.388' launched './file0' with NULL argv: empty string added [ 105.644488][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 105.655800][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 105.824554][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 105.828800][ T9] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 105.832304][ T9] usb 8-1: config 0 has no interface number 0 [ 105.835226][ T9] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 105.840976][ T9] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 105.843789][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.846738][ T9] usb 8-1: Product: syz [ 105.847964][ T9] usb 8-1: Manufacturer: syz [ 105.849315][ T9] usb 8-1: SerialNumber: syz [ 105.851998][ T9] usb 8-1: config 0 descriptor?? [ 106.057639][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.064952][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.069095][ T9] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 106.071202][ T9] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 106.074980][ T9] usb 8-1: USB disconnect, device number 7 [ 106.586928][ T7564] FAULT_INJECTION: forcing a failure. [ 106.586928][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 106.591771][ T7564] CPU: 3 UID: 0 PID: 7564 Comm: syz.3.395 Not tainted syzkaller #0 PREEMPT(full) [ 106.591786][ T7564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.591792][ T7564] Call Trace: [ 106.591797][ T7564] [ 106.591800][ T7564] dump_stack_lvl+0x16c/0x1f0 [ 106.591816][ T7564] should_fail_ex+0x512/0x640 [ 106.591832][ T7564] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 106.591847][ T7564] should_failslab+0xc2/0x120 [ 106.591865][ T7564] __kmalloc_noprof+0xd2/0x510 [ 106.591878][ T7564] tomoyo_realpath_from_path+0xc2/0x6e0 [ 106.591893][ T7564] ? tomoyo_profile+0x47/0x60 [ 106.591902][ T7564] tomoyo_path_number_perm+0x245/0x580 [ 106.591913][ T7564] ? tomoyo_path_number_perm+0x237/0x580 [ 106.591925][ T7564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.591940][ T7564] ? preempt_count_add+0x76/0x150 [ 106.591957][ T7564] ? rcu_is_watching+0x12/0xc0 [ 106.591968][ T7564] ? __fget_files+0x204/0x3c0 [ 106.591979][ T7564] ? hook_file_ioctl_common+0x145/0x410 [ 106.591992][ T7564] ? lock_release+0x201/0x2f0 [ 106.592005][ T7564] ? __fget_files+0x20e/0x3c0 [ 106.592016][ T7564] security_file_ioctl_compat+0x9b/0x240 [ 106.592029][ T7564] __ia32_compat_sys_ioctl+0xc3/0x370 [ 106.592046][ T7564] __do_fast_syscall_32+0x7c/0x3a0 [ 106.592060][ T7564] do_fast_syscall_32+0x32/0x80 [ 106.592073][ T7564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.592086][ T7564] RIP: 0023:0xf7fe6579 [ 106.592093][ T7564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.592103][ T7564] RSP: 002b:00000000f550655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 106.592114][ T7564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005311 [ 106.592120][ T7564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.592126][ T7564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.592132][ T7564] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 106.592137][ T7564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.592147][ T7564] [ 106.592151][ T7564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.733126][ T7568] 9pnet_fd: Insufficient options for proto=fd [ 106.915478][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 107.149754][ T5984] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 107.149772][ T5984] Bluetooth: hci0: Malformed LE Event: 0x0d [ 107.923400][ T7596] FAULT_INJECTION: forcing a failure. [ 107.923400][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 107.929315][ T7596] CPU: 2 UID: 0 PID: 7596 Comm: syz.3.406 Not tainted syzkaller #0 PREEMPT(full) [ 107.929342][ T7596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.929353][ T7596] Call Trace: [ 107.929359][ T7596] [ 107.929365][ T7596] dump_stack_lvl+0x16c/0x1f0 [ 107.929392][ T7596] should_fail_ex+0x512/0x640 [ 107.929418][ T7596] should_failslab+0xc2/0x120 [ 107.929440][ T7596] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 107.929461][ T7596] ? skb_clone+0x190/0x3f0 [ 107.929484][ T7596] ? netlink_deliver_tap+0x103/0xd30 [ 107.929506][ T7596] skb_clone+0x190/0x3f0 [ 107.929528][ T7596] netlink_deliver_tap+0xabd/0xd30 [ 107.929550][ T7596] netlink_unicast+0x64c/0x870 [ 107.929573][ T7596] ? __pfx_netlink_unicast+0x10/0x10 [ 107.929595][ T7596] ? __pfx___might_resched+0x10/0x10 [ 107.929615][ T7596] netlink_sendmsg+0x8d1/0xdd0 [ 107.929638][ T7596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.929660][ T7596] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 107.929680][ T7596] ____sys_sendmsg+0xa98/0xc70 [ 107.929704][ T7596] ? tree_mod_log_insert+0x60/0x370 [ 107.929723][ T7596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.929747][ T7596] ? get_compat_msghdr+0x11a/0x170 [ 107.929769][ T7596] ? kstrtouint_from_user+0x13c/0x1d0 [ 107.929791][ T7596] ___sys_sendmsg+0x134/0x1d0 [ 107.929810][ T7596] ? get_pid_task+0xfc/0x250 [ 107.929833][ T7596] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.929857][ T7596] ? rcu_is_watching+0x12/0xc0 [ 107.929879][ T7596] __sys_sendmsg+0x16d/0x220 [ 107.929899][ T7596] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.929924][ T7596] ? rcu_is_watching+0x12/0xc0 [ 107.929941][ T7596] __do_fast_syscall_32+0x7c/0x3a0 [ 107.929964][ T7596] do_fast_syscall_32+0x32/0x80 [ 107.929985][ T7596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.930005][ T7596] RIP: 0023:0xf7fe6579 [ 107.930018][ T7596] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.930033][ T7596] RSP: 002b:00000000f550655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 107.930050][ T7596] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 107.930061][ T7596] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.930071][ T7596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.930081][ T7596] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.930091][ T7596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.930106][ T7596] [ 107.985455][ T7594] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 108.032674][ T7594] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 108.036698][ T7594] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 108.041167][ T7594] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 108.121987][ T7604] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 108.127837][ T7604] batman_adv: batadv0: Adding interface: team0 [ 108.129847][ T7604] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.137387][ T7604] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 108.144085][ T7604] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 108.146719][ T7604] netlink: 2 bytes leftover after parsing attributes in process `syz.3.409'. [ 108.149684][ T7604] team0: entered promiscuous mode [ 108.151651][ T7604] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.153897][ T7604] batman_adv: batadv0: Interface activated: team0 [ 108.156296][ T7604] batman_adv: batadv0: Interface deactivated: team0 [ 108.158473][ T7604] batman_adv: batadv0: Removing interface: team0 [ 108.160952][ T7604] bridge0: port 1(team0) entered blocking state [ 108.163072][ T7604] bridge0: port 1(team0) entered disabled state [ 108.165459][ T7604] team0: entered allmulticast mode [ 108.239624][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 108.277280][ T7635] FAULT_INJECTION: forcing a failure. [ 108.277280][ T7635] name failslab, interval 1, probability 0, space 0, times 0 [ 108.281114][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT(full) [ 108.281129][ T7635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.281135][ T7635] Call Trace: [ 108.281139][ T7635] [ 108.281143][ T7635] dump_stack_lvl+0x16c/0x1f0 [ 108.281159][ T7635] should_fail_ex+0x512/0x640 [ 108.281174][ T7635] should_failslab+0xc2/0x120 [ 108.281188][ T7635] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 108.281200][ T7635] ? __might_fault+0xe3/0x190 [ 108.281211][ T7635] ? lock_release+0x201/0x2f0 [ 108.281223][ T7635] ? getname_flags.part.0+0x4c/0x550 [ 108.281240][ T7635] getname_flags.part.0+0x4c/0x550 [ 108.281255][ T7635] getname_flags+0x93/0xf0 [ 108.281265][ T7635] user_path_at+0x24/0x60 [ 108.281276][ T7635] __ia32_sys_mount+0x1fb/0x310 [ 108.281289][ T7635] ? __pfx___ia32_sys_mount+0x10/0x10 [ 108.281302][ T7635] ? rcu_is_watching+0x12/0xc0 [ 108.281313][ T7635] __do_fast_syscall_32+0x7c/0x3a0 [ 108.281327][ T7635] do_fast_syscall_32+0x32/0x80 [ 108.281339][ T7635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.281352][ T7635] RIP: 0023:0xf7f17579 [ 108.281360][ T7635] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.281370][ T7635] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 108.281381][ T7635] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000040 [ 108.281387][ T7635] RDX: 00000000800000c0 RSI: 0000000000a08410 RDI: 0000000000000000 [ 108.281393][ T7635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.281399][ T7635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.281405][ T7635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.281414][ T7635] [ 108.340882][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.571069][ T7655] 9pnet_fd: Insufficient options for proto=fd [ 108.587956][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 108.599792][ T40] kauditd_printk_skb: 391 callbacks suppressed [ 108.599816][ T40] audit: type=1326 audit(1755851856.256:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.613558][ T40] audit: type=1326 audit(1755851856.256:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.623566][ T40] audit: type=1326 audit(1755851856.256:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.630400][ T40] audit: type=1326 audit(1755851856.256:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.638326][ T40] audit: type=1326 audit(1755851856.256:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.645278][ T40] audit: type=1326 audit(1755851856.256:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.651932][ T40] audit: type=1326 audit(1755851856.256:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.658997][ T40] audit: type=1326 audit(1755851856.256:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.665717][ T40] audit: type=1326 audit(1755851856.256:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 108.672329][ T40] audit: type=1326 audit(1755851856.256:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.4.419" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 109.477170][ T7689] 9pnet_fd: Insufficient options for proto=fd [ 109.540985][ T7691] netlink: 'syz.0.429': attribute type 7 has an invalid length. [ 109.543904][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 109.944511][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 110.028073][ T7698] : entered promiscuous mode [ 110.054796][ T7704] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 110.057909][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.060526][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.078770][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.081258][ T7704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.084249][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.086748][ T7704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.092405][ T7704] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 110.114772][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 110.125933][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 110.129929][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.136794][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.140707][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.144554][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.152142][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 110.154988][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.159011][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.162992][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.166812][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.171931][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 110.174910][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 110.178711][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.182645][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.186637][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.195541][ T10] usb 8-1: string descriptor 0 read error: -22 [ 110.199090][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.202072][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.209878][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 110.566009][ T61] usb 8-1: USB disconnect, device number 8 [ 111.417912][ T7757] netlink: 68 bytes leftover after parsing attributes in process `syz.4.439'. [ 111.613852][ T5984] Bluetooth: hci2: unexpected event for opcode 0x200a [ 113.046262][ T7803] netlink: 'syz.2.451': attribute type 7 has an invalid length. [ 113.048787][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 113.647096][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'. [ 113.649733][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'. [ 114.004089][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.024992][ T7829] fuseblk: Bad value for 'fd' [ 114.080400][ T7829] batadv_slave_0: entered promiscuous mode [ 114.154466][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 114.157927][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.162079][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.165406][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 114.168905][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 114.172419][ T34] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.175494][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.180593][ T34] hub 5-1:1.0: bad descriptor, ignoring hub [ 114.182730][ T34] hub 5-1:1.0: probe with driver hub failed with error -5 [ 114.185718][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 114.187530][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 114.190133][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 114.192108][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 115.974487][ T5984] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.974528][ T7822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.578289][ T7822] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.582709][ T7822] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.585976][ T7822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.588220][ T7822] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.591008][ T7822] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.593858][ T7822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.596205][ T7822] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.600722][ T7822] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.603316][ T7822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.606115][ T7822] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.608609][ T7822] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.613622][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.616932][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.734740][ T6041] usb 5-1: USB disconnect, device number 13 [ 116.798912][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 117.389240][ T7862] netlink: 'syz.0.469': attribute type 11 has an invalid length. [ 117.392431][ T7862] netlink: 224 bytes leftover after parsing attributes in process `syz.0.469'. [ 118.200872][ T5984] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.615108][ T5984] Bluetooth: hci2: command 0x0405 tx timeout [ 118.617199][ T5984] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.619308][ T5984] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.984507][ T6058] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.144483][ T6058] usb 5-1: Using ep0 maxpacket: 