last executing test programs: 4m6.476216986s ago: executing program 4 (id=5429): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@xino_auto, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r6, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4m5.646938169s ago: executing program 4 (id=5433): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40200, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a0300"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000200000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ddc9053b4cd0fc52ad072f2edecfd49ea2aead7a42bc067edb5415622a48b128710fde4dbf018c25c400"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', r8, 0x700, 0x20, 0x2, 0x7fff, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x2a, [@broadcast, @local, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@loopback, 0x2}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdd, [@broadcast]}]}}}}}) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a000b0049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000104040000010000000000000000", @ANYRES32=0x0, @ANYBLOB="03050000f85158880820250001000000050010e5"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 4m4.222884613s ago: executing program 4 (id=5439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000540)=""/128, 0x80}], 0x4, &(0x7f0000000280)=[{&(0x7f0000000680)=""/94, 0x5e}, {0x0}, {&(0x7f0000000800)=""/174, 0xae}], 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r3}, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000001180)=[{&(0x7f0000000140)}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) unshare(0x62040200) 4m2.219577496s ago: executing program 4 (id=5444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m2.007173647s ago: executing program 4 (id=5445): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x4048801) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000004c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8]}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x20001) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB], 0xa, 0x1) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x1238, 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) 4m0.703458991s ago: executing program 4 (id=5449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000440), 0x3) ptrace(0x10, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x2c00, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @filter_kind_options=@f_route={{0xa}, {0x2bc8, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_ROUTE4_ACT={0x2bb8, 0x6, [@m_pedit={0x2bb4, 0x2, 0x0, 0x0, {{0xa}, {0x2b88, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x10000, 0x80000000, 0xa, 0x6}, 0xa5, 0x8, [{0x99, 0x5, 0x6, 0xfffffffa, 0x7, 0x6}, {0xb89, 0x8, 0xfffffffb, 0x2, 0x7, 0x3}, {0x2, 0xa, 0x6179, 0xb0d, 0x1000, 0x6}, {0x80, 0x6d2, 0x9, 0x1, 0x10001, 0xffffffbd}, {0x7, 0x3, 0x0, 0x8, 0x7f, 0x2e}, {0x5, 0x3, 0x9, 0x8, 0x8, 0x7fff}]}, [{0x2, 0x1, 0x2, 0x5, 0x6, 0xe7b}, {0x4, 0x8, 0x1, 0x3, 0x8, 0x1}, {0x800, 0x7fffffff, 0x9, 0x5, 0x3, 0x5}, {0xfffffff7, 0xfffffffd, 0x9, 0x1, 0x100, 0x9}, {0x21d1749c, 0x1, 0x2, 0x2, 0x74, 0x80000001}, {0x9, 0x1, 0xfffffffd, 0x5, 0xa04, 0xc0000000}, {0x5, 0x7fffffff, 0x1000, 0x2, 0x276, 0xa0}, {0x7, 0x5, 0xff800000, 0x3ff, 0x5, 0x8001}, {0x998, 0x1, 0x7, 0x3, 0x0, 0x8000}, {0x1, 0x769, 0x8, 0xffffff84, 0xb, 0x1}, {0x6a471fa8, 0x935, 0xff, 0x3fb, 0x6, 0x1}, {0x5, 0x400, 0x4, 0x8, 0x9, 0x4}, {0x1, 0xfffffff8, 0xff, 0x0, 0x5, 0x8}, {0x100, 0x3, 0x5, 0x1, 0xff, 0x200}, {0x10001, 0x3, 0xd, 0x80000000, 0x6, 0x4}, {0x79, 0x5, 0x1ff, 0x6, 0x5, 0x39b7}, {0x9f7a, 0x10001, 0x8000, 0x7, 0x7, 0x20000000}, {0xe, 0x9, 0x8000, 0x5, 0xc8, 0x2}, {0x4, 0x2, 0x6a714ad, 0x7, 0x400}, {0x7, 0x100, 0x8, 0x7, 0x9e64, 0x3}, {0xffff, 0xe, 0x8000, 0x2, 0x5, 0xff}, {0x0, 0xfffffffc, 0x7, 0x8, 0xffff, 0x8}, {0x3, 0x9, 0x0, 0x8, 0x101, 0x2}, {0x9, 0x7, 0xfffffffe, 0x5, 0x7f, 0x40}, {0xfff, 0x8, 0x6, 0x8, 0x1605, 0x4}, {0x1ff, 0x80000001, 0x1, 0x0, 0xff, 0x66e}, {0x2, 0x3, 0x1, 0x6, 0x100, 0x1ff}, {0x2, 0x5, 0x8, 0x81, 0xfffffffc, 0x9bc}, {0x0, 0x3, 0x3, 0x2, 0x1, 0x7}, {0x1, 0x9, 0x2, 0x7, 0x286, 0x80000000}, {0x10000, 0x800, 0x8, 0x1, 0x101, 0x2}, {0x0, 0x7, 0x6, 0x83, 0x1, 0x3aea}, {0x4bf, 0x3ff, 0x7, 0xabec, 0x6, 0x2}, {0x1, 0x7, 0x2c1, 0xd56, 0x6, 0x1}, {0x5, 0xbe, 0x7e, 0x0, 0x8, 0xa}, {0x1, 0x5cb, 0x3, 0x7f, 0x3, 0xa}, {0x0, 0x1, 0x6, 0xe69, 0xd7, 0x1}, {0x6, 0x6, 0x800, 0x7fffffff, 0x91, 0x2}, {0x40, 0x8, 0x7, 0x8, 0x80000000, 0xa000000}, {0x1000000, 0x9, 0xff, 0xfee, 0x1ff, 0x7fff}, {0x5, 0xffffffff, 0x7, 0x4, 0x4, 0xd}, {0x8001, 0x5, 0x1, 0xb, 0x4, 0x909}, {0x3, 0x2, 0x400, 0x100, 0x3, 0x836b}, {0xffff1164, 0xc6fe, 0x101, 0x401, 0xfff, 0x7}, {0xce13, 0x40, 0x1, 0x5bb7, 0x1, 0x7}, {0x9, 0x9, 0x4, 0x10, 0x1000, 0x4}, {0x3d8dc1d4, 0x5, 0xe00, 0x8, 0x8, 0x9}, {0x6, 0x0, 0x9, 0x8, 0xf, 0xee9}, {0x6, 0x1, 0x7, 0x3ff, 0x6, 0x2493}, {0xddef, 0x9cad, 0x8000, 0x3515, 0x3, 0x8}, {0x400, 0x200, 0x9, 0x57, 0xff, 0x7}, {0x0, 0x9, 0x3, 0x6, 0xfffffff8, 0x8d}, {0x2, 0x6, 0x5, 0x5, 0xb, 0xa}, {0x8, 0x0, 0x67, 0xdf, 0x100, 0x2}, {0x5, 0x3, 0x1, 0x7fff, 0x6, 0x2}, {0x0, 0x3, 0x4, 0x400, 0x8001, 0x9de5}, {0x7ff, 0x400, 0x3, 0xfffffff6, 0x4, 0x15}, {0x8, 0x6ce1440b, 0x5, 0x1, 0x4, 0x4}, {0x400, 0x4, 0xfffffffb, 0x5, 0x5, 0x3}, {0x401, 0xb, 0x7, 0xb21, 0x4, 0x9}, {0x7, 0xc, 0x4ae45798, 0x80000001, 0x2, 0x3ff0}, {0x6, 0x8, 0x2, 0x33b3, 0x7, 0xb5}, {0x7, 0x1000, 0xe23, 0xfffff000, 0x8, 0x5}, {0x8, 0x1, 0x10000, 0x3, 0xc, 0x5}, {0x5, 0x0, 0x9, 0xfffffffd, 0x1}, {0x7ff, 0xffff0000, 0x1, 0x5, 0x699d, 0x4}, {0x6, 0x5, 0x100, 0x0, 0x3, 0x5}, {0x1, 0x3, 0x4, 0xf0ec, 0x0, 0xb5}, {0x7c, 0xb, 0xfff, 0x1000, 0x2}, {0x7, 0x6, 0x3, 0x3, 0x9, 0x9}, {0x101, 0x9, 0x4, 0x4, 0x8f, 0x4}, {0xb, 0x3, 0x80, 0x1, 0x3, 0x10000}, {0x5, 0x5, 0x8, 0x0, 0x951}, {0x1, 0x0, 0x7, 0x10000, 0x2, 0xff}, {0x1, 0xfffffff8, 0xffffffff, 0x81, 0x9, 0x4}, {0x10000, 0x3, 0x3, 0x2, 0x3ff, 0x7ff}, {0x2, 0x8000, 0x7fffffff, 0x8, 0x64, 0x7}, {0xd0c5, 0x1, 0xe, 0x8, 0x6, 0x8}, {0x0, 0x7, 0x3, 0x941a, 0xfff, 0x3}, {0x800, 0x4, 0x7, 0x5, 0x8, 0x80}, {0x80000000, 0x200, 0x8, 0x33, 0x6d, 0xa8b0}, {0x10001, 0x7, 0xd03c, 0x4, 0xf, 0x6}, {0x9, 0x8, 0x2, 0x4, 0x6, 0x400}, {0xfffffffc, 0x2370518f, 0x9, 0x5a7, 0x4}, {0x6, 0x9, 0x7, 0x2, 0x9, 0x100}, {0x8000, 0x6, 0x7, 0x9, 0x7ff, 0xfffffff8}, {0xfffffff6, 0x7, 0x621, 0x2, 0x2000, 0x13}, {0x9e, 0xffffd18d, 0x76c0a078, 0x3, 0x401, 0x4}, {0xfffffac8, 0x73b5, 0x49d, 0x2, 0x8, 0x8de6}, {0x8, 0x51bd, 0x3, 0x80, 0x28b, 0x5}, {0x0, 0x80000000, 0x5, 0x1, 0x9, 0xe}, {0x10001, 0x100, 0x400, 0x6, 0x5, 0x5}, {0x3, 0x0, 0xffff, 0x2aa, 0x7f, 0x8}, {0x4, 0x9, 0x1, 0x8001, 0x9, 0xefe1}, {0x6, 0x5, 0x6, 0xd4, 0x2e, 0x9}, {0x320bb239, 0x81, 0xfe7, 0xc2ca, 0x2}, {0x0, 0x4aa, 0x2, 0x1, 0x1}, {0x3, 0x3ff, 0x951, 0x1000, 0xffff, 0x8}, {0xbb, 0x1d, 0xfffffff9, 0x0, 0x4, 0xfffffdde}, {0x9, 0x5, 0x6, 0x8, 0x10001, 0x7}, {0x8af6, 0x0, 0x6, 0x7fffffff, 0x6, 0x7}, {0x5, 0x0, 0x8, 0xd, 0x80000001, 0x901}, {0x96, 0xfb2, 0x4, 0x5, 0x9a, 0x1ff}, {0x8, 0x9, 0x8, 0x0, 0x1, 0xd}, {0x8, 0xffffffff, 0x1, 0xeb, 0x0, 0xf}, {0xce6, 0xfffffcd7, 0x9, 0x4, 0x7, 0x7}, {0x5, 0x20, 0x3, 0x24000000, 0x7fff}, {0x1a4, 0x4, 0x5, 0x0, 0x6, 0x2}, {0x8000, 0x7, 0x6, 0x0, 0x81, 0x200}, {0xffff8000, 0xc39, 0xc, 0x40, 0x7, 0x3}, {0xfffffff7, 0x7fffffff, 0x9, 0x9, 0x4, 0x9}, {0x0, 0x8, 0xffff, 0x7b3d02bb, 0x0, 0xffffff80}, {0x3, 0xa, 0x7, 0xda5, 0x5, 0x4}, {0x7, 0x0, 0x9, 0x1ee9, 0x1, 0x8}, {0x9, 0x9, 0xfffffff8, 0x101, 0xe, 0x9}, {0x4, 0x543, 0x8, 0x5422, 0xb, 0xe}, {0x7, 0x7, 0x400, 0xfd3, 0xff27f21, 0xfff}, {0x80000001, 0x80, 0x6, 0x1, 0x32, 0x6}, {0x2, 0x3ff, 0x68, 0x0, 0x7, 0x5}, {0x2, 0x9, 0xfffffeaa, 0x0, 0xfff, 0xfff}, {0x3, 0x3, 0x8001, 0x10, 0xfafd, 0x8}, {0xffffffff, 0x2d6f, 0x9, 0x9, 0x0, 0x7f}, {0x2, 0x2, 0x8, 0xf, 0x6, 0x6}, {0xd96, 0x101, 0x8, 0x3, 0x40000, 0xbf11}, {0x9, 0x7, 0x7ff, 0x4, 0xd, 0x5}, {0x8fc, 0x2, 0x9, 0xffff2fca, 0x1, 0xfffffffd}, {0x3, 0x2, 0x0, 0x90, 0x5, 0x5}, {0x4, 0xec8f, 0x80000000, 0x8, 0x0, 0x6}], [{0x2}, {0x5}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0xa, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x7cce924e1ccd6954}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x4eef01c21965a1bd}, {0x5}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xfffffff8, 0x10001, 0x8, 0x7f, 0x7}, 0x3, 0x9}, [{0xfff, 0x7fffffff, 0x3, 0x9, 0x5, 0x5}, {0xc, 0xbf8, 0xde5b, 0x40, 0x3, 0x6}, {0x2, 0x6, 0x1, 0x9, 0x7, 0x2}, {0x7, 0x6, 0x8, 0x2, 0xffffffff, 0x7fffffff}, {0xc, 0x8, 0xe9e, 0x2609, 0xfffffffa, 0x5}, {0x81, 0xc, 0x9, 0x8, 0x0, 0x2}, {0x6, 0x401, 0xa, 0x30, 0x30, 0x9a}, {0x10000, 0x7ac, 0x1000, 0x7, 0x8, 0x5}, {0x9, 0x6, 0x5e51, 0x7fff, 0x7, 0x3ff}, {0x7fff, 0xe, 0xc, 0x8, 0xb7, 0x3}, {0x1000, 0xe, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x2, 0x6, 0xc46, 0x0, 0x400, 0x6323}, {0xd63c, 0x2, 0x7f, 0x29, 0xffff, 0x2}, {0xc, 0xcbb, 0x0, 0x9, 0x40, 0x1}, {0x200, 0xd, 0x8, 0x10, 0x0, 0x147}, {0x7, 0x5, 0x5, 0x401, 0xa5, 0xd9c2}, {0x8, 0x2, 0xfffffffe, 0x10000, 0x5c3f, 0x3ff}, {0x97, 0x2, 0x5, 0x3, 0x22, 0x2}, {0x3, 0x634, 0x1000, 0x80000001, 0x3, 0x4}, {0x7, 0x800, 0x8001, 0x9, 0x5, 0x1}, {0xea, 0x6, 0x10001, 0x1ff, 0x99, 0x7}, {0x1, 0x2, 0x2, 0x3, 0x400, 0x3d1}, {0xcaf, 0x3, 0xfffffff7, 0xf, 0x91, 0x8000}, {0xfffffffc, 0x5, 0x2427d774, 0x7f, 0xa, 0x6e20}, {0x7f, 0xc43e, 0x81, 0x0, 0xf5ae, 0x1}, {0x4, 0xffffffff, 0x2, 0x7, 0x7, 0x3}, {0x9, 0x6, 0xe21f, 0x8, 0x2383, 0x9e}, {0x10001, 0xa6a, 0x4, 0x3, 0x48c}, {0x6, 0x9, 0x4, 0xe3, 0x0, 0x7}, {0x6, 0x8, 0xea11, 0x1, 0x2, 0x4}, {0x6, 0x2, 0xffffffbd, 0x8, 0x6, 0x1f43}, {0x5, 0x3, 0x3, 0x8, 0xd, 0x6}, {0x100, 0x7, 0xffffff7f, 0x6, 0x559, 0xfffffff3}, {0x9020, 0x8001, 0x4, 0x40, 0x9, 0x7ff}, {0xe2ab, 0x3, 0xd6, 0x8, 0x1, 0x8}, {0x4, 0x9, 0x0, 0x1, 0xfffffff8, 0x55}, {0xff, 0x2, 0x4, 0x1000000, 0x6, 0x5}, {0xbd0, 0x2, 0x0, 0xc4, 0x3010, 0xdd12}, {0x84d, 0x6, 0x1, 0xffff0001, 0x0, 0x5}, {0x1ff, 0x5, 0x5, 0x0, 0x8, 0x400}, {0x2e2, 0x1, 0xfffffff8, 0x7fff, 0xfffffff9, 0x8}, {0x1000, 0xc0000000, 0xab61, 0x6, 0x1, 0x3}, {0x77, 0x7f, 0x0, 0x9, 0x1, 0x9}, {0x7, 0x7, 0xf, 0x401, 0x2}, {0x6, 0x4, 0x3, 0x8, 0x8, 0x262}, {0x4, 0x9, 0x10000, 0x5791dadf, 0x2, 0xdc4}, {0x2, 0x7ff, 0x0, 0x1, 0x89d0, 0x1e8}, {0xc89, 0x58, 0x2, 0x4, 0x6c3b7cd, 0x2}, {0x4, 0x2, 0x9, 0x7, 0x6, 0x1}, {0x1, 0x9, 0x0, 0x8, 0x8000, 0x800}, {0x9, 0xffc00000, 0xffffff81, 0x4, 0xfffffff7, 0x7}, {0x91, 0xa, 0x8, 0x7, 0x2, 0x3}, {0x8001, 0x58, 0x8, 0x6751fa1a, 0x0, 0x1}, {0xfffffffb, 0x8, 0x3, 0x6, 0x2760, 0x8}, {0x17, 0x40, 0x2, 0x101, 0x5aa, 0x7}, {0x175, 0xbf06, 0x81, 0x8001, 0x100000, 0x7}, {0x0, 0x401, 0xffffffff, 0xfffffff7, 0xc, 0x4}, {0x7f, 0x2, 0xb30, 0xe4e4, 0x6, 0x9}, {0x2, 0x0, 0x33db, 0x80, 0xb8a, 0xa}, {0x8, 0x8, 0x5, 0x4800000, 0x6, 0x1}, {0x4, 0x100, 0x1, 0xffc00000, 0x7, 0x4}, {0x9, 0x81, 0x8, 0x7, 0x3ff, 0xfffffff8}, {0x1ff, 0x10000, 0xffffffff, 0x7, 0xffff, 0x6}, {0x8, 0xfff, 0x6, 0x9, 0x6, 0x1}, {0xd52, 0xfffffff7, 0xfffffffb, 0x44000000, 0x8, 0x9}, {0x2, 0xffffff69, 0x8, 0x5, 0x2, 0xe9f}, {0xbe0e, 0x100000, 0x8, 0xff, 0x2, 0x1}, {0xea1d, 0xfffffff1, 0x8, 0x6, 0x7, 0x1}, {0x10000, 0xa, 0xbfd, 0x2, 0x1, 0x6}, {0x6, 0x6, 0xc, 0x5, 0x3, 0x4}, {0x1, 0xff, 0x3, 0x0, 0x5, 0x8}, {0x5, 0x8, 0xe27, 0x7ff, 0x0, 0x4}, {0x0, 0x7, 0x6, 0xfffffff7, 0x4, 0x7}, {0xfffffbff, 0xfff, 0x1, 0x7fff, 0x1000000, 0x400}, {0x4, 0x9, 0x237, 0x7ff, 0x5, 0x800}, {0x1, 0x9, 0x7f, 0x431, 0xe69, 0x4}, {0x1, 0x401, 0x401, 0x9, 0x6, 0x6}, {0x3, 0x1, 0x6, 0x9, 0x10001, 0x5}, {0x5, 0x3, 0x80000001, 0xab, 0x1, 0x5}, {0xb, 0x7, 0x6, 0xf94, 0x80000001, 0x22df}, {0x3, 0x1000, 0x7, 0xca, 0x7f, 0x5}, {0x7d3a, 0xfff, 0x7273, 0x9, 0x0, 0x1}, {0xccc, 0x8, 0x6, 0x5, 0x0, 0x2c2}, {0x0, 0x4, 0x3, 0xfc40, 0x7, 0x6}, {0x7fff, 0xffffffff, 0xd, 0x9, 0x401, 0x16}, {0x9, 0x40, 0x400, 0x1, 0x1, 0x864a}, {0x4, 0x5, 0x10001, 0x9, 0x4, 0xa6}, {0x1, 0x2, 0x5, 0xfffffffd, 0x94, 0x4400000}, {0x2, 0xe, 0x6, 0xfffffffd, 0x80, 0x4}, {0x6, 0xa8b, 0x9, 0x0, 0xb6b, 0xad4}, {0x80000000, 0x7fffffff, 0x80000000, 0x8, 0xc1, 0x40}, {0x0, 0x9, 0x1ad7, 0x0, 0x5, 0x80000001}, {0xa47, 0x6, 0x1, 0xde, 0x1}, {0xfffffffe, 0x3, 0x1000, 0x3, 0x4, 0x1}, {0x7fffffff, 0x4, 0x6, 0x4, 0x2, 0x4}, {0x7, 0x90, 0x1, 0x31, 0xeb7, 0x3}, {0x80000001, 0x5, 0x1, 0x866, 0x2, 0x5}, {0x4, 0x8, 0x72, 0x4, 0xb, 0xa4c9}, {0xc685, 0x3, 0x10000, 0x9, 0x2, 0x82d}, {0x8, 0x1, 0x5, 0x7, 0x8001, 0x80000000}, {0x7, 0x0, 0x6, 0x7, 0xffffff7f, 0xffff}, {0x7c, 0x7fff, 0x5, 0xb7, 0x5, 0x8001}, {0x2, 0x30000000, 0x3, 0x80000001, 0x0, 0x1}, {0x0, 0xa, 0x5, 0x5, 0x8, 0x7}, {0x30, 0xa, 0x7387, 0x9, 0x13, 0x5}, {0x4, 0x3, 0x6, 0x80000001, 0x7, 0x7}, {0x5, 0xc, 0x4, 0x5, 0x33, 0x1000}, {0xd43, 0x16d3, 0x1, 0x6, 0x1, 0xfffffff7}, {0x6, 0x0, 0x7, 0x6, 0x80, 0x6}, {0x916, 0x4, 0x3, 0x9, 0x100, 0x2}, {0x1, 0x3, 0x0, 0x3, 0x6d, 0x100}, {0x18000000, 0x4, 0x7, 0x5, 0x5, 0x4}, {0x0, 0xf08, 0xfffffffd, 0xfff, 0x4, 0x6}, {0x2, 0x484b, 0x101, 0x40, 0xa, 0x4}, {0x5, 0xfff, 0x9, 0x2, 0xffffff00, 0x200}, {0x5, 0x7fff, 0x37f, 0x7, 0x166, 0xa}, {0x3, 0xfffffff7, 0x8, 0x80000000, 0x3, 0x7}, {0x5, 0x3, 0xc, 0x3ff, 0xfff, 0xfffffffd}, {0x4, 0xffff, 0x6ef, 0xb3, 0x2, 0xe}, {0x9, 0xc2d5, 0x726, 0x2, 0x7, 0x5b}, {0x8, 0x7, 0x6, 0x7fff, 0x8}, {0x5aad, 0x583, 0x2, 0x7f, 0x1000, 0x5}, {0xfffff123, 0x3, 0x4, 0x3, 0xb, 0x80000000}, {0x2000000, 0x6e, 0xa1b, 0x83, 0xff, 0x5}, {0x9, 0x4, 0x4, 0x10000, 0xf856, 0x4}, {0x7, 0x4, 0x9, 0x19a26, 0xfff, 0x2}, {0x7fff, 0x6, 0xfffffff9, 0x6122, 0x3ff, 0x7ff}, {0xb70c, 0xfffffff9, 0x0, 0x0, 0x9, 0x3}], [{0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x4}, {0x5}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x141a892612abd7a3}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x53a97cd9e5e411aa}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0xa859ff18d70ac145}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x4, 0x99340162a0a79af1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x6, 0x6, 0x8, 0x5, 0x9}, 0x6, 0x81, [{0x5, 0x4, 0x5, 0xfffffffb, 0x3, 0x3}, {0x5, 0xfdd, 0x2, 0x2, 0x9, 0x2f3}, {0xc33, 0x0, 0x21, 0x8001, 0x3, 0x35}]}, [{0xf, 0x0, 0x8, 0x6, 0xf, 0xb}, {0x6, 0x101, 0x2, 0x3, 0xb0, 0x1a}, {0x7, 0x7, 0x6, 0xe, 0x3, 0x8}, {0x7949, 0x8001, 0x1000, 0x9, 0x6, 0x4}, {0xffffffff, 0x4, 0x2, 0x7, 0x1000, 0x800}, {0x9, 0x6, 0x5, 0x5, 0x7fff, 0x1}, {0x5, 0x4, 0x7aa, 0x3, 0xfffffffe}, {0x9, 0xc6, 0x0, 0x3, 0x6, 0x2}, {0x4a, 0x8f3e, 0x1e1, 0x800, 0x8, 0x6d}, {0x5, 0x100, 0x7, 0xffffffff, 0x0, 0x5e}, {0x8, 0x6, 0x6, 0x101, 0x2, 0x4}, {0x3, 0x8, 0x4, 0x5, 0x5, 0x5}, {0x7a, 0x80000001, 0x8000, 0x20, 0x2, 0x6}, {0x7, 0xf90, 0x6, 0x8001, 0xfffffff7, 0xffffff85}, {0x80000000, 0x1, 0x10, 0x401, 0x0, 0x1}, {0x8, 0x7, 0x2, 0x3, 0x8334, 0xc2}, {0x480, 0x4, 0x4, 0x0, 0xfffffffe, 0x1}, {0x4, 0xc15, 0x1, 0xd, 0xae23, 0x80000000}, {0x5, 0x0, 0x7fff, 0x5, 0x5, 0x7}, {0x2, 0x83, 0x7, 0x9, 0x8, 0x400}, {0x5, 0x8, 0x2, 0x1000, 0x1, 0x2}, {0x0, 0x10000, 0x6, 0x3, 0x8001, 0x2}, {0xe, 0x74, 0x8, 0x7eafff38, 0x3, 0x3}, {0x1000, 0x100, 0x2, 0xffff, 0x4, 0xcf}, {0x5, 0x8, 0x800, 0x9}, {0x9, 0x1800, 0x8001, 0x1, 0x5, 0x9}, {0x3c000000, 0x2, 0xfffffffe, 0x1, 0x3, 0x7}, {0x80000001, 0x7fffffff, 0x200, 0xfffffff8, 0x5, 0xfffffff4}, {0x3, 0x800, 0x3, 0x101, 0x6, 0x6}, {0x6, 0x9, 0x93, 0x2ea, 0x1, 0xfffffffc}, {0x9b5, 0x4, 0x7, 0x1, 0x7ff, 0x3}, {0x9, 0x8, 0xffff, 0x1, 0x1000, 0x10000}, {0xcf0, 0x80000000, 0x7, 0x7, 0xcdd0, 0x8}, {0x53, 0x3, 0x72, 0x81, 0x100, 0x802}, {0x4, 0x101, 0x8000, 0x67, 0x0, 0x7fff}, {0x0, 0x2, 0x1, 0x7, 0x7e2, 0x8}, {0x9634, 0x2, 0x7, 0x80000000, 0x1, 0x9}, {0x2, 0x8, 0x7, 0x10001, 0xb, 0x3}, {0x0, 0x4, 0x1, 0x2, 0x0, 0x4}, {0x8, 0x873f, 0x96d9, 0x8, 0x9, 0x80000001}, {0x5, 0x8, 0x8, 0x9, 0x7, 0x10001}, {0x3, 0x8001, 0x16, 0x9, 0x3, 0xfffffc01}, {0x1ff, 0x200, 0x2, 0xc, 0x6, 0x7}, {0x20, 0xffffd1df, 0x9, 0x8119, 0x9b, 0x4}, {0x2, 0x800, 0xba2, 0x7ff, 0x1, 0x3ff}, {0x1, 0x0, 0x70, 0x3, 0x2, 0x6}, {0x6, 0x800, 0x62, 0x5, 0x7, 0x9}, {0x5, 0x101, 0x5, 0x762, 0x7, 0xfffffffc}, {0x401, 0xffff, 0x9, 0x8, 0xf3, 0x405cae8b}, {0x0, 0x17e00000, 0x3e, 0xfffffff9, 0x2, 0x1}, {0x5, 0x1, 0x650c, 0x2, 0x756, 0x13900b20}, {0x8, 0xe, 0x4, 0xd19, 0x4, 0x87f}, {0x80000000, 0x4909, 0x237, 0x6, 0x6, 0x268}, {0x6, 0xa, 0x4, 0x5, 0x10000, 0xb}, {0x10000, 0x0, 0x6, 0x0, 0x7, 0x8}, {0x2, 0x241, 0x2, 0x3ff, 0xc, 0x10}, {0x6, 0x7fff, 0x1, 0x0, 0x81, 0xf}, {0x8, 0xd07d, 0x9, 0x6, 0x8000000, 0x4}, {0x9, 0xe02, 0x3, 0xcb, 0xf07}, {0xc, 0x8, 0x1000, 0x7, 0x1, 0x8}, {0xc, 0x4, 0x0, 0x2, 0x2, 0x2d9}, {0x2, 0x10000, 0x80000001, 0x7, 0xffffff7f, 0x5112}, {0x7, 0x4, 0x3, 0x9, 0x9, 0xfffffeff}, {0x7fffffff, 0x46f, 0xfffffff9, 0x9, 0x0, 0xfffffffd}, {0xfffffff9, 0x5, 0x9, 0x40, 0x6, 0x3}, {0x8, 0x8, 0x8, 0x81, 0x1ff, 0x73c}, {0x5925, 0x0, 0xa, 0x10, 0x80000, 0x7fffffff}, {0x7, 0xf9d, 0x80000000, 0x5, 0x8, 0x60000000}, {0xd, 0x4e8, 0x4, 0x7, 0x2, 0x9}, {0x10000, 0x8, 0x8, 0x6, 0x3, 0xd777}, {0x0, 0x5, 0x9a1b, 0x4, 0x6, 0x7f}, {0x8, 0x400, 0xbbbc, 0x3, 0x2, 0x3}, {0x7, 0x4, 0x1, 0x8, 0x9221, 0x2}, {0x8, 0x9, 0x9, 0x9, 0x1, 0x5}, {0x0, 0xb, 0x6, 0xfff, 0x2, 0x1}, {0xfff, 0xf, 0x8, 0x8, 0x1, 0x7}, {0x80000001, 0x6, 0xec, 0x3b4, 0x9e, 0xc5ba}, {0x6, 0x9, 0x2, 0x0, 0x6, 0x9}, {0x3, 0x1ff, 0x0, 0x9, 0x200, 0xf4}, {0x8d, 0xffffffff, 0x3ff, 0xba, 0x401, 0x1000}, {0x400, 0x213, 0x9, 0x98, 0xc, 0x80000}, {0x4, 0xf, 0x1fc1, 0x8, 0x8000, 0x3}, {0x1, 0xf, 0x9, 0x7c, 0x9e3, 0xb2}, {0x2, 0x26, 0x2, 0x9f, 0x4, 0x400}, {0x8000, 0x8, 0x2f, 0x3, 0x4, 0x933}, {0x1, 0x800, 0x1000, 0x5, 0x7}, {0xfffffffd, 0x9, 0x7fffffff, 0x6, 0x1ff, 0x5}, {0xffffffff, 0x9, 0x1, 0x800, 0xb, 0x7}, {0x3, 0x5, 0xa86, 0x7, 0x4, 0xfffffff7}, {0x5, 0x8, 0x1a7dd173, 0x1ff, 0x6, 0xc}, {0x5, 0xe1e, 0x61000000, 0x8, 0x1, 0xffff}, {0x4, 0x8, 0xae, 0x0, 0x40, 0x3}, {0xb, 0x6, 0x8, 0x16ae, 0x4, 0x2}, {0x1ff, 0xf, 0xf65d, 0x9, 0x9, 0x3a}, {0x8001, 0x4, 0x3ff, 0x4, 0x6}, {0x0, 0xad, 0x401, 0x3, 0x6, 0x2}, {0x0, 0xfffffffa, 0xceb1, 0x1, 0x5ba, 0x7}, {0x1, 0x2a54, 0x81, 0x9, 0x7, 0x4}, {0x200, 0x1, 0x7fff, 0x5, 0xfffff800, 0xded8}, {0x4, 0x3, 0x0, 0x7, 0xd15, 0x3ff}, {0x7f, 0xc668dfc7, 0xff, 0x6, 0x6, 0x2}, {0x80000000, 0x4, 0x8, 0x8000, 0x2, 0xfffff001}, {0x981, 0x6, 0x3ff, 0xba3, 0x50, 0x2c}, {0x0, 0x8, 0x1, 0x5, 0xf, 0x1000}, {0x7f, 0x3, 0x7, 0x4, 0x7fffffff, 0xc1d}, {0x0, 0xc83, 0x3, 0xe6bc, 0x1ff, 0x80000001}, {0x6, 0x4, 0xc, 0xd, 0x10, 0xffffffc0}, {0xfffffffc, 0x4, 0x7fff, 0x6, 0x6, 0x3238}, {0x9ce, 0x3, 0x9ed, 0x1a82, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x2, 0x5, 0x7}, {0x553, 0x0, 0x9, 0x4, 0xa, 0x3}, {0x80, 0x8001, 0xfffffff7, 0x1, 0x1, 0x7ff}, {0x1, 0x7ff, 0x4, 0x6, 0xc1, 0x2}, {0xb, 0x9, 0x8, 0x4, 0x2, 0x3}, {0x5, 0x9, 0x7, 0xffff, 0x1000}, {0x159d, 0x6, 0x8, 0x2, 0x5}, {0x7, 0x3, 0x6, 0xd1c, 0xfffffff7, 0xf}, {0x5, 0x9, 0x3, 0x7, 0x6, 0x2}, {0x7, 0x34, 0x9, 0x9aa8, 0x8, 0x54}, {0x6, 0xfffffff3, 0x8, 0x7, 0x9, 0xff}, {0x4, 0x80000001, 0x4, 0x3, 0x6, 0x8}, {0xffff0000, 0x0, 0x5, 0x2, 0x8, 0x4d2}, {0xffffffff, 0x3, 0x5, 0x5, 0x6, 0x1ff}, {0x2, 0x3, 0x0, 0x6, 0x0, 0xb}, {0x30b, 0x8, 0x4, 0x4, 0x9, 0x3}, {0x2bdadbf8, 0x3, 0x4, 0x1000, 0x1c00, 0x800}, {0x9, 0x5, 0x1000, 0x101, 0x401, 0x7}, {0x5, 0x2, 0x3, 0x1, 0x87, 0xffffffff}], [{0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x175bd66837457021}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x4fcc0d506619d821}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x7, 0x1}, {0x1, 0x3a8f6e3dd61f12bd}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {}, {0xac8827d5a9353d3c}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x2c00}}, 0x20000040) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_usb_connect(0x2, 0x24, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aa00016acaee"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m46.289893519s ago: executing program 32 (id=5449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000440), 0x3) ptrace(0x10, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x2c00, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @filter_kind_options=@f_route={{0xa}, {0x2bc8, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_ROUTE4_ACT={0x2bb8, 0x6, [@m_pedit={0x2bb4, 0x2, 0x0, 0x0, {{0xa}, {0x2b88, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x10000, 0x80000000, 0xa, 0x6}, 0xa5, 0x8, [{0x99, 0x5, 0x6, 0xfffffffa, 0x7, 0x6}, {0xb89, 0x8, 0xfffffffb, 0x2, 0x7, 0x3}, {0x2, 0xa, 0x6179, 0xb0d, 0x1000, 0x6}, {0x80, 0x6d2, 0x9, 0x1, 0x10001, 0xffffffbd}, {0x7, 0x3, 0x0, 0x8, 0x7f, 0x2e}, {0x5, 0x3, 0x9, 0x8, 0x8, 0x7fff}]}, [{0x2, 0x1, 0x2, 0x5, 0x6, 0xe7b}, {0x4, 0x8, 0x1, 0x3, 0x8, 0x1}, {0x800, 0x7fffffff, 0x9, 0x5, 0x3, 0x5}, {0xfffffff7, 0xfffffffd, 0x9, 0x1, 0x100, 0x9}, {0x21d1749c, 0x1, 0x2, 0x2, 0x74, 0x80000001}, {0x9, 0x1, 0xfffffffd, 0x5, 0xa04, 0xc0000000}, {0x5, 0x7fffffff, 0x1000, 0x2, 0x276, 0xa0}, {0x7, 0x5, 0xff800000, 0x3ff, 0x5, 0x8001}, {0x998, 0x1, 0x7, 0x3, 0x0, 0x8000}, {0x1, 0x769, 0x8, 0xffffff84, 0xb, 0x1}, {0x6a471fa8, 0x935, 0xff, 0x3fb, 0x6, 0x1}, {0x5, 0x400, 0x4, 0x8, 0x9, 0x4}, {0x1, 0xfffffff8, 0xff, 0x0, 0x5, 0x8}, {0x100, 0x3, 0x5, 0x1, 0xff, 0x200}, {0x10001, 0x3, 