last executing test programs: 7.279579095s ago: executing program 3 (id=2804): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @remote}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8e9}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) 5.374736867s ago: executing program 2 (id=2811): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r3 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) io_uring_enter(r3, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f00000006c0)=""/105, 0x69}, {&(0x7f0000000740)=""/84, 0x54}], 0x6}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.484064771s ago: executing program 1 (id=2814): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000f80)=""/71) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x0, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044094) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2, 0x6}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) eventfd2(0x7, 0x80800) 4.313619378s ago: executing program 1 (id=2815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0) 4.313174711s ago: executing program 1 (id=2816): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r2 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4000, r2}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x6000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x7}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b05040000000000080000", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, 0x0, 0x0) splice(r8, 0x0, r10, 0x0, 0x4ffe6, 0x0) 4.25802341s ago: executing program 2 (id=2817): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000280), 0x303002, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a0102000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 4.073939563s ago: executing program 3 (id=2818): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000500), 0x8) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x844804, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000300000008000000fd7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fc95c420b9424e30000000000000000000"], 0x48) mbind(&(0x7f0000253000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x6, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.954006258s ago: executing program 1 (id=2819): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x100, 0x0, r1}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f40)={0xf78, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_ep_read(r4, 0x6, 0x4e, &(0x7f0000000040)=""/78) personality(0x5000002) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) personality(0x5400004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_generic(r5, &(0x7f00000006c0)={&(0x7f0000000f80), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x20, 0x100, 0x70bd29, 0x25dfdbff, {0xe}, [@typed={0x8, 0x13e, 0x0, 0x0, @u32=0x3}, @generic="f1722997602360bcf6b707545cedb9f819025e550020cecd4df7c3e9bcb385d9d542f0d96bf6056db5d7f54a3b32a5f5a3e573c1fad2b51e291cca173f33d57edb265335733641f5d074d9b7613ecff5eea445b5dc0d7ee360f46c5337ace8f1e7a3d5c5e2e5ab25ddd418e1ca9fea637b"]}, 0x90}, 0x1, 0x0, 0x0, 0x24008844}, 0x400c0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @local, 0x9}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x7, 0xeffa, 0x35}, 0x10) syz_usb_connect$midi(0x0, 0xca, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x1, 0x1, 0x3, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x9, [@ms_header={0x7, 0x24, 0x1, 0xfff, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0xff, 0x4, [{0x4, 0x3}, {0x3, 0x6}, {0xa, 0x6}, {0xc8, 0xe}], 0x8d}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x68, 0x6, [{0x5}, {0x3, 0x7}, {0x6, 0xd9}, {0x2, 0x5}, {}, {0xb, 0x7f}], 0x1}, @ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x0, 0x2, [{0x0, 0x6}, {0x6, 0x3}], 0xd}], [{{0x9, 0x5, 0x4, 0x1, 0x10, 0x8, 0x8, 0x7, {0x10, 0x25, 0x1, 0xc, "60e80d8b9b010b9d95579eb8"}}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0xfe, 0x3, 0x1, {0x10, 0x25, 0x1, 0xc, "20bd6fc68dc215eefabb6453"}}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0xfe, 0xb, 0x16, {0xc, 0x25, 0x1, 0x8, "42258e8f56298dc3"}}}, {{0x9, 0x5, 0x5, 0x13, 0x200, 0x0, 0xf7, 0x1, {0x8, 0x25, 0x1, 0x4, "ecf67f56"}}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x3, 0x1, 0xd, {0xa, 0x25, 0x1, 0x6, "6dce204680d2"}}}]}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0x53, 0xb, 0x3, 0x20, 0x46}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0xa, [{0xb8, &(0x7f0000000880)=@string={0xb8, 0x3, "50571a6c96120b0d889f9ceda42f558ed79adc202547541c85a12c8ace8874dbbdffffc1fea1b63cfce4e0e8760896119c17f8c8fc55a4c41b309446fb44f3a92edb44023753d11b9655b3fecbc1677078346280398818b342600681cbebf05312688e5451be68522c6c8847f3fca8c9449e6457fee1ea21dd7dd74397e965442cdf5d5925341f491dcab643d804eb6577617b2fdf840c69d807a5c939d8fbb47c3dec271541365c1e6c0a308779f7503eafb201d3ae"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x280a}}, {0xfb, &(0x7f00000009c0)=@string={0xfb, 0x3, "42757b9915ebbc7aff59039c3bcbaf501bb5cf288bf1a12acd29d7a064a574359ecdffce480bbad80c782277fd9ab842f242f0aaf53aca0983f63f8cc953ccf457656ed704c20d7e0c4aca45922d60cc869354b3f611f70d6400adce0b7cbc5e129cadded7ba8fb95436f8f62ab488bd2087ed8ed05b8156d065bc07d510244666c472bb11c419c668be1b6c2b166f9d463ce3d603e6a142ab4380148ba312a854a3cdc7d72b59eb5fdb574abfb609affea14e24e2956f5efc00c63e1a35459beab5be8ecdd04a0aeb097245a386fa9cca97f51bbe6377b8bf6978218cfd15addf8b5ac639e35dcbd5c0ba9240179ed56d5da997dbcff9710c"}}, {0x1e, &(0x7f0000000ac0)=@string={0x1e, 0x3, "12ade3c706aab855fee871ae9520347e10ac02279bbfb2bdc1a7f029"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2001}}, {0x97, &(0x7f0000000b40)=@string={0x97, 0x3, "4e652d1a9d29c8adc04d260d8a8645dc24e76f887be8c4dc9b6188e36a1146a11664f8dcd3e2360b1fd3c624a8c8295574541185b408c3a57e055805e467ee1db6cddbc547b61a9d2bc33c30acf480bb57fb174de7b481160bba70e174e84651a98202479a31d458d90d5560a332e77fda51b8e57e64e1c53167c7b8b3d3f6e2106f41df99e7b0691a7aac8475c9151bf4b0fb17e9"}}, {0xef, &(0x7f0000000c00)=@string={0xef, 0x3, "08aebfa0f0da1f91533ee476ced52cd25c93b3b2133292ec7b9e3204b7394cb4d6e0cccf48edd9facd6bbd353a88fc7649105fc5e2dfec25bed2578ca58393290764c1ae68002efb65f9545ac23ea3e8b0123bc6e794da337cc0b5457e8579aaef0a5b4cd0defcda8b5e34015fbb4f5e6f500e8a90051f276cd2e3d702c4613d8b13359fc77b38425379b90362bb2cd9113be43ec0283b546d8e4d5040f06440153c9f42de1411ee546a8951438f55ce210dd40cf2dfbee09a059ce71bc01260610a307b3c8c762f078f6f5fb11ccf4eadb3d21fde811cb305f88726fa2725ce65bace7b37aa8d595e03afc4f6"}}, {0xba, &(0x7f0000000d00)=@string={0xba, 0x3, "0c67c907d91ed4428c67f22d25788c493253a0d0aaad053210e0d494465895909c4d714b5c7562b9fbeb4cdff9723920066ec3d74c595439ba9e30cda9e9fb13c4a3d22f8f1ca510ebd2c0dd9ba4caeddd269c0e39d8859929a14b5c8c4227a9b2e691fd6f8cf866c09375f7833fd266d0ca93b8dfe41e8533fae8048015748700770b3356b49af4d6558e5cd0fd3dfbaad5c47363ebfd2c8c7617196237aae8bdcc7b9774a94fbb3f4edd06cddabdd8418ff7152724c61b"}}, {0x94, &(0x7f0000000dc0)=ANY=[@ANYBLOB="940311423dd75ef49cd5b9de7dc55a3b2a9d2aaecc19cdc24044ecfa382e6494db0e396deb9075586173e5b88278343b4c7d573118c518c0f4e51490d9dbbd321afbebf20e83f8d0abff9edf130b726a74147d03d2c2fb857fd5b5e31bf8a7051df062a9393eb20ff7cbc2faede691f7e04fb7390a78e39f1acd5ebdfcebcf4426ec4ed2ddcb1586008aa2da719e9c63623471a2"]}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x41d}}]}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x180, 0x1a, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {}, {0xfffffffe}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2a}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x180}}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x5, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x6, 0x54c6cff3, 0xfd, 0x2, 0x3, 0x200, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x8c, 0xcaa3, 0x0, 0x20001e57, 0x6, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) personality(0x4100001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) 2.853409637s ago: executing program 3 (id=2821): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000400)=0x2c, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x800002) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aafc000000000000000000000000000001fffe00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000032000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00000200"/172], 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) 2.583348714s ago: executing program 2 (id=2822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140ff1600ff0c00028008000140594c"], 0x44}, 0x1, 0x0, 0x0, 0x30008003}, 0x4000050) 2.582917722s ago: executing program 2 (id=2823): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x0, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044094) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2, 0x6}}, 0x20) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) eventfd2(0x7, 0x80800) 2.364229026s ago: executing program 2 (id=2824): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcff7f59975100000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r7}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x8, 0x1209, 0xffffffffffffffff, 0x10}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000cb6b6cb0a34a9cc7a91cbbae8a459de135e367f5950e0c736323808d903bdc66d6df77a298e75b356a2865beb858d55c2a4eb9022f80733201de22760fac67cc6463cd777a46b4b3ea15495009dd7a387592b3663a38a839eda7678c14f3f53195ba54d537bd1bf9f497f6cf2d94664a5d189ea8ce4b383ac5708ad864394d52a2f7d5ed82862d9583b26d01bb5a21c070022bf6b025ca7fb5485ea35167c1a078914855af08064c435661f772bc7233a9e5e6f7cc480f4966bd8827ffe7d2b7d82f995ca75c532e7e15c84520d3b11fb7d80a3c5959b072cd87cb9a531ad21100000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYBLOB="39ef01a0a043c82c4901250e0929a6896651c07795ad4b099317402aeaf5242d53"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, r9, 0xe8cf8bbcb975f794) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r10}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89e0, 0x0) 1.944416162s ago: executing program 0 (id=2825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x1fba, &(0x7f0000000680)={0x0, 0x8686, 0x10000, 0x2, 0x2ec}, &(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32, @ANYBLOB="0000000007000000c3"], 0x0, 0x4}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r4, r5, 0x0, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = io_uring_setup(0x669, &(0x7f00000002c0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x12, 0x0, r8) syz_io_uring_submit(r2, r5, 0x0, &(0x7f0000001e00)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd=r6, 0x6, &(0x7f0000001dc0)=[{&(0x7f0000001900)="311ef50239331ba40f1a2b4da5c8198b4aedd292b71072ad978c1d0b84cc8f45d6b7dc37ae48621d1ab6c4f7e26d0fb024aa08898f854fcbc222ccf788338a8a89d42f8a4912abb9699b37e1b9eeae75cd3283d8dfb18c971e2b4030657d68f80ae427ade0063cec3c516a1316767f2a2c79a42cd83ad1384f72f061b5e5b82450a18428ab0970fecf9e3b9f3c9ff9b1a77802d720a88a360fa92dd9886188607d884bfbdaa7f703472500c1888851566d1ff992c2a4c47c66082918d0835e6016f69ecc51913be3661de76ea559bfaab923db24bb5576fd74bd8df2ddb51fdb6a4f508fa0648ab49ac54460f8e4f3050dc0a95feb1482", 0xf7}, {&(0x7f0000001a00)="4084c42a7c9ed4d68f795a6e280ccfd389022c14475eae036b991ec60aa092c8541bc033c5829bf5cef1c84d490e78a9c4fc332800f9475fb7e0603e2832f8dc886aeffdfef521602b9a70813b6babbbce6dcad2af9f0c91c1f5154f72bc300da1de562849ab679be0117d4f91f596b4aac277f44562074ae7f7b154e5d1e6b25a40d97e82", 0x85}, {&(0x7f0000001ac0)="c2c0248ef4b0dac72f88704858d8ede7bc5693d06e9e867f078920713364e837839e9e901173e2b881ec0d77a360125433968b45250ad3ae7fc9aedd3fde0bfb9f8781a6859be7f360ab4ebf2198a66cdb5ef6b70fcedd3992ecb6afa2b9800c4181626e5a", 0x65}, {&(0x7f0000001b40)="c32cd4cfbfb04a", 0x7}, {&(0x7f0000001b80)="fb2fd77b4ef5996ae588922cabc363e42b9295b8356aaebe6f904fb79bc0255d9d4ea755e5423b60eb904c6d75816d11d336fe917ede3b36ce5c05bffc615854906600367a855ac780fee42b3dbe5921a20a2c2fe9edca423ed3a0f21bc2d1dc95f13e83a89400d460d0c9e0bd0193fb2831f482d75c5b47a66fb394983a2d9722effd2982b4bf2f8f073a1b19e481964014710088aaaa3daee92fa65bf3ee5245745ab7d2a7bfb7bcfbd2e1ac1d7206693e8ad83abe60c078cee700976c0f62502b28309f23e8e7697670ad443a01149c", 0xd1}, {&(0x7f0000001c80)="5b3dc196402d086c57b02878c253ded40dd854169007e4713a2b95876766b6de6c19d8cf8cb0604a3283e3622aeda56af8bce04c8d5d2f3c3895e35978f3321fa04fb722f236df004ca4562588f00efcc05e827e41cdf066ae3a8d76eed9310d72cd", 0x62}, {&(0x7f0000001d00)="aa3b069150a629664a34734e0bd119eced386f0f4df0f8b91a1a9bfcbee552ac7303f2ece61e453624401bb42a728e6dba7275c8ab3b2b4abdfd0d5732962ce8a72e78e4299bb2c133d1864a2c771b7a6bf24f8a672cf6e56bfe75d246b1f3588f00817bd0c4e2d469466adc1115993aadde5107878e5fd480df0572a114898a6c9ade736d128756dbfabbe6db9cb7e8c2794f9c787d8db2e120bee449e65fdbaed878f82c31b36882991815b67e9b15c2def3d11a704d07b6", 0xb9}], 0x7, 0x12, 0x0, {0x1, r8}}) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffda1, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="073703f8f479a60f1c678e538bb5da6dbf270659c64cde9d017504e90c0129b41505f14f39ded9d93ae599446342a33d50c04388a84b98be88484e56e9e9657c7b8ca33d400554e81899f93b99340faa5a3a67a3738d659a1ae7d0d52035a1e7ae"], 0x44}, 0x1, 0x0, 0x0, 0x34048083}, 0x4000050) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000900)={{}, r10, 0x4, @unused=[0x7fffffff, 0x2, 0x5, 0x3], @devid=r11}) 1.864604364s ago: executing program 0 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.813515773s ago: executing program 3 (id=2827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.81266061s