32 [ 119.148164][ T6058] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.151810][ T6058] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.165309][ T6058] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.168455][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.172615][ T6058] usb 5-1: config 0 descriptor?? [ 119.177827][ T6058] hub 5-1:0.0: bad descriptor, ignoring hub [ 119.179739][ T6058] hub 5-1:0.0: probe with driver hub failed with error -5 [ 119.191963][ T6058] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 119.378591][ T7919] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.485037][ T6058] usb 5-1: USB disconnect, device number 14 [ 119.896486][ T40] kauditd_printk_skb: 315 callbacks suppressed [ 119.896499][ T40] audit: type=1326 audit(1755851867.556:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.907073][ T40] audit: type=1326 audit(1755851867.556:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.917962][ T40] audit: type=1326 audit(1755851867.556:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.924746][ T40] audit: type=1326 audit(1755851867.556:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.931932][ T40] audit: type=1326 audit(1755851867.556:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.939115][ T40] audit: type=1326 audit(1755851867.556:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.948292][ T40] audit: type=1326 audit(1755851867.556:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.955085][ T40] audit: type=1326 audit(1755851867.556:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 119.961928][ T40] audit: type=1326 audit(1755851867.556:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 119.968589][ T40] audit: type=1326 audit(1755851867.556:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.484" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7ffc0000 [ 120.151623][ T7956] pim6reg: entered allmulticast mode [ 120.214882][ T5988] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.644468][ T141] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 120.694642][ T5984] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.697142][ T5984] Bluetooth: hci2: command 0x0405 tx timeout [ 120.699680][ T5988] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.794794][ T141] usb 8-1: Using ep0 maxpacket: 16 [ 120.800195][ T141] usb 8-1: config 0 has no interfaces? [ 120.807253][ T141] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.811588][ T141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.816722][ T141] usb 8-1: Product: syz [ 120.818635][ T141] usb 8-1: Manufacturer: syz [ 120.820821][ T141] usb 8-1: SerialNumber: syz [ 120.831555][ T141] usb 8-1: config 0 descriptor?? [ 121.057040][ T141] usb 8-1: USB disconnect, device number 9 [ 121.068404][ T7998] netlink: 'syz.4.492': attribute type 7 has an invalid length. [ 121.070592][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 121.574465][ T6058] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 121.771126][ T8027] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 121.773435][ T8027] [U] J"—e:ÀÆ" [ 121.796297][ T6058] usb 9-1: config 195 has an invalid interface number: 145 but max is 0 [ 121.799900][ T6058] usb 9-1: config 195 has no interface number 0 [ 121.802580][ T6058] usb 9-1: config 195 interface 145 has no altsetting 0 [ 121.809772][ T6058] usb 9-1: New USB device found, idVendor=055f, idProduct=c211, bcdDevice=9b.e4 [ 121.813626][ T6058] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.817417][ T6058] usb 9-1: Product: syz [ 121.819321][ T6058] usb 9-1: Manufacturer: syz [ 121.821253][ T6058] usb 9-1: SerialNumber: syz [ 122.170831][ T8038] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 122.187960][ T8040] netlink: 'syz.3.502': attribute type 7 has an invalid length. [ 122.190406][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 122.448382][ T6058] gspca_main: sunplus-2.14.0 probing 055f:c211 [ 122.456995][ T6058] gspca_sunplus: reg_r err -71 [ 122.578088][ T8045] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 122.774559][ T5987] Bluetooth: hci2: command 0x0405 tx timeout [ 122.776478][ T5987] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.779887][ T5988] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.834457][ T61] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 122.996611][ T61] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 122.999415][ T61] usb 7-1: config 0 has no interface number 0 [ 123.001369][ T61] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.016469][ T61] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 123.020221][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.022866][ T61] usb 7-1: Product: syz [ 123.024315][ T61] usb 7-1: Manufacturer: syz [ 123.026204][ T61] usb 7-1: SerialNumber: syz [ 123.030407][ T61] usb 7-1: config 0 descriptor?? [ 123.424717][ T8069] syz.3.511 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.654518][ T6058] sunplus 9-1:195.145: probe with driver sunplus failed with error -71 [ 123.660121][ T6058] usb 9-1: USB disconnect, device number 5 [ 124.082202][ T8089] block device autoloading is deprecated and will be removed. [ 124.901453][ T8106] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 125.527141][ T61] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 