0xd, 0x80000000, 0x6, 0x4}, {0x79, 0x5, 0x1ff, 0x6, 0x5, 0x39b7}, {0x9f7a, 0x10001, 0x8000, 0x7, 0x7, 0x20000000}, {0xe, 0x9, 0x8000, 0x5, 0xc8, 0x2}, {0x4, 0x2, 0x6a714ad, 0x7, 0x400}, {0x7, 0x100, 0x8, 0x7, 0x9e64, 0x3}, {0xffff, 0xe, 0x8000, 0x2, 0x5, 0xff}, {0x0, 0xfffffffc, 0x7, 0x8, 0xffff, 0x8}, {0x3, 0x9, 0x0, 0x8, 0x101, 0x2}, {0x9, 0x7, 0xfffffffe, 0x5, 0x7f, 0x40}, {0xfff, 0x8, 0x6, 0x8, 0x1605, 0x4}, {0x1ff, 0x80000001, 0x1, 0x0, 0xff, 0x66e}, {0x2, 0x3, 0x1, 0x6, 0x100, 0x1ff}, {0x2, 0x5, 0x8, 0x81, 0xfffffffc, 0x9bc}, {0x0, 0x3, 0x3, 0x2, 0x1, 0x7}, {0x1, 0x9, 0x2, 0x7, 0x286, 0x80000000}, {0x10000, 0x800, 0x8, 0x1, 0x101, 0x2}, {0x0, 0x7, 0x6, 0x83, 0x1, 0x3aea}, {0x4bf, 0x3ff, 0x7, 0xabec, 0x6, 0x2}, {0x1, 0x7, 0x2c1, 0xd56, 0x6, 0x1}, {0x5, 0xbe, 0x7e, 0x0, 0x8, 0xa}, {0x1, 0x5cb, 0x3, 0x7f, 0x3, 0xa}, {0x0, 0x1, 0x6, 0xe69, 0xd7, 0x1}, {0x6, 0x6, 0x800, 0x7fffffff, 0x91, 0x2}, {0x40, 0x8, 0x7, 0x8, 0x80000000, 0xa000000}, {0x1000000, 0x9, 0xff, 0xfee, 0x1ff, 0x7fff}, {0x5, 0xffffffff, 0x7, 0x4, 0x4, 0xd}, {0x8001, 0x5, 0x1, 0xb, 0x4, 0x909}, {0x3, 0x2, 0x400, 0x100, 0x3, 0x836b}, {0xffff1164, 0xc6fe, 0x101, 0x401, 0xfff, 0x7}, {0xce13, 0x40, 0x1, 0x5bb7, 0x1, 0x7}, {0x9, 0x9, 0x4, 0x10, 0x1000, 0x4}, {0x3d8dc1d4, 0x5, 0xe00, 0x8, 0x8, 0x9}, {0x6, 0x0, 0x9, 0x8, 0xf, 0xee9}, {0x6, 0x1, 0x7, 0x3ff, 0x6, 0x2493}, {0xddef, 0x9cad, 0x8000, 0x3515, 0x3, 0x8}, {0x400, 0x200, 0x9, 0x57, 0xff, 0x7}, {0x0, 0x9, 0x3, 0x6, 0xfffffff8, 0x8d}, {0x2, 0x6, 0x5, 0x5, 0xb, 0xa}, {0x8, 0x0, 0x67, 0xdf, 0x100, 0x2}, {0x5, 0x3, 0x1, 0x7fff, 0x6, 0x2}, {0x0, 0x3, 0x4, 0x400, 0x8001, 0x9de5}, {0x7ff, 0x400, 0x3, 0xfffffff6, 0x4, 0x15}, {0x8, 0x6ce1440b, 0x5, 0x1, 0x4, 0x4}, {0x400, 0x4, 0xfffffffb, 0x5, 0x5, 0x3}, {0x401, 0xb, 0x7, 0xb21, 0x4, 0x9}, {0x7, 0xc, 0x4ae45798, 0x80000001, 0x2, 0x3ff0}, {0x6, 0x8, 0x2, 0x33b3, 0x7, 0xb5}, {0x7, 0x1000, 0xe23, 0xfffff000, 0x8, 0x5}, {0x8, 0x1, 0x10000, 0x3, 0xc, 0x5}, {0x5, 0x0, 0x9, 0xfffffffd, 0x1}, {0x7ff, 0xffff0000, 0x1, 0x5, 0x699d, 0x4}, {0x6, 0x5, 0x100, 0x0, 0x3, 0x5}, {0x1, 0x3, 0x4, 0xf0ec, 0x0, 0xb5}, {0x7c, 0xb, 0xfff, 0x1000, 0x2}, {0x7, 0x6, 0x3, 0x3, 0x9, 0x9}, {0x101, 0x9, 0x4, 0x4, 0x8f, 0x4}, {0xb, 0x3, 0x80, 0x1, 0x3, 0x10000}, {0x5, 0x5, 0x8, 0x0, 0x951}, {0x1, 0x0, 0x7, 0x10000, 0x2, 0xff}, {0x1, 0xfffffff8, 0xffffffff, 0x81, 0x9, 0x4}, {0x10000, 0x3, 0x3, 0x2, 0x3ff, 0x7ff}, {0x2, 0x8000, 0x7fffffff, 0x8, 0x64, 0x7}, {0xd0c5, 0x1, 0xe, 0x8, 0x6, 0x8}, {0x0, 0x7, 0x3, 0x941a, 0xfff, 0x3}, {0x800, 0x4, 0x7, 0x5, 0x8, 0x80}, {0x80000000, 0x200, 0x8, 0x33, 0x6d, 0xa8b0}, {0x10001, 0x7, 0xd03c, 0x4, 0xf, 0x6}, {0x9, 0x8, 0x2, 0x4, 0x6, 0x400}, {0xfffffffc, 0x2370518f, 0x9, 0x5a7, 0x4}, {0x6, 0x9, 0x7, 0x2, 0x9, 0x100}, {0x8000, 0x6, 0x7, 0x9, 0x7ff, 0xfffffff8}, {0xfffffff6, 0x7, 0x621, 0x2, 0x2000, 0x13}, {0x9e, 0xffffd18d, 0x76c0a078, 0x3, 0x401, 0x4}, {0xfffffac8, 0x73b5, 0x49d, 0x2, 0x8, 0x8de6}, {0x8, 0x51bd, 0x3, 0x80, 0x28b, 0x5}, {0x0, 0x80000000, 0x5, 0x1, 0x9, 0xe}, {0x10001, 0x100, 0x400, 0x6, 0x5, 0x5}, {0x3, 0x0, 0xffff, 0x2aa, 0x7f, 0x8}, {0x4, 0x9, 0x1, 0x8001, 0x9, 0xefe1}, {0x6, 0x5, 0x6, 0xd4, 0x2e, 0x9}, {0x320bb239, 0x81, 0xfe7, 0xc2ca, 0x2}, {0x0, 0x4aa, 0x2, 0x1, 0x1}, {0x3, 0x3ff, 0x951, 0x1000, 0xffff, 0x8}, {0xbb, 0x1d, 0xfffffff9, 0x0, 0x4, 0xfffffdde}, {0x9, 0x5, 0x6, 0x8, 0x10001, 0x7}, {0x8af6, 0x0, 0x6, 0x7fffffff, 0x6, 0x7}, {0x5, 0x0, 0x8, 0xd, 0x80000001, 0x901}, {0x96, 0xfb2, 0x4, 0x5, 0x9a, 0x1ff}, {0x8, 0x9, 0x8, 0x0, 0x1, 0xd}, {0x8, 0xffffffff, 0x1, 0xeb, 0x0, 0xf}, {0xce6, 0xfffffcd7, 0x9, 0x4, 0x7, 0x7}, {0x5, 0x20, 0x3, 0x24000000, 0x7fff}, {0x1a4, 0x4, 0x5, 0x0, 0x6, 0x2}, {0x8000, 0x7, 0x6, 0x0, 0x81, 0x200}, {0xffff8000, 0xc39, 0xc, 0x40, 0x7, 0x3}, {0xfffffff7, 0x7fffffff, 0x9, 0x9, 0x4, 0x9}, {0x0, 0x8, 0xffff, 0x7b3d02bb, 0x0, 0xffffff80}, {0x3, 0xa, 0x7, 0xda5, 0x5, 0x4}, {0x7, 0x0, 0x9, 0x1ee9, 0x1, 0x8}, {0x9, 0x9, 0xfffffff8, 0x101, 0xe, 0x9}, {0x4, 0x543, 0x8, 0x5422, 0xb, 0xe}, {0x7, 0x7, 0x400, 0xfd3, 0xff27f21, 0xfff}, {0x80000001, 0x80, 0x6, 0x1, 0x32, 0x6}, {0x2, 0x3ff, 0x68, 0x0, 0x7, 0x5}, {0x2, 0x9, 0xfffffeaa, 0x0, 0xfff, 0xfff}, {0x3, 0x3, 0x8001, 0x10, 0xfafd, 0x8}, {0xffffffff, 0x2d6f, 0x9, 0x9, 0x0, 0x7f}, {0x2, 0x2, 0x8, 0xf, 0x6, 0x6}, {0xd96, 0x101, 0x8, 0x3, 0x40000, 0xbf11}, {0x9, 0x7, 0x7ff, 0x4, 0xd, 0x5}, {0x8fc, 0x2, 0x9, 0xffff2fca, 0x1, 0xfffffffd}, {0x3, 0x2, 0x0, 0x90, 0x5, 0x5}, {0x4, 0xec8f, 0x80000000, 0x8, 0x0, 0x6}], [{0x2}, {0x5}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0xa, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x7cce924e1ccd6954}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x4eef01c21965a1bd}, {0x5}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xfffffff8, 0x10001, 0x8, 0x7f, 0x7}, 0x3, 0x9}, [{0xfff, 0x7fffffff, 0x3, 0x9, 0x5, 0x5}, {0xc, 0xbf8, 0xde5b, 0x40, 0x3, 0x6}, {0x2, 0x6, 0x1, 0x9, 0x7, 0x2}, {0x7, 0x6, 0x8, 0x2, 0xffffffff, 0x7fffffff}, {0xc, 0x8, 0xe9e, 0x2609, 0xfffffffa, 0x5}, {0x81, 0xc, 0x9, 0x8, 0x0, 0x2}, {0x6, 0x401, 0xa, 0x30, 0x30, 0x9a}, {0x10000, 0x7ac, 0x1000, 0x7, 0x8, 0x5}, {0x9, 0x6, 0x5e51, 0x7fff, 0x7, 0x3ff}, {0x7fff, 0xe, 0xc, 0x8, 0xb7, 0x3}, {0x1000, 0xe, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x2, 0x6, 0xc46, 0x0, 0x400, 0x6323}, {0xd63c, 0x2, 0x7f, 0x29, 0xffff, 0x2}, {0xc, 0xcbb, 0x0, 0x9, 0x40, 0x1}, {0x200, 0xd, 0x8, 0x10, 0x0, 0x147}, {0x7, 0x5, 0x5, 0x401, 0xa5, 0xd9c2}, {0x8, 0x2, 0xfffffffe, 0x10000, 0x5c3f, 0x3ff}, {0x97, 0x2, 0x5, 0x3, 0x22, 0x2}, {0x3, 0x634, 0x1000, 0x80000001, 0x3, 0x4}, {0x7, 0x800, 0x8001, 0x9, 0x5, 0x1}, {0xea, 0x6, 0x10001, 0x1ff, 0x99, 0x7}, {0x1, 0x2, 0x2, 0x3, 0x400, 0x3d1}, {0xcaf, 0x3, 0xfffffff7, 0xf, 0x91, 0x8000}, {0xfffffffc, 0x5, 0x2427d774, 0x7f, 0xa, 0x6e20}, {0x7f, 0xc43e, 0x81, 0x0, 0xf5ae, 0x1}, {0x4, 0xffffffff, 0x2, 0x7, 0x7, 0x3}, {0x9, 0x6, 0xe21f, 0x8, 0x2383, 0x9e}, {0x10001, 0xa6a, 0x4, 0x3, 0x48c}, {0x6, 0x9, 0x4, 0xe3, 0x0, 0x7}, {0x6, 0x8, 0xea11, 0x1, 0x2, 0x4}, {0x6, 0x2, 0xffffffbd, 0x8, 0x6, 0x1f43}, {0x5, 0x3, 0x3, 0x8, 0xd, 0x6}, {0x100, 0x7, 0xffffff7f, 0x6, 0x559, 0xfffffff3}, {0x9020, 0x8001, 0x4, 0x40, 0x9, 0x7ff}, {0xe2ab, 0x3, 0xd6, 0x8, 0x1, 0x8}, {0x4, 0x9, 0x0, 0x1, 0xfffffff8, 0x55}, {0xff, 0x2, 0x4, 0x1000000, 0x6, 0x5}, {0xbd0, 0x2, 0x0, 0xc4, 0x3010, 0xdd12}, {0x84d, 0x6, 0x1, 0xffff0001, 0x0, 0x5}, {0x1ff, 0x5, 0x5, 0x0, 0x8, 0x400}, {0x2e2, 0x1, 0xfffffff8, 0x7fff, 0xfffffff9, 0x8}, {0x1000, 0xc0000000, 0xab61, 0x6, 0x1, 0x3}, {0x77, 0x7f, 0x0, 0x9, 0x1, 0x9}, {0x7, 0x7, 0xf, 0x401, 0x2}, {0x6, 0x4, 0x3, 0x8, 0x8, 0x262}, {0x4, 0x9, 0x10000, 0x5791dadf, 0x2, 0xdc4}, {0x2, 0x7ff, 0x0, 0x1, 0x89d0, 0x1e8}, {0xc89, 0x58, 0x2, 0x4, 0x6c3b7cd, 0x2}, {0x4, 0x2, 0x9, 0x7, 0x6, 0x1}, {0x1, 0x9, 0x0, 0x8, 0x8000, 0x800}, {0x9, 0xffc00000, 0xffffff81, 0x4, 0xfffffff7, 0x7}, {0x91, 0xa, 0x8, 0x7, 0x2, 0x3}, {0x8001, 0x58, 0x8, 0x6751fa1a, 0x0, 0x1}, {0xfffffffb, 0x8, 0x3, 0x6, 0x2760, 0x8}, {0x17, 0x40, 0x2, 0x101, 0x5aa, 0x7}, {0x175, 0xbf06, 0x81, 0x8001, 0x100000, 0x7}, {0x0, 0x401, 0xffffffff, 0xfffffff7, 0xc, 0x4}, {0x7f, 0x2, 0xb30, 0xe4e4, 0x6, 0x9}, {0x2, 0x0, 0x33db, 0x80, 0xb8a, 0xa}, {0x8, 0x8, 0x5, 0x4800000, 0x6, 0x1}, {0x4, 0x100, 0x1, 0xffc00000, 0x7, 0x4}, {0x9, 0x81, 0x8, 0x7, 0x3ff, 0xfffffff8}, {0x1ff, 0x10000, 0xffffffff, 0x7, 0xffff, 0x6}, {0x8, 0xfff, 0x6, 0x9, 0x6, 0x1}, {0xd52, 0xfffffff7, 0xfffffffb, 0x44000000, 0x8, 0x9}, {0x2, 0xffffff69, 0x8, 0x5, 0x2, 0xe9f}, {0xbe0e, 0x100000, 0x8, 0xff, 0x2, 0x1}, {0xea1d, 0xfffffff1, 0x8, 0x6, 0x7, 0x1}, {0x10000, 0xa, 0xbfd, 0x2, 0x1, 0x6}, {0x6, 0x6, 0xc, 0x5, 0x3, 0x4}, {0x1, 0xff, 0x3, 0x0, 0x5, 0x8}, {0x5, 0x8, 0xe27, 0x7ff, 0x0, 0x4}, {0x0, 0x7, 0x6, 0xfffffff7, 0x4, 0x7}, {0xfffffbff, 0xfff, 0x1, 0x7fff, 0x1000000, 0x400}, {0x4, 0x9, 0x237, 0x7ff, 0x5, 0x800}, {0x1, 0x9, 0x7f, 0x431, 0xe69, 0x4}, {0x1, 0x401, 0x401, 0x9, 0x6, 0x6}, {0x3, 0x1, 0x6, 0x9, 0x10001, 0x5}, {0x5, 0x3, 0x80000001, 0xab, 0x1, 0x5}, {0xb, 0x7, 0x6, 0xf94, 0x80000001, 0x22df}, {0x3, 0x1000, 0x7, 0xca, 0x7f, 0x5}, {0x7d3a, 0xfff, 0x7273, 0x9, 0x0, 0x1}, {0xccc, 0x8, 0x6, 0x5, 0x0, 0x2c2}, {0x0, 0x4, 0x3, 0xfc40, 0x7, 0x6}, {0x7fff, 0xffffffff, 0xd, 0x9, 0x401, 0x16}, {0x9, 0x40, 0x400, 0x1, 0x1, 0x864a}, {0x4, 0x5, 0x10001, 0x9, 0x4, 0xa6}, {0x1, 0x2, 0x5, 0xfffffffd, 0x94, 0x4400000}, {0x2, 0xe, 0x6, 0xfffffffd, 0x80, 0x4}, {0x6, 0xa8b, 0x9, 0x0, 0xb6b, 0xad4}, {0x80000000, 0x7fffffff, 0x80000000, 0x8, 0xc1, 0x40}, {0x0, 0x9, 0x1ad7, 0x0, 0x5, 0x80000001}, {0xa47, 0x6, 0x1, 0xde, 0x1}, {0xfffffffe, 0x3, 0x1000, 0x3, 0x4, 0x1}, {0x7fffffff, 0x4, 0x6, 0x4, 0x2, 0x4}, {0x7, 0x90, 0x1, 0x31, 0xeb7, 0x3}, {0x80000001, 0x5, 0x1, 0x866, 0x2, 0x5}, {0x4, 0x8, 0x72, 0x4, 0xb, 0xa4c9}, {0xc685, 0x3, 0x10000, 0x9, 0x2, 0x82d}, {0x8, 0x1, 0x5, 0x7, 0x8001, 0x80000000}, {0x7, 0x0, 0x6, 0x7, 0xffffff7f, 0xffff}, {0x7c, 0x7fff, 0x5, 0xb7, 0x5, 0x8001}, {0x2, 0x30000000, 0x3, 0x80000001, 0x0, 0x1}, {0x0, 0xa, 0x5, 0x5, 0x8, 0x7}, {0x30, 0xa, 0x7387, 0x9, 0x13, 0x5}, {0x4, 0x3, 0x6, 0x80000001, 0x7, 0x7}, {0x5, 0xc, 0x4, 0x5, 0x33, 0x1000}, {0xd43, 0x16d3, 0x1, 0x6, 0x1, 0xfffffff7}, {0x6, 0x0, 0x7, 0x6, 0x80, 0x6}, {0x916, 0x4, 0x3, 0x9, 0x100, 0x2}, {0x1, 0x3, 0x0, 0x3, 0x6d, 0x100}, {0x18000000, 0x4, 0x7, 0x5, 0x5, 0x4}, {0x0, 0xf08, 0xfffffffd, 0xfff, 0x4, 0x6}, {0x2, 0x484b, 0x101, 0x40, 0xa, 0x4}, {0x5, 0xfff, 0x9, 0x2, 0xffffff00, 0x200}, {0x5, 0x7fff, 0x37f, 0x7, 0x166, 0xa}, {0x3, 0xfffffff7, 0x8, 0x80000000, 0x3, 0x7}, {0x5, 0x3, 0xc, 0x3ff, 0xfff, 0xfffffffd}, {0x4, 0xffff, 0x6ef, 0xb3, 0x2, 0xe}, {0x9, 0xc2d5, 0x726, 0x2, 0x7, 0x5b}, {0x8, 0x7, 0x6, 0x7fff, 0x8}, {0x5aad, 0x583, 0x2, 0x7f, 0x1000, 0x5}, {0xfffff123, 0x3, 0x4, 0x3, 0xb, 0x80000000}, {0x2000000, 0x6e, 0xa1b, 0x83, 0xff, 0x5}, {0x9, 0x4, 0x4, 0x10000, 0xf856, 0x4}, {0x7, 0x4, 0x9, 0x19a26, 0xfff, 0x2}, {0x7fff, 0x6, 0xfffffff9, 0x6122, 0x3ff, 0x7ff}, {0xb70c, 0xfffffff9, 0x0, 0x0, 0x9, 0x3}], [{0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x4}, {0x5}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x141a892612abd7a3}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x53a97cd9e5e411aa}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0xa859ff18d70ac145}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x4, 0x99340162a0a79af1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x6, 0x6, 0x8, 0x5, 0x9}, 0x6, 0x81, [{0x5, 0x4, 0x5, 0xfffffffb, 0x3, 0x3}, {0x5, 0xfdd, 0x2, 0x2, 0x9, 0x2f3}, {0xc33, 0x0, 0x21, 0x8001, 0x3, 0x35}]}, [{0xf, 0x0, 0x8, 0x6, 0xf, 0xb}, {0x6, 0x101, 0x2, 0x3, 0xb0, 0x1a}, {0x7, 0x7, 0x6, 0xe, 0x3, 0x8}, {0x7949, 0x8001, 0x1000, 0x9, 0x6, 0x4}, {0xffffffff, 0x4, 0x2, 0x7, 0x1000, 0x800}, {0x9, 0x6, 0x5, 0x5, 0x7fff, 0x1}, {0x5, 0x4, 0x7aa, 0x3, 0xfffffffe}, {0x9, 0xc6, 0x0, 0x3, 0x6, 0x2}, {0x4a, 0x8f3e, 0x1e1, 0x800, 0x8, 0x6d}, {0x5, 0x100, 0x7, 0xffffffff, 0x0, 0x5e}, {0x8, 0x6, 0x6, 0x101, 0x2, 0x4}, {0x3, 0x8, 0x4, 0x5, 0x5, 0x5}, {0x7a, 0x80000001, 0x8000, 0x20, 0x2, 0x6}, {0x7, 0xf90, 0x6, 0x8001, 0xfffffff7, 0xffffff85}, {0x80000000, 0x1, 0x10, 0x401, 0x0, 0x1}, {0x8, 0x7, 0x2, 0x3, 0x8334, 0xc2}, {0x480, 0x4, 0x4, 0x0, 0xfffffffe, 0x1}, {0x4, 0xc15, 0x1, 0xd, 0xae23, 0x80000000}, {0x5, 0x0, 0x7fff, 0x5, 0x5, 0x7}, {0x2, 0x83, 0x7, 0x9, 0x8, 0x400}, {0x5, 0x8, 0x2, 0x1000, 0x1, 0x2}, {0x0, 0x10000, 0x6, 0x3, 0x8001, 0x2}, {0xe, 0x74, 0x8, 0x7eafff38, 0x3, 0x3}, {0x1000, 0x100, 0x2, 0xffff, 0x4, 0xcf}, {0x5, 0x8, 0x800, 0x9}, {0x9, 0x1800, 0x8001, 0x1, 0x5, 0x9}, {0x3c000000, 0x2, 0xfffffffe, 0x1, 0x3, 0x7}, {0x80000001, 0x7fffffff, 0x200, 0xfffffff8, 0x5, 0xfffffff4}, {0x3, 0x800, 0x3, 0x101, 0x6, 0x6}, {0x6, 0x9, 0x93, 0x2ea, 0x1, 0xfffffffc}, {0x9b5, 0x4, 0x7, 0x1, 0x7ff, 0x3}, {0x9, 0x8, 0xffff, 0x1, 0x1000, 0x10000}, {0xcf0, 0x80000000, 0x7, 0x7, 0xcdd0, 0x8}, {0x53, 0x3, 0x72, 0x81, 0x100, 0x802}, {0x4, 0x101, 0x8000, 0x67, 0x0, 0x7fff}, {0x0, 0x2, 0x1, 0x7, 0x7e2, 0x8}, {0x9634, 0x2, 0x7, 0x80000000, 0x1, 0x9}, {0x2, 0x8, 0x7, 0x10001, 0xb, 0x3}, {0x0, 0x4, 0x1, 0x2, 0x0, 0x4}, {0x8, 0x873f, 0x96d9, 0x8, 0x9, 0x80000001}, {0x5, 0x8, 0x8, 0x9, 0x7, 0x10001}, {0x3, 0x8001, 0x16, 0x9, 0x3, 0xfffffc01}, {0x1ff, 0x200, 0x2, 0xc, 0x6, 0x7}, {0x20, 0xffffd1df, 0x9, 0x8119, 0x9b, 0x4}, {0x2, 0x800, 0xba2, 0x7ff, 0x1, 0x3ff}, {0x1, 0x0, 0x70, 0x3, 0x2, 0x6}, {0x6, 0x800, 0x62, 0x5, 0x7, 0x9}, {0x5, 0x101, 0x5, 0x762, 0x7, 0xfffffffc}, {0x401, 0xffff, 0x9, 0x8, 0xf3, 0x405cae8b}, {0x0, 0x17e00000, 0x3e, 0xfffffff9, 0x2, 0x1}, {0x5, 0x1, 0x650c, 0x2, 0x756, 0x13900b20}, {0x8, 0xe, 0x4, 0xd19, 0x4, 0x87f}, {0x80000000, 0x4909, 0x237, 0x6, 0x6, 0x268}, {0x6, 0xa, 0x4, 0x5, 0x10000, 0xb}, {0x10000, 0x0, 0x6, 0x0, 0x7, 0x8}, {0x2, 0x241, 0x2, 0x3ff, 0xc, 0x10}, {0x6, 0x7fff, 0x1, 0x0, 0x81, 0xf}, {0x8, 0xd07d, 0x9, 0x6, 0x8000000, 0x4}, {0x9, 0xe02, 0x3, 0xcb, 0xf07}, {0xc, 0x8, 0x1000, 0x7, 0x1, 0x8}, {0xc, 0x4, 0x0, 0x2, 0x2, 0x2d9}, {0x2, 0x10000, 0x80000001, 0x7, 0xffffff7f, 0x5112}, {0x7, 0x4, 0x3, 0x9, 0x9, 0xfffffeff}, {0x7fffffff, 0x46f, 0xfffffff9, 0x9, 0x0, 0xfffffffd}, {0xfffffff9, 0x5, 0x9, 0x40, 0x6, 0x3}, {0x8, 0x8, 0x8, 0x81, 0x1ff, 0x73c}, {0x5925, 0x0, 0xa, 0x10, 0x80000, 0x7fffffff}, {0x7, 0xf9d, 0x80000000, 0x5, 0x8, 0x60000000}, {0xd, 0x4e8, 0x4, 0x7, 0x2, 0x9}, {0x10000, 0x8, 0x8, 0x6, 0x3, 0xd777}, {0x0, 0x5, 0x9a1b, 0x4, 0x6, 0x7f}, {0x8, 0x400, 0xbbbc, 0x3, 0x2, 0x3}, {0x7, 0x4, 0x1, 0x8, 0x9221, 0x2}, {0x8, 0x9, 0x9, 0x9, 0x1, 0x5}, {0x0, 0xb, 0x6, 0xfff, 0x2, 0x1}, {0xfff, 0xf, 0x8, 0x8, 0x1, 0x7}, {0x80000001, 0x6, 0xec, 0x3b4, 0x9e, 0xc5ba}, {0x6, 0x9, 0x2, 0x0, 0x6, 0x9}, {0x3, 0x1ff, 0x0, 0x9, 0x200, 0xf4}, {0x8d, 0xffffffff, 0x3ff, 0xba, 0x401, 0x1000}, {0x400, 0x213, 0x9, 0x98, 0xc, 0x80000}, {0x4, 0xf, 0x1fc1, 0x8, 0x8000, 0x3}, {0x1, 0xf, 0x9, 0x7c, 0x9e3, 0xb2}, {0x2, 0x26, 0x2, 0x9f, 0x4, 0x400}, {0x8000, 0x8, 0x2f, 0x3, 0x4, 0x933}, {0x1, 0x800, 0x1000, 0x5, 0x7}, {0xfffffffd, 0x9, 0x7fffffff, 0x6, 0x1ff, 0x5}, {0xffffffff, 0x9, 0x1, 0x800, 0xb, 0x7}, {0x3, 0x5, 0xa86, 0x7, 0x4, 0xfffffff7}, {0x5, 0x8, 0x1a7dd173, 0x1ff, 0x6, 0xc}, {0x5, 0xe1e, 0x61000000, 0x8, 0x1, 0xffff}, {0x4, 0x8, 0xae, 0x0, 0x40, 0x3}, {0xb, 0x6, 0x8, 0x16ae, 0x4, 0x2}, {0x1ff, 0xf, 0xf65d, 0x9, 0x9, 0x3a}, {0x8001, 0x4, 0x3ff, 0x4, 0x6}, {0x0, 0xad, 0x401, 0x3, 0x6, 0x2}, {0x0, 0xfffffffa, 0xceb1, 0x1, 0x5ba, 0x7}, {0x1, 0x2a54, 0x81, 0x9, 0x7, 0x4}, {0x200, 0x1, 0x7fff, 0x5, 0xfffff800, 0xded8}, {0x4, 0x3, 0x0, 0x7, 0xd15, 0x3ff}, {0x7f, 0xc668dfc7, 0xff, 0x6, 0x6, 0x2}, {0x80000000, 0x4, 0x8, 0x8000, 0x2, 0xfffff001}, {0x981, 0x6, 0x3ff, 0xba3, 0x50, 0x2c}, {0x0, 0x8, 0x1, 0x5, 0xf, 0x1000}, {0x7f, 0x3, 0x7, 0x4, 0x7fffffff, 0xc1d}, {0x0, 0xc83, 0x3, 0xe6bc, 0x1ff, 0x80000001}, {0x6, 0x4, 0xc, 0xd, 0x10, 0xffffffc0}, {0xfffffffc, 0x4, 0x7fff, 0x6, 0x6, 0x3238}, {0x9ce, 0x3, 0x9ed, 0x1a82, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x2, 0x5, 0x7}, {0x553, 0x0, 0x9, 0x4, 0xa, 0x3}, {0x80, 0x8001, 0xfffffff7, 0x1, 0x1, 0x7ff}, {0x1, 0x7ff, 0x4, 0x6, 0xc1, 0x2}, {0xb, 0x9, 0x8, 0x4, 0x2, 0x3}, {0x5, 0x9, 0x7, 0xffff, 0x1000}, {0x159d, 0x6, 0x8, 0x2, 0x5}, {0x7, 0x3, 0x6, 0xd1c, 0xfffffff7, 0xf}, {0x5, 0x9, 0x3, 0x7, 0x6, 0x2}, {0x7, 0x34, 0x9, 0x9aa8, 0x8, 0x54}, {0x6, 0xfffffff3, 0x8, 0x7, 0x9, 0xff}, {0x4, 0x80000001, 0x4, 0x3, 0x6, 0x8}, {0xffff0000, 0x0, 0x5, 0x2, 0x8, 0x4d2}, {0xffffffff, 0x3, 0x5, 0x5, 0x6, 0x1ff}, {0x2, 0x3, 0x0, 0x6, 0x0, 0xb}, {0x30b, 0x8, 0x4, 0x4, 0x9, 0x3}, {0x2bdadbf8, 0x3, 0x4, 0x1000, 0x1c00, 0x800}, {0x9, 0x5, 0x1000, 0x101, 0x401, 0x7}, {0x5, 0x2, 0x3, 0x1, 0x87, 0xffffffff}], [{0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x175bd66837457021}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x4fcc0d506619d821}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x7, 0x1}, {0x1, 0x3a8f6e3dd61f12bd}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {}, {0xac8827d5a9353d3c}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x2c00}}, 0x20000040) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_usb_connect(0x2, 0x24, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aa00016acaee"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 31.618936172s ago: executing program 0 (id=6200): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000043c0)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c000008000100d01f"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 31.019789519s ago: executing program 0 (id=6201): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x2d, 0x2, 0x0) connect$qrtr(r8, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r8, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r9, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 30.144426731s ago: executing program 0 (id=6203): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x90) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r0 = userfaultfd(0x801) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioperm(0x7, 0x81, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0xffffffffffffff33) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="692f39021e80b75116d1ddf080c99281bdeff997a36ae9cd053b12c944e8d10ed36f4b571b246c19544494b9a2c2cd785a837d76695b4849afa6fb4940078582e278", @ANYRESHEX=r7, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r5, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x4000084) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 20.35260078s ago: executing program 2 (id=6236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 19.91841502s ago: executing program 2 (id=6238): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000000b40)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) syz_emit_ethernet(0x38, &(0x7f00000004c0)={@remote, @remote, @val={@void, {0x8100, 0x1, 0x1}}, {@generic={0x8906, "eb257441dd54e8ce244289a850ded7fb01877b28d292a5bc3cf801bc4214ed54a552bb2048f7"}}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000080), 0x4) open(&(0x7f0000000040)='./file0\x00', 0x40800, 0x20) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000540)=0x1) close_range(r5, r6, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f00007d0000)) 19.388169234s ago: executing program 2 (id=6241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000003c0)=""/237) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008090}, 0x24000000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x1010, r0, 0xf9970000) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000319021508fd07010904000702b95fc3030905880320"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_crypto(0x10, 0x3, 0x15) 16.380212592s ago: executing program 2 (id=6249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x558410e9) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000001100)=@bpq0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b000)=""/102400, 0x19000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000400007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b9104006"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000140), 0x0}, 0x20) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) 15.720093067s ago: executing program 2 (id=6250): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xffffffffffffffff, 0xa080) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0xc0085666, &(0x7f0000000100)={0x3, 0x980900}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mprotect(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@mpls_newroute={0x38, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x14}}, @RTA_OIF={0x8}]}, 0x38}}, 0x0) 15.628582156s ago: executing program 2 (id=6251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005500)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x3f000000, 0x0, 0xc004}, 0xc000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) 6.427897212s ago: executing program 1 (id=6285): openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) eventfd2(0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) 5.155084344s ago: executing program 0 (id=6209): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x141b82, 0x68) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)=@svm={0xf, 0x1, 0x1080, {0x1}, {"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"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000000)=0xfffffffe, 0x4) sendfile(0xffffffffffffffff, r1, &(0x7f00000014c0)=0x800, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000002c0)="bef3e7b663a60e308f205fbeef05b48ef904e4b827380d2eac0fe5a095eef957c4382607ce78872cc37144677caf414e837900eb7c38e48de8b33bd745f2d3adc378b54384ff54211d4ab7c8baee07d8dab247634f7199f94e3d8fd0f8c0633636212e2cf75089ffe60ba5bdef66c0eb2b39d377336c80703b86c232fd77c5fdc227f0fc08824851db4fff69318fbe7e9c1a7a50d8e86e9fb0274f7932a1adbc4242f49b13f3b3b5a87a9eff7b1f74a36b12424c90530f242688ca42abc80a9ba4ae2b9a8d"}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x2000040) 4.300676616s ago: executing program 5 (id=6290): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) process_vm_readv(r1, &(0x7f0000000d80), 0x0, &(0x7f0000000380)=[{&(0x7f0000001e80)=""/237, 