ago: executing program 0 (id=2828): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000004200000327000000000071000000000016f7a438a82241b774"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000002000)=""/4096, 0x1000) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) splice(r8, 0x0, r9, 0x0, 0x4, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10011, r6, 0x78e17000) 1.776951588s ago: executing program 3 (id=2829): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) 1.63356624s ago: executing program 3 (id=2830): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcsa(0xffffff9c, &(0x7f0000000280), 0x303002, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="20000000150a0102000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 1.544437649s ago: executing program 0 (id=2831): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (fail_nth: 1) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 1.292520566s ago: executing program 0 (id=2832): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x58, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x3, @local, 0x1ff}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x6}, &(0x7f0000000500)=0x88) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004500)=@newtfilter={0x5e64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5e38, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9b2, 0x9, 0x0, 0x10001, 0x0, 0x4, 0x0, 0xff, 0xfffffff9, 0x5, 0x3, 0x4, 0x0, 0x7ff, 0x6, 0xb1e, 0xc5, 0x4, 0x10000, 0x80a, 0x1, 0x400, 0x0, 0x4, 0x3970, 0x1ff, 0x2, 0xad9, 0x10001, 0xe, 0x4, 0x1000, 0x1ce, 0x8, 0x3, 0x80, 0x4d, 0x800000, 0x80000000, 0x6, 0xffffffff, 0x10001, 0x2, 0x23, 0x1, 0x2, 0x2, 0x6, 0x10000, 0xfffffffb, 0x8b72, 0xfffffff9, 0x5, 0x9390, 0x1, 0xf, 0xffffffff, 0x8, 0x1ff, 0x100, 0x4, 0x2, 0x6, 0x1, 0xffffffc8, 0x5, 0xff, 0x6, 0x8, 0x6, 0x3b14df02, 0x3, 0xfa32, 0x4, 0x1bf9, 0x1, 0x3, 0x4, 0x6, 0x10, 0x30000, 0x1, 0x8, 0x235b, 0x8, 0x1, 0x8, 0x1c, 0x8, 0x2, 0xd, 0x2, 0xf2, 0x81, 0x401, 0x9, 0xdd80, 0xfff, 0x81, 0x80000001, 0xfffffffe, 0xffff, 0x3, 0xfffffffb, 0xbe, 0x9, 0x4, 0x7, 0x6, 0x0, 0x0, 0x4, 0x58d6d090, 0x6, 0x6d7, 0xc, 0x7, 0x4, 0xffff69da, 0x9e, 0x0, 0x8, 0xd5a8, 0x8000, 0x0, 0x5, 0x8, 0x4, 0x7, 0xc, 0x3, 0x65, 0x40, 0x2, 0x3, 0x2480000, 0x7, 0x2, 0xb2, 0x200, 0x7, 0x1, 0x80000, 0x7, 0x7c0, 0x3, 0x5, 0x3, 0x2, 0x2, 0x7, 0x2, 0x7, 0x5, 0x6, 0x7f80, 0x38000, 0x0, 0x6, 0x9, 0x0, 0x4, 0x6, 0x0, 0xd, 0xf, 0x0, 0x2, 0x0, 0x1, 0x8, 0xc2, 0x800, 0x7, 0x9c9, 0xc, 0x7, 0x98, 0x7, 0x80000001, 0xffffff00, 0xa, 0x7f, 0x4, 0x96, 0x3, 0x0, 0x3, 0xfffffbff, 0x6, 0x0, 0x1, 0x222b, 0xc57e, 0x5, 0x9, 0x2, 0x3, 0x8, 0x10, 0x19a000, 0x0, 0x8, 0x7, 0x0, 0xf, 0x1, 0x6, 0xffff, 0x321, 0x1, 0x7, 0x1, 0xe983, 0x7, 0x7, 0x1fe0, 0x8ccd, 0x9, 0x2, 0x100, 0x8, 0x3, 0x3, 0x80000000, 0x4, 0x4, 0xfffffff9, 0x2, 0x4ec775ac, 0x1, 0x4, 0x7, 0xffffffff, 0x800, 0x8, 0x8001, 0x40, 0x7fff, 0x8, 0xff, 0x0, 0x4, 0x4, 0x37a3, 0x5, 0x9, 0x9ad7, 0x3, 0x2, 0x4, 0x40, 0x40000007, 0x7fff, 0x2800, 0x2]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x1ff, 0x2, 0xf8, 0x10000}, {0x1, 0x5, 0x2, 0x3}, {0x3c24, 0xa, 0x3, 0x5}]}}, @TCA_BPF_ACT={0x59ec, 0x1, [@m_ife={0x114, 0x7, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0xc9, 0x6, "4417cfe68ee37974c2d793b9d4a222a49454e011e32baa72209e92ff6c84c40c811a20bccf62ae533a782480a7c44d549f87ade8e8439ee17a9057d4488f630e681fe5c808931527d4bd6fd47f70d9ea5c5003a8ea4d8196235fbeda3d1d98e658b9e58d6d4e9a1b15570577c9b32c4eb04f6d4443f458affb976e2ad5664dc7a767c34a45caf8bbcecd0a3feb9d087c6bec5d838bda7c03a9bb34b4b6e8e485b209c85c9223a69b31da43cc7da253f80b1ad48bdb599be9fcbe9686cca8ec302aec4dca73"}, {0xc, 0x7, {0x91783e899bba50ea}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x174, 0xd, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x91, 0x2, 0xffffffffffffffff, 0x4, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x771e, 0x6, 0x8, 0xc384}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x6, 0x4, 0x4}, 0x8}}]}, {0xef, 0x6, "c78cb67591e4f375835aebf9bc3197161a40a96a6db3c76997490d0a7e4c7aeddec0403fbc3082bc3310c2a1c7b151c514e8595d17c75301d635fe46a9be8afcb5a14cb41f928cf166eefa8fde0681dd6f4116ba7dbf993910ca6a1b5dcdfe38207df11b41ba57c2715cef580766e254a0909211d623c529285aa5c18ff988adc8111b53a7c15484f7b2c0cb82f603083897535433bd5c41c29b520b11b6c7c78b36ed81d551806aac20bdf2fd321b6ec2a6532e2dde4c4700ac2152ce32e9e4149ec8fc6c77202e880a7a724d1e8e4e66c167839a0df30f4bc2685e3ceb3e615077fbe079e8c78a743f79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x278, 0x17, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x99, 0x6, 0x20000000, 0x1, 0x800}, @broadcast, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1, 0x3, 0x7ff, 0x24c18fc5}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x8, 0x0, 0x40}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2e82, 0x9, 0x0, 0xfffffff9, 0x8}, @empty, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6b08b73a, 0x5, 0x4, 0x6, 0x9}, @multicast1, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x8, 0x6, 0xb9, 0x2}, @private=0xa010100, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0xffffffffffffffff, 0x3, 0xffff0001}, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1c, 0xffffffffffffffff, 0x1000, 0x100}, @rand_addr=0x64010102, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x7, 0x20000000, 0x2, 0x2}, @broadcast, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x500, 0x10000000, 0x0, 0x1}, @empty, @remote, 0xffffff00, 0x1}}]}, {0xbd, 0x6, "81d2408258b47ecccc2a96b4ee3939ba91df3df51fe992b7c1ec49ac300cb3bdf8f19c5867292368616c048ed44cd649403a06e09e64d18857f27e50481b7f23148458fdbf934f6fb05f011e52894a536244ce978f58d509a30da229747b271338e997cfa6e0a5e1d9ce3d8a26f33adb357c96e71ac9d40776f7abc3ccdd355fce72e4661bfc5604b59c62898c2278217e826314a6d5b6baaff89812c2e29a5e9405e9a3ef258740a17d1519c28bb30718c249253ac60aa107"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x154, 0x5, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffff240, 0x4, 0x10000000, 0x4, 0x81}, @multicast2, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x3, 0xa6ff, 0x100}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x5, 0x36}, @empty, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x7, 0xff, 0x400}, @rand_addr=0x64010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x8, 0x9, 0x8}, @multicast2, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7fff, 0x4, 0x6, 0x492b}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}]}, {0x3b, 0x6, "554c1ac34c506c888a72605f7bda8b401f1f3bf49ca9dbe3f13ac655e07f5da139c4ea4b97bb5b6c10902d90af3b4bbd83b16967625cd2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x10b4, 0x17, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x10000000, 0xfffff800, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2d6, 0x5, 0x80000000, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x9d7, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1e9e, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x0, 0xdab, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xfffff854, 0xffffffffffffffff, 0x7, 0x7ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1245, 0x7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0xfc, 0x7, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x0, 0x1ff, 0x5}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4f3b, 0xffffffffffffffff, 0x0, 0x6}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x83, 0x6, "e492ccd65a3a8cc69e9baed170cd545afa0736448d4d4ba59ce2f67c693e02106b688b25492e5dea63c3c956a8db8571f96cb99acedc56cb7b6e2e5bdb51ef3361d12edf210a52e581349835f63464f3ae5ba85b4a5c5d55b312b57906099c4cf58224c1e6b42ec4ebaf5d0dfcc8331075b01f25c74324703b81771329f666"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0x198, 0xe, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xd5c, 0x5, 0x7, 0x1000}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x1, 0x5, 0x7, 0x48b8}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffd, 0xffffffff, 0x8, 0x200, 0xc0}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x8, 0x10001, 0xffffffff}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x9, 0xffffffffffffffff, 0x3, 0x2}, 0x2d}}]}, {0xe0, 0x6, "2cf3c0e57978bcdc0997dd93544db1a0c7ad6e91cb28b63e9214c7ecdc042e0e719ce6709812f46e0c7d4835d13a291266f55311b82b3c777e71b18d0813d84c0952c22ac08dc07cadf08f02765ed6081d6a7b2b18f61fb5572a603c5ba27e5a600967a60d4f1eed65701d2b017a5bd0f759eb09d38fea6ff7366d33a57822b07beac8839ffaa89565210c5745853525bb2dc247e07fe74bc342a2e3cd8874a7cb11e17677e0bd5bc0c2a036b6796e76bdbb9972f57c89843ae4440afd0dc2ac2ec3426eafe8847dc389580f283298b2d65417b07bf502846c9135a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x8, 0x7, 0x7ff, 0x40}}]}, {0xf5, 0x6, "a59b96d692b92eaf2bc353994e1857c4189f9ef9a5ab5acb9935d935c18fd4c01b17f97ff877ede717784241f8e00a3776308b87ec7cd23b9c45082a8aea23e6f53c08853e27cb20c047d8854907f915f7e79f9d4c6c2e32d20d969d46ed8f50c76837b755907936bbe0924e3dc71508d733ddd1ae5b12ec26ec4bbb56ae0c88be8ded84e15524211bb9b06bf89a440f4c18f2977d1f7f5aa481734c6c91ea80862ae06309236384f3d0a19ccf3d52537aec2b84366064e0fd3d36395d2293932532c40c0436a6b5f32a51ac3389c6e136e5de1ad7c6317bfd9f1d635a3397d9c2f0ced6806aab8746b5683d0e10c48cd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x3ed4, 0xc, 0x0, 0x0, {{0xa}, {0x3de0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x7, 0x8, 0x3, 0x3ff, 0x4}, 0x3, 0x0, [{0x0, 0x0, 0x9, 0xaa8c, 0x400000, 0x9}, {0x6, 0x7, 0xfffffffa, 0x7, 0x4, 0x3}, {0x70fe, 0x4, 0x6, 0x6, 0x8dc, 0x7}, {0x9, 0xffffffff, 0xf, 0x0, 0x6, 0x19d}, {0x1, 0x2, 0xbc1f27f3, 0xfffffff6, 0xf25, 0xfffff76d}, {0xfff, 0x4, 0x1, 0x7ff, 0xaf79, 0x192}, {0x1, 0xe, 0x30, 0x5, 0x7, 0x6}]}, [{0x3, 0x0, 0x6, 0xe31, 0x6, 0x100}, {0x3, 0x9a20, 0x2, 0x7, 0x0, 0x7ff}, {0x7, 0x10001, 0x1, 0x0, 0xfffeffff, 0xfffffffa}, {0x2e, 0x3, 0x2, 0xffff, 0x5, 0x100}, {0x6, 0x6, 0x28, 0xb9f7, 0x4, 0x57}, {0x61, 0xa, 0x8, 0x10001, 0x0, 0x4}, {0x4, 0x9, 0x3, 0xfffffbff, 0xfff, 0x7}, {0xfe1, 0xdc, 0x6d0, 0x9, 0x7fffffff, 0x4}, {0x3, 0x2, 0x3449, 0x0, 0xffffffff}, {0xc, 0xe04, 0x7, 0x0, 0x5, 0x2}, {0x1, 0x3, 0x1, 0x1, 0x7, 0x4309}, {0xd, 0x5, 0x854e, 0x4, 0x1}, {0x9, 0x0, 0xece5, 0x8, 0x2, 0x8}, {0x50, 0x9, 0x5c, 0x4, 0xc7, 0xfffffffa}, {0xc, 0x3ff, 0x9, 0xc12, 0x66f33261}, {0x5, 0x72d2, 0x7, 0x3ff, 0x4}, {0x1, 0x5, 0xe6, 0x3e, 0x5, 0x8}, {0xfffffffd, 0x9, 0x9, 0x8000, 0x3ff, 0x1}, {0x6, 0x4709f690, 0x8, 0x4, 0x1f6, 0x2}, {0x8, 0x4, 0x1, 0xdb66, 0x4, 0x10}, {0x0, 0x5, 0x1, 0x5, 0xb, 0x7}, {0x3, 0x7, 0x9, 0x5, 0xf, 0x7}, {0x0, 0x4, 0x7, 0x7ff, 0x5, 0x40}, {0x7, 0x7, 0x8, 0x80000001, 0x8, 0x3}, {0x7, 0x2, 0x0, 0x1ff, 0x2, 0xffffb156}, {0xa1e5, 0x2, 0x9, 0xfffffff8, 0x906, 0x7f}, {0xd, 0x9, 0x5, 0x9, 0x7, 0x8ff}, {0x4, 0x37, 0x3934, 0x8, 0x9, 0xfffff800}, {0x4, 0x3, 0x1, 0x10, 0x5, 0xd57}, {0x5, 0x7, 0x6, 0x2, 0x9c, 0xa96}, {0x10001, 0x7, 0x8, 0x1, 0x8, 0x3}, {0xda5, 0xffffff67, 0xc, 0x1, 0x6, 0x7}, {0x8, 0x4, 0x6, 0x4, 0x10001, 0x9}, {0x8001, 0x400, 0x8, 0x100, 0x7, 0xe46}, {0xfffffffc, 0x1, 0x1, 0x4, 0x3, 0x6}, {0x7, 0x6, 0x80, 0xe, 0x2, 0x2}, {0x0, 0x9, 0x23cc, 0xfffffff7, 0x1, 0x10}, {0x0, 0xff, 0xb, 0x4, 0x8, 0x2}, {0x1, 0x3752c, 0x252e, 0x9, 0xfff, 0x9}, {0x28f1, 0x2, 0x1, 0x8, 0x9657, 0x25}, {0x4, 0x9, 0x401, 0x101, 0x8, 0x1}, {0x3, 0x2, 0x7f, 0x9, 0x81, 0x7}, {0xfffffff7, 0x3, 0x7fff, 0xfff, 0xd8b, 0x3}, {0x80000000, 0x7fff, 0x4, 0xb072, 0x4b1, 0x44}, {0x4, 0x2, 0x2, 0x80000000, 0x6, 0x1}, {0x800000, 0x4, 0x5, 0x10001, 0x3, 0xffff0000}, {0x5, 0x10001, 0x10, 0x8, 0x7, 0xfffffe00}, {0x3, 0x8, 0x0, 0x8af, 0x4, 0x4}, {0x1, 0x4, 0x2, 0x2, 0x1000, 0xf9c}, {0x80, 0x100, 0xf, 0x8, 0x5, 0x7}, {0x7, 0x7, 0x200, 0x101, 0x4, 0xfffeffff}, {0xfffff7a7, 0x7, 0x6, 0x4, 0x4, 0xd2}, {0x7, 0x7, 0x1, 0x0, 0x4, 0x1}, {0x7, 0x8, 0x1f2e, 0xba4, 0x6, 0x5}, {0x2, 0xbcb4, 0x7fff, 0x4, 0x15bdc0, 0x2}, {0xe280, 0x80000000, 0xfffffffe, 0x7, 0x1, 0x8}, {0xb27, 0x6, 0x2, 0x8, 0x2, 0x1}, {0x4, 0x8, 0x5, 0xfffffffb, 0x88200, 0xfffffff8}, {0x63c, 0x1, 0x8, 0x7aded779, 0x4, 0x4}, {0x2, 0x3, 0x9, 0xee7, 0x52, 0x3b1}, {0xa0b, 0xa25c, 0x92, 0x1000, 0x5a, 0xe39}, {0x400, 0x7, 0x5, 0x1, 0xd6, 0x9}, {0x3, 0x2, 0x7e0dcbbe, 0x30, 0x8, 0x1}, {0x3b2, 0x80, 0xffffbf09, 0x6, 0xd, 0x90a}, {0x33d2, 0x10000, 0x8, 0xfb23, 0x5, 0x1}, {0x34, 0x5, 0x9, 0x7f, 0x4}, {0x9, 0x4, 0xfffffff9, 0xd, 0x7, 0x4}, {0x700, 0xffff, 0x7, 0x6, 0x7, 0x101}, {0x80, 0xffffff4b, 0xe, 0x6, 0x2f1e, 0x10}, {0x81, 0x8, 0xfff, 0x0, 0xffffffff, 0x9}, {0x1000000, 0x200, 0x21a, 0xded, 0x5, 0x8001}, {0x5, 0x9, 0x3, 0xc, 0x134, 0x6}, {0x9, 0x0, 0x1, 0x4, 0x7ff, 0x9}, {0x1, 0x6de, 0x2, 0x80000000, 0x9, 0x8}, {0x28a, 0xd, 0x1, 0x7fffffff, 0x100, 0x1}, {0x5, 0x0, 0x0, 0x3, 0xfffffffc}, {0x100, 0x2, 0x7, 0x7, 0x0, 0x400}, {0x89f, 0x1, 0x6, 0x1, 0x2, 0x8000}, {0x4, 0x1ff, 0x6, 0x717}, {0x227, 0x1000, 0x3, 0x8, 0x7, 0x8}, {0x6, 0x5, 0x0, 0x1ff, 0x1, 0xc400}, {0x2, 0xffff, 0xe, 0xc0fa, 0x1, 0x7f}, {0x8, 0x5, 0xc, 0x4, 0x1, 0x7ff}, {0x3b, 0x2, 0x3, 0x9, 0x5, 0x3}, {0x8, 0x4, 0x0, 0xfffffff9, 0xfffffff9, 0x101}, {0x4, 0x7, 0x3, 0x2, 0x7, 0x8}, {0x800, 0x20, 0x2e8, 0x1, 0x4, 0x10000}, {0x7, 0x9, 0x6, 0x1, 0x7, 0x1}, {0x5ee538f2, 0x4, 0x93, 0x0, 0x7f, 0x749}, {0x159, 0x4, 0x1, 0x6, 0x7, 0x7}, {0x0, 0x5, 0x7f, 0x2, 0xc04b, 0x100}, {0x6, 0x7, 0x400000, 0x20000000, 0x8, 0x101}, {0xd, 0x6, 0x104, 0x10, 0x7fff, 0x5}, {0xdaf, 0x401, 0x5, 0x43f, 0x1, 0x8}, {0xffff7fff, 0xb7, 0x401, 0x9, 0x66798035, 0x4}, {0x5, 0x7, 0x4b, 0x2, 0x3, 0x8}, {0x8522, 0x2, 0x8001, 0x400, 0x4, 0x8}, {0xb22c, 0x400, 0xf, 0xe, 0x6000000, 0x8f7}, {0x8, 0x3ff, 0x9, 0x100, 0x9, 