125.540180][ T61] keyspan 7-1:0.133: unsupported endpoint type 0 [ 125.544747][ T61] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 125.547456][ T61] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 125.550003][ T61] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 125.553699][ T61] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 125.564468][ T61] usb 7-1: USB disconnect, device number 14 [ 125.571122][ T61] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 125.578630][ T61] keyspan 7-1:0.133: device disconnected [ 125.633235][ T8131] Bluetooth: MGMT ver 1.23 [ 125.821196][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 125.860174][ T8144] netlink: 'syz.3.534': attribute type 4 has an invalid length. [ 125.936068][ T8144] netlink: 56 bytes leftover after parsing attributes in process `syz.3.534'. [ 126.010972][ T8154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.538'. [ 126.651784][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 126.700028][ T8162] netlink: 14 bytes leftover after parsing attributes in process `syz.4.541'. [ 126.737922][ T8162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.745882][ T8162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.750746][ T8162] bond0 (unregistering): Released all slaves [ 127.027764][ T8181] wlan0 speed is unknown, defaulting to 1000 [ 127.029700][ T8181] wlan0 speed is unknown, defaulting to 1000 [ 127.032783][ T8181] wlan0 speed is unknown, defaulting to 1000 [ 127.040961][ T8181] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.057817][ T8181] wlan0 speed is unknown, defaulting to 1000 [ 127.060069][ T8181] wlan0 speed is unknown, defaulting to 1000 [ 127.062391][ T8181] wlan0 speed is unknown, defaulting to 1000 [ 127.071041][ T8181] wlan0 speed is unknown, defaulting to 1000 [ 127.152665][ T8179] wlan0 speed is unknown, defaulting to 1000 [ 127.839053][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'. [ 127.977784][ T8215] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 127.979818][ T8215] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 127.981943][ T8215] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 127.984034][ T8215] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 127.986210][ T8215] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 127.988396][ T8215] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 127.990437][ T8215] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 127.993000][ T8215] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 127.995143][ T8215] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 127.997179][ T8215] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 127.999336][ T8215] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 128.001381][ T8215] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 128.003488][ T8215] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 128.005647][ T8215] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 128.008171][ T8215] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 128.824415][ T6058] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 128.934539][ T141] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 128.974426][ T6058] usb 8-1: Using ep0 maxpacket: 16 [ 128.979261][ T6058] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.982407][ T6058] usb 8-1: config 0 interface 0 has no altsetting 0 [ 128.984707][ T6058] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 128.988126][ T6058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.992608][ T6058] usb 8-1: config 0 descriptor?? [ 129.004833][ T59] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 129.086369][ T141] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.090638][ T141] usb 7-1: too many endpoints for config 1 interface 0 altsetting 253: 113, using maximum allowed: 30 [ 129.094711][ T5988] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 129.094769][ T5984] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.095630][ T141] usb 7-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 129.105175][ T141] usb 7-1: config 1 interface 0 has no altsetting 0 [ 129.111209][ T141] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.114792][ T141] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.118021][ T141] usb 7-1: Product: syz [ 129.119398][ T141] usb 7-1: Manufacturer: syz [ 129.120915][ T141] usb 7-1: SerialNumber: syz [ 129.164396][ T59] usb 9-1: Using ep0 maxpacket: 16 [ 129.167483][ T59] usb 9-1: config 0 has no interfaces? [ 129.171570][ T59] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.174839][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.177508][ T59] usb 9-1: Product: syz [ 129.178924][ T59] usb 9-1: Manufacturer: syz [ 129.180476][ T59] usb 9-1: SerialNumber: syz [ 129.182870][ T59] usb 9-1: config 0 descriptor?? [ 129.200038][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.204731][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.297772][ T6058] usbhid 8-1:0.0: can't add hid device: -71 [ 129.300580][ T6058] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 129.305749][ T6058] usb 8-1: USB disconnect, device number 10 [ 129.476112][ T6126] usb 9-1: USB disconnect, device number 6 [ 129.884468][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 