0xed}], 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x8) r3 = syz_io_uring_setup(0x361c, &(0x7f0000000000)={0x0, 0x18c8, 0x100, 0x0, 0x9a}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x53, 0x6000, @fd_index, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x9130, 0x0, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="66b8e2000f00d00fc7ab0e000000b9970300000f32b9340300000f32b8000000800f23c00f21f835020004000f23f8b91f0b0000b806000000ba000000000f300f01c464360fe971f1f2f20f01dfc744240000000000c7442402b0000000c7442406000000000f011424", 0x6a}], 0x1, 0x10, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r10}) syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x180) socket(0xa, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x67711854, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.772599228s ago: executing program 1 (id=6291): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa2240, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xf, 0x0) r2 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="000200000000000000000c000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000001c0), &(0x7f0000000380)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x80, 0xfffffffb, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, 0x0) read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) 3.70442002s ago: executing program 5 (id=6292): bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 3.650596673s ago: executing program 5 (id=6293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500070000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100040000000c0002001c0000001000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="0a00bc04b67e0020"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @empty}, 0x8) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x74, &(0x7f00000003c0)={[{0x6a, 0x4e00, "e279e6a53019c95cf763a9244848452dc6f268447406b40de1b1f1785a645855eb1c49b78ad0e77182a8d0a47b750ce0e4b495393b5e3c7c36b703146b7d1bcb7114f20b6f52461f6b64da6dee1cf03af56379b87e54d603281f5570e9c05c435d9023cbd2cddcea1d9e"}, {}]}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x7fa75291, 0x4, 0x6}, 0x14) 3.140772337s ago: executing program 3 (id=6294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffff000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) 3.100723479s ago: executing program 0 (id=6295): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40200, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a0300"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000200000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ddc9053b4cd0fc52ad072f2edecfd49ea2aead7a42bc067edb5415622a48b128710fde4dbf018c25c400"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0x5, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', r8, 0x700, 0x20, 0x2, 0x7fff, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x2a, [@broadcast, @remote, @local, @multicast2, @local]}, @timestamp_prespec={0x44, 0x34, 0x4, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x800}, {@loopback, 0x2}, {@broadcast, 0x5}, {@broadcast, 0x6}, {@private=0xa010100, 0x6}, {@remote}]}, @noop, @end, @ssrr={0x89, 0x7, 0xdd, [@broadcast]}]}}}}}) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a000b0049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000104040000010000000000000000", @ANYRES32=0x0, @ANYBLOB="03050000f851588808202500010000"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 2.948064373s ago: executing program 3 (id=6296): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffff8, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 2.627913003s ago: executing program 3 (id=6297): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) unshare(0x20000400) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x19) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 64) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f00005a9000/0x1000)=nil, 0x1000, 0xb635773f05ebbee3, 0x8031, r0, 0xffffd000) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async) r5 = memfd_create(0x0, 0x4) dup(r5) (async, rerun: 32) syz_clone(0x54480, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x18a7, &(0x7f0000000440)={0x0, 0x7495, 0x1, 0x3, 0x400026c}, &(0x7f00000002c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000000)=0x1, 0x0, 0x4) (async) syz_io_uring_setup(0x6bad, 0x0, 0x0, &(0x7f00000003c0)) 2.476838943s ago: executing program 1 (id=6298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x1f, 0x1, 0x40}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGKEY(r7, 0x40044583, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, 0x0, 0x880) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, 0x0, 0xc8) dup3(r8, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r3, &(0x7f00000003c0)) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200000080, 0x0) dup3(r9, r10, 0x0) 2.072397277s ago: executing program 3 (id=6299): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x1e, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x201, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 1.875620815s ago: executing program 1 (id=6300): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000100)=0x74f2, 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x2, 0x48800) (async) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x10143, 0x0) 1.83824062s ago: executing program 3 (id=6301): openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) eventfd2(0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) 1.41964178s ago: executing program 1 (id=6302): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = socket(0xb, 0x2, 0x102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) close_range(r1, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x191c07, 0xfffffffe, 0x0, 0x9}) syz_open_procfs(0x0, 0x0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0xea) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000011c0)=""/109, 0x6d}], 0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bind$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000010) 636.129615ms ago: executing program 33 (id=6251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005500)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x3f000000, 0x0, 0xc004}, 0xc000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) 621.733988ms ago: executing program 5 (id=6304): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2037) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0x2}, {0x8, 0x10}}}, 0x24}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 488.955477ms ago: executing program 1 (id=6305): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x141b82, 0x68) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)=@svm={0xf, 0x1, 0x1080, {0x1}, {"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"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000000)=0xfffffffe, 0x4) sendfile(0xffffffffffffffff, r1, &(0x7f00000014c0)=0x800, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000002c0)="bef3e7b663a60e308f205fbeef05b48ef904e4b827380d2eac0fe5a095eef957c4382607ce78872cc37144677caf414e837900eb7c38e48de8b33bd745f2d3adc378b54384ff54211d4ab7c8baee07d8dab247634f7199f94e3d8fd0f8c0633636212e2cf75089ffe60ba5bdef66c0eb2b39d377336c80703b86c232fd77c5fdc227f0fc08824851db4fff69318fbe7e9c1a7a50d8e86e9fb0274f7932a1adbc4242f49b13f3b3b5a87a9eff7b1f74a36b12424c90530f242688ca42abc80a9ba4ae2b9a8d"}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x2000040) 245.469508ms ago: executing program 5 (id=6306): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800ffffff0000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 38.001603ms ago: executing program 5 (id=6307): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffff8, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 35.229806ms ago: executing program 0 (id=6308): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f060a0067cf20691a4b9d570000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) syz_open_dev$rtc(&(0x7f0000000040), 0x7, 0x200000) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 3 (id=6309): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x3f}}, 0x1c) kernel console output (not intermixed with test programs): n invalid bInterval 0, changing to 7 [ 1816.092378][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1816.102905][ T976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1816.116142][ T976] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1816.125368][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.136158][ T976] usb 2-1: config 0 descriptor?? [ 1816.153032][T29176] overlay: Unknown parameter 'dont_hash' [ 1816.162200][T29177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.172779][T29177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.333889][T13826] usb 6-1: USB disconnect, device number 19 [ 1816.423667][T28454] usb 3-1: USB disconnect, device number 74 [ 1816.507394][ T66] Bluetooth: (null): Invalid header checksum [ 1816.609429][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 1816.617256][T28704] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1816.620489][ T66] Bluetooth: (null): Invalid header checksum [ 1816.660493][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1816.763027][T18839] Bluetooth: (null): Invalid header checksum [ 1816.773803][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 225 seconds [ 1816.788814][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 225 seconds [ 1816.800255][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 225 seconds [ 1817.570684][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 225 seconds [ 1817.884455][ T976] usb 2-1: USB disconnect, device number 90 [ 1817.893237][ T3510] Bluetooth: (null): Invalid header checksum [ 1817.927651][T28704] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1817.941651][ T3510] Bluetooth: (null): Invalid header checksum [ 1817.958249][ T3510] Bluetooth: (null): Invalid header checksum [ 1817.979856][T28704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.039627][ T3510] Bluetooth: (null): Invalid header checksum [ 1818.054512][T28704] usb 1-1: Product: syz [ 1818.074173][T28704] usb 1-1: Manufacturer: syz [ 1818.077912][ T3510] Bluetooth: (null): Invalid header checksum [ 1818.173340][T28704] usb 1-1: SerialNumber: syz [ 1818.212195][ T3510] Bluetooth: (null): Invalid header checksum [ 1818.212297][T28704] usb 1-1: config 0 descriptor?? [ 1818.218259][ T3510] Bluetooth: (null): Invalid header checksum [ 1818.224236][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1818.238386][ T3510] Bluetooth: (null): Invalid header checksum [ 1818.326341][ T3510] Bluetooth: (null): Invalid header checksum [ 1818.332402][ T3510] Bluetooth: (null): Invalid header checksum [ 1819.007820][ T3510] Bluetooth: (null): Invalid header checksum [ 1819.018874][ T3510] Bluetooth: (null): Invalid header checksum [ 1819.025604][ T3510] Bluetooth: (null): Invalid header checksum [ 1819.028990][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1819.066088][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.115829][ T24] usb 3-1: Product: syz [ 1819.120128][ T24] usb 3-1: Manufacturer: syz [ 1819.124715][ T24] usb 3-1: SerialNumber: syz [ 1819.205144][T28704] airspy 1-1:0.0: Board ID: 00 [ 1819.209957][T28704] airspy 1-1:0.0: Firmware version: [ 1819.216741][T29189] lo speed is unknown, defaulting to 1000 [ 1819.226661][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1819.255149][ T976] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1819.699075][T29213] bridge0: port 3(vlan2) entered blocking state [ 1819.709058][T29213] bridge0: port 3(vlan2) entered disabled state [ 1819.719760][T29213] vlan2: entered allmulticast mode [ 1819.733745][T29213] bridge0: entered allmulticast mode [ 1819.741888][T13855] usb 3-1: USB disconnect, device number 75 [ 1819.785223][T29213] vlan2: left allmulticast mode [ 1819.791435][T29213] bridge0: left allmulticast mode [ 1819.906626][T28454] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1820.074257][T28454] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1820.093795][T28454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.094532][T28704] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 1820.102831][T28454] usb 2-1: Product: syz [ 1820.111562][T28704] airspy 1-1:0.0: Registered as swradio24 [ 1820.119539][T28704] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1820.138845][T28454] usb 2-1: Manufacturer: syz [ 1820.142043][T28704] usb 1-1: USB disconnect, device number 69 [ 1820.163957][T28454] usb 2-1: SerialNumber: syz [ 1820.202217][T28454] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1820.285554][ T976] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1820.317106][T13825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1820.335640][ T976] ath9k_htc: Failed to initialize the device [ 1820.470294][T13855] usb 3-1: ath9k_htc: USB layer deinitialized [ 1820.589773][T29221] serio: Serial port ttyS3 [ 1820.890949][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 228 seconds [ 1820.902726][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 228 seconds [ 1820.914063][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 228 seconds [ 1820.925288][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 228 seconds [ 1821.195810][T13855] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1821.231412][T29228] netlink: 'syz.0.5996': attribute type 10 has an invalid length. [ 1821.246058][T29228] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1821.347041][T13825] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1821.354159][T13825] ath9k_htc: Failed to initialize the device [ 1821.363969][T13855] usb 3-1: Using ep0 maxpacket: 16 [ 1821.377578][T13855] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1821.406791][T13855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.407699][T13825] usb 2-1: ath9k_htc: USB layer deinitialized [ 1821.434752][T13855] usb 3-1: Product: syz [ 1821.444542][T13855] usb 3-1: Manufacturer: syz [ 1821.456078][T13855] usb 3-1: SerialNumber: syz [ 1821.490322][T13826] usb 2-1: USB disconnect, device number 91 [ 1821.853504][T29216] lo speed is unknown, defaulting to 1000 [ 1821.999993][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1822.012646][ T6245] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1822.012688][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1822.021773][ T6245] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1822.040304][ T6245] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1822.297404][T28704] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1822.577817][T28704] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1822.679223][T13826] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1822.696996][T28704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1822.735819][T28704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1822.764670][T28704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1822.782676][T29259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.792877][T28704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1822.803084][T29259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.811994][ T24] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1822.822324][T28704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.833187][T28704] usb 1-1: config 0 descriptor?? [ 1822.844938][T13826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1822.893288][T13826] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1822.903755][T29260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.917608][T29260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.920776][T13826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.927869][T29260] usb usb9: usbfs: process 29260 (syz.2.6005) did not claim interface 47 before use [ 1822.966506][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.977754][ T24] usb 2-1: config 0 has no interfaces? [ 1822.985832][ T24] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 1823.008252][T13826] usb 6-1: config 0 descriptor?? [ 1823.013071][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.043902][T13826] smsusb:smsusb_probe: board id=8, interface number 0 [ 1823.062749][T13826] smsusb:smsusb_probe: Device initialized with return code -19 [ 1823.075078][ T24] usb 2-1: config 0 descriptor?? [ 1823.258984][T28704] usbhid 1-1:0.0: can't add hid device: -71 [ 1823.265924][T28704] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1823.277899][T28704] usb 1-1: USB disconnect, device number 70 [ 1823.687847][ T24] usb 6-1: USB disconnect, device number 20 [ 1824.191656][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1824.212002][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1824.246780][T29281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=29281 comm=syz.5.6015 [ 1824.297953][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1824.441045][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1824.449178][ T24] usb 4-1: config 9 has an invalid interface number: 29 but max is 1 [ 1824.459935][ T24] usb 4-1: config 9 has an invalid interface number: 208 but max is 1 [ 1824.469238][ T24] usb 4-1: config 9 has no interface number 0 [ 1824.475369][ T24] usb 4-1: config 9 has no interface number 1 [ 1824.481717][ T24] usb 4-1: config 9 interface 29 has no altsetting 0 [ 1824.488492][ T24] usb 4-1: config 9 interface 208 has no altsetting 0 [ 1824.497003][ T24] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice= d.70 [ 1824.506293][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.514725][ T24] usb 4-1: Product: ç¼á¨½áµ±æ©ºà¿†â™©íŽˆá¿“â»§âµ²î´¾è‹Œìš­æ£›ï¹–ìš—æ„ˆà°¡î£‘â¡ˆå¸­ë˜ê†¹æ ¹äšƒê¸Šåƒï›‡ê³´æšœì­…탢ﯴꅖ꾽謹溣츼毓ä¡è»™ìšç³¦ã…å¢¶â±–î¶æ¯§ç«±ìŒ¦å© î¸±â“ꩊ⊔苣輗ç­Þ†ç„é™ì¨«æ«à¸»â¯²ä¹¨ê‚ª [ 1824.537431][ T24] usb 4-1: Manufacturer: 蓨޽Ꭲঘ꠪䗋뤾䪘梡연拒ۜ窽掿뻃듢烉äºè²ší…ë‹ë´©í‡©Ú½ïšŒç§„ä€è›Ù¦å¦¶ä­šì§­å¡±ë£¨é¶™èˆ‚䀚갫홯乬ネ瀢嫃éƒï™…ê…¤î†…é¿¬ï‰œï‘‹æ¥µç€¯ê›æ‰µà§¬éŸÅ¦ì»ªÃµç™€æ¹—ä½¶Ëºç©¡î‘æ¥¾ëœ±ë·¦ç€²ä§–ã«•â·µwä€í…³ç˜„⿽뤜꘧탴â¬äŸ¬áµƒæ¨Ÿë¬åŸ¢×·îº‹â»€åš²ë¾¡áˆ¡ê³æ‘²å€¸ì–ˆç¹æ”粩ⷨ뗗쀰 [ 1824.545544][T13826] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1824.571873][ T24] usb 4-1: SerialNumber: syz [ 1824.720807][T13826] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1824.730034][T13826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.738055][T13826] usb 6-1: Product: syz [ 1824.742228][T13826] usb 6-1: Manufacturer: syz [ 1824.747121][T13826] usb 6-1: SerialNumber: syz [ 1824.753704][T13826] usb 6-1: config 0 descriptor?? [ 1824.790377][ T24] rtsx_usb 4-1:9.29: probe with driver rtsx_usb failed with error -22 [ 1824.802408][ T24] rtsx_usb 4-1:9.208: probe with driver rtsx_usb failed with error -22 [ 1824.815017][ T24] usb 4-1: USB disconnect, device number 32 [ 1825.003605][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 231 seconds [ 1825.014596][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 231 seconds [ 1825.025786][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 231 seconds [ 1825.037725][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 231 seconds [ 1825.119911][T28454] usb 2-1: USB disconnect, device number 92 [ 1825.181495][T13826] usb 6-1: Firmware version (0.0) predates our first public release. [ 1825.195303][T13826] usb 6-1: Please update to version 0.2 or newer [ 1825.264893][T13826] usb 6-1: USB disconnect, device number 21 [ 1825.348117][T13827] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1825.930926][T13827] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1825.946351][T13827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1825.960105][T13827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1825.970556][T13827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1825.992313][T13827] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1826.005298][T13827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.016998][T13827] usb 1-1: config 0 descriptor?? [ 1826.240269][T29317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6026'. [ 1826.812756][T13855] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1826.823980][T13855] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1826.838498][T13855] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1826.840072][T13827] usbhid 1-1:0.0: can't add hid device: -71 [ 1826.847054][T13855] usb 3-1: media controller created [ 1826.854585][T13855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1826.907701][T13855] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1826.950351][T13827] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1827.006056][T13827] usb 1-1: USB disconnect, device number 71 [ 