0x3}, {0xee, 0x9, 0x17b, 0x9, 0x200}, {0x3, 0x1, 0x4, 0xf, 0x3, 0x1}, {0x0, 0x5, 0x401b, 0x7ef, 0x4, 0x1}, {0xee, 0x8000, 0x0, 0x1, 0x6}, {0x739, 0xffffff58, 0x9, 0xb, 0x7, 0xf}, {0x7, 0x6, 0xa, 0xb, 0x3, 0x3}, {0x5, 0x5, 0x200, 0x1, 0x9da}, {0xaab, 0x5, 0x3, 0x9, 0x8, 0x8}, {0x9, 0x3, 0x1, 0x7, 0x61, 0x1000}, {0x7ff, 0xfff, 0x8, 0xe0, 0x1, 0x2481998}, {0xfb, 0x10, 0x0, 0x3, 0xffff, 0x2}, {0x4d8751da, 0x400, 0x8, 0x5, 0x6, 0x48}, {0x5, 0xfffffff9, 0x4f, 0x1, 0x8, 0xa}, {0x5, 0x0, 0x1, 0x4, 0x80000000, 0x56}, {0x40, 0x4f, 0x5, 0x9, 0xd, 0x8}, {0x200, 0xee1, 0x4, 0x28, 0xd, 0x81}, {0x1, 0x2, 0x7f, 0x92, 0x6, 0x5}, {0x5, 0xee7, 0x8001, 0x4, 0x9113, 0xffff}, {0x51d9, 0x2, 0x35, 0x3, 0x401, 0x6}, {0x7, 0x2, 0x7ff, 0x5, 0x3531, 0x401}, {0x6, 0x0, 0x2f80000, 0x9, 0x8, 0x9}, {0x9, 0x49, 0xffffffff, 0x8e, 0x800, 0x9}, {0xfff, 0xe, 0xffffffff, 0x0, 0x6, 0x7}, {0x1, 0x0, 0x8, 0x8, 0x4867, 0x4}, {0x2, 0x8, 0xff, 0x6, 0x3}, {0x4, 0x10000, 0xad4, 0x9, 0x7, 0xfffffffb}, {0x1, 0x8000, 0x300, 0x1ea0000, 0x2, 0x9}, {0x0, 0x6, 0xfffff283, 0x3, 0x8, 0x7f}, {0x3, 0x7, 0x0, 0x7f50, 0x67a8, 0x7}], [{0x0, 0x1}, {0x7, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x5}, {0x2, 0x12972ce55337d7a5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4}, {0x5, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x4}, {}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x2}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x5}, {}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x134, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xd}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x3, 0x4, 0x5, 0x7}, 0x4, 0x5, [{0xfb9, 0x9c81, 0x1, 0x3, 0x1, 0x4}, {0x6, 0x3, 0x1000, 0x7, 0x3, 0x1}, {0x2, 0x3, 0x4, 0x4, 0x6, 0x5}, {0x1, 0x81, 0xfffffff9, 0xc2f, 0x5, 0x62}, {0x8001, 0x8ec, 0x946, 0x3, 0xfffff829, 0x4}, {0x7ff, 0x635c, 0x9, 0x6, 0x1508}, {0x5, 0xfff, 0x1, 0x8, 0x865, 0x6}, {0x7ff, 0x6a, 0x5, 0x4, 0x81, 0x2}, {0x163d, 0x6, 0x8, 0x4, 0x14ac24d2, 0x4}]}, [{0x2c2, 0x9, 0x6, 0x0, 0xffffff8b, 0xe}, {0x199, 0x7, 0x7fffffff, 0x0, 0x2, 0x9}, {0x1, 0x1, 0x6, 0x401, 0x100, 0x10000}, {0x0, 0x8, 0x1, 0xaea1, 0x7, 0x5}, {0x7f, 0x1, 0x7, 0x2, 0x8, 0x1}, {0x0, 0xfffffffe, 0x8, 0x9, 0x1000, 0x4}, {0x2, 0x60, 0x3, 0x401, 0x80000001, 0x5}, {0x7aba, 0x10, 0x2, 0x1ff, 0x0, 0x8}, {0x8, 0x7, 0xb, 0xffffff06, 0x399, 0x40}, {0x8, 0x9, 0x4, 0x62b6, 0x0, 0x6}, {0x3, 0x8, 0x1, 0x3, 0x7, 0x6}, {0x80000000, 0xe, 0x8, 0xd, 0x2db, 0xfffffffc}, {0x4, 0xfffffffc, 0x1, 0x0, 0x10001, 0x3}, {0x2, 0x3ff, 0x4, 0x0, 0x9, 0x2}, {0x1, 0x3, 0x3, 0x2, 0x1}, {0x0, 0x6b, 0x2, 0x5, 0x8001, 0x2}, {0x7, 0xc, 0x7f, 0x4, 0xfff, 0x9da}, {0x100, 0xffffffff, 0x4, 0x1ff, 0x80, 0x3957}, {0x6, 0xdec6, 0x3a, 0x300, 0x1, 0xdec}, {0x0, 0xe2, 0xf9b8, 0x7, 0x35, 0x2}, {0xa, 0x9, 0xd01, 0x1, 0x0, 0x43}, {0x1, 0xe, 0x200, 0x1, 0x2, 0x81}, {0x2, 0x7, 0x0, 0xdc, 0x5, 0x9}, {0x10, 0x875, 0x9, 0x9, 0xfffffff7, 0xb3ae}, {0x80000001, 0x8, 0x13ec, 0xb, 0xca, 0xffff}, {0x5, 0x3bda89a7, 0x2, 0xfff, 0x386b, 0x40}, {0x5, 0x7, 0x0, 0x40, 0x8, 0xfff}, {0x7fff, 0x1, 0x0, 0x2, 0xffffffff, 0x8}, {0x6, 0xc, 0x2, 0x0, 0x4, 0x4}, {0x2, 0x40, 0x200, 0x6c, 0x7, 0x2}, {0x3c, 0x9, 0x7a61, 0x800, 0x754, 0x6}, {0x1000, 0xfffffc2b, 0x3a55, 0xffffffff, 0xf, 0x1}, {0x10001, 0x3, 0x80000000, 0x6, 0x80000001, 0x2}, {0x7, 0x8, 0xed46, 0xfffffffa, 0xe8, 0x800}, {0x5, 0xb, 0x0, 0x80, 0x1, 0x5}, {0xc997, 0xc19c, 0x1ff, 0x0, 0xffff, 0xd1a}, {0x8, 0x1, 0x0, 0x5, 0x4, 0x8}, {0x6cdb, 0x1, 0x4, 0x8, 0x9, 0xf7b}, {0xfffffffc, 0x3, 0x8000, 0xb1, 0xa1e, 0x6}, {0xf, 0x3, 0x7, 0x1, 0x4, 0x46}, {0x9, 0x401, 0x7, 0xff, 0x8, 0x5}, {0x8, 0x4, 0xa7, 0x7, 0x5, 0x3}, {0x3, 0x10, 0x0, 0x200, 0x735, 0x6}, {0x8438, 0xc0ca, 0x909, 0x1, 0x800000, 0x5}, {0x3, 0x20, 0xf810d3b, 0x9, 0x9, 0xf}, {0x77, 0x0, 0x6, 0x1, 0x6, 0xeb}, {0x0, 0x8, 0xa, 0x80000001, 0x0, 0x5}, {0x8c1d, 0x2, 0xd, 0xf74c000, 0xfffff5b6, 0x4}, {0x9, 0xc000000, 0x44, 0x2, 0x8000, 0x80000001}, {0x10, 0x8, 0x5, 0x7fff, 0xa6b, 0x8001}, {0x2, 0xe9, 0xe, 0x7, 0x0, 0xdc}, {0xed3, 0x5, 0x0, 0xfffffff8, 0x1, 0x4}, {0x1, 0x4, 0x2, 0x6, 0x82, 0x8}, {0x8, 0x3, 0x0, 0x6, 0x4, 0x7}, {0x2, 0x10001, 0x8, 0x8, 0xd, 0xf}, {0x0, 0x1, 0x54a5, 0x171, 0x7a8, 0x180000}, {0x0, 0x2, 0x6, 0xff, 0x6b1, 0xff}, {0x930, 0x2, 0x100, 0x1571, 0xe30, 0x46}, {0x2, 0x8, 0x8, 0x35, 0x9, 0xcba}, {0xffffb140, 0x9, 0xaba, 0x844, 0x7, 0xc}, {0x9, 0x0, 0xffffffff, 0xfffff161, 0x0, 0x1000}, {0x401, 0x400, 0x78a, 0xff, 0x3, 0x2}, {0x800, 0x80000001, 0x9, 0x9, 0x9, 0xb}, {0x5, 0xa76, 0x8, 0x5, 0x9, 0x5}, {0x4d, 0x8, 0x2, 0x6, 0xfffff68e, 0x7f9}, {0x5, 0x79b, 0x1ff, 0x0, 0x800, 0xfea8}, {0x9, 0x10001, 0xcb7, 0x4, 0x7fff, 0xe}, {0x7, 0x1, 0x0, 0x0, 0x4f, 0xfffffffc}, {0x8, 0x3, 0x3ff, 0x89, 0x5, 0xfffffff9}, {0x8, 0x5, 0x3, 0xffff, 0x75d, 0xbbbc40b}, {0x3, 0x8, 0x80, 0x200, 0x8, 0xffffffff}, {0x8, 0xffffffff, 0x9, 0x8, 0xc194, 0x2}, {0x80000001, 0x4, 0xfffffe01, 0xa, 0x2, 0x2}, {0x900000, 0x3, 0x10001, 0x0, 0x8, 0x5}, {0x3, 0x4, 0x9, 0xd, 0x6d, 0x4}, {0x4, 0x2, 0xe, 0x400, 0x4f5f, 0x400}, {0x74b, 0x2, 0x4, 0x0, 0x6, 0x1}, {0x3, 0x43c149d8, 0x9, 0x50, 0x61, 0x7}, {0x4, 0x6, 0x1, 0xb29, 0x9, 0x5}, {0x2, 0x30b, 0x40000000, 0xa5f3, 0x4, 0x7e}, {0x2e4e0f5c, 0x8, 0xbf4, 0x9b2, 0x4, 0x5}, {0x96e, 0x10000, 0x7, 0x100, 0xfffffff5, 0x6}, {0x3, 0x1ff, 0x6, 0xd, 0x5, 0x1}, {0x5, 0xfffffffb, 0x8, 0x4, 0x3, 0x5}, {0x0, 0x9, 0x9, 0x0, 0xfffffff7, 0xed}, {0x3, 0x1, 0x8, 0x9, 0x100, 0x4}, {0x6, 0x0, 0x1, 0x7, 0x0, 0x5f9}, {0xffffffff, 0x1, 0x8, 0x1, 0x5, 0x1}, {0x7, 0xfff, 0x6, 0x871, 0x1, 0xd64}, {0x800, 0x5, 0x0, 0x5, 0x5, 0x2}, {0x4193, 0x5, 0xff, 0x0, 0x101, 0x8}, {0x4, 0x800000, 0x3ab9, 0x7fffffff, 0x9, 0x7}, {0x1, 0x9, 0xa, 0x1, 0xf, 0x6}, {0x3, 0x9, 0x5, 0x2, 0x1, 0xd0}, {0x1, 0x3, 0x2, 0xbbe2, 0xd33e, 0x4}, {0x7fff, 0x9, 0x80000000, 0xff, 0x6, 0x2}, {0x3, 0x8, 0xfffffff7, 0xcca, 0x8, 0xec}, {0x401, 0xfffffbff, 0xb, 0xfffffffa, 0xfffffffe, 0x4}, {0x80000000, 0x3, 0x0, 0xccdb, 0x2, 0x5}, {0x194, 0x9, 0x8, 0xff, 0x70, 0x5}, {0x3, 0x2, 0x5, 0xffffffff, 0x3}, {0xfffffffc, 0x80, 0xfffffffa, 0x2, 0xa5e, 0x1000}, {0x6, 0x2, 0x0, 0x8000, 0x2, 0xffffffff}, {0x9, 0x3, 0x3, 0x8, 0x525}, {0x1, 0x7b94, 0x4, 0x7fffffff, 0x8, 0x5d6}, {0x80, 0x7fff, 0x9, 0x9, 0x9, 0x80}, {0x4, 0x6, 0x6, 0x3, 0x7f}, {0x1, 0x4, 0xba7, 0xffff, 0x2, 0x1}, {0xffffffff, 0x8, 0x7, 0x7ff, 0x10, 0x4}, {0x9, 0x8, 0x195, 0x515, 0x8, 0xcf3}, {0xffffffff, 0x41, 0x6, 0x1, 0x2f0f, 0x799}, {0x3, 0x200, 0x9, 0x4, 0x1, 0x9}, {0x81, 0x163d59f, 0x7, 0xfffffff8, 0x8, 0x50000}, {0x8, 0x4, 0x5, 0x8, 0x9, 0x4}, {0x7fff, 0x7f, 0x0, 0x7a88, 0x6, 0xcf}, {0x0, 0x80000000, 0x8, 0x3, 0x5, 0x84}, {0x0, 0x6, 0x9, 0x5, 0x9, 0x6}, {0x4, 0xb, 0xc78e, 0x9, 0x1, 0xffffffff}, {0x1, 0x6, 0xf9, 0x107, 0xc}, {0x800, 0x1, 0xb, 0x59b, 0x3, 0x2}, {0x5, 0x0, 0x2, 0x4, 0x1, 0x4}, {0x6, 0x4, 0x9, 0x6, 0x10, 0x7}, {0x9, 0x1, 0x7fffffff, 0x8, 0xfe, 0x3}, {0x4, 0x0, 0x4, 0x30, 0x7, 0x3}, {0x9, 0x8, 0xfffffffb, 0x5, 0x1, 0x3}, {0x3, 0x94000000, 0x7, 0x5, 0x7}, {0x101, 0x10, 0x3, 0x2, 0xb9, 0x4}, {0x1, 0x0, 0x3, 0x9000000, 0x10000, 0x4}], [{0x1, 0x1}, {0x5ff082693cf3964c, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x1}, {0x1, 0x222b30c0b2449cf4}, {0x4, 0x1}, {0x7}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0xa, 0x1}, {0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2ffb186ee5e46ad5}, {0x3}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x2, 0xffff, 0x7, 0x7fff}, 0x1, 0xf9, [{0x4, 0x0, 0x80c2, 0x2919, 0x76dcd6de, 0x7}, {0x8, 0x3, 0x8, 0xf, 0x4a, 0x5}, {0xfffffffd, 0x9, 0x0, 0x0, 0x7ff, 0x800}, {0x9, 0x720, 0x9, 0x4, 0x0, 0x8001}, {0x7b, 0xe12, 0x7fffffff, 0x200, 0xb, 0x8}, {0xff, 0x5, 0x17, 0x140, 0x8000}, {0xc1f, 0x4, 0x9, 0xffffffff, 0xfffffff9, 0x10001}]}, [{0xcd30e6b, 0xe67, 0x7, 0x7f, 0x2, 0xffff}, {0x8, 0x1, 0xfffffff8, 0x2, 0xa, 0x1}, {0x22, 0x7, 0x5a, 0x800, 0x9, 0x1e}, {0x200, 0xaa, 0x70000, 0x9, 0x6, 0xff4b}, {0xa9, 0x1ff, 0x9, 0x8, 0x0, 0x8}, {0x1, 0x401, 0x3c, 0x0, 0xf, 0xcef4}, {0xfffffffa, 0x401, 0x64d3, 0x1, 0x633, 0x5}, {0x59, 0x40, 0x8, 0x731, 0x8, 0xd}, {0x80, 0x400, 0xa9d, 0x9, 0x1, 0xb81}, {0x9, 0x2, 0x5, 0xffffffff, 0x6}, {0x4, 0x3, 0x9, 0x6, 0x315a, 0xd}, {0x400, 0xffffa229, 0x1, 0x3, 0x4, 0x101}, {0x4, 0x4, 0x3, 0x4, 0x4, 0x2}, {0x4, 0x3, 0x3d4b, 0x7, 0x7, 0x8}, {0x6, 0x6, 0x0, 0x3, 0x2, 0x85}, {0x0, 0x10001, 0xffffffff, 0x76, 0x2, 0x3}, {0xe67c, 0x8001, 0x53, 0x3, 0x4, 0x4}, {0xc1, 0x7, 0x80000001, 0x8, 0xfffffff8}, {0x6, 0x7, 0x9d, 0xa, 0x9, 0xb}, {0x7fffffff, 0x88, 0x8, 0x6, 0xfffffc69, 0x4}, {0x4, 0x3, 0x1, 0xa98, 0x8001, 0x9f2}, {0x0, 0xc, 0x7, 0x2, 0x5, 0x6}, {0xfff, 0x3, 0xfffffffa, 0x80000000, 0x8, 0x553}, {0x2, 0x7, 0x8, 0x1, 0x1, 0x9}, {0x5, 0x0, 0xe9fc, 0x3, 0x2, 0x5}, {0x0, 0x2, 0xfffffc01, 0x65c, 0x2, 0x2}, {0x7, 0x6, 0x5fe6, 0x6, 0x0, 0xb4b}, {0x266, 0x7, 0x1, 0x0, 0x8, 0x5a}, {0x6, 0x401, 0xa89, 0x1, 0x0, 0x1}, {0xffffffff, 0x7, 0xfffffffa, 0x5a55, 0x200, 0x8}, {0x0, 0x10, 0xd, 0x10, 0xec, 0x80000000}, {0x7, 0x8, 0x5, 0x3, 0x8, 0xb}, {0x7, 0x9, 0xe5b, 0x2, 0xbc, 0x100}, {0x49b, 0x0, 0x3, 0x10000, 0x400, 0x8}, {0x0, 0xd7f9, 0x2, 0x2, 0x5, 0x5}, {0x253a, 0x9, 0x3ff, 0xffffffff, 0x5, 0x2}, {0x5, 0x4, 0xffff, 0x1, 0x12f55b35, 0x7}, {0x80, 0x0, 0xd52, 0xfffff000, 0x8}, {0x7, 0x80000000, 0x1, 0x15, 0x1, 0xb}, {0x1, 0x2, 0x6, 0xfffffffc, 0x2, 0x8000}, {0x4, 0x6, 0xa9b, 0x6, 0x101}, {0x8, 0x0, 0x2, 0x1, 0x7, 0xffffffff}, {0xa, 0xfffffaef, 0x3, 0x7fff, 0x5}, {0x10000, 0x7, 0x1, 0x3, 0x8, 0x3}, {0x3, 0x7, 0x3, 0x2, 0x247, 0xffff}, {0x0, 0xd6, 0x40, 0x1, 0x35}, {0x81, 0x0, 0x2, 0x95cf, 0x7, 0x2}, {0x8, 0x5, 0x6, 0xa, 0x5, 0x7}, {0x5, 0x1, 0xffff, 0x5, 0x10000, 0xbe4}, {0x9, 0xffffffff, 0x0, 0x4, 0x7, 0x2}, {0x3, 0x0, 0x4, 0x9, 0xfae, 0xffffffff}, {0x6, 0x5, 0x5, 0x7, 0x100, 0x7}, {0x2, 0xf3a600, 0x52d8b250, 0x0, 0x6, 0x4}, {0x3, 0xffffffff, 0xf, 0x7, 0x5, 0x8}, {0xade, 0xe705, 0x3, 0x4, 0x7685f037, 0x5}, {0x5, 0xffffffff, 0xfffffffb, 0x6, 0x3, 0x9}, {0x3, 0x2, 0x7fffffff, 0xffffffff, 0x9}, {0x4, 0xffff, 0x0, 0x8, 0x1000, 0x10001}, {0x0, 0x0, 0xe8, 0x6, 0x1, 0x81}, {0x5, 0x9, 0x5, 0x1, 0x7, 0x6}, {0x6, 0x7, 0x4, 0x6, 0x3, 0x2}, {0x3, 0x8000, 0xfffffffc, 0x10000, 0xd, 0x101}, {0x2, 0x8, 0x8, 0x1ad6, 0x9, 0x7c}, {0xff, 0x5, 0x78000, 0x3, 0x82e, 0x5}, {0x6, 0x101, 0x8, 0x9, 0x4, 0x8}, {0xd067, 0x5, 0xfffffffb, 0x5, 0x3, 0x40}, {0x0, 0x8, 0xfffffffa, 0x4, 0x4, 0x6}, {0x4, 0x1, 0x5, 0x8, 0x2, 0xff}, {0xacc, 0x200, 0x8, 0x4, 0xfffffffe, 0x800}, {0x7, 0x8, 0x2a, 0x1, 0x6, 0xa7b7}, {0x1, 0x80000000, 0x200, 0xc5ec, 0x9, 0xa}, {0x8000, 0x101, 0x6, 0x8, 0xfffffffa, 0x4}, {0x40, 0x2, 0xfb4b, 0xc, 0x9, 0x66}, {0x3, 0x91e, 0xfffffffc, 0x67, 0x7, 0x7}, {0xdf7, 0x80, 0x6026, 0xfea, 0x2, 0x1}, {0x6b94, 0x1, 0x1ff, 0x3, 0x6, 0x9}, {0x4, 0x7ff, 0x5, 0x6, 0x1dd, 0xfffffffe}, {0x5, 0x7, 0x1, 0x7, 0x8, 0x286b82cc}, {0x1, 0x1, 0x6, 0x9, 0x0, 0x2}, {0x10, 0x0, 0x6, 0xfffffff1, 0x78, 0x9}, {0x1, 0x4, 0x5, 0x3, 0x4, 0x7}, {0x4, 0x2, 0x80, 0x8, 0x1000, 0x7f}, {0xe25, 0xfff, 0x9, 0x9, 0x9, 0x1}, {0x7ff, 0x2b9, 0x9, 0x3, 0xfffffff7}, {0x800, 0x4, 0x6, 0x9, 0x0, 0x8}, {0x3, 0x8, 0xfffffff7, 0x0, 0x1a8, 0x9}, {0x8, 0x9, 0xf65, 0x2, 0x5, 0x4}, {0x4518, 0x2, 0x0, 0x63, 0x9, 0x1}, {0x8, 0x5, 0x40, 0x2, 0xe0d8, 0x1}, {0x400, 0x4, 0x1, 0x1, 0x1, 0x80000001}, {0x0, 0x2, 0x401, 0x4, 0x3, 0x81}, {0x4, 0x8, 0x7, 0x6d, 0xfa87, 0x8001}, {0x3ff, 0x7, 0x3, 0x8000, 0xffff7fff, 0x6}, {0x6, 0x93, 0x5, 0x9, 0x80000001}, {0x8, 0x704, 0x1, 0x6, 0x5, 0xea8b}, {0x1000, 0x5, 0xd, 0x4, 0x2, 0x8}, {0xa, 0xffff8000, 0x4, 0x3, 0x6, 0x7}, {0x7, 0x6c98ea07, 0x8000, 0x93f, 0x8, 0x6}, {0x81, 0x2, 0xcd, 0x31, 0x5a1c, 0x6}, {0x40, 0x1, 0x8, 0x2, 0x7d, 0xc9}, {0x7, 0x9, 0x8, 0x1, 0x7, 0x80}, {0xc45, 0x0, 0x578989c1, 0x3, 0x1, 0x1ff}, {0x7ff, 0xd4cd, 0x3ff, 0x6, 0x3, 0x1}, {0x6, 0xbad5, 0x3, 0xffffffff, 0x7, 0x10001}, {0x5, 0x0, 0xffff, 0x4, 0xfff, 0x3}, {0xe, 0xa7, 0x14c, 0x8, 0x5, 0x7fff}, {0xffff8b65, 0x1, 0x7ff, 0xf20, 0x9, 0x7fffffff}, {0x10000, 0x9, 0x4, 0x7, 0x2, 0x9}, {0x5, 0x1, 0x1, 0x0, 0x8, 0x97}, {0x7ff, 0x9b9, 0xfffff304, 0x3, 0x2571, 0x6}, {0x6, 0x0, 0x3, 0x9, 0x10001}, {0x6, 0x5, 0x6, 0xfff, 0x0, 0x1000}, {0x6, 0x8000, 0x1, 0x5, 0x4, 0x28b1d7ef}, {0x6, 0x48a, 0xe83, 0xffffffff, 0x4, 0x7}, {0x0, 0x7, 0xa7f2, 0x8, 0xbe5, 0x8}, {0x800, 0x8, 0x2, 0x54, 0x15, 0x12}, {0x1d50a5f9, 0x1, 0x343820f3, 0x81, 0x9, 0x6}, {0x9, 0x6, 0xa4, 0x1, 0x454, 0x63fc}, {0x80000000, 0x10, 0x6, 0xa719, 0x2, 0x9}, {0x1000, 0x9, 0x1000, 0xfff, 0x10, 0x48c0}, {0x9, 0x6, 0x643, 0x7, 0x7, 0xffff}, {0x1, 0x10001, 0x8, 0x2, 0x3, 0x1}, {0x73, 0x3, 0x0, 0x4, 0xfffffccd, 0x5}, {0xff4, 0x1, 0x80000001, 0x8, 0x0, 0xb}, {0x2, 0x1ca, 0x2, 0x3, 0x5, 0x200}, {0xa, 0x7e, 0x2, 0x9b4b, 0x26919fd0}, {0x6, 0x7, 0x0, 0x4, 0xb, 0x6}, {0x0, 0xfffffffd, 0x9, 0x7, 0x1, 0x7}], [{0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xd1bdad50d15e36aa, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {}, {0x1}, {}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x4}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0xb67170539d6336a5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x9999bc6cc24d149}, {0x7, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0xbd6d71b0131db9f5}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x2}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x96f64c6fb274ba17}, {0x5}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x188, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x7, 0x8000, 0x2, 0xd, 0xffffffff}, 0x20, 0x88, [{0x800, 0x10001, 0xffffff01, 0x98e0, 0x1, 0x3}, {0x0, 0xfffffffc, 0xf, 0xd65f, 0x9, 0xfffffffc}, {0x800, 0x0, 0x6, 0x7, 0x40, 0x3}, {0x3, 0x5, 0x2, 0xd, 0x5, 0x401}, {0x0, 0x8, 0x9, 0xa95, 0x4, 0xfff}]}, [{0x9, 