130.252634][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.264203][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.064449][ T59] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 131.214627][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 131.220668][ T59] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 131.228736][ T59] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 131.233793][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.238799][ T59] usb 8-1: Product: syz [ 131.241278][ T59] usb 8-1: Manufacturer: syz [ 131.244075][ T59] usb 8-1: SerialNumber: syz [ 131.247929][ T59] usb 8-1: config 0 descriptor?? [ 131.251366][ T8293] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 131.255905][ T59] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 131.457149][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.460240][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.464851][ T59] usb 8-1: USB disconnect, device number 11 [ 131.466824][ C3] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 131.711919][ T6058] usb 7-1: USB disconnect, device number 15 [ 132.051482][ T8352] netlink: 100 bytes leftover after parsing attributes in process `syz.2.576'. [ 132.055985][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 132.405630][ T40] kauditd_printk_skb: 212 callbacks suppressed [ 132.405642][ T40] audit: type=1326 audit(1755851880.056:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.416264][ T40] audit: type=1326 audit(1755851880.066:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.424795][ T40] audit: type=1326 audit(1755851880.066:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.431302][ T40] audit: type=1326 audit(1755851880.066:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.439218][ T40] audit: type=1326 audit(1755851880.066:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.443529][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.448472][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.450903][ T40] audit: type=1326 audit(1755851880.066:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.451092][ T1420] ================================================================== [ 132.458319][ T40] audit: type=1326 audit(1755851880.066:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.460371][ T1420] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 132.468289][ T40] audit: type=1326 audit(1755851880.066:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.4.578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 132.469865][ T1420] Read of size 8 at addr ffff8880122ba020 by task aoe_tx0/1420 [ 132.481533][ T1420] [ 132.482326][ T1420] CPU: 0 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 132.482340][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.482346][ T1420] Call Trace: [ 132.482350][ T1420] [ 132.482354][ T1420] dump_stack_lvl+0x116/0x1f0 [ 132.482371][ T1420] print_report+0xcd/0x630 [ 132.482384][ T1420] ? __virt_addr_valid+0x81/0x610 [ 132.482397][ T1420] ? __phys_addr+0xe8/0x180 [ 132.482409][ T1420] ? tty_write_room+0x7d/0x90 [ 132.482434][ T1420] kasan_report+0xe0/0x110 [ 132.482448][ T1420] ? tty_write_room+0x7d/0x90 [ 132.482458][ T1420] tty_write_room+0x7d/0x90 [ 132.482468][ T1420] handle_tx+0x14f/0x630 [ 132.482480][ T1420] dev_hard_start_xmit+0x97/0x740 [ 132.482493][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 132.482505][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 132.482517][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.482528][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.482538][ T1420] ? __schedule+0x11a3/0x5de0 [ 132.482549][ T1420] ? __smp_call_single_queue+0x161/0x2f0 [ 132.482562][ T1420] ? tg_unthrottle_up+0x1071/0x10b0 [ 132.482574][ T1420] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.482589][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.482599][ T1420] ? ref_tracker_free+0x37c/0x830 [ 132.482615][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.482629][ T1420] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.482647][ T1420] ? skb_dequeue+0x126/0x180 [ 132.482656][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.482666][ T1420] ? lock_release+0x201/0x2f0 [ 132.482678][ T1420] ? tx+0xa8/0x190 [ 132.482690][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.482700][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.482710][ T1420] tx+0xcc/0x190 [ 132.482722][ T1420] ? __pfx_tx+0x10/0x10 [ 132.482733][ T1420] kthread+0x1e4/0x3e0 [ 132.482745][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.482755][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 132.482766][ T1420] ? __kthread_parkme+0x19e/0x250 [ 132.482779][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.482789][ T1420] kthread+0x3c5/0x780 [ 132.482803][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.482816][ T1420] ? ret_from_fork+0x25/0x6f0 [ 132.482831][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.482841][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.482854][ T1420] ret_from_fork+0x5d4/0x6f0 [ 132.482868][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.482882][ T1420] ret_from_fork_asm+0x1a/0x30 [ 132.482897][ T1420] [ 132.482901][ T1420] [ 132.556356][ T1420] Allocated by task 8330: [ 132.557602][ T1420] kasan_save_stack+0x33/0x60 [ 132.559051][ T1420] kasan_save_track+0x14/0x30 [ 132.560508][ T1420] __kasan_kmalloc+0xaa/0xb0 [ 132.561972][ T1420] alloc_tty_struct+0x96/0x8c0 [ 132.563481][ T1420] tty_init_dev.part.0+0x1e/0x500 [ 132.564988][ T1420] tty_init_dev+0x60/0x80 [ 132.566374][ T1420] ptmx_open+0x10d/0x360 [ 132.567764][ T1420] chrdev_open+0x231/0x6a0 [ 132.569203][ T1420] do_dentry_open+0x97f/0x1530 [ 132.570702][ T1420] vfs_open+0x82/0x3f0 [ 132.571999][ T1420] path_openat+0x1de4/0x2cb0 [ 132.573457][ T1420] do_filp_open+0x20b/0x470 [ 132.574907][ T1420] do_sys_openat2+0x11b/0x1d0 [ 132.576336][ T1420] __ia32_compat_sys_openat+0x16d/0x210 [ 132.578114][ T1420] __do_fast_syscall_32+0x7c/0x3a0 [ 132.579784][ T1420] do_fast_syscall_32+0x32/0x80 [ 132.581336][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.583331][ T1420] [ 132.584124][ T1420] Freed by task 141: [ 132.585372][ T1420] kasan_save_stack+0x33/0x60 [ 132.586870][ T1420] kasan_save_track+0x14/0x30 [ 132.588357][ T1420] kasan_save_free_info+0x3b/0x60 [ 132.589942][ T1420] __kasan_slab_free+0x60/0x70 [ 132.591466][ T1420] kfree+0x2b4/0x4d0 [ 132.592710][ T1420] process_one_work+0x9cf/0x1b70 [ 132.594382][ T1420] worker_thread+0x6c8/0xf10 [ 132.595872][ T1420] kthread+0x3c5/0x780 [ 132.597194][ T1420] ret_from_fork+0x5d4/0x6f0 [ 132.598700][ T1420] ret_from_fork_asm+0x1a/0x30 [ 132.600170][ T1420] [ 132.600929][ T1420] Last potentially related work creation: [ 132.602707][ T1420] kasan_save_stack+0x33/0x60 [ 132.604215][ T1420] kasan_record_aux_stack+0xa7/0xc0 [ 132.605878][ T1420] insert_work+0x36/0x230 [ 132.607250][ T1420] __queue_work+0x97e/0x1160 [ 132.608773][ T1420] queue_work_on+0x1a4/0x1f0 [ 132.610231][ T1420] release_tty+0x4de/0x5d0 [ 132.611676][ T1420] tty_release_struct+0xb7/0xe0 [ 132.613248][ T1420] tty_release+0xe2d/0x1430 [ 132.614715][ T1420] __fput+0x3ff/0xb70 [ 132.615981][ T1420] task_work_run+0x14d/0x240 [ 132.617469][ T1420] exit_to_user_mode_loop+0xeb/0x110 [ 132.619125][ T1420] __do_fast_syscall_32+0x2ac/0x3a0 [ 132.620785][ T1420] do_fast_syscall_32+0x32/0x80 [ 132.622358][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.624359][ T1420] [ 132.625125][ T1420] The buggy address belongs to the object at ffff8880122ba000 [ 132.625125][ T1420] which belongs to the cache kmalloc-cg-2k of size 2048 [ 132.629710][ T1420] The buggy address is located 32 bytes inside of [ 132.629710][ T1420] freed 2048-byte region [ffff8880122ba000, ffff8880122ba800) [ 132.633991][ T1420] [ 132.634842][ T1420] The buggy address belongs to the physical page: [ 132.636845][ T1420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122b8 [ 132.639525][ T1420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 132.642139][ T1420] memcg:ffff88802792e281 [ 132.643492][ T1420] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 132.645973][ T1420] page_type: f5(slab) [ 132.647281][ T1420] raw: 00fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 132.649952][ T1420] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88802792e281 [ 132.652616][ T1420] head: 00fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 132.655315][ T1420] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88802792e281 [ 132.658010][ T1420] head: 00fff00000000003 ffffea000048ae01 00000000ffffffff 00000000ffffffff [ 132.660716][ T1420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 132.663269][ T1420] page dumped because: kasan: bad access detected [ 132.665009][ T1420] page_owner tracks the page as allocated [ 132.666773][ T1420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8170, tgid 8163 (syz.3.542), ts 127170692442, free_ts 126758097846 [ 132.673200][ T1420] post_alloc_hook+0x1c0/0x230 [ 132.674729][ T1420] get_page_from_freelist+0x132b/0x38e0 [ 132.676445][ T1420] __alloc_frozen_pages_noprof+0x58b/0x23f0 [ 132.678307][ T1420] alloc_pages_mpol+0x1fb/0x550 [ 132.679840][ T1420] new_slab+0x247/0x330 [ 132.681135][ T1420] ___slab_alloc+0xcf2/0x1740 [ 132.682623][ T1420] __slab_alloc.constprop.0+0x56/0xb0 [ 132.684320][ T1420] __kmalloc_cache_noprof+0xfb/0x3e0 [ 132.686001][ T1420] copy_verifier_state+0xbad/0xfb0 [ 132.687653][ T1420] push_stack+0x1ca/0x370 [ 132.689006][ T1420] check_cond_jmp_op+0xaf1/0x72d0 [ 132.690603][ T1420] do_check_common+0xa13e/0xb410 [ 132.692117][ T1420] bpf_check+0x8763/0xc4d0 [ 132.693537][ T1420] bpf_prog_load+0xe41/0x2490 [ 132.695028][ T1420] __sys_bpf+0x4a3f/0x4de0 [ 132.696429][ T1420] __ia32_sys_bpf+0x76/0xe0 [ 132.697877][ T1420] page last free pid 8162 tgid 8161 stack trace: [ 132.699913][ T1420] __free_frozen_pages+0x7d5/0x10f0 [ 132.701552][ T1420] qlist_free_all+0x4d/0x120 [ 132.703040][ T1420] kasan_quarantine_reduce+0x195/0x1e0 [ 132.704679][ T1420] __kasan_slab_alloc+0x69/0x90 [ 132.706216][ T1420] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 132.707921][ T1420] kobject_uevent_env+0x265/0x1870 [ 132.709542][ T1420] device_del+0x623/0x9f0 [ 132.710931][ T1420] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 132.713056][ T1420] rtnl_dellink+0x3cb/0xa80 [ 132.714525][ T1420] rtnetlink_rcv_msg+0x95b/0xe90 [ 132.716111][ T1420] netlink_rcv_skb+0x158/0x420 [ 132.717652][ T1420] netlink_unicast+0x5a7/0x870 [ 132.719162][ T1420] netlink_sendmsg+0x8d1/0xdd0 [ 132.720671][ T1420] ____sys_sendmsg+0xa98/0xc70 [ 132.722168][ T1420] ___sys_sendmsg+0x134/0x1d0 [ 132.723671][ T1420] __sys_sendmsg+0x16d/0x220 [ 132.725120][ T1420] [ 132.725904][ T1420] Memory state around the buggy address: [ 132.727727][ T1420] ffff8880122b9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.730194][ T1420] ffff8880122b9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.732775][ T1420] >ffff8880122ba000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.735265][ T1420] ^ [ 132.736941][ T1420] ffff8880122ba080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.739461][ T1420] ffff8880122ba100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 132.741938][ T1420] ================================================================== [ 132.744542][ T1420] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.746815][ T1420] CPU: 0 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 132.749560][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.752920][ T1420] Call Trace: [ 132.754036][ T1420] [ 132.755034][ T1420] dump_stack_lvl+0x3d/0x1f0 [ 132.756555][ T1420] vpanic+0x6e8/0x7a0 [ 132.757864][ T1420] ? __pfx_vpanic+0x10/0x10 [ 132.759356][ T1420] ? __pfx_vprintk_emit+0x10/0x10 [ 132.760959][ T1420] ? tty_write_room+0x7d/0x90 [ 132.762593][ T1420] panic+0xca/0xd0 [ 132.763805][ T1420] ? __pfx_panic+0x10/0x10 [ 132.765231][ T1420] ? check_panic_on_warn+0x1f/0xb0 [ 132.767004][ T1420] check_panic_on_warn+0xab/0xb0 [ 132.768600][ T1420] end_report+0x107/0x170 [ 132.769999][ T1420] kasan_report+0xee/0x110 [ 132.771439][ T1420] ? tty_write_room+0x7d/0x90 [ 132.772957][ T1420] tty_write_room+0x7d/0x90 [ 132.774409][ T1420] handle_tx+0x14f/0x630 [ 132.775896][ T1420] dev_hard_start_xmit+0x97/0x740 [ 132.777507][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 132.779094][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 132.780979][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.782566][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.784259][ T1420] ? __schedule+0x11a3/0x5de0 [ 132.785759][ T1420] ? __smp_call_single_queue+0x161/0x2f0 [ 132.787556][ T1420] ? tg_unthrottle_up+0x1071/0x10b0 [ 132.789239][ T1420] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.790930][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.792453][ T1420] ? ref_tracker_free+0x37c/0x830 [ 132.794070][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.795713][ T1420] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.797423][ T1420] ? skb_dequeue+0x126/0x180 [ 132.798932][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.800312][ T1420] ? lock_release+0x201/0x2f0 [ 132.801612][ T1420] ? tx+0xa8/0x190 [ 132.802685][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.804051][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.805545][ T1420] tx+0xcc/0x190 [ 132.806703][ T1420] ? __pfx_tx+0x10/0x10 [ 132.808055][ T1420] kthread+0x1e4/0x3e0 [ 132.809389][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.810880][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 132.812712][ T1420] ? __kthread_parkme+0x19e/0x250 [ 132.814321][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.815777][ T1420] kthread+0x3c5/0x780 [ 132.817077][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.818544][ T1420] ? ret_from_fork+0x25/0x6f0 [ 132.820023][ T1420] ? rcu_is_watching+0x12/0xc0 [ 132.821559][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.823014][ T1420] ret_from_fork+0x5d4/0x6f0 [ 132.824486][ T1420] ? __pfx_kthread+0x10/0x10 [ 132.825953][ T1420] ret_from_fork_asm+0x1a/0x30 [ 132.827463][ T1420] [ 132.829174][ T1420] Kernel Offset: disabled [ 132.830551][ T1420] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:38:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=000000000000003c RCX=ffffffff819a6682 RDX=ffff888023db4880 RSI=ffffffff819a6670 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900078cf748 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=53414b203a475542 R12=1ffff92000f19eec R13=0000000000000000 R14=ffff88801d748000 R15=ffffc900078cf818 RIP=ffffffff81bb08f6 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032509ffc CR3=000000007243a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000042a3ac RBX=0000000000000001 RCX=ffffffff8b909bf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003a58488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801d2c2440 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90875f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e1f20 CR3=000000007243a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88801b8428c0 RCX=0000000000000000 RDX=ffffc900033073b0 RSI=ffffea0001b40340 RDI=ffffc900033073f0 RBP=ffffc90003307420 RSP=ffffc90003307370 R8 =0000000000000001 R9 =ffffffff82207938 R10=0000000000000000 R11=0000000000000000 R12=ffff888063431100 R13=0000000000000000 R14=ffffc90003307468 R15=ffffea0001b40340 RIP=ffffffff82158069 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555a25794000 CR3=0000000052eef000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff856167c0 RDI=ffffffff9b0f9680 RBP=ffffffff9b0f9640 RSP=ffffc9000067f828 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=74203a7469647561 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff361f322 R15=dffffc0000000000 RIP=ffffffff856167e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005721f4c0 CR3=00000000601b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000