1827.050572][T23469] udevd[23469]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1827.068123][T13855] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1827.084618][T26037] udevd[26037]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1827.115135][T29326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1827.188846][T29326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1827.241935][T29326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1827.262866][T29326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1827.383594][T29332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6030'. [ 1827.406385][T29332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6030'. [ 1827.444750][T29332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6030'. [ 1827.475233][T29332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6030'. [ 1827.642354][T29339] bridge0: port 3(vlan2) entered blocking state [ 1827.648958][T29339] bridge0: port 3(vlan2) entered disabled state [ 1827.656343][T29339] vlan2: entered allmulticast mode [ 1827.661683][T29339] bridge0: entered allmulticast mode [ 1827.913659][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1827.991087][T29339] vlan2: left allmulticast mode [ 1828.002338][T29339] bridge0: left allmulticast mode [ 1828.013320][T29349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6034'. [ 1828.022447][T29349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6034'. [ 1828.038989][ T30] audit: type=1400 audit(1770535898.474:2175): avc: denied { map } for pid=29344 comm="syz.0.6035" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1828.089243][T13826] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1828.265207][T13826] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1828.281598][T13826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.298070][T13826] usb 2-1: Product: syz [ 1828.306887][T13826] usb 2-1: Manufacturer: syz [ 1828.317357][T13826] usb 2-1: SerialNumber: syz [ 1828.337491][T13826] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1828.364413][T13827] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1828.422525][T13855] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1828.565377][T13855] usb 6-1: Using ep0 maxpacket: 16 [ 1828.582641][T13855] usb 6-1: config 0 has an invalid interface number: 74 but max is 0 [ 1828.592005][T13855] usb 6-1: config 0 has no interface number 0 [ 1828.598357][T13855] usb 6-1: config 0 interface 74 has no altsetting 0 [ 1828.607158][T13855] usb 6-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 1828.616500][T13855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.624551][T13855] usb 6-1: Product: syz [ 1828.628824][T13855] usb 6-1: Manufacturer: syz [ 1828.634729][T13855] usb 6-1: SerialNumber: syz [ 1828.641779][T13855] usb 6-1: config 0 descriptor?? [ 1828.785288][ T24] usb 2-1: USB disconnect, device number 93 [ 1828.902532][T29358] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1829.185691][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 234 seconds [ 1829.196784][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 234 seconds [ 1829.207861][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 234 seconds [ 1829.218898][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 234 seconds [ 1829.233074][T13855] belkin_sa 6-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1829.260712][T13855] usb 6-1: bcdDevice: 6636, bfc: 0 [ 1829.292334][T13855] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1829.338221][T13855] usb 6-1: USB disconnect, device number 22 [ 1829.385918][T29363] loop2: detected capacity change from 0 to 7 [ 1829.430976][T29364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.440676][T29364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.516947][T13827] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1829.529795][T13827] ath9k_htc: Failed to initialize the device [ 1829.558168][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 1829.565437][T29363] Dev loop2: unable to read RDB block 7 [ 1829.571335][T29363] loop2: unable to read partition table [ 1829.578784][T29363] loop2: partition table beyond EOD, truncated [ 1829.585151][T29363] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1829.667958][T13855] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1829.684910][T13855] belkin_sa 6-1:0.74: device disconnected [ 1829.701667][T29361] bridge3: port 1(veth3) entered blocking state [ 1829.708082][T29361] bridge3: port 1(veth3) entered disabled state [ 1829.717218][T29361] veth3: entered allmulticast mode [ 1829.724974][T29361] veth3: entered promiscuous mode [ 1829.736261][ T5178] Dev loop2: unable to read RDB block 7 [ 1829.740039][T29365] bridge3: port 2(veth0_to_bond) entered blocking state [ 1829.744009][ T5178] loop2: unable to read partition table [ 1829.749092][T29365] bridge3: port 2(veth0_to_bond) entered disabled state [ 1829.755548][ T5178] loop2: partition table beyond EOD, truncated [ 1829.762459][T29365] veth0_to_bond: entered allmulticast mode [ 1829.778578][T29365] veth0_to_bond: entered promiscuous mode [ 1829.827138][T28383] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1829.846395][T28383] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1830.042953][T28383] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1830.063450][T28383] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1830.079984][T29374] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 1830.463481][ T30] audit: type=1326 audit(1770535900.689:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1830.529431][ T30] audit: type=1326 audit(1770535900.700:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1830.570478][ T30] audit: type=1326 audit(1770535900.700:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1830.595079][ T30] audit: type=1326 audit(1770535900.700:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1830.638372][ T30] audit: type=1326 audit(1770535900.700:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1830.666578][ T30] audit: type=1326 audit(1770535900.700:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1830.848369][ T30] audit: type=1326 audit(1770535900.700:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1830.962035][ T30] audit: type=1326 audit(1770535900.700:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1831.049530][ T30] audit: type=1326 audit(1770535900.700:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29372 comm="syz.3.6044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcd8f9aeb9 code=0x7ffc0000 [ 1831.439098][T29410] input: syz1 as /devices/virtual/input/input111 [ 1832.309024][T29414] __nla_validate_parse: 16 callbacks suppressed [ 1832.309044][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6054'. [ 1832.900748][T29426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.910608][T29426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.462794][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 237 seconds [ 1833.473595][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 237 seconds [ 1833.484672][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 237 seconds [ 1833.495773][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 237 seconds [ 1833.518857][T27272] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1833.884060][T27272] usb 1-1: no configurations [ 1833.888683][T27272] usb 1-1: can't read configurations, error -22 [ 1833.940306][T29439] CIFS: VFS: Malformed UNC in devname [ 1834.053012][T27272] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1834.118745][T13825] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1834.185428][T13826] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1834.215560][T27272] usb 1-1: no configurations [ 1834.221771][T27272] usb 1-1: can't read configurations, error -22 [ 1834.232254][T27272] usb usb1-port1: attempt power cycle [ 1834.265816][T29457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1834.275165][T29457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1834.287569][T13825] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1834.299914][T13825] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1834.311538][T13825] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1834.323482][T29457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1834.333031][T29457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1834.342787][T13825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1834.363842][T13825] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1834.373302][T13825] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1834.381849][T13825] usb 6-1: Product: syz [ 1834.386680][T13825] usb 6-1: Manufacturer: syz [ 1834.391534][T13825] usb 6-1: SerialNumber: syz [ 1834.397413][T13826] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1834.412163][T13826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1834.421876][T13826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1834.430616][T13826] usb 2-1: Product: syz [ 1834.435523][T13825] usb 6-1: config 0 descriptor?? [ 1834.440987][T13826] usb 2-1: Manufacturer: syz [ 1834.441596][T29437] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1834.445896][T13826] usb 2-1: SerialNumber: syz [ 1834.459809][T13825] usb 6-1: selecting invalid altsetting 0 [ 1834.566852][T27272] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1834.615287][T27272] usb 1-1: no configurations [ 1834.621571][T27272] usb 1-1: can't read configurations, error -22 [ 1834.676788][T13826] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1834.719076][T13826] usb 6-1: USB disconnect, device number 23 [ 1834.719154][ C1] usb 6-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 1834.734562][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.741304][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1834.748681][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.755526][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.762422][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.769329][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.776167][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.783206][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.790087][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.797011][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.803826][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.811119][T29436] usb 6-1: cannot submit urb 0, error -19: no device [ 1834.818692][T27272] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1834.872607][T27272] usb 1-1: no configurations [ 1834.877746][T27272] usb 1-1: can't read configurations, error -22 [ 1834.889993][T27272] usb usb1-port1: unable to enumerate USB device [ 1835.020718][T13825] usb 2-1: USB disconnect, device number 94 [ 1835.041239][T13825] usblp0: removed [ 1835.810119][T29470] serio: Serial port ttyS3 [ 1836.191457][T29473] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1836.987113][T29475] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1837.042695][T29481] serio: Serial port ttyS3 [ 1837.419168][T29475] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1837.461412][T29439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.469609][T29439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.599859][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 240 seconds [ 1837.611320][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 240 seconds [ 1837.622642][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 240 seconds [ 1837.682485][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 240 seconds [ 1838.131598][T29499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1838.148291][T29499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1838.167878][T29499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1838.176770][T29499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1838.243813][T13825] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1838.778609][T13825] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1838.794678][T13825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.832328][T13825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.861405][T13825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1838.884294][T13825] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1838.905143][T13825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.939524][T13825] usb 2-1: config 0 descriptor?? [ 1839.618383][T13825] pantherlord 0003:0810:0001.0049: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 1839.705250][T13825] pantherlord 0003:0810:0001.0049: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1839.798808][T13825] usb 2-1: USB disconnect, device number 95 [ 1839.872062][T29526] fido_id[29526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1840.028267][T29529] FAULT_INJECTION: forcing a failure. [ 1840.028267][T29529] name failslab, interval 1, probability 0, space 0, times 0 [ 1840.042951][T29529] CPU: 0 UID: 0 PID: 29529 Comm: syz.2.6087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1840.042979][T29529] Tainted: [L]=SOFTLOCKUP [ 1840.042985][T29529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1840.042995][T29529] Call Trace: [ 1840.043001][T29529] [ 1840.043007][T29529] dump_stack_lvl+0x100/0x190 [ 1840.043034][T29529] should_fail_ex.cold+0x5/0xa [ 1840.043054][T29529] should_failslab+0xc2/0x120 [ 1840.043077][T29529] kmem_cache_alloc_noprof+0x83/0x780 [ 1840.043100][T29529] ? vm_area_dup+0x27/0x8e0 [ 1840.043121][T29529] ? vm_area_dup+0x27/0x8e0 [ 1840.043137][T29529] vm_area_dup+0x27/0x8e0 [ 1840.043156][T29529] __split_vma+0x18c/0xe30 [ 1840.043178][T29529] ? __pfx___split_vma+0x10/0x10 [ 1840.043209][T29529] vms_gather_munmap_vmas+0x3aa/0x1320 [ 1840.043234][T29529] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1840.043254][T29529] ? _kstrtoull+0x13c/0x1f0 [ 1840.043277][T29529] ? __pfx__kstrtoull+0x10/0x10 [ 1840.043304][T29529] do_vmi_align_munmap+0x287/0x5f0 [ 1840.043327][T29529] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1840.043382][T29529] do_vmi_munmap+0x1f8/0x3e0 [ 1840.043406][T29529] __vm_munmap+0x196/0x390 [ 1840.043428][T29529] ? __pfx___vm_munmap+0x10/0x10 [ 1840.043457][T29529] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1840.043476][T29529] ? rcu_is_watching+0x12/0xc0 [ 1840.043500][T29529] ? trace_csd_function_exit+0x71/0x1b0 [ 1840.043529][T29529] __x64_sys_munmap+0x59/0x80 [ 1840.043556][T29529] do_syscall_64+0xc9/0xf80 [ 1840.043578][T29529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.043596][T29529] RIP: 0033:0x7f352bb9aeb9 [ 1840.043611][T29529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1840.043627][T29529] RSP: 002b:00007f352c9e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1840.043662][T29529] RAX: ffffffffffffffda RBX: 00007f352be16090 RCX: 00007f352bb9aeb9 [ 1840.043676][T29529] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 1840.043685][T29529] RBP: 00007f352c9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1840.043695][T29529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1840.043704][T29529] R13: 00007f352be16128 R14: 00007f352be16090 R15: 00007ffcbe8aae18 [ 1840.043727][T29529] [ 1840.056168][T29531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29531 comm=syz.5.6088 [ 1840.142006][T29532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29532 comm=syz.5.6088 [ 1840.177558][T29533] netlink: 'syz.5.6088': attribute type 1 has an invalid length. [ 1840.234112][T29518] lo speed is unknown, defaulting to 1000 [ 1840.245031][T29533] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1840.415706][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1840.415725][ T30] audit: type=1400 audit(1770535911.450:2190): avc: denied { write } for pid=29538 comm="syz.1.6089" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1840.667097][T29539] netlink: 'syz.1.6089': attribute type 1 has an invalid length. [ 1840.765160][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1840.807892][T29539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1840.820756][T29559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1840.993698][T29552] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1841.044870][T13825] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1841.060297][T29560] bond1: (slave dummy0): making interface the new active one [ 1841.075895][T29560] dummy0: entered promiscuous mode [ 1841.081331][T29560] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1841.197983][T13825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1841.214647][T13825] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1841.240188][T13825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.251692][T13825] usb 6-1: config 0 descriptor?? [ 1841.269691][T29553] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1841.291687][T13826] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1841.329392][T29539] bond1 (unregistering): (slave veth3): Releasing active interface [ 1841.344979][T29539] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1841.359507][T29539] bond1 (unregistering): Released all slaves [ 1841.391696][T29561] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1841.449123][T13826] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1841.458878][T13826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.467271][T13826] usb 4-1: Product: syz [ 1841.471688][T13826] usb 4-1: Manufacturer: syz [ 1841.478476][T13826] usb 4-1: SerialNumber: syz [ 1841.485964][T13826] usb 4-1: config 0 descriptor?? [ 1841.670763][T29553] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6093'. [ 1841.687601][T13825] elan 0003:04F3:0755.004A: unknown main item tag 0x1 [ 1841.699141][T13825] elan 0003:04F3:0755.004A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1841.718213][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 243 seconds [ 1841.731621][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 243 seconds [ 1841.742896][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 243 seconds [ 1841.754080][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 243 seconds [ 1841.860602][ T30] audit: type=1326 audit(1770535912.982:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.6098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f352bb9aeb9 code=0x0 [ 1841.885373][T29575] netlink: 'syz.0.6099': attribute type 1 has an invalid length. [ 1841.890701][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6093'. [ 1841.909024][T13826] airspy 4-1:0.0: Board ID: 00 [ 1841.925774][T13826] airspy 4-1:0.0: Firmware version: [ 1841.941777][T29575] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1841.967536][ T3510] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1841.985078][T29575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1842.091893][ T3510] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1842.916829][T13827] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1842.936609][T13826] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 1842.959209][T13826] airspy 4-1:0.0: Registered as swradio24 [ 1842.965807][T13826] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1842.980814][T13826] usb 4-1: USB disconnect, device number 33 [ 1843.073042][T13827] usb 1-1: Using ep0 maxpacket: 32 [ 1843.102005][T13827] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 1843.110207][T13827] usb 1-1: config 0 has no interface number 0 [ 1843.136058][T13827] usb 1-1: config 0 interface 166 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1843.155811][T13827] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 1843.169435][T13827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.177803][T13827] usb 1-1: Product: syz [ 1843.182033][T13827] usb 1-1: Manufacturer: syz [ 1843.186625][T13827] usb 1-1: SerialNumber: syz [ 1843.202129][T13827] usb 1-1: config 0 descriptor?? [ 1843.215838][T29575] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1843.371235][T29596] overlayfs: failed to get inode (-116) [ 1843.409718][T29596] overlayfs: failed to get inode (-116) [ 1843.440712][T13827] net1080 1-1:0.166: probe with driver net1080 failed with error -71 [ 1843.480891][T13827] usb 1-1: USB disconnect, device number 76 [ 1843.654781][T27272] usb 6-1: USB disconnect, device number 24 [ 1843.834893][T13827] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1844.044434][T13827] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 1844.068911][T13827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.092558][T13827] usb 4-1: config 0 descriptor?? [ 1844.241764][T29612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1844.260852][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1844.284878][T29612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1844.325060][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1844.451949][ T30] audit: type=1400 audit(1770535915.649:2192): avc: denied { accept } for pid=29609 comm="syz.1.6109" path="socket:[130558]" dev="sockfs" ino=130558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1844.560854][ T30] audit: type=1400 audit(1770535915.775:2193): avc: denied { mounton } for pid=29617 comm="syz.2.6111" path="/592/file0" dev="tmpfs" ino=3162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1844.655833][T29625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.667762][T29625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.682199][ T30] audit: type=1326 audit(1770535915.943:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.0.6112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e2299aeb9 code=0x0 [ 1845.499433][T29639] SELinux: failed to load policy [ 1845.888935][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 246 seconds [ 1845.899823][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 246 seconds [ 1845.910970][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 246 seconds [ 1845.922281][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 246 seconds [ 1846.050899][T29645] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1847.674202][T29654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6122'. [ 1847.707174][T29654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6122'. [ 1847.764122][T29654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6122'. [ 1847.797298][T29654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6122'. [ 1847.950461][T13827] usb 4-1: string descriptor 0 read error: -71 [ 1847.963333][T13827] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1848.013760][T13827] usb 4-1: USB disconnect, device number 34 [ 1848.080084][T29658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6124'. [ 1848.409011][T29668] loop2: detected capacity change from 0 to 7 [ 1848.699285][T29673] Dev loop2: unable to read RDB block 7 [ 1848.707199][T29673] loop2: unable to read partition table [ 1848.727014][T29673] loop2: partition table beyond EOD, truncated [ 1848.757804][T29668] Dev loop2: unable to read RDB block 7 [ 1848.769526][T29668] loop2: unable to read partition table [ 1848.785288][T29668] loop2: partition table beyond EOD, truncated [ 1848.798026][T28880] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1848.805807][T29668] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1848.892661][ T5178] Dev loop2: unable to read RDB block 7 [ 1848.899323][ T5178] loop2: unable to read partition table [ 1848.905468][ T5178] loop2: partition table beyond EOD, truncated [ 1848.915816][T29680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6120'. [ 1848.941032][ T24] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1848.961985][T28880] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1848.981369][ T5178] Dev loop2: unable to read RDB block 7 [ 1848.984857][T28880] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1848.987021][ T5178] loop2: unable to read partition table [ 1849.004211][ T5178] loop2: partition table beyond EOD, truncated [ 1849.011757][T28880] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1849.024927][T28880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1849.121764][T27272] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1849.136122][T28880] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1849.146922][T28880] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1849.155311][ T24] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1849.166928][T28880] usb 6-1: Product: syz [ 1849.171168][T28880] usb 6-1: Manufacturer: syz [ 1849.175749][T28880] usb 6-1: SerialNumber: syz [ 1849.180385][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1849.603518][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1849.611248][T29687] __nla_validate_parse: 3 callbacks suppressed [ 1849.611266][T29687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1849.615433][T28880] usb 6-1: config 0 descriptor?? [ 1849.636289][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1849.644694][T29674] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1849.652744][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1849.662035][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1849.671666][ T24] usb 1-1: Product: syz [ 1849.679870][T28880] usb 6-1: selecting invalid altsetting 0 [ 1849.685875][ T24] usb 1-1: Manufacturer: syz [ 1849.690470][ T24] usb 1-1: SerialNumber: syz [ 1849.702840][T27272] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1849.711907][T27272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.723021][ T24] usb 1-1: config 0 descriptor?? [ 1849.728453][T29663] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1849.746250][ T24] usb 1-1: selecting invalid altsetting 0 [ 1849.752147][T27272] usb 2-1: Product: syz [ 1849.757783][T27272] usb 2-1: Manufacturer: syz [ 1849.764302][T27272] usb 2-1: SerialNumber: syz [ 1849.970548][ T5178] Dev loop2: unable to read RDB block 7 [ 1850.000765][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 249 seconds [ 1850.000937][T13827] usb 1-1: USB disconnect, device number 77 [ 1850.012032][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 249 seconds [ 1850.035354][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 249 seconds [ 1850.046851][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 249 seconds [ 1850.096341][ T5178] loop2: unable to read partition table [ 1850.143931][ T5178] loop2: partition table beyond EOD, truncated [ 1850.251395][ T5178] Dev loop2: unable to read RDB block 7 [ 1850.280858][ T5178] loop2: unable to read partition table [ 1850.300324][ T5178] loop2: partition table beyond EOD, truncated [ 1850.417167][T27272] rtl8150 2-1:1.0: couldn't reset the device [ 1850.447915][T27272] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1850.528711][T27272] usb 2-1: USB disconnect, device number 96 [ 1850.649956][ T5178] Dev loop2: unable to read RDB block 7 [ 1850.687774][ T5178] loop2: unable to read partition table [ 1850.717297][ T5178] loop2: partition table beyond EOD, truncated [ 1850.734267][ T24] usb 6-1: USB disconnect, device number 25 [ 1850.734325][ C1] usb 6-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 1850.749101][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1850.756598][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.763493][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.770334][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.777154][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.784006][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.790857][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.797695][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.805089][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.811923][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.818779][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.825586][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.832418][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.839265][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.846123][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.852926][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.859766][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.866603][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.873410][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.880259][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.887099][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.893938][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.901280][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.908113][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.914963][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.921771][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.928600][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.935532][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.942355][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.949155][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.956014][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.962842][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.969668][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.976529][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.983349][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.990224][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1850.997576][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.004418][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.011268][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.018090][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.024905][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.031743][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.038555][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.045374][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.052222][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.059068][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.066089][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.072914][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.079752][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.086592][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.093406][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.100810][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.107679][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.114513][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.121327][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.128151][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.134985][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.141821][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.148628][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.155474][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.162325][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.169141][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.175971][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.182809][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.189645][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.197026][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.203868][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.210704][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.217573][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.224380][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.231210][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.238048][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.244850][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.251682][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.258513][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.265341][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.272153][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.278992][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.285844][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.293190][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.300063][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.306923][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.313767][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.320591][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.327415][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.334251][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.341096][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.347950][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.354770][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.361596][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.368410][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.375261][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.382078][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.389475][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.396310][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.403139][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.409993][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.416794][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.423636][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.430478][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.437318][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.444144][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.451003][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.457843][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.464672][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.471508][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.478340][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.485749][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.492573][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.499447][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.506292][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.513136][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.519957][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.526922][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.533797][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.540624][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.547456][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.554297][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.561146][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.567947][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.574789][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.581629][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.589038][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.595885][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.602925][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.609763][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.616591][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.623410][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.630233][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.637072][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.643873][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.650692][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.657554][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.664374][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.671210][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.678247][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.685606][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.692441][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.699269][T29663] usb 6-1: cannot submit urb 0, error -19: no device [ 1851.795336][T27272] usb 3-1: USB disconnect, device number 76 [ 1851.999133][ T30] audit: type=1400 audit(1770535923.617:2195): avc: denied { setopt } for pid=29710 comm="syz.0.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1852.039237][T29711] netlink: 'syz.0.6140': attribute type 10 has an invalid length. [ 1852.072833][T28080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1852.082231][T28080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1852.097655][T28080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1852.109272][T28080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1852.116927][T28080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1852.131401][T29711] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1852.189684][T13827] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1852.255392][T29717] tipc: Enabling of bearer rejected, failed to enable media [ 1852.372954][T13827] usb 4-1: Using ep0 maxpacket: 32 [ 1852.387637][T13827] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 1852.408617][T13826] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1852.418025][T13827] usb 4-1: config 0 has no interface number 0 [ 1852.424103][T13827] usb 4-1: New USB device found, idVendor=15c2, idProduct=003a, bcdDevice=de.1a [ 1852.448111][T13827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.464748][T29712] lo speed is unknown, defaulting to 1000 [ 1852.487174][T13827] usb 4-1: config 0 descriptor?? [ 1852.517737][T13827] imon 4-1:0.164: unable to register, err -19 [ 1852.563646][T13826] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 1852.588360][T13826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.620615][T13826] usb 2-1: config 0 descriptor?? [ 1852.771341][T29709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1852.801150][T29709] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1852.828591][T29709] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1853.010200][T29709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1853.046276][T29709] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1853.084881][T29709] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1853.114827][T29709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1853.126095][T29709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1853.232823][T29709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1853.264973][T29709] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1853.295105][T29709] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1853.369693][T29709] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1853.504842][T21912] bond0: (slave syz_tun): Releasing backup interface [ 1853.514191][ T24] usb 4-1: USB disconnect, device number 35 [ 1853.654205][T29737] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.6146'. [ 1853.668706][T29737] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1853.721339][T29737] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.6146'. [ 1853.756767][T29737] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1853.866205][T28383] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1853.900780][T28383] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.963572][T29712] chnl_net:caif_netlink_parms(): no params data found [ 1854.043788][T28383] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.073396][T28383] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.113800][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 252 seconds [ 1854.125269][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 252 seconds [ 1854.137391][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 252 seconds [ 1854.150540][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 252 seconds [ 1854.206120][T28383] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.241605][T28383] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.353057][T28383] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.390694][T28383] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.449618][T29712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.492753][T29712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.529683][T29712] bridge_slave_0: entered allmulticast mode [ 1854.583464][T29712] bridge_slave_0: entered promiscuous mode [ 1854.723254][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 1854.959657][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout [ 1855.031431][ T5810] Bluetooth: hci1: command 0x0405 tx timeout [ 1855.179870][ T5810] Bluetooth: hci5: command 0x041b tx timeout [ 1855.405789][T29712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.427846][T29712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.446988][T29712] bridge_slave_1: entered allmulticast mode [ 1855.476843][T29712] bridge_slave_1: entered promiscuous mode [ 1855.723026][T29763] mkiss: ax0: crc mode is auto. [ 1855.804689][ T66] wlan1: Trigger new scan to find an IBSS to join [ 1855.976773][T29762] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6151'. [ 1856.040584][T29712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1856.089644][T29712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1856.204866][T29772] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1856.217326][T29712] team0: Port device team_slave_0 added [ 1856.272773][T29712] team0: Port device team_slave_1 added [ 1856.315382][T13826] usb 2-1: string descriptor 0 read error: -71 [ 1856.348929][T13826] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1856.385558][T13826] usb 2-1: USB disconnect, device number 97 [ 1856.507164][T29779] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6155'. [ 1856.512077][T29712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1856.536030][T29712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1856.578288][ T30] audit: type=1326 audit(1770535928.435:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29783 comm="syz.0.6157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e2299aeb9 code=0x0 [ 1856.618294][T29712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1856.643519][T29712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1856.654695][T29712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1856.685547][T29712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.704985][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 