0x4, 0x7fffffff, 0x9, 0xe, 0x6}, {0x0, 0xfb11, 0xc, 0x8, 0x3, 0x8}, {0x200, 0x5, 0x7086, 0xcbb5, 0xf, 0x541b}, {0x44, 0x200, 0x2, 0x3, 0xb489}, {0x57, 0x0, 0x2, 0x40, 0x401, 0x4}, {0x5959, 0x2, 0x2, 0x0, 0x4, 0x7}, {0x422, 0xd37, 0x0, 0x7, 0x5}, {0x6, 0xffffff81, 0x5, 0x7fff, 0x6, 0x524}, {0x3e, 0x7, 0x200, 0x1eb, 0x9, 0x7}, {0x1, 0x4, 0x4, 0x4, 0x10000, 0x3}, {0xfffffff4, 0x309, 0x7, 0x0, 0xfffffff7, 0x7}, {0xfffffff7, 0x9, 0x5, 0x4, 0x100400, 0x7}, {0x1000, 0x3, 0x1, 0x7ff, 0x81, 0xfafe}, {0x10000, 0x5, 0x3, 0x5, 0x0, 0x1}, {0x6, 0x3, 0x4, 0x68fbd7d7, 0x100, 0x6}, {0x6, 0x9, 0x4, 0x7fff, 0x0, 0x7}, {0xb6, 0x7a15, 0x3, 0x7, 0x0, 0x1}, {0x4, 0x8, 0x9, 0x7f, 0x5, 0x400}, {0x5, 0x16, 0x80000001, 0x80, 0x100, 0x2}, {0x0, 0x5, 0x8000, 0x21a, 0x9, 0x2}, {0x10001, 0x1, 0x9, 0x2, 0x5, 0x1000}, {0xffff5a31, 0x8, 0x101, 0x9c2, 0x4c9e980f, 0x1000}, {0xe, 0x10001, 0xde676af, 0x3, 0x1}, {0x6, 0x200000, 0x7, 0x7fff, 0x9}, {0x3a, 0x4, 0x5, 0x0, 0x100, 0x9}, {0x4, 0x1000, 0x5, 0xcff7, 0x8, 0x5}, {0x941f, 0x3607184, 0xe32, 0x8, 0x3, 0x1}, {0xdb0, 0x1000, 0x730, 0x8, 0x5}, {0x5, 0x2, 0x1, 0x4, 0x4, 0xa7}, {0xfffffeff, 0x2, 0xee22, 0x7, 0x6, 0x8}, {0x7, 0xe, 0x7, 0x7, 0x5, 0x75}, {0x7, 0x0, 0x6, 0x9, 0x4, 0x3}, {0x6f47, 0x401, 0x3, 0xf23, 0x7, 0x1}, {0x8, 0xb, 0x4, 0x9fbf, 0xaf, 0x172}, {0x2, 0xf83, 0x1000, 0xb, 0x6, 0x7}, {0x6c1e, 0x4, 0x4, 0x4, 0x9, 0xfffffff7}, {0xa3d6, 0xf4a0, 0x5, 0x8, 0xfffffffc}, {0xaff9, 0x4, 0x100, 0x4, 0x1, 0x8}, {0xf35, 0x3, 0x6, 0x3ff, 0x1e35, 0xa}, {0x8, 0x4ee5702e, 0xfff, 0x2, 0x0, 0x10000}, {0x1, 0xeb91d3aa, 0x101, 0x7, 0xfffffff8}, {0x1e, 0x9, 0x3, 0x2, 0xffffffff, 0x2}, {0x3, 0xd16, 0xdaf9, 0x8, 0x6, 0xb6c8}, {0x7, 0x3ff, 0x8, 0x800, 0xbc, 0xffffef84}, {0x9, 0x3, 0xe, 0x5, 0x1, 0x3}, {0x6, 0x7, 0x0, 0x5, 0xa, 0x95de}, {0x7f, 0x7, 0x3, 0x8, 0x4, 0x1}, {0x5, 0x602391ee, 0x1, 0x7f, 0x101, 0x3}, {0xffff, 0xd8, 0x1f, 0x9, 0x2, 0x7}, {0x1, 0x9, 0x2, 0x4, 0x3}, {0x7219, 0x5, 0x10000, 0x10000, 0x0, 0x71dc}, {0x180, 0x6, 0x4, 0x5, 0x3}, {0x2, 0x94, 0x5, 0x3, 0x16, 0x2}, {0x9, 0x80000001, 0x3, 0x1, 0x80000001, 0x8}, {0xfffffffb, 0x80, 0x0, 0xbef, 0x2, 0x100}, {0xfffffff0, 0x6, 0x6d9, 0xa2, 0x3, 0x101}, {0x8, 0xffff, 0xfffffff8, 0x10001, 0x0, 0x80}, {0x7, 0x24, 0xffffff01, 0x7, 0x4, 0x2}, {0x1ff, 0x8001, 0x7f, 0xe5ca, 0x81, 0x7fff}, {0x1, 0x7, 0x9, 0x3, 0x1, 0x56}, {0xfffff886, 0xe03, 0x7, 0x7ff, 0x7fff, 0xc7b}, {0xfff, 0xe9, 0x2, 0x5, 0xe, 0x4}, {0x280, 0xfffffffd, 0x5b4, 0xe1, 0xa, 0x2}, {0x4, 0x2, 0x3e200000, 0xfff, 0x5, 0x7fff}, {0x3, 0x8, 0x5, 0x2, 0xed3, 0x1}, {0x2, 0x9c74, 0x0, 0x5, 0x1, 0x4}, {0x8, 0xe9, 0x5, 0x0, 0x4, 0x6}, {0x0, 0xf5, 0x9, 0x101, 0xa, 0x3}, {0x8001, 0x7, 0x3, 0x1000, 0x0, 0x87c}, {0xffffffff, 0x0, 0xe951, 0x0, 0x0, 0x3}, {0x5, 0x1, 0x81, 0xffffffff, 0x401, 0x2689}, {0x1ff, 0x7fff, 0x0, 0x7, 0xa, 0x7}, {0x6, 0x8, 0x101, 0x1, 0x4, 0x6}, {0x4, 0x8001, 0xe2aa, 0xc, 0x2, 0x5}, {0x1, 0x3, 0x1, 0xe, 0x1, 0x6}, {0x2, 0x6, 0x3, 0x10, 0x2, 0xfffffffd}, {0x3ea1, 0xc034, 0x8, 0xb, 0x2, 0x9}, {0x80, 0x1, 0x9d79, 0xd5d7, 0x9, 0x7a1}, {0x8, 0x0, 0xa, 0x10, 0x6}, {0x100, 0x26, 0x3ae7, 0x80, 0x70b, 0xd142}, {0x8, 0x8001, 0x3, 0x1, 0xf6fd}, {0x1, 0x6, 0x5, 0x1, 0x8, 0xe}, {0xfffffff8, 0x0, 0x0, 0xfff, 0x7fff, 0x4}, {0x1, 0x2, 0x2e, 0x6, 0x614, 0x80}, {0x7, 0x1, 0xe7b3, 0x9, 0x80000000, 0x8000}, {0x6, 0x7, 0xffff, 0x6, 0x3, 0x29282340}, {0xfffffffe, 0x2, 0x7a, 0x7ff, 0xb6, 0x82}, {0x10, 0x7, 0x6, 0x1, 0x80000000, 0x5}, {0x40000000, 0x5, 0x2, 0x5, 0x2, 0x7}, {0x4, 0x7, 0xa, 0x7, 0x60, 0x10000}, {0x7, 0x0, 0x1, 0x5455, 0x3, 0x4}, {0x0, 0xff, 0x6, 0x59805b4, 0x2e36, 0x93be}, {0x2, 0x1, 0xf, 0x7f, 0x1, 0x8}, {0x2, 0x1000, 0x7, 0x5, 0x8, 0x9}, {0x6, 0x52, 0x10001, 0x6, 0x3ff, 0x7}, {0x2, 0x5, 0x2, 0x10001, 0xc, 0x4}, {0xffffffff, 0x700000, 0xffff, 0xfffffffd, 0x3e, 0x9}, {0x4, 0x4, 0x6, 0x2, 0x3, 0x9cc3}, {0x4, 0x1, 0x7, 0xffff, 0xc9, 0xb22b}, {0xb5, 0x3, 0xd896, 0x5, 0x2}, {0x7, 0x3fff800, 0x80, 0xfff, 0xe5f, 0x7}, {0x4, 0x493a, 0x1, 0x9, 0x9, 0xffffffaf}, {0xcc, 0x7ff, 0xfffffff9, 0x3d6e, 0x0, 0x543}, {0xa, 0x8001, 0x1800000, 0x5, 0xfffffff8, 0x7fff}, {0xffffff01, 0x571, 0x10001, 0x63, 0x3, 0x5}, {0x9, 0x9, 0x7, 0x435b, 0x0, 0x1}, {0x6, 0x68bd, 0x8, 0x2, 0x7d20, 0x2}, {0xd, 0xffffffff, 0x1, 0x80, 0x0, 0x2}, {0x0, 0xfffffffd, 0x6, 0x1, 0x1, 0xffff}, {0x8, 0x10000, 0x5, 0xf0, 0xffffffff, 0x2}, {0x1, 0x6, 0x4, 0x8, 0x0, 0x5}, {0x9, 0x2, 0xa956, 0x8000000, 0x8, 0x80000001}, {0x9, 0x2, 0x8, 0x3, 0x71c, 0x8}, {0x6, 0x6, 0x6, 0x6, 0x80000000, 0x2}, {0x9, 0x9, 0x9, 0x1, 0x1}, {0xad53, 0x1000, 0xf, 0x400, 0x1, 0x800}, {0x10001, 0xfffffff9, 0x9, 0x9, 0x7, 0x8}, {0x2, 0xac5, 0x1, 0x2, 0x40, 0xf}, {0xcfb1, 0xc, 0x7fffffff, 0x2, 0xaa1a, 0x7}, {0x498, 0x0, 0xffff, 0x8, 0x9, 0x9}, {0x5, 0x1, 0x74b25c08, 0x8, 0xa5, 0x7}, {0x7fffffff, 0x9, 0x0, 0xff, 0xfff, 0x2}, {0x0, 0x1ff, 0x9, 0xfff, 0x4, 0x7fff}, {0xfffffffb, 0x781b, 0x1, 0x6, 0x0, 0x7}, {0xa09a, 0x6, 0x6, 0x34a0, 0x188, 0xa191}, {0x7, 0x4, 0x40, 0x800, 0xc023, 0x6}, {0x10000, 0x1, 0x1, 0x800, 0x0, 0xd0}, {0xaa4, 0x8d1, 0x2, 0x7, 0xff, 0x400}], [{0x4}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {}, {}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5645e241676a75d1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x7, 0x1}, {0x5}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0xc813d5d32088d875}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3}, {0x5}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x1, 0x1}], 0x1}}]}, {0xcb, 0x6, "eb89784fbdec1cfa78be5556fdb9183821447e507715b6f4daf9c5c67bb3446e9c8e51abfb926e3eaaa87bed85ea3fdc04c8c8a460b12167964853c3e1fa4f8d8cbf3db0dfab90b14d767830fc46ff8d01580d811435780d2ec283c1141f5515b73673d86e228dbcd41163d740c2d685cfa6cdf7905c587d6d9ab80fef8c9671af5ac1eb48a6589f0cbb3180122205296e2df29437adb982425de39256a5c340e06c2f12af4b536ad0b95cd63fdf291927d1e48e14c65bd3ac11a463ba4c128cef205c815a654a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xd}}]}}]}, 0x5e64}, 0x1, 0x0, 0x0, 0x404b094}, 0xd0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x2}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 924.478952ms ago: executing program 1 (id=2833): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @remote}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8e9}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) 546.624786ms ago: executing program 2 (id=2834): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0x0, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x3, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0x45eb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0xfffff7d2, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) 127.821286ms ago: executing program 0 (id=2835): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0x0, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x3, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0x45eb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0xfffff7d2, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) kernel console output (not intermixed with test programs): 0xc2/0x280 [ 778.406060][T14377] should_failslab+0xc2/0x120 [ 778.406074][T14377] __kmalloc_noprof+0xe0/0x850 [ 778.406091][T14377] ? lockdep_hardirqs_on+0x78/0x100 [ 778.406104][T14377] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 778.406122][T14377] genl_family_rcv_msg_doit+0xc7/0x300 [ 778.406137][T14377] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 778.406150][T14377] ? genl_get_cmd+0x3ef/0x720 [ 778.406166][T14377] ? bpf_lsm_capable+0x9/0x10 [ 778.406178][T14377] ? security_capable+0x80/0x260 [ 778.406191][T14377] ? ns_capable+0xd2/0xf0 [ 778.406203][T14377] genl_rcv_msg+0x560/0x800 [ 778.406219][T14377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.406232][T14377] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 778.406249][T14377] ? __pfx_nl80211_get_key+0x10/0x10 [ 778.406261][T14377] ? __pfx_nl80211_post_doit+0x10/0x10 [ 778.406283][T14377] netlink_rcv_skb+0x159/0x420 [ 778.406295][T14377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.406309][T14377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.406326][T14377] ? netlink_deliver_tap+0x1ae/0xcc0 [ 778.406347][T14377] genl_rcv+0x28/0x40 [ 778.406359][T14377] netlink_unicast+0x5aa/0x870 [ 778.406372][T14377] ? __pfx_netlink_unicast+0x10/0x10 [ 778.406389][T14377] netlink_sendmsg+0x8b0/0xda0 [ 778.406403][T14377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.406416][T14377] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 778.406431][T14377] ____sys_sendmsg+0x9e1/0xb70 [ 778.406444][T14377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.406457][T14377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.406477][T14377] ___sys_sendmsg+0x190/0x1e0 [ 778.406492][T14377] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.406523][T14377] __sys_sendmsg+0x170/0x220 [ 778.406542][T14377] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.406564][T14377] ? __pfx_ksys_write+0x10/0x10 [ 778.406578][T14377] __do_fast_syscall_32+0xe3/0x8c0 [ 778.406592][T14377] do_fast_syscall_32+0x32/0x70 [ 778.406604][T14377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 778.406619][T14377] RIP: 0023:0xf706ef6c [ 778.406629][T14377] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 778.406639][T14377] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 778.406650][T14377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 778.406657][T14377] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 778.406663][T14377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 778.406669][T14377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.406679][T14377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 778.406693][T14377] [ 778.527090][ C2] hpet_rtc_timer_reinit: 8 callbacks suppressed [ 778.527111][ C2] hpet: Lost 6 RTC interrupts [ 778.679684][T11907] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 779.524165][T14401] __nla_validate_parse: 2 callbacks suppressed [ 779.524211][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 779.529829][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 780.909662][T14412] FAULT_INJECTION: forcing a failure. [ 780.909662][T14412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.914787][T14412] CPU: 2 UID: 0 PID: 14412 Comm: syz.3.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.914828][T14412] Tainted: [L]=SOFTLOCKUP [ 780.914831][T14412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 780.914838][T14412] Call Trace: [ 780.914842][T14412] [ 780.914847][T14412] dump_stack_lvl+0x100/0x190 [ 780.914884][T14412] should_fail_ex.cold+0x5/0xa [ 780.914907][T14412] _copy_from_user+0x2e/0xd0 [ 780.914929][T14412] move_addr_to_kernel+0x65/0x170 [ 780.914951][T14412] get_compat_msghdr+0x3ee/0x4b0 [ 780.914970][T14412] ? _parse_integer_limit+0x17f/0x1d0 [ 780.914988][T14412] ? __pfx_get_compat_msghdr+0x10/0x10 [ 780.915006][T14412] ? ___sys_sendmsg+0x19d/0x1e0 [ 780.915019][T14412] ? kfree+0x2ec/0x6b0 [ 780.915033][T14412] ? __pfx__kstrtoull+0x10/0x10 [ 780.915052][T14412] ___sys_sendmsg+0x1b6/0x1e0 [ 780.915067][T14412] ? __pfx____sys_sendmsg+0x10/0x10 [ 780.915081][T14412] ? __lock_acquire+0x4a5/0x2630 [ 780.915101][T14412] ? find_held_lock+0x2b/0x80 [ 780.915117][T14412] ? __pfx___might_resched+0x10/0x10 [ 780.915136][T14412] __sys_sendmmsg+0x2ff/0x430 [ 780.915149][T14412] ? __pfx___sys_sendmmsg+0x10/0x10 [ 780.915163][T14412] ? __fget_files+0x215/0x3d0 [ 780.915181][T14412] ? fput+0x79/0x100 [ 780.915194][T14412] ? ksys_write+0x1ac/0x250 [ 780.915205][T14412] ? __pfx_ksys_write+0x10/0x10 [ 780.915217][T14412] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 780.915234][T14412] ? lockdep_hardirqs_on+0x78/0x100 [ 780.915245][T14412] __do_fast_syscall_32+0xe3/0x8c0 [ 780.915259][T14412] do_fast_syscall_32+0x32/0x70 [ 780.915271][T14412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 780.915285][T14412] RIP: 0023:0xf70aef6c [ 780.915294][T14412] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 780.915305][T14412] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 780.915316][T14412] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800024c0 [ 780.915323][T14412] RDX: 0000000000000002 RSI: 00000000000000e0 RDI: 0000000000000000 [ 780.915329][T14412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.915335][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.915341][T14412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.915354][T14412] [ 780.995226][ C2] hpet: Lost 4 RTC interrupts [ 781.355210][ T59] net_ratelimit: 51 callbacks suppressed [ 781.355231][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.361375][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.714910][ T40] audit: type=1326 audit(1775104111.936:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14438 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 782.723654][ T40] audit: type=1326 audit(1775104111.966:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14438 comm="syz.0.2317" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 783.086953][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 783.138191][T14457] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2321'. [ 783.309025][T11907] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 783.475808][ T5946] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 783.643381][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 784.555252][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.194693][T14489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2330'. [ 786.476808][ T433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.479609][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.683643][T14509] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 786.687234][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2337'. [ 787.160681][T11907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 787.165695][T11907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 787.168825][T11907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 787.171971][T11907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 787.176183][T11907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 787.664413][T11483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.725953][T14511] chnl_net:caif_netlink_parms(): no params data found [ 787.843226][T11483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.849467][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.851856][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.854446][T14511] bridge_slave_0: entered allmulticast mode [ 787.858607][T14511] bridge_slave_0: entered promiscuous mode [ 787.861891][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.864273][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.866980][T14511] bridge_slave_1: entered allmulticast mode [ 787.870013][T14511] bridge_slave_1: entered promiscuous mode [ 787.887070][T14511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.891630][T14511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.908199][T14511] team0: Port device team_slave_0 added [ 787.911404][T14511] team0: Port device team_slave_1 added [ 787.936058][T11483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.949087][T14511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.951326][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.960915][T14511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.965512][T14511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.967718][T14511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.976287][T14511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.997608][T11483] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 788.022021][T11483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.045015][T14511] hsr_slave_0: entered promiscuous mode [ 788.047503][T14511] hsr_slave_1: entered promiscuous mode [ 788.049676][T14511] debugfs: 'hsr0' already exists in 'hsr' [ 788.051562][T14511] Cannot create hsr debugfs directory [ 788.234244][T11483] bridge_slave_1: left allmulticast mode [ 788.236689][T11483] bridge_slave_1: left promiscuous mode [ 788.240907][T11483] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.505287][T11483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.515237][T11483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.521961][T11483] bond0 (unregistering): Released all slaves [ 788.622025][T11483] !: left promiscuous mode [ 789.197250][ T5946] Bluetooth: hci4: command tx timeout [ 790.330542][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.704276][T14511] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 790.714111][T14511] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 790.752662][T14511] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 790.774652][T14511] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 791.001622][T11483] hsr_slave_0: left promiscuous mode [ 791.004325][T11483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.007956][T11483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.013125][T11483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.019812][T11483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.041226][T11483] veth1_macvtap: left promiscuous mode [ 791.043326][T11483] veth0_macvtap: left promiscuous mode [ 791.046246][T11483] veth1_vlan: left promiscuous mode [ 791.048115][T11483] veth0_vlan: left promiscuous mode [ 791.228168][T11483] team0 (unregistering): Port device team_slave_1 removed [ 791.241783][T11483] team0 (unregistering): Port device team_slave_0 removed [ 791.285416][ T5946] Bluetooth: hci4: command tx timeout [ 791.461128][T14511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.480975][T14511] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.487120][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.490294][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.498507][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.501637][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.525277][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.528021][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.558219][T14582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2350'. [ 791.686528][T14511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.739590][T14511] veth0_vlan: entered promiscuous mode [ 791.754363][T14511] veth1_vlan: entered promiscuous mode [ 791.913620][T14511] veth0_macvtap: entered promiscuous mode [ 791.942770][T14511] veth1_macvtap: entered promiscuous mode [ 792.053878][T14511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.075004][T14511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.082267][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.085134][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.095501][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.099315][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.226457][T14596] ip6t_rpfilter: unknown options [ 792.249277][ T433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.253167][ T433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.263906][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.274945][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.641739][T11907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 792.646673][T11907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 792.650226][T11907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 792.653891][T11907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 792.659048][T11907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 792.927409][T14607] chnl_net:caif_netlink_parms(): no params data found [ 793.019953][T14607] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.022364][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.025034][T14607] bridge_slave_0: entered allmulticast mode [ 793.028086][T14607] bridge_slave_0: entered promiscuous mode [ 793.033407][T14607] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.046441][T14607] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.049632][T14607] bridge_slave_1: entered allmulticast mode [ 793.067351][T14607] bridge_slave_1: entered promiscuous mode [ 793.209650][T14625] FAULT_INJECTION: forcing a failure. [ 793.209650][T14625] name failslab, interval 1, probability 0, space 0, times 0 [ 793.214475][T14625] CPU: 0 UID: 0 PID: 14625 Comm: syz.2.2359 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.214498][T14625] Tainted: [L]=SOFTLOCKUP [ 793.214503][T14625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.214510][T14625] Call Trace: [ 793.214522][T14625] [ 793.214527][T14625] dump_stack_lvl+0x100/0x190 [ 793.214576][T14625] should_fail_ex.cold+0x5/0xa [ 793.214591][T14625] should_failslab+0xc2/0x120 [ 793.214605][T14625] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 793.214625][T14625] ? __alloc_skb+0x140/0x710 [ 793.214652][T14625] __alloc_skb+0x140/0x710 [ 793.214669][T14625] ? __alloc_skb+0x5b7/0x710 [ 793.214686][T14625] ? __pfx___alloc_skb+0x10/0x10 [ 793.214704][T14625] ? is_bpf_text_address+0x8a/0x1a0 [ 793.214723][T14625] ? bpf_ksym_find+0x124/0x1c0 [ 793.214739][T14625] alloc_skb_with_frags+0xe0/0x810 [ 793.214752][T14625] ? kernel_text_address+0x8d/0x100 [ 793.214770][T14625] ? __kernel_text_address+0xd/0x30 [ 793.214787][T14625] ? unwind_get_return_address+0x59/0xa0 [ 793.214834][T14625] sock_alloc_send_pskb+0x801/0x980 [ 793.214856][T14625] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 793.214873][T14625] ? __pfx___might_resched+0x10/0x10 [ 793.214895][T14625] ? aa_sk_perm+0x309/0xaa0 [ 793.214918][T14625] hci_sock_sendmsg+0x1c7/0x2620 [ 793.214940][T14625] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 793.214958][T14625] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 793.214973][T14625] sock_write_iter+0x524/0x5a0 [ 793.214987][T14625] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 793.215005][T14625] ? __pfx_sock_write_iter+0x10/0x10 [ 793.215019][T14625] ? get_pid_task+0xfc/0x250 [ 793.215038][T14625] ? bpf_lsm_file_permission+0x9/0x10 [ 793.215050][T14625] ? security_file_permission+0x76/0x210 [ 793.215070][T14625] ? rw_verify_area+0xce/0x6d0 [ 793.215089][T14625] vfs_write+0x6ac/0x1070 [ 793.215101][T14625] ? __pfx_sock_write_iter+0x10/0x10 [ 793.215116][T14625] ? __pfx_vfs_write+0x10/0x10 [ 793.215126][T14625] ? find_held_lock+0x2b/0x80 [ 793.215147][T14625] ksys_write+0x1f8/0x250 [ 793.215158][T14625] ? __pfx_ksys_write+0x10/0x10 [ 793.215169][T14625] ? __pfx_ksys_write+0x10/0x10 [ 793.215184][T14625] __do_fast_syscall_32+0xe3/0x8c0 [ 793.215199][T14625] do_fast_syscall_32+0x32/0x70 [ 793.215212][T14625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.215228][T14625] RIP: 0023:0xf7fb7f6c [ 793.215238][T14625] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 793.215250][T14625] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 793.215262][T14625] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 793.215269][T14625] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.215275][T14625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.215282][T14625] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 793.215288][T14625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.215302][T14625] [ 793.216521][T14607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.326184][T14607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.338353][ T46] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.365158][T11907] Bluetooth: hci4: command tx timeout [ 793.374375][T14607] team0: Port device team_slave_0 added [ 793.380356][T14607] team0: Port device team_slave_1 added [ 793.461819][T14635] Bluetooth: MGMT ver 1.23 [ 793.506616][T14607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.509437][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.521299][T14607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.525986][T14607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.528490][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.537732][T14607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.567908][ T46] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.634248][T14607] hsr_slave_0: entered promiscuous mode [ 793.637768][T14607] hsr_slave_1: entered promiscuous mode [ 793.640925][T14607] debugfs: 'hsr0' already exists in 'hsr' [ 793.643778][T14607] Cannot create hsr debugfs directory [ 793.657392][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.868428][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.996050][T14647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 793.999225][T14647] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 794.003003][T14647] vhci_hcd vhci_hcd.0: Device attached [ 794.095356][ T828] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 794.134089][ T46] bridge_slave_1: left allmulticast mode [ 794.144912][ T46] bridge_slave_1: left promiscuous mode [ 794.147918][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.156716][ T46] bridge_slave_0: left allmulticast mode [ 794.159061][ T46] bridge_slave_0: left promiscuous mode [ 794.162094][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.266347][ T828] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.271511][ T828] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.278652][ T828] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 794.296591][ T828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.302983][ T39] usb 42-1: SetAddress Request (14) to port 0 [ 794.305647][ T39] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 794.551613][ T828] usb 8-1: usb_control_msg returned -32 [ 794.554007][ T828] usbtmc 8-1:16.0: can't read capabilities [ 794.725047][T11907] Bluetooth: hci3: command tx timeout [ 794.805067][T11907] Bluetooth: hci1: command 0x0406 tx timeout [ 795.065847][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.072251][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.076060][ T46] bond0 (unregistering): Released all slaves [ 795.080778][ T46] bond1 (unregistering): Released all slaves [ 795.088769][ T46] bond2 (unregistering): Released all slaves [ 795.166539][T14647] wg2 speed is unknown, defaulting to 1000 [ 795.236313][T14647] wg2 speed is unknown, defaulting to 1000 [ 795.239490][T14647] wg2 speed is unknown, defaulting to 1000 [ 795.423003][ T46] !: left promiscuous mode [ 795.440108][ T5946] Bluetooth: hci4: command tx timeout [ 795.653606][ T24] usb 8-1: USB disconnect, device number 35 [ 795.672102][T14672] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 795.712475][T14647] infiniband syz2: set active [ 795.714433][ T1340] wg2 speed is unknown, defaulting to 1000 [ 795.746393][T14647] infiniband syz2: added wg2 [ 795.833448][T14607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 795.843304][T14647] RDS/IB: syz2: added [ 795.850529][T14647] smc: adding ib device syz2 with port count 1 [ 795.853944][T14647] smc: ib device syz2 port 1 has no pnetid [ 795.858739][T14607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 795.864746][T10995] wg2 speed