1856.708409][T28383] veth3: left allmulticast mode [ 1857.166492][ T5810] Bluetooth: hci4: command 0x0c1a tx timeout [ 1857.174408][ T5810] Bluetooth: hci1: command 0x0405 tx timeout [ 1857.180559][ T5810] Bluetooth: hci5: command 0x041b tx timeout [ 1857.195702][T28383] veth3: left promiscuous mode [ 1857.203351][T28383] bridge2: port 1(veth3) entered disabled state [ 1857.223596][T28383] veth0_to_bond: left allmulticast mode [ 1857.229588][T28383] veth0_to_bond: left promiscuous mode [ 1857.235215][T28383] bridge5: port 2(veth0_to_bond) entered disabled state [ 1857.261632][T28383] veth5: left allmulticast mode [ 1857.266878][T28383] veth5: left promiscuous mode [ 1857.276470][T28383] bridge5: port 1(veth5) entered disabled state [ 1858.171126][ T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1858.229106][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 255 seconds [ 1858.239963][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 255 seconds [ 1858.250935][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 255 seconds [ 1858.262367][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 255 seconds [ 1858.342869][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1858.350057][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1858.359254][ T24] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.371259][ T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1858.380324][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.388784][ T24] usb 1-1: Product: ç¨ì­ºâ­¨í’ªà©ŽæŒ³î£–Ͳ팄ëŒé…‚婑帡䭛ä¤ê‹¾ï¥â›¯á„½ï…€æŒ©äⶼ湌äŒë¥¯à¨©ì‰‹â«¾ç‰˜êŠŒë¡„íž—Æ•ãºŽãœ¨ã¬‘æ‹’è£‹îœ¿å¯’ê‚‰å­ˆà¬˜áœ­ [ 1858.404356][ T24] usb 1-1: Manufacturer: ㉠[ 1858.405858][T28383] bond0 (unregistering): Released all slaves [ 1858.408950][ T24] usb 1-1: SerialNumber: ç®ç„æ ºìšáŽ›ï•£â¼«ç£Šä‰¾î¥Œç‹•ï€¬ïˆ†ç·î·ê©ìƒ½ë½¡ì£¿Ô›ê¡„ï…”ê ì“·Ë§ãƒ£ë¬­ç­„胞à¥ï£¥ì´¨í‘›è‰‘ǽ [ 1858.580007][T28383] bond1 (unregistering): Released all slaves [ 1858.629869][ T24] usb 1-1: Cannot retrieve CPort count: 0 [ 1858.635679][ T24] usb 1-1: Cannot retrieve CPort count: -5 [ 1858.642153][ T24] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 1858.741150][T28383] bond2 (unregistering): Released all slaves [ 1858.881607][T28383] bond3 (unregistering): Released all slaves [ 1858.948127][T29818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.958349][T29818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.970650][T29818] usb usb9: usbfs: process 29818 (syz.0.6162) did not claim interface 47 before use [ 1859.037651][T28383] bond4 (unregistering): Released all slaves [ 1859.152197][T28080] Bluetooth: hci5: command 0x041b tx timeout [ 1859.158442][ T5810] Bluetooth: hci1: command 0x0405 tx timeout [ 1859.165011][T14838] Bluetooth: hci4: command 0x0c1a tx timeout [ 1859.224362][T29712] hsr_slave_0: entered promiscuous mode [ 1859.235564][T29712] hsr_slave_1: entered promiscuous mode [ 1859.254112][T29712] debugfs: 'hsr0' already exists in 'hsr' [ 1859.255926][T29823] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6164'. [ 1859.260112][T29712] Cannot create hsr debugfs directory [ 1859.275701][T28383] tipc: Left network mode [ 1859.295422][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6164'. [ 1859.602212][T29833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 1860.504311][T28454] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1860.623530][ T1014] wlan1: Trigger new scan to find an IBSS to join [ 1860.824150][T29837] CUSE: DEVNAME unspecified [ 1860.843842][T17991] usb 1-1: USB disconnect, device number 78 [ 1860.900588][T28454] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 1860.947750][T28454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.147173][T28080] Bluetooth: hci5: command 0x041b tx timeout [ 1861.196637][T28454] usb 2-1: config 0 descriptor?? [ 1861.392463][T29838] mkiss: ax0: crc mode is auto. [ 1861.482330][T29846] serio: Serial port ttyS3 [ 1862.066766][T18839] wlan1: Creating new IBSS network, BSSID 7e:7a:aa:4c:53:61 [ 1862.104824][T29837] macsec1: entered promiscuous mode [ 1862.110100][T29837] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1862.343754][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 258 seconds [ 1862.354684][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 258 seconds [ 1862.366074][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 258 seconds [ 1862.377381][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 258 seconds [ 1862.382986][T29860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6172'. [ 1862.574019][T29862] bridge1: port 1(veth3) entered blocking state [ 1862.601266][T29862] bridge1: port 1(veth3) entered disabled state [ 1862.626458][T29862] veth3: entered allmulticast mode [ 1862.651843][T29862] veth3: entered promiscuous mode [ 1862.722769][T29860] bridge1: port 2(veth0_to_bond) entered blocking state [ 1862.756641][T29860] bridge1: port 2(veth0_to_bond) entered disabled state [ 1862.808142][T29860] veth0_to_bond: entered allmulticast mode [ 1862.841726][T29860] veth0_to_bond: entered promiscuous mode [ 1863.114818][T28080] Bluetooth: hci5: command 0x041b tx timeout [ 1864.031981][T29881] lo speed is unknown, defaulting to 1000 [ 1864.819835][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1865.036061][T28383] hsr_slave_0: left promiscuous mode [ 1865.044215][T28383] hsr_slave_1: left promiscuous mode [ 1865.057483][T28383] batman_adv: batadv0: Interface deactivated: vlan1 [ 1865.065405][T28383] batman_adv: batadv0: Removing interface: vlan1 [ 1865.076774][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6178'. [ 1865.088941][T28080] Bluetooth: hci5: command 0x041b tx timeout [ 1865.097358][T28383] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1865.105176][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6178'. [ 1865.117895][T28383] batman_adv: batadv0: Removing interface: macvtap1 [ 1865.135873][T28383] batman_adv: batadv0: Interface deactivated: macvtap2 [ 1865.143790][T28383] batman_adv: batadv0: Removing interface: macvtap2 [ 1865.193383][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.213752][T28383] batadv_slave_0: left promiscuous mode [ 1865.222670][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1865.240629][T28383] veth1_macvtap: left promiscuous mode [ 1865.250243][ T24] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1865.271936][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.271972][T28383] veth0_macvtap: left promiscuous mode [ 1865.301862][ T24] usb 4-1: config 0 descriptor?? [ 1865.315540][T28383] veth1_vlan: left promiscuous mode [ 1865.327603][T28383] veth0_vlan: left promiscuous mode [ 1865.442230][T28454] usb 2-1: string descriptor 0 read error: -71 [ 1865.647164][T28454] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1865.656130][T28454] usb 2-1: USB disconnect, device number 98 [ 1866.051894][T28454] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1866.203760][T28454] usb 2-1: Using ep0 maxpacket: 32 [ 1866.232268][T28454] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1866.240545][T28454] usb 2-1: config 0 has no interface number 0 [ 1866.269920][T28454] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1866.291186][T28454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.299374][T28454] usb 2-1: Product: syz [ 1866.303534][T28454] usb 2-1: Manufacturer: syz [ 1866.308363][T28454] usb 2-1: SerialNumber: syz [ 1866.325709][T28454] usb 2-1: config 0 descriptor?? [ 1866.342945][T28454] smsc95xx v2.0.0 [ 1866.346991][T28454] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1866.378602][T28454] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 1866.475579][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 261 seconds [ 1866.486621][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 261 seconds [ 1866.500221][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 261 seconds [ 1866.513466][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 261 seconds [ 1867.146249][ T24] Bluetooth: Can't get version to change to load ram patch err [ 1867.169044][ T24] Bluetooth: Loading patch file failed [ 1867.176987][ T24] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 1867.194409][ T24] usb 4-1: USB disconnect, device number 36 [ 1867.570770][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6178'. [ 1867.655627][T29898] lo speed is unknown, defaulting to 1000 [ 1867.689007][T29905] bridge0: port 3(vlan2) entered blocking state [ 1867.695323][T29905] bridge0: port 3(vlan2) entered disabled state [ 1867.701752][T29905] vlan2: entered allmulticast mode [ 1867.706870][T29905] bridge0: entered allmulticast mode [ 1867.717441][T29905] vlan2: left allmulticast mode [ 1867.722312][T29905] bridge0: left allmulticast mode [ 1867.743062][T28454] usb 2-1: USB disconnect, device number 99 [ 1867.758830][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6178'. [ 1867.945864][T13826] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1868.198060][T13826] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1868.232507][T13826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.245857][T29712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1868.284245][T13826] usb 4-1: Product: syz [ 1868.558580][T13826] usb 4-1: Manufacturer: syz [ 1868.566651][T29712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1868.584643][T13826] usb 4-1: SerialNumber: syz [ 1868.608492][T29712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1868.618650][T13826] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1868.650692][T29712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1868.661618][T28454] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1868.821296][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1868.960549][T29943] overlayfs: missing 'lowerdir' [ 1868.986778][T29712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.015467][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.031935][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.039969][ T24] usb 6-1: Product: syz [ 1869.057026][T29712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1869.063946][ T24] usb 6-1: Manufacturer: syz [ 1869.073673][ T24] usb 6-1: SerialNumber: syz [ 1869.101739][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1869.144751][T13826] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1869.146072][ T976] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1869.193154][T17991] usb 4-1: USB disconnect, device number 37 [ 1869.252350][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.259563][ T6245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.307212][T13826] usb 1-1: Using ep0 maxpacket: 32 [ 1869.314523][T13826] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1869.330422][T13826] usb 1-1: config 0 has no interface number 0 [ 1869.337045][T18839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.344211][T18839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.394025][T13826] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1869.439019][T13826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.544780][T13826] usb 1-1: Product: syz [ 1869.558039][T29954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6189'. [ 1869.857325][T28454] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1869.874672][T13826] usb 1-1: Manufacturer: syz [ 1869.896945][T13826] usb 1-1: SerialNumber: syz [ 1869.902062][T28454] ath9k_htc: Failed to initialize the device [ 1869.981719][T17991] usb 4-1: ath9k_htc: USB layer deinitialized [ 1869.998929][T13826] usb 1-1: config 0 descriptor?? [ 1870.043401][T13826] smsc95xx v2.0.0 [ 1870.056103][T13826] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1870.123309][T13826] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1870.297410][ T976] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1870.307265][T17991] usb 6-1: USB disconnect, device number 26 [ 1870.318024][ T976] ath9k_htc: Failed to initialize the device [ 1870.768548][T21229] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 264 seconds [ 1870.779484][T21229] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 264 seconds [ 1870.790686][T21229] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 264 seconds [ 1870.802340][T21229] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 264 seconds [ 1870.832194][T17991] usb 6-1: ath9k_htc: USB layer deinitialized [ 1871.302670][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1871.331489][T29975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1871.361666][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1871.385740][T29975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1871.401735][T29712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.639827][T29712] veth0_vlan: entered promiscuous mode [ 1871.650377][ T24] usb 1-1: USB disconnect, device number 79 [ 1871.711612][T29712] veth1_vlan: entered promiscuous mode [ 1871.771633][T29712] veth0_macvtap: entered promiscuous mode [ 1871.785538][T29712] veth1_macvtap: entered promiscuous mode [ 1871.832218][T29712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.884241][T29712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.938757][T28383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.956682][T28383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.984406][T13826] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1871.999264][T28383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.030976][T28383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.158810][T13826] usb 6-1: Using ep0 maxpacket: 8 [ 1872.196177][T13826] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1872.228338][T13826] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1872.256460][T30008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6200'. [ 1872.266398][T13826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1872.279987][T13826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1872.429169][T30009] xt_cgroup: invalid path, errno=-2 [ 1872.574357][T18839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.611274][T13826] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1872.635002][T18839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.681184][T13826] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1872.740942][T13826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.751913][T18839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.810548][T18839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.110111][T30020] vlan2: entered promiscuous mode [ 1873.115183][T30020] ip6gretap0: entered promiscuous mode [ 1873.471194][T13826] usb 6-1: GET_CAPABILITIES returned 0 [ 1873.482697][T13826] usbtmc 6-1:16.0: can't read capabilities [ 1873.750145][T30027] netlink: 'syz.3.6202': attribute type 4 has an invalid length. [ 1873.760809][T30027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6202'. [ 1873.801528][T13826] usb 6-1: USB disconnect, device number 27 [ 1873.807650][T29990] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 1875.011871][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 267 seconds [ 1875.023599][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 267 seconds [ 1875.034672][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 267 seconds [ 1875.046450][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 267 seconds [ 1875.899939][ T30] audit: type=1400 audit(1770535948.717:2197): avc: denied { connect } for pid=30054 comm="syz.5.6210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1875.993468][T14838] Bluetooth: hci2: command 0x1003 tx timeout [ 1876.001363][T28080] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1876.884757][T14838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1876.904464][T14838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1876.924617][T14838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1876.959648][T14838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1876.969353][T14838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1877.185021][T18337] syz_tun (unregistering): left allmulticast mode [ 1877.244645][T18337] bond0: (slave syz_tun): Releasing backup interface [ 1877.549760][T30057] lo speed is unknown, defaulting to 1000 [ 1877.600144][T28384] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1878.395534][ T30] audit: type=1400 audit(1770535951.331:2198): avc: denied { mount } for pid=30072 comm="syz.5.6217" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1878.502937][T28384] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1878.644107][T28384] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1878.956052][T14838] Bluetooth: hci2: command tx timeout [ 1878.990068][T28384] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1879.403782][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 270 seconds [ 1879.417066][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 270 seconds [ 1879.428133][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 270 seconds [ 1879.439195][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 270 seconds [ 1879.597405][T30098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1879.760881][T30057] chnl_net:caif_netlink_parms(): no params data found [ 1881.008729][T14838] Bluetooth: hci2: command tx timeout [ 1881.066364][T30118] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1881.365894][T28384] batadv0: left promiscuous mode [ 1881.375698][T28384] bridge0: port 3(batadv0) entered disabled state [ 1881.689821][T30132] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1881.970477][T28384] bridge_slave_1: left allmulticast mode [ 1881.996047][T28384] bridge_slave_1: left promiscuous mode [ 1882.010324][T28384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.041845][T30141] netlink: 'syz.5.6233': attribute type 1 has an invalid length. [ 1882.077419][T28384] bridge_slave_0: left allmulticast mode [ 1882.098451][T28384] bridge_slave_0: left promiscuous mode [ 1882.110949][T28384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.323764][T30146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32528 sclass=netlink_route_socket pid=30146 comm=syz.2.6234 [ 1882.524629][T30151] siw: device registration error -23 [ 1882.996680][T14838] Bluetooth: hci2: command tx timeout [ 1883.693215][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 273 seconds [ 1883.706398][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 273 seconds [ 1883.717441][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 273 seconds [ 1883.729480][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 273 seconds [ 1884.042061][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.055586][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.068980][T28384] veth0_to_bond: left allmulticast mode [ 1884.090565][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.135865][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.150990][T28384] veth0_to_bond: left promiscuous mode [ 1884.165490][T28384] bridge3: port 2(veth0_to_bond) entered disabled state [ 1884.174280][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.193337][T28384] veth3: left allmulticast mode [ 1884.198525][T28384] veth3: left promiscuous mode [ 1884.203461][T28384] bridge3: port 1(veth3) entered disabled state [ 1884.209873][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.226462][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.268340][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.276735][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.284309][T13825] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 1884.306403][T13825] hid-generic 0003:0003:0000.004B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1884.474353][T30170] fido_id[30170]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1884.568112][T28384] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1884.594950][T28384] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1885.036558][T14838] Bluetooth: hci2: command tx timeout [ 1885.109411][ T976] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1885.321758][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 1885.344576][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1885.363114][ T976] usb 3-1: too many configurations: 95, using maximum allowed: 8 [ 1885.380848][ T976] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1885.414361][ T976] usb 3-1: can't read configurations, error -61 [ 1885.472485][T28384] bond1 (unregistering): (slave erspan1): Releasing active interface [ 1885.557812][ T976] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1885.668938][T30183] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6243'. [ 1885.735251][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6243'. [ 1885.795336][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 1885.847458][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1885.871570][ T976] usb 3-1: too many configurations: 95, using maximum allowed: 8 [ 1885.901441][ T976] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1885.909058][ T976] usb 3-1: can't read configurations, error -61 [ 1885.948386][ T976] usb usb3-port1: attempt power cycle [ 1886.073226][T30187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1886.308148][ T976] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1886.357902][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 1886.368164][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1886.386069][ T976] usb 3-1: too many configurations: 95, using maximum allowed: 8 [ 1886.405645][ T976] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1886.414363][ T976] usb 3-1: can't read configurations, error -61 [ 1886.431900][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1886.558694][ T976] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1886.605673][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 1886.624563][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1886.642380][ T976] usb 3-1: too many configurations: 95, using maximum allowed: 8 [ 1886.652181][ T976] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1886.673563][ T976] usb 3-1: can't read configurations, error -61 [ 1886.687744][ T976] usb usb3-port1: unable to enumerate USB device [ 1886.817036][T28384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1886.854107][T28384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1886.899125][T28384] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1886.941297][T28384] bond0 (unregistering): Released all slaves [ 1886.960385][T28384] bond1 (unregistering): Released all slaves [ 1887.467773][T28384] bond2 (unregistering): Released all slaves [ 1887.532818][T28384] bond3 (unregistering): Released all slaves [ 1887.578120][T28384] bond4 (unregistering): Released all slaves [ 1887.838998][T28384] bond5 (unregistering): Released all slaves [ 1887.875381][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 276 seconds [ 1887.892678][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 276 seconds [ 1887.903835][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 276 seconds [ 1887.917508][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 276 seconds [ 1888.439539][T28384] bond6 (unregistering): Released all slaves [ 1888.481078][T30057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.491662][T30057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.500296][T30057] bridge_slave_0: entered allmulticast mode [ 1888.540241][T30057] bridge_slave_0: entered promiscuous mode [ 1888.555810][T30057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.568353][T30057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.579518][T30057] bridge_slave_1: entered allmulticast mode [ 1888.589185][T30057] bridge_slave_1: entered promiscuous mode [ 1888.617796][T30141] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1888.994048][T30057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1889.159503][T30057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1889.471339][T30057] team0: Port device team_slave_0 added [ 1889.511833][T30057] team0: Port device team_slave_1 added [ 1889.570665][ T30] audit: type=1400 audit(1770535963.047:2199): avc: denied { create } for pid=30228 comm="syz.5.6254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1889.902320][T28384] hsr_slave_0: left promiscuous mode [ 1890.025413][T28384] hsr_slave_1: left promiscuous mode [ 1890.120957][T30243] xt_hashlimit: size too large, truncated to 1048576 [ 1890.371533][T28384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1890.391585][T28384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1891.290004][T13825] IPVS: starting estimator thread 0... [ 1891.335869][T28384] team0 (unregistering): Port device team_slave_1 removed [ 1891.377824][T30258] IPVS: using max 41 ests per chain, 98400 per kthread [ 1891.442015][T28384] team0 (unregistering): Port device team_slave_0 removed [ 1891.991530][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 279 seconds [ 1892.002371][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 279 seconds [ 1892.013543][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 279 seconds [ 1892.025694][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 279 seconds [ 1892.328527][T30057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.335595][T30057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1892.368085][T30057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.380567][T30057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.387566][T30057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1892.413524][T30057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.436819][T30242] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1892.446410][T30242] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1892.456641][T30242] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1892.672013][T30057] hsr_slave_0: entered promiscuous mode [ 1892.722175][T30057] hsr_slave_1: entered promiscuous mode [ 1892.728517][T30057] debugfs: 'hsr0' already exists in 'hsr' [ 1892.756983][T30057] Cannot create hsr debugfs directory [ 1892.807712][T30271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1892.857328][T30279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1892.875240][T30271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1892.885348][T30279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1892.993111][T30281] serio: Serial port ttyS3 [ 1893.654182][T30293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6268'. [ 1893.719052][T28384] IPVS: stop unused estimator thread 0... [ 1894.177985][T28880] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1894.593034][T28880] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1894.617419][T28880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.627412][T28880] usb 2-1: Product: syz [ 1894.640994][T28880] usb 2-1: Manufacturer: syz [ 1894.651091][T28880] usb 2-1: SerialNumber: syz [ 1894.666671][T28880] usb 2-1: config 0 descriptor?? [ 1894.878736][T28880] airspy 2-1:0.0: usb_control_msg() failed -32 request 09 [ 1894.891810][T30057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1894.897866][T28880] airspy 2-1:0.0: Could not detect board [ 1894.914658][T28880] airspy 2-1:0.0: probe with driver airspy failed with error -32 [ 1894.922553][T30057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1894.933108][T30057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1894.943990][T30057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1895.500817][T30057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1895.517918][T30057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.533080][T18839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.540214][T18839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.686806][T18839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.694010][T18839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1895.779552][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6276'. [ 1895.788676][T30345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6276'. [ 1896.051762][T30350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6277'. [ 1896.073625][T30350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6277'. [ 1896.098182][T30350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6277'. [ 1896.110870][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 282 seconds [ 1896.124581][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 282 seconds [ 1896.137055][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 282 seconds [ 1896.149440][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 282 seconds [ 1896.363482][T30057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1896.476908][T30057] veth0_vlan: entered promiscuous mode [ 1896.507063][T30057] veth1_vlan: entered promiscuous mode [ 1896.585889][T30057] veth0_macvtap: entered promiscuous mode [ 1896.637654][T30057] veth1_macvtap: entered promiscuous mode [ 1897.130550][T13825] usb 2-1: USB disconnect, device number 100 [ 1897.171998][T30057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1897.239043][T30057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1897.344905][T18835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.369145][T18835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.428628][T18835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.452556][T18835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.319112][T18839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.338089][T18839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1898.481290][T18835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.501550][T18835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1898.645252][T13825] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1898.826244][T13825] usb 4-1: Using ep0 maxpacket: 16 [ 1898.841202][T13825] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1898.855258][T13825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.878786][T13825] usb 4-1: Product: syz [ 1898.888090][T13825] usb 4-1: Manufacturer: syz [ 1898.898506][T13825] usb 4-1: SerialNumber: syz [ 1898.960444][T13855] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1899.114615][T13855] usb 1-1: Using ep0 maxpacket: 32 [ 1899.116506][T13825] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1899.147990][T13825] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1899.173186][T13825] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1899.177705][T13855] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1899.191512][T13825] usb 4-1: media controller created [ 1899.196861][T13855] usb 1-1: config 0 has no interface number 0 [ 1899.218484][T13855] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1899.232229][T13825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1899.240633][T13855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.240680][T13855] usb 1-1: Product: syz [ 1899.240694][T13855] usb 1-1: Manufacturer: syz [ 1899.240708][T13855] usb 1-1: SerialNumber: syz [ 1899.360992][T13825] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1899.398890][T13855] usb 1-1: config 0 descriptor?? [ 1899.409040][T13855] smsc95xx v2.0.0 [ 1899.412696][T13855] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1899.432732][T13855] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1899.550946][T30402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.572674][T30402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.600003][T13855] usb 4-1: USB disconnect, device number 38 [ 1899.925803][T13825] usb 1-1: USB disconnect, device number 80 [ 1900.222964][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 285 seconds [ 1900.236215][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 285 seconds [ 1900.247395][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 285 seconds [ 1900.276427][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 285 seconds [ 1900.731028][T30446] QAT: failed to copy from user cfg_data. [ 1900.922269][T17991] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1901.077966][T17991] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1901.130041][T17991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.236546][T17991] usb 6-1: Product: syz [ 1901.259920][T17991] usb 6-1: Manufacturer: syz [ 1901.284159][T17991] usb 6-1: SerialNumber: syz [ 1901.325841][T17991] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1901.351651][T13825] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1901.400387][T30463] __nla_validate_parse: 1 callbacks suppressed [ 1901.400406][T30463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1901.460057][T30463] openvswitch: netlink: Flow key attr not present in new flow. [ 1901.489377][T30465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1902.242843][T17991] usb 6-1: USB disconnect, device number 28 [ 1902.350966][T13825] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1902.400404][T13825] ath9k_htc: Failed to initialize the device [ 1902.554837][T17991] usb 6-1: ath9k_htc: USB layer deinitialized [ 1903.314931][T30488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1903.336392][T30488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1903.348616][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1903.380378][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1903.732827][T28080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1903.770216][T13825] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1903.793395][T28080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1903.803906][T28080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1903.811821][T28080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1903.822429][T28080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1903.951109][T13825] usb 2-1: Using ep0 maxpacket: 32 [ 1903.974856][T13825] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1903.999653][T13825] usb 2-1: config 0 has no interface number 0 [ 1904.018793][T13825] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1904.039124][T13825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.077417][T13825] usb 2-1: Product: syz [ 1904.093635][T13825] usb 2-1: Manufacturer: syz [ 1904.118484][T13825] usb 2-1: SerialNumber: syz [ 1904.137023][T13825] usb 2-1: config 0 descriptor?? [ 1904.166430][T13825] smsc95xx v2.0.0 [ 1904.199119][T13825] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1904.242946][T13825] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 1904.300246][T30506] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=30506 comm=syz.0.6311 [ 1904.344368][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 288 seconds [ 1904.356764][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 288 seconds [ 1904.367950][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 288 seconds [ 1904.379113][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 288 seconds [ 1904.684996][T30493] lo speed is unknown, defaulting to 1000 [ 1904.744199][T13855] usb 2-1: USB disconnect, device number 101 [ 1905.374414][T30493] chnl_net:caif_netlink_parms(): no params data found [ 1905.695134][T30534] bridge0: port 3(vlan2) entered blocking state [ 1905.710261][T30534] bridge0: port 3(vlan2) entered disabled state [ 1905.724270][T30536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1905.734918][T30536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1905.774174][T30534] vlan2: entered allmulticast mode [ 1905.779295][T30534] bridge0: entered allmulticast mode [ 1905.784853][T14838] Bluetooth: hci0: command tx timeout [ 1905.831076][T30534] vlan2: left allmulticast mode [ 1905.836025][T30534] bridge0: left allmulticast mode [ 1905.913556][T17991] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1905.975433][T30538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1906.104908][T30493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.112668][T30493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.122558][T30493] bridge_slave_0: entered allmulticast mode [ 1906.129422][T17991] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1906.138687][T17991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.148592][T30493] bridge_slave_0: entered promiscuous mode [ 1906.159239][T17991] usb 1-1: Product: syz [ 1906.166274][T30493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.174925][T17991] usb 1-1: Manufacturer: syz [ 1906.179508][T17991] usb 1-1: SerialNumber: syz [ 1906.184396][T30493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.198252][T17991] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1906.209453][T30493] bridge_slave_1: entered allmulticast mode [ 1906.219520][T13826] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1906.276873][T30493] bridge_slave_1: entered promiscuous mode [ 1906.382268][T30493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1906.403848][T30493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1906.515247][T30493] team0: Port device team_slave_0 added [ 1906.553682][T30493] team0: Port device team_slave_1 added [ 1906.590214][T30546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1906.605390][T30493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.612672][T30493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.638707][T30493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.658680][T30493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.680144][T30493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.707968][T30546] openvswitch: netlink: Flow key attr not present in new flow. [ 1906.715932][T30493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.750595][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1906.847798][T17991] usb 1-1: USB disconnect, device number 81 [ 1906.866012][T30493] hsr_slave_0: entered promiscuous mode [ 1906.876879][T30493] hsr_slave_1: entered promiscuous mode [ 1906.884271][T30493] debugfs: 'hsr0' already exists in 'hsr' [ 1906.890350][T30493] Cannot create hsr debugfs directory [ 1907.080440][T30493] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1907.114711][T30493] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1907.127374][T30493] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1907.139854][T30493] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1907.304649][T13826] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1907.314488][T13826] ath9k_htc: Failed to initialize the device [ 1907.322164][T17991] usb 1-1: ath9k_htc: USB layer deinitialized [ 1907.349667][T30493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.364196][T30493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.374795][T18835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.381950][T18835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.396733][T18835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.403863][T18835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.545322][T30493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1907.684435][T30493] veth0_vlan: entered promiscuous mode [ 1907.695220][T30493] veth1_vlan: entered promiscuous mode [ 1907.715663][T30493] veth0_macvtap: entered promiscuous mode [ 1907.725004][T30493] veth1_macvtap: entered promiscuous mode [ 1907.740676][T30493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1907.753738][T30493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1907.766292][ T6245] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.775352][T14838] Bluetooth: hci0: command tx timeout [ 1907.785725][ T6245] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.796008][ T6245] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.807802][ T6245] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.867887][ T6245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.875764][ T6245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.897905][T28383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.905955][T28383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.451529][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 291 seconds [ 1908.462287][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 291 seconds [ 1908.473271][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 291 seconds [ 1908.485739][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 291 seconds [ 1909.743177][T28080] Bluetooth: hci0: command tx timeout [ 1910.872563][ T5178] udevd[5178]: worker [23029] /devices/virtual/block/nbd1 timeout; kill it [ 1910.881589][ T5178] udevd[5178]: seq 31001 '/devices/virtual/block/nbd1' killed [ 1911.724518][T28080] Bluetooth: hci0: command tx timeout [ 1912.563684][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 294 seconds [ 1912.574472][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 294 seconds [ 1912.585461][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 294 seconds [ 1912.596449][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 294 seconds [ 1916.697060][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 297 seconds [ 1916.707883][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 297 seconds [ 1916.718935][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 297 seconds [ 1916.729901][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 297 seconds [ 1920.793317][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 300 seconds [ 1920.804066][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 300 seconds [ 1920.815038][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 300 seconds [ 1920.826063][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 300 seconds [ 1924.911552][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 303 seconds [ 1924.922326][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 303 seconds [ 1924.933359][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 303 