is unknown, defaulting to 1000 [ 795.865405][T14607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 795.878235][T14607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.886101][T14647] wg2 speed is unknown, defaulting to 1000 [ 795.971152][T14607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.991284][T14607] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.999040][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.002148][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.033465][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.036404][T11483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.278125][T14607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.437390][T14607] veth0_vlan: entered promiscuous mode [ 796.452801][T14607] veth1_vlan: entered promiscuous mode [ 796.456205][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 796.556510][T14647] wg2 speed is unknown, defaulting to 1000 [ 796.740706][T14648] vhci_hcd: connection reset by peer [ 796.758937][ T1251] vhci_hcd vhci_hcd.2: stop threads [ 796.761219][ T1251] vhci_hcd vhci_hcd.2: release socket [ 796.768664][ T1251] vhci_hcd vhci_hcd.2: disconnect device [ 796.796197][ T5946] Bluetooth: hci3: command tx timeout [ 797.355893][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 797.527688][T14710] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 797.530466][T14710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 797.535941][T14710] vhci_hcd vhci_hcd.0: Device attached [ 797.815133][ T841] usb 40-1: SetAddress Request (8) to port 0 [ 797.817690][ T841] usb 40-1: new SuperSpeed USB device number 8 using vhci_hcd [ 798.025825][T14711] vhci_hcd: connection reset by peer [ 798.029814][ T1251] vhci_hcd vhci_hcd.1: stop threads [ 798.031624][ T1251] vhci_hcd vhci_hcd.1: release socket [ 798.033928][ T1251] vhci_hcd vhci_hcd.1: disconnect device [ 798.303547][T14647] wg2 speed is unknown, defaulting to 1000 [ 798.336199][T14607] veth0_macvtap: entered promiscuous mode [ 798.345030][T14607] veth1_macvtap: entered promiscuous mode [ 798.383483][T14607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.388865][T14607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.396758][T11483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.408489][T11483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.412367][T11483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.447371][T11483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.542482][T14723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2374'. [ 798.573178][T14647] wg2 speed is unknown, defaulting to 1000 [ 798.578974][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.582298][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.631314][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.634094][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.884892][ T5946] Bluetooth: hci3: command tx timeout [ 798.898269][T14734] syzkaller0: entered promiscuous mode [ 798.901031][T14734] syzkaller0: entered allmulticast mode [ 798.955994][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2375'. [ 798.965936][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 799.354972][ T39] usb 42-1: device descriptor read/8, error -110 [ 799.765779][ T39] usb usb42-port1: attempt power cycle [ 800.348262][ T39] usb usb42-port1: unable to enumerate USB device [ 800.566782][T14752] could not open pipe file descriptor [ 800.570924][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 800.882703][T14647] wg2 speed is unknown, defaulting to 1000 [ 800.955267][ T5946] Bluetooth: hci3: command tx timeout [ 801.357742][T11907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 801.394011][T11907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 801.399346][T11907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 801.413656][T11907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 801.419118][T11907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 801.863434][ T1340] syz1: Port: 1 Link DOWN [ 802.072746][T14761] wg2 speed is unknown, defaulting to 1000 [ 802.239283][ T87] smc: removing ib device syz1 [ 802.328421][ T46] hsr_slave_0: left promiscuous mode [ 802.331100][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.333733][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.340213][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.342633][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.362803][ T46] veth1_macvtap: left promiscuous mode [ 802.368679][ T46] veth0_macvtap: left promiscuous mode [ 802.370886][ T46] veth1_vlan: left promiscuous mode [ 802.372667][ T46] veth0_vlan: left promiscuous mode [ 802.717694][ T46] team0 (unregistering): Port device team_slave_1 removed [ 802.740061][ T46] team0 (unregistering): Port device team_slave_0 removed [ 802.880604][ T841] usb 40-1: device descriptor read/8, error -110 [ 803.150171][T14761] chnl_net:caif_netlink_parms(): no params data found [ 803.202284][T14761] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.205021][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.208283][T14761] bridge_slave_0: entered allmulticast mode [ 803.212254][T14761] bridge_slave_0: entered promiscuous mode [ 803.216453][T14761] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.218942][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.221292][T14761] bridge_slave_1: entered allmulticast mode [ 803.224040][T14761] bridge_slave_1: entered promiscuous mode [ 803.240373][T14761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.245300][T14761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.262346][T14761] team0: Port device team_slave_0 added [ 803.265709][T14761] team0: Port device team_slave_1 added [ 803.275503][ T841] usb usb40-port1: attempt power cycle [ 803.285066][T14761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.287620][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.296373][T14761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.311783][ T46] IPVS: stop unused estimator thread 0... [ 803.316748][T14761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.319703][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.331106][T14761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.376469][T14761] hsr_slave_0: entered promiscuous mode [ 803.380389][T14761] hsr_slave_1: entered promiscuous mode [ 803.383374][T14761] debugfs: 'hsr0' already exists in 'hsr' [ 803.386143][T14761] Cannot create hsr debugfs directory [ 803.532941][T14761] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.605122][ T5946] Bluetooth: hci2: command tx timeout [ 803.622625][T14761] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.742786][T14761] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.814300][T14761] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.845505][ T841] usb usb40-port1: unable to enumerate USB device [ 803.965123][T14761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 803.969798][T14761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 803.975261][T14761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 803.982170][T14761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 804.054545][T14761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.065819][T14761] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.071356][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.074108][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.082273][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.085724][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.252314][T14761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.272398][T14761] veth0_vlan: entered promiscuous mode [ 804.280044][T14761] veth1_vlan: entered promiscuous mode [ 804.296831][T14761] veth0_macvtap: entered promiscuous mode [ 804.301432][T14761] veth1_macvtap: entered promiscuous mode [ 804.310099][T14761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.317483][T14761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.323680][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.327426][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.331654][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.335285][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.374134][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.377445][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.396382][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.400045][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.462090][T14783] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 805.686405][ T5946] Bluetooth: hci2: command tx timeout [ 806.315914][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 807.754934][ T5946] Bluetooth: hci2: command tx timeout [ 808.074122][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 808.077716][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2380'. [ 808.089499][ T5946] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 808.093192][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.093215][ T5946] Tainted: [L]=SOFTLOCKUP [ 808.093220][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 808.093247][ T5946] Workqueue: hci2 hci_rx_work [ 808.093268][ T5946] Call Trace: [ 808.093272][ T5946] [ 808.093278][ T5946] dump_stack_lvl+0x100/0x190 [ 808.093321][ T5946] sysfs_warn_dup.cold+0x1c/0x28 [ 808.093352][ T5946] sysfs_create_dir_ns+0x24b/0x2b0 [ 808.093371][ T5946] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 808.093402][ T5946] ? find_held_lock+0x2b/0x80 [ 808.093415][ T5946] ? kobject_add_internal+0x25f/0x930 [ 808.093445][ T5946] ? kobject_add_internal+0x25f/0x930 [ 808.093461][ T5946] ? do_raw_spin_unlock+0x145/0x1e0 [ 808.093502][ T5946] kobject_add_internal+0x2c8/0x930 [ 808.093531][ T5946] kobject_add+0x16a/0x1e0 [ 808.093546][ T5946] ? __pfx_kobject_add+0x10/0x10 [ 808.093574][ T5946] ? class_to_subsys+0x10f/0x150 [ 808.093593][ T5946] ? kobject_put+0xb9/0x640 [ 808.093619][ T5946] ? _raw_spin_unlock+0x28/0x50 [ 808.093642][ T5946] device_add+0x294/0x1950 [ 808.093675][ T5946] ? __pfx_dev_set_name+0x10/0x10 [ 808.093708][ T5946] ? __pfx_device_add+0x10/0x10 [ 808.093725][ T5946] ? mgmt_send_event_skb+0x2fb/0x460 [ 808.093761][ T5946] hci_conn_add_sysfs+0x1a3/0x260 [ 808.093796][ T5946] le_conn_complete_evt+0x11cb/0x1f40 [ 808.093818][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 808.093857][ T5946] hci_le_conn_complete_evt+0x23c/0x3a0 [ 808.093887][ T5946] ? skb_pull_data+0x15f/0x1e0 [ 808.093906][ T5946] hci_le_meta_evt+0x34a/0x5f0 [ 808.093940][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 808.093974][ T5946] hci_event_packet+0x682/0x11c0 [ 808.093991][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 808.094038][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 808.094059][ T5946] ? kcov_remote_start+0x384/0x660 [ 808.094100][ T5946] hci_rx_work+0x451/0xfc0 [ 808.094147][ T5946] process_one_work+0xa23/0x19a0 [ 808.094175][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 808.094212][ T5946] ? __pfx_hci_rx_work+0x10/0x10 [ 808.094246][ T5946] worker_thread+0x5ef/0xe50 [ 808.094270][ T5946] ? kthread+0x13a/0x450 [ 808.094299][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 808.094329][ T5946] kthread+0x370/0x450 [ 808.094345][ T5946] ? __pfx_kthread+0x10/0x10 [ 808.094376][ T5946] ret_from_fork+0x754/0xd80 [ 808.094396][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 808.094428][ T5946] ? __switch_to+0x7b4/0x1120 [ 808.094456][ T5946] ? __pfx_kthread+0x10/0x10 [ 808.094474][ T5946] ret_from_fork_asm+0x1a/0x30 [ 808.094514][ T5946] [ 808.094617][ T5946] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 808.190086][ T5946] Bluetooth: hci2: failed to register connection device [ 808.789839][T14814] vlan2: entered promiscuous mode [ 808.792568][T14814] vlan2: entered allmulticast mode [ 808.795936][T14814] hsr_slave_1: entered allmulticast mode [ 808.807796][T14814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2385'. [ 808.833554][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 809.067505][T14818] CIFS mount error: No usable UNC path provided in device string! [ 809.067505][T14818] [ 809.070955][T14818] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 809.140813][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2386'. [ 809.317345][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2387'. [ 809.321284][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2387'. [ 809.570363][T14833] FAULT_INJECTION: forcing a failure. [ 809.570363][T14833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.576493][T14833] CPU: 0 UID: 0 PID: 14833 Comm: syz.2.