seconds [ 1924.945696][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 303 seconds [ 1929.023149][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 306 seconds [ 1929.035598][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 306 seconds [ 1929.046633][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 306 seconds [ 1929.060276][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 306 seconds [ 1933.160440][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 309 seconds [ 1933.171303][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 309 seconds [ 1933.182273][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 309 seconds [ 1933.193273][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 309 seconds [ 1937.253402][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 312 seconds [ 1937.264228][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 312 seconds [ 1937.275224][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 312 seconds [ 1937.286219][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 312 seconds [ 1941.369165][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 315 seconds [ 1941.379992][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 315 seconds [ 1941.391221][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 315 seconds [ 1941.402533][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 315 seconds [ 1944.951710][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1945.483459][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 318 seconds [ 1945.494236][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 318 seconds [ 1945.505263][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 318 seconds [ 1945.517517][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 318 seconds [ 1949.598783][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 321 seconds [ 1949.609577][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 321 seconds [ 1949.622318][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 321 seconds [ 1949.633373][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 321 seconds [ 1953.714254][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 324 seconds [ 1953.725001][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 324 seconds [ 1953.735989][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 324 seconds [ 1953.747000][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 324 seconds [ 1957.829165][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 327 seconds [ 1957.839966][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 327 seconds [ 1957.851023][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 327 seconds [ 1957.862113][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 327 seconds [ 1961.944377][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 330 seconds [ 1961.955213][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 330 seconds [ 1961.966198][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 330 seconds [ 1961.977175][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 330 seconds [ 1966.059418][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 333 seconds [ 1966.070180][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 333 seconds [ 1966.081161][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 333 seconds [ 1966.092197][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 333 seconds [ 1970.192897][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 336 seconds [ 1970.204972][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 336 seconds [ 1970.215981][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 336 seconds [ 1970.226958][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 336 seconds [ 1974.291786][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 339 seconds [ 1974.302535][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 339 seconds [ 1974.313494][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 339 seconds [ 1974.324494][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 339 seconds [ 1978.407281][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 342 seconds [ 1978.418075][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 342 seconds [ 1978.429397][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 342 seconds [ 1978.440390][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 342 seconds [ 1982.519815][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 345 seconds [ 1982.530610][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 345 seconds [ 1982.541605][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 345 seconds [ 1982.552600][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 345 seconds [ 1986.634746][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 348 seconds [ 1986.645617][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 348 seconds [ 1986.656651][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 348 seconds [ 1986.667685][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 348 seconds [ 1990.749200][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 351 seconds [ 1990.760254][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 351 seconds [ 1990.771273][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 351 seconds [ 1990.783520][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 351 seconds [ 1994.864421][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 354 seconds [ 1994.876819][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 354 seconds [ 1994.887864][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 354 seconds [ 1994.898952][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 354 seconds [ 1995.706450][T28080] Bluetooth: hci2: command 0x0406 tx timeout [ 1998.979810][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 357 seconds [ 1998.990599][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 357 seconds [ 1999.001617][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 357 seconds [ 1999.012624][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 357 seconds [ 2003.094665][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 360 seconds [ 2003.105469][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 360 seconds [ 2003.116521][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 360 seconds [ 2003.127529][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 360 seconds [ 2003.479724][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2007.211086][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 363 seconds [ 2007.221859][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 363 seconds [ 2007.232862][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 363 seconds [ 2007.243884][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 363 seconds [ 2011.324558][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 366 seconds [ 2011.335329][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 366 seconds [ 2011.346313][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 366 seconds [ 2011.359009][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 366 seconds [ 2015.440534][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 369 seconds [ 2015.451280][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 369 seconds [ 2015.464028][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 369 seconds [ 2015.475064][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 369 seconds [ 2019.573736][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 372 seconds [ 2019.584522][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 372 seconds [ 2019.595914][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 372 seconds [ 2019.606917][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 372 seconds [ 2023.688822][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 375 seconds [ 2023.699662][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 375 seconds [ 2023.710667][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 375 seconds [ 2023.721634][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 375 seconds [ 2024.965050][T14838] Bluetooth: hci0: command 0x0406 tx timeout [ 2027.784824][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 378 seconds [ 2027.796447][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 378 seconds [ 2027.807466][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 378 seconds [ 2027.818511][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 378 seconds [ 2031.902969][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 381 seconds [ 2031.913979][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 381 seconds [ 2031.925061][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 381 seconds [ 2031.936100][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 381 seconds [ 2035.786580][ T31] INFO: task syz.2.6251:30211 blocked for more than 143 seconds. [ 2035.794357][ T31] Tainted: G L syzkaller #0 [ 2035.802095][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2035.810905][ T31] task:syz.2.6251 state:D stack:25752 pid:30211 tgid:30208 ppid:29712 task_flags:0x400040 flags:0x00080002 [ 2035.822935][ T31] Call Trace: [ 2035.826414][ T31] [ 2035.829344][ T31] ? __schedule+0xf67/0x5fa0 [ 2035.833983][ T31] __schedule+0xfe6/0x5fa0 [ 2035.838388][ T31] ? __lock_acquire+0x4a5/0x2630 [ 2035.844913][ T31] ? __pfx___schedule+0x10/0x10 [ 2035.849776][ T31] ? find_held_lock+0x2b/0x80 [ 2035.854515][ T31] ? schedule+0x2bf/0x390 [ 2035.858845][ T31] schedule+0xdd/0x390 [ 2035.866956][ T31] io_schedule+0x8a/0xf0 [ 2035.871214][ T31] folio_wait_bit_common+0x414/0xa70 [ 2035.876534][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 2035.882021][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2035.887805][ T31] ? __rcu_read_unlock+0x24d/0x550 [ 2035.892928][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 2035.898473][ T31] ? __pfx___might_resched+0x10/0x10 [ 2035.903812][ T31] ? compaction_free+0x182/0x430 [ 2035.908768][ T31] migrate_pages_batch+0x1b85/0x4530 [ 2035.914115][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 2035.919519][ T31] ? __pfx_compaction_free+0x10/0x10 [ 2035.924791][ T31] ? __schedule+0x2f0b/0x5fa0 [ 2035.929673][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 2035.935313][ T31] ? rcu_is_watching+0x12/0xc0 [ 2035.941402][ T31] ? __schedule+0xff8/0x5fa0 [ 2035.946020][ T31] migrate_pages_sync+0x4db/0x880 [ 2035.951091][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 2035.956464][ T31] ? __pfx_compaction_free+0x10/0x10 [ 2035.961838][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 2035.967403][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 2035.972576][ T31] ? irqentry_exit+0x180/0x670 [ 2035.977381][ T31] migrate_pages+0x1a5b/0x2810 [ 2035.982155][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 2035.987594][ T31] ? __pfx_compaction_free+0x10/0x10 [ 2035.992893][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 2035.998053][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 2036.004294][ T31] ? __pageblock_pfn_to_page+0x25b/0x450 [ 2036.009944][ T31] compact_zone+0x240c/0x4320 [ 2036.023399][ T31] ? trace_sched_exit_tp+0xcd/0x100 [ 2036.028640][ T31] ? __schedule+0xf67/0x5fa0 [ 2036.033223][ T31] ? __pfx_compact_zone+0x10/0x10 [ 2036.039507][ T31] ? __flush_work+0xa38/0xcb0 [ 2036.044338][T29318] block nbd1: Possible stuck request ffff888026a68000: control (read@0,1024B). Runtime 384 seconds [ 2036.055054][T29318] block nbd1: Possible stuck request ffff888026a68200: control (read@1024,1024B). Runtime 384 seconds [ 2036.066010][T29318] block nbd1: Possible stuck request ffff888026a68400: control (read@2048,1024B). Runtime 384 seconds [ 2036.071836][ T31] ? __flush_work+0xa38/0xcb0 [ 2036.076991][T29318] block nbd1: Possible stuck request ffff888026a68600: control (read@3072,1024B). Runtime 384 seconds [ 2036.083206][ T31] compact_node+0x17f/0x2c0 [ 2036.097909][ T31] ? __pfx_compact_node+0x10/0x10 [ 2036.103020][ T31] ? __lru_add_drain_all+0x43c/0x650 [ 2036.108338][ T31] ? __lru_add_drain_all+0x441/0x650 [ 2036.113641][ T31] sysctl_compaction_handler+0x141/0x210 [ 2036.119443][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 2036.124727][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 2036.130587][ T31] ? splice_from_pipe_next+0x1ec/0x5a0 [ 2036.136475][ T31] iter_file_splice_write+0x82b/0x10a0 [ 2036.142563][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2036.148642][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 2036.154019][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2036.160754][ T31] direct_splice_actor+0x192/0x6c0 [ 2036.165868][ T31] splice_direct_to_actor+0x345/0xa30 [ 2036.171274][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 2036.176934][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2036.182815][ T31] ? rcu_is_watching+0x12/0xc0 [ 2036.188383][ T31] do_splice_direct+0x174/0x240 [ 2036.193231][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 2036.199220][ T31] ? avc_policy_seqno+0x9/0x20 [ 2036.203968][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2036.210220][ T31] ? rw_verify_area+0xce/0x6d0 [ 2036.214996][ T31] do_sendfile+0xadc/0xe20 [ 2036.219409][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 2036.224370][ T31] __x64_sys_sendfile64+0x154/0x220 [ 2036.229566][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2036.235808][ T31] do_syscall_64+0xc9/0xf80 [ 2036.240298][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.246963][ T31] RIP: 0033:0x7f615919aeb9 [ 2036.251373][ T31] RSP: 002b:00007f61573d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2036.260036][ T31] RAX: ffffffffffffffda RBX: 00007f6159416180 RCX: 00007f615919aeb9 [ 2036.268480][ T31] RDX: 00002000000000c0 RSI: 0000000000000008 RDI: 0000000000000009 [ 2036.276948][ T31] RBP: 00007f6159208c1f R08: 0000000000000000 R09: 0000000000000000 [ 2036.284953][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 2036.293021][ T31] R13: 00007f6159416218 R14: 00007f6159416180 R15: 00007ffc1f638238 [ 2036.301810][ T31] [ 2036.304844][ T31] [ 2036.304844][ T31] Showing all locks held in the system: [ 2036.312687][ T31] 1 lock held by khungtaskd/31: [ 2036.317528][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2036.327955][ T31] 2 locks held by kworker/u8:4/66: [ 2036.333232][ T31] 1 lock held by klogd/5167: [ 2036.337854][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2036.347912][ T31] 2 locks held by getty/5570: [ 2036.352577][ T31] #0: ffff8880326ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2036.362380][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2036.372543][ T31] 3 locks held by kworker/u8:13/18835: [ 2036.378074][ T31] 1 lock held by udevd/23029: [ 2036.382733][ T31] #0: ffff8880269c3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2036.392061][ T31] 1 lock held by syz.2.6251/30211: [ 2036.397204][ T31] #0: ffff888058344420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 2036.407240][ T31] [ 2036.409552][ T31] ============================================= [ 2036.409552][ T31] [ 2036.417987][ T31] NMI backtrace for cpu 0 [ 2036.418006][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.418030][ T31] Tainted: [L]=SOFTLOCKUP [ 2036.418035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2036.418045][ T31] Call Trace: [ 2036.418051][ T31] [ 2036.418058][ T31] dump_stack_lvl+0x100/0x190 [ 2036.418082][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2036.418108][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2036.418130][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2036.418159][ T31] sys_info+0x141/0x190 [ 2036.418180][ T31] watchdog+0xcc3/0xfe0 [ 2036.418214][ T31] ? __pfx_watchdog+0x10/0x10 [ 2036.418241][ T31] ? __kthread_parkme+0x18c/0x230 [ 2036.418269][ T31] ? __pfx_watchdog+0x10/0x10 [ 2036.418295][ T31] ? __pfx_watchdog+0x10/0x10 [ 2036.418318][ T31] kthread+0x3b3/0x730 [ 2036.418338][ T31] ? __pfx_kthread+0x10/0x10 [ 2036.418355][ T31] ? ret_from_fork+0x79/0xaf0 [ 2036.418374][ T31] ? ret_from_fork+0x79/0xaf0 [ 2036.418394][ T31] ? rcu_is_watching+0x12/0xc0 [ 2036.418417][ T31] ? __pfx_kthread+0x10/0x10 [ 2036.418437][ T31] ret_from_fork+0x754/0xaf0 [ 2036.418458][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2036.418480][ T31] ? __switch_to+0x7b9/0x10c0 [ 2036.418505][ T31] ? __pfx_kthread+0x10/0x10 [ 2036.418525][ T31] ret_from_fork_asm+0x1a/0x30 [ 2036.418552][ T31] [ 2036.418559][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2036.563355][ C1] NMI backtrace for cpu 1 [ 2036.563375][ C1] CPU: 1 UID: 0 PID: 18835 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.563395][ C1] Tainted: [L]=SOFTLOCKUP [ 2036.563400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2036.563409][ C1] Workqueue: events_unbound toggle_allocation_gate [ 2036.563430][ C1] RIP: 0010:update_rq_clock+0x409/0xd30 [ 2036.563452][ C1] Code: d5 20 1f ef 8d 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 80 3c 11 00 0f 85 c9 06 00 00 48 8d bb e0 0c 00 00 48 8b 00 <48> ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 11 00 0f [ 2036.563465][ C1] RSP: 0018:ffffc900040ff940 EFLAGS: 00000046 [ 2036.563475][ C1] RAX: 000000172d524b00 RBX: ffff8880b853ac80 RCX: 1ffff110170a48b6 [ 2036.563484][ C1] RDX: dffffc0000000000 RSI: 1ffffffff1bde3e5 RDI: ffff8880b853b960 [ 2036.563493][ C1] RBP: ffff8880b853b7b8 R08: 0000000000000001 R09: 0000000000000000 [ 2036.563502][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff90b781d4 [ 2036.563509][ C1] R13: ffff8880b853b868 R14: ffff8880b853b7b0 R15: 000000000057925b [ 2036.563518][ C1] FS: 0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000 [ 2036.563533][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2036.563542][ C1] CR2: 000055b52bd99660 CR3: 000000000e392000 CR4: 00000000003526f0 [ 2036.563550][ C1] Call Trace: [ 2036.563557][ C1] [ 2036.563565][ C1] __schedule+0x3e2/0x5fa0 [ 2036.563579][ C1] ? __lock_acquire+0x4a5/0x2630 [ 2036.563598][ C1] ? __pfx___schedule+0x10/0x10 [ 2036.563609][ C1] ? find_held_lock+0x2b/0x80 [ 2036.563625][ C1] ? schedule+0x2bf/0x390 [ 2036.563638][ C1] schedule+0xdd/0x390 [ 2036.563650][ C1] toggle_allocation_gate+0x218/0x2d0 [ 2036.563666][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 2036.563682][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2036.563702][ C1] ? rcu_is_watching+0x12/0xc0 [ 2036.563720][ C1] process_one_work+0x9c2/0x1840 [ 2036.563740][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2036.563757][ C1] ? assign_work+0x19c/0x250 [ 2036.563771][ C1] worker_thread+0x5da/0xe40 [ 2036.563789][ C1] ? kthread+0x17d/0x730 [ 2036.563801][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2036.563815][ C1] kthread+0x3b3/0x730 [ 2036.563828][ C1] ? __pfx_kthread+0x10/0x10 [ 2036.563841][ C1] ? ret_from_fork+0x79/0xaf0 [ 2036.563855][ C1] ? ret_from_fork+0x79/0xaf0 [ 2036.563869][ C1] ? rcu_is_watching+0x12/0xc0 [ 2036.563885][ C1] ? __pfx_kthread+0x10/0x10 [ 2036.563899][ C1] ret_from_fork+0x754/0xaf0 [ 2036.563913][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2036.563928][ C1] ? rcu_is_watching+0x12/0xc0 [ 2036.563943][ C1] ? __switch_to+0x7b9/0x10c0 [ 2036.563960][ C1] ? __pfx_kthread+0x10/0x10 [ 2036.563974][ C1] ret_from_fork_asm+0x1a/0x30 [ 2036.563991][ C1] [ 2036.841113][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2036.847963][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.858630][ T31] Tainted: [L]=SOFTLOCKUP [ 2036.862933][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2036.872959][ T31] Call Trace: [ 2036.876213][ T31] [ 2036.879119][ T31] dump_stack_lvl+0x100/0x190 [ 2036.883775][ T31] vpanic+0x20d/0x630 [ 2036.887729][ T31] panic+0xd1/0xd1 [ 2036.891430][ T31] ? __pfx_panic+0x10/0x10 [ 2036.895855][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2036.901997][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2036.908138][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2036.914273][ T31] ? watchdog.cold+0x198/0x1ca [ 2036.919033][ T31] ? watchdog+0xcd3/0xfe0 [ 2036.923779][ T31] watchdog.cold+0x1a9/0x1ca [ 2036.928348][ T31] ? __pfx_watchdog+0x10/0x10 [ 2036.933008][ T31] ? __kthread_parkme+0x18c/0x230 [ 2036.938017][ T31] ? __pfx_watchdog+0x10/0x10 [ 2036.942681][ T31] ? __pfx_watchdog+0x10/0x10 [ 2036.947350][ T31] kthread+0x3b3/0x730 [ 2036.951404][ T31] ? __pfx_kthread+0x10/0x10 [ 2036.955998][ T31] ? ret_from_fork+0x79/0xaf0 [ 2036.960664][ T31] ? ret_from_fork+0x79/0xaf0 [ 2036.965324][ T31] ? rcu_is_watching+0x12/0xc0 [ 2036.970072][ T31] ? __pfx_kthread+0x10/0x10 [ 2036.974649][ T31] ret_from_fork+0x754/0xaf0 [ 2036.979221][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2036.984336][ T31] ? __switch_to+0x7b9/0x10c0 [ 2036.989001][ T31] ? __pfx_kthread+0x10/0x10 [ 2036.993576][ T31] ret_from_fork_asm+0x1a/0x30 [ 2036.998343][ T31] [ 2037.001628][ T31] Kernel Offset: disabled [ 2037.005929][ T31] Rebooting in 86400 seconds..