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.576515][T14833] Tainted: [L]=SOFTLOCKUP [ 809.576521][T14833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 809.576531][T14833] Call Trace: [ 809.576538][T14833] [ 809.576544][T14833] dump_stack_lvl+0x100/0x190 [ 809.576576][T14833] should_fail_ex.cold+0x5/0xa [ 809.576597][T14833] _copy_from_user+0x2e/0xd0 [ 809.576616][T14833] get_compat_msghdr+0xb3/0x4b0 [ 809.576640][T14833] ? __pfx_get_compat_msghdr+0x10/0x10 [ 809.576672][T14833] ___sys_sendmsg+0x1b6/0x1e0 [ 809.576694][T14833] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.576796][T14833] __sys_sendmsg+0x170/0x220 [ 809.576839][T14833] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.576862][T14833] ? __pfx_ksys_write+0x10/0x10 [ 809.576903][T14833] __do_fast_syscall_32+0xe3/0x8c0 [ 809.576926][T14833] do_fast_syscall_32+0x32/0x70 [ 809.576944][T14833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 809.576964][T14833] RIP: 0023:0xf7fb7f6c [ 809.576976][T14833] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 809.576988][T14833] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 809.577006][T14833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800026c0 [ 809.577016][T14833] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 809.577026][T14833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 809.577035][T14833] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 809.577045][T14833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 809.577104][T14833] [ 809.903900][ T5946] Bluetooth: hci2: command tx timeout [ 810.161756][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 810.563608][T14841] syz_tun: entered allmulticast mode [ 810.785524][T14844] md: superblock version 16777216 not known [ 810.789812][T14844] md: couldn't set array info. -22 [ 810.975112][ T1340] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 811.131542][ T1340] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 811.160029][T14856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 811.175995][ T1340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.191719][ T1340] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.222451][ T1340] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 811.245743][ T1340] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 811.256434][ T1340] usb 5-1: Manufacturer: syz [ 811.287780][ T1340] usb 5-1: config 0 descriptor?? [ 811.310153][ T1340] igorplugusb 5-1:0.0: incorrect number of endpoints [ 811.509996][T14722] usb 5-1: USB disconnect, device number 35 [ 811.526602][T14840] syz_tun: left allmulticast mode [ 813.311628][T14876] netlink: 'syz.1.2404': attribute type 1 has an invalid length. [ 813.358051][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.365220][T14876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2404'. [ 814.425005][ T39] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 814.433345][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2409'. [ 814.576396][ T39] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 814.579745][ T39] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.583587][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.589102][ T39] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 814.592513][ T39] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 814.595479][ T39] usb 7-1: Manufacturer: syz [ 814.598979][ T39] usb 7-1: config 0 descriptor?? [ 814.608606][ T39] igorplugusb 7-1:0.0: incorrect number of endpoints [ 814.827558][ T39] usb 7-1: USB disconnect, device number 38 [ 815.246215][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 815.249455][T14897] netlink: 'syz.3.2411': attribute type 6 has an invalid length. [ 816.026169][ T39] e1000 0000:00:06.0 eth0: Reset adapter [ 816.092291][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 816.096734][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 816.340423][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2412'. [ 818.037839][ T828] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 818.255229][ T39] e1000 0000:00:06.0 eth0: Reset adapter [ 818.385396][ T39] e1000 0000:00:06.0 eth0: Reset adapter [ 818.491854][T14928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2419'. [ 818.496488][T14929] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 818.499950][T14929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2417'. [ 818.502998][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 818.511643][ T39] e1000 0000:00:06.0 eth0: Reset adapter [ 818.540495][T14928] hsr_slave_1 (unregistering): left promiscuous mode [ 818.695999][T14935] syz_tun: entered allmulticast mode [ 818.801391][ T40] audit: type=1326 audit(1775104148.056:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.0.2423" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x0 [ 818.984933][T11032] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 819.147441][T11032] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 819.154310][T11032] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.157776][T11032] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.167557][T11032] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 819.170345][T11032] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 819.172723][T11032] usb 6-1: Manufacturer: syz [ 819.178461][T11032] usb 6-1: config 0 descriptor?? [ 819.183491][T11032] igorplugusb 6-1:0.0: incorrect number of endpoints [ 819.400044][T11032] usb 6-1: USB disconnect, device number 33 [ 819.423678][T14933] syz_tun: left allmulticast mode [ 820.796092][ T39] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 823.605430][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.706811][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 829.710613][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 829.724163][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2424'. [ 829.727212][T14987] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2424'. [ 829.734334][T14987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2424'. [ 830.484967][ T39] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 830.640087][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 830.648003][ T39] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 830.652110][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.662829][ T39] usb 7-1: Product: syz [ 830.664646][ T39] usb 7-1: Manufacturer: syz [ 830.789025][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2429'. [ 831.396248][T15014] 9p: Bad value for 'wfdno' [ 831.622786][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 831.627825][ T39] usb 7-1: SerialNumber: syz [ 831.631840][ T39] usb 7-1: config 0 descriptor?? [ 831.646006][ T39] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 831.648743][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 831.650757][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 831.654208][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 831.656453][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 831.664399][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 831.668810][ T39] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 831.671683][ T39] usb 7-1: media controller created [ 831.682499][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 831.710707][T15019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2431'. [ 831.785380][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2431'. [ 831.844076][T14978] dvb-usb: bulk message failed: -22 (7/0) [ 831.849442][T14978] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 831.853452][T14978] ttusb2: i2c transfer failed. [ 831.863859][T15024] syz_tun: entered allmulticast mode [ 832.104971][T14722] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 832.364172][ T39] usb 7-1: selecting invalid altsetting 3 [ 832.366099][ T39] ttusb2: set interface to alts=3 failed [ 832.387199][ T39] DVB: Unable to find symbol tda10086_attach() [ 832.389243][ T39] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 832.392363][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 832.394666][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 832.398097][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 832.400118][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 832.403444][ T39] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 832.407270][ T39] usb 7-1: USB disconnect, device number 39 [ 832.433202][ T39] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 832.564777][T15040] FAULT_INJECTION: forcing a failure. [ 832.564777][T15040] name failslab, interval 1, probability 0, space 0, times 0 [ 832.573893][T15040] CPU: 2 UID: 0 PID: 15040 Comm: syz.2.2435 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.573916][T15040] Tainted: [L]=SOFTLOCKUP [ 832.573922][T15040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 832.573931][T15040] Call Trace: [ 832.573938][T15040] [ 832.573946][T15040] dump_stack_lvl+0x100/0x190 [ 832.573978][T15040] should_fail_ex.cold+0x5/0xa [ 832.573999][T15040] should_failslab+0xc2/0x120 [ 832.574019][T15040] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 832.574047][T15040] ? __alloc_skb+0x140/0x710 [ 832.574078][T15040] __alloc_skb+0x140/0x710 [ 832.574103][T15040] ? __alloc_skb+0x5b7/0x710 [ 832.574128][T15040] ? __pfx___alloc_skb+0x10/0x10 [ 832.574160][T15040] netlink_alloc_large_skb+0x69/0x150 [ 832.574183][T15040] netlink_sendmsg+0x680/0xda0 [ 832.574206][T15040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.574226][T15040] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 832.574250][T15040] ____sys_sendmsg+0x9e1/0xb70 [ 832.574270][T15040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.574289][T15040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.574321][T15040] ___sys_sendmsg+0x190/0x1e0 [ 832.574345][T15040] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.574396][T15040] __sys_sendmsg+0x170/0x220 [ 832.574424][T15040] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.574459][T15040] ? __pfx_ksys_write+0x10/0x10 [ 832.574483][T15040] __do_fast_syscall_32+0xe3/0x8c0 [ 832.574505][T15040] do_fast_syscall_32+0x32/0x70 [ 832.574525][T15040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.574547][T15040] RIP: 0023:0xf7fb7f6c [ 832.574562][T15040] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 832.574579][T15040] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 832.574596][T15040] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 832.574607][T15040] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.574618][T15040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.574628][T15040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.574638][T15040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.574668][T15040] [ 832.654626][ C2] hpet: Lost 4 RTC interrupts [ 832.665091][T15041] netlink: 'syz.3.2434': attribute type 1 has an invalid length. [ 832.668647][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2434'. [ 833.437297][T14722] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 833.440026][T14722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.443457][T14722] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.449121][T14722] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 833.452317][T14722] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 833.455044][T14722] usb 5-1: Manufacturer: syz [ 833.458519][T14722] usb 5-1: config 0 descriptor?? [ 833.462532][T14722] igorplugusb 5-1:0.0: incorrect number of endpoints [ 833.669056][ T1340] usb 5-1: USB disconnect, device number 36 [ 833.674774][T15023] syz_tun: left allmulticast mode [ 839.893607][ T40] audit: type=1326 audit(1775104169.146:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15057 comm="syz.0.2436" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3f6c code=0x0 [ 840.366187][ T39] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 841.202231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 841.505854][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.509298][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.512710][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 841.517451][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 841.520794][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.525342][ T39] usb 5-1: config 0 descriptor?? [ 841.872994][T15080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2442'. [ 841.877495][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 841.899184][T15080] hsr_slave_1 (unregistering): left promiscuous mode [ 841.977570][T15081] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 841.980632][T15081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 841.984620][T15081] vhci_hcd vhci_hcd.0: Device attached [ 842.207282][T15087] wg2 speed is unknown, defaulting to 1000 [ 842.305004][ T24] usb 40-1: SetAddress Request (12) to port 0 [ 842.307077][ T24] usb 40-1: new SuperSpeed USB device number 12 using vhci_hcd [ 842.395446][T15077] binder: 15075:15077 ioctl c0306201 80000640 returned -14 [ 842.792364][T15102] syz_tun: entered allmulticast mode [ 843.045093][ T6000] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 843.197165][ T6000] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 843.199854][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.203112][ T6000] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.208802][ T6000] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 843.211779][ T6000] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 843.214292][ T6000] usb 8-1: Manufacturer: syz [ 843.218686][ T6000] usb 8-1: config 0 descriptor?? [ 843.226162][ T6000] igorplugusb 8-1:0.0: incorrect number of endpoints [ 843.434458][T15102] binder: 15101:15102 ioctl c0306201 0 returned -14 [ 843.439832][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 843.443604][ T39] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 843.447159][ T6000] usb 8-1: USB disconnect, device number 36 [ 843.451868][T15101] syz_tun: left allmulticast mode [ 843.480443][ T39] usb 5-1: USB disconnect, device number 37 [ 844.142446][T15082] vhci_hcd: connection reset by peer [ 844.147927][ T87] vhci_hcd vhci_hcd.1: stop threads [ 844.152870][ T87] vhci_hcd vhci_hcd.1: release socket [ 844.155774][ T87] vhci_hcd vhci_hcd.1: disconnect device [ 845.610060][ T59] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 845.635810][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 845.640350][T15142] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2453'. [ 845.644680][ T59] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 845.648736][ T59] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 845.652686][ T59] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 846.495407][T15159] kAFS: unable to lookup cell '.' [ 846.499186][T15162] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2460'. [ 846.505525][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'. [ 846.551705][T15164] FAULT_INJECTION: forcing a failure. [ 846.551705][T15164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.555469][T15164] CPU: 3 UID: 0 PID: 15164 Comm: syz.1.2461 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.555489][T15164] Tainted: [L]=SOFTLOCKUP [ 846.555493][T15164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 846.555500][T15164] Call Trace: [ 846.555505][T15164] [ 846.555510][T15164] dump_stack_lvl+0x100/0x190 [ 846.555531][T15164] should_fail_ex.cold+0x5/0xa [ 846.555546][T15164] _copy_from_user+0x2e/0xd0 [ 846.555563][T15164] bpf_test_init.isra.0+0xaf/0x100 [ 846.555584][T15164] bpf_prog_test_run_skb+0x489/0x3230 [ 846.555599][T15164] ? find_held_lock+0x2b/0x80 [ 846.555611][T15164] ? __fget_files+0x215/0x3d0 [ 846.555626][T15164] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 846.555639][T15164] ? fput+0x79/0x100 [ 846.555654][T15164] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 846.555665][T15164] __sys_bpf+0x1725/0x4b90 [ 846.555681][T15164] ? __pfx___sys_bpf+0x10/0x10 [ 846.555695][T15164] ? proc_fail_nth_write+0x9f/0x220 [ 846.555710][T15164] ? find_held_lock+0x2b/0x80 [ 846.555724][T15164] ? find_held_lock+0x2b/0x80 [ 846.555735][T15164] ? ksys_write+0x190/0x250 [ 846.555752][T15164] ? __mutex_unlock_slowpath+0x15c/0x790 [ 846.555777][T15164] ? fput+0x79/0x100 [ 846.555790][T15164] ? ksys_write+0x1ac/0x250 [ 846.555804][T15164] __ia32_sys_bpf+0x79/0xf0 [ 846.555818][T15164] ? lockdep_hardirqs_on+0x78/0x100 [ 846.555829][T15164] __do_fast_syscall_32+0xe3/0x8c0 [ 846.555844][T15164] do_fast_syscall_32+0x32/0x70 [ 846.555857][T15164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 846.555871][T15164] RIP: 0023:0xf704ef6c [ 846.555881][T15164] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 846.555892][T15164] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 846.555904][T15164] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 846.555911][T15164] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.555918][T15164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 846.555924][T15164] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 846.555956][T15164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 846.555974][T15164] [ 847.355461][ T24] usb 40-1: device descriptor read/8, error -110 [ 847.667855][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 847.670967][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 847.679749][T15184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2467'. [ 847.682929][T15184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2467'. [ 847.696629][T15184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2467'. [ 847.748421][ T24] usb usb40-port1: attempt power cycle [ 848.315492][ T24] usb usb40-port1: unable to enumerate USB device [ 848.603085][T15193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2471'. [ 848.614251][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 848.682055][T15195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2472'. [ 848.759415][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 848.971481][T15207] syz_tun: entered allmulticast mode [ 849.245816][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 849.282459][T15212] FAULT_INJECTION: forcing a failure. [ 849.282459][T15212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.287668][T15212] CPU: 2 UID: 0 PID: 15212 Comm: syz.2.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.287700][T15212] Tainted: [L]=SOFTLOCKUP [ 849.287707][T15212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 849.287718][T15212] Call Trace: [ 849.287726][T15212] [ 849.287733][T15212] dump_stack_lvl+0x100/0x190 [ 849.287760][T15212] should_fail_ex.cold+0x5/0xa [ 849.287775][T15212] _copy_from_iter+0x1f4/0x1690 [ 849.287792][T15212] ? __asan_memset+0x23/0x50 [ 849.287810][T15212] ? __pfx__copy_from_iter+0x10/0x10 [ 849.287826][T15212] ? __pfx___alloc_skb+0x10/0x10 [ 849.287849][T15212] netlink_sendmsg+0x808/0xda0 [ 849.287865][T15212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.287879][T15212] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 849.287898][T15212] ____sys_sendmsg+0x9e1/0xb70 [ 849.287912][T15212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.287954][T15212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.287977][T15212] ___sys_sendmsg+0x190/0x1e0 [ 849.287993][T15212] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.288025][T15212] __sys_sendmsg+0x170/0x220 [ 849.288044][T15212] ? __pfx___sys_sendmsg+0x10/0x10 [ 849.288067][T15212] ? __pfx_ksys_write+0x10/0x10 [ 849.288082][T15212] __do_fast_syscall_32+0xe3/0x8c0 [ 849.288097][T15212] do_fast_syscall_32+0x32/0x70 [ 849.288109][T15212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 849.288124][T15212] RIP: 0023:0xf7fb7f6c [ 849.288135][T15212] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 849.288148][T15212] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 849.288159][T15212] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 849.288167][T15212] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 849.288174][T15212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 849.288181][T15212] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 849.288187][T15212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 849.288201][T15212] [ 849.364674][ C2] hpet: Lost 4 RTC interrupts [ 849.423213][T15221] netlink: 'syz.0.2483': attribute type 4 has an invalid length. [ 849.425995][T15221] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2483'. [ 849.446140][ T24] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 849.449716][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.453377][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.460168][ T24] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 849.463121][ T24] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 849.465855][ T24] usb 6-1: Manufacturer: syz [ 849.473204][ T24] usb 6-1: config 0 descriptor?? [ 849.478432][ T24] igorplugusb 6-1:0.0: incorrect number of endpoints [ 849.685764][T15207] binder: 15206:15207 ioctl c0306201 0 returned -14 [ 849.690650][ T6000] usb 6-1: USB disconnect, device number 34 [ 849.695689][T15206] syz_tun: left allmulticast mode [ 850.771973][ T40] audit: type=1326 audit(1775104180.026:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.782598][ T40] audit: type=1326 audit(1775104180.036:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.795512][ T40] audit: type=1326 audit(1775104180.036:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.878528][ T40] audit: type=1326 audit(1775104180.036:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.885413][ T40] audit: type=1326 audit(1775104180.036:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.892161][ T40] audit: type=1326 audit(1775104180.036:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.909482][ T40] audit: type=1326 audit(1775104180.036:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.916790][ T40] audit: type=1326 audit(1775104180.036:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 850.924466][ T40] audit: type=1326 audit(1775104180.036:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.1.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 851.274693][T15265] overlayfs: failed to resolve 'euid>00000000000000000000': -2 [ 852.042790][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880292e1800: rx timeout, send abort [ 852.048229][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880292e1800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 853.084630][T15283] __nla_validate_parse: 15 callbacks suppressed [ 853.084644][T15283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2502'. [ 853.122914][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 853.197886][T15286] usb usb8: usbfs: process 15286 (syz.2.2501) did not claim interface 0 before use [ 853.376352][T15299] FAULT_INJECTION: forcing a failure. [ 853.376352][T15299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.380650][T15299] CPU: 1 UID: 0 PID: 15299 Comm: syz.3.2507 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.380669][T15299] Tainted: [L]=SOFTLOCKUP [ 853.380673][T15299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 853.380681][T15299] Call Trace: [ 853.380686][T15299] [ 853.380691][T15299] dump_stack_lvl+0x100/0x190 [ 853.380713][T15299] should_fail_ex.cold+0x5/0xa [ 853.380726][T15299] _copy_from_iter+0x1f4/0x1690 [ 853.380745][T15299] ? __pfx__copy_from_iter+0x10/0x10 [ 853.380759][T15299] ? __pfx___might_resched+0x10/0x10 [ 853.380779][T15299] ? aa_sk_perm+0x309/0xaa0 [ 853.380795][T15299] hci_sock_sendmsg+0x4a1/0x2620 [ 853.380815][T15299] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 853.380833][T15299] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 853.380847][T15299] sock_write_iter+0x524/0x5a0 [ 853.380861][T15299] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 853.380878][T15299] ? __pfx_sock_write_iter+0x10/0x10 [ 853.380891][T15299] ? get_pid_task+0xfc/0x250 [ 853.380910][T15299] ? bpf_lsm_file_permission+0x9/0x10 [ 853.380921][T15299] ? security_file_permission+0x76/0x210 [ 853.380937][T15299] ? rw_verify_area+0xce/0x6d0 [ 853.380956][T15299] vfs_write+0x6ac/0x1070 [ 853.380968][T15299] ? __pfx_sock_write_iter+0x10/0x10 [ 853.380983][T15299] ? __pfx_vfs_write+0x10/0x10 [ 853.380993][T15299] ? find_held_lock+0x2b/0x80 [ 853.381012][T15299] ksys_write+0x1f8/0x250 [ 853.381023][T15299] ? __pfx_ksys_write+0x10/0x10 [ 853.381034][T15299] ? __pfx_ksys_write+0x10/0x10 [ 853.381048][T15299] __do_fast_syscall_32+0xe3/0x8c0 [ 853.381063][T15299] do_fast_syscall_32+0x32/0x70 [ 853.381075][T15299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.381090][T15299] RIP: 0023:0xf705ef6c [ 853.381100][T15299] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 853.381111][T15299] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 853.381122][T15299] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 853.381129][T15299] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 853.381136][T15299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 853.381142][T15299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 853.381149][T15299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 853.381162][T15299] [ 853.480012][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2504'. [ 853.534890][ T1340] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 853.572386][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2505'. [ 853.691280][ T1340] usb 6-1: Using ep0 maxpacket: 8 [ 853.708038][ T1340] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 853.712170][ T1340] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 853.716242][ T1340] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 853.719597][ T1340] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 853.723317][ T1340] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 853.726786][ T1340] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.731162][ T1340] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 853.734225][ T1340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.452833][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'. [ 854.456122][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'. [ 854.460396][ T1340] usb 6-1: usb_control_msg returned -32 [ 854.462375][ T1340] usbtmc 6-1:16.0: can't read capabilities [ 854.570377][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2509'. [ 854.573415][T15311] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2509'. [ 854.580507][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'. [ 854.772768][T15315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2511'. [ 855.591125][T15308] wg2 speed is unknown, defaulting to 1000 [ 855.752282][T15329] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 856.253518][T14722] usb 6-1: USB disconnect, device number 35 [ 858.155520][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 858.992295][T15369] FAULT_INJECTION: forcing a failure. [ 858.992295][T15369] name failslab, interval 1, probability 0, space 0, times 0 [ 858.996486][T15369] CPU: 2 UID: 0 PID: 15369 Comm: syz.0.2526 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.996505][T15369] Tainted: [L]=SOFTLOCKUP [ 858.996509][T15369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 858.996516][T15369] Call Trace: [ 858.996526][T15369] [ 858.996531][T15369] dump_stack_lvl+0x100/0x190 [ 858.996552][T15369] should_fail_ex.cold+0x5/0xa [ 858.996566][T15369] ? tomoyo_encode2+0xfb/0x3c0 [ 858.996582][T15369] should_failslab+0xc2/0x120 [ 858.996596][T15369] __kmalloc_noprof+0xe0/0x850 [ 858.996613][T15369] ? d_absolute_path+0x136/0x1b0 [ 858.996631][T15369] tomoyo_encode2+0xfb/0x3c0 [ 858.996650][T15369] tomoyo_encode+0x29/0x50 [ 858.996665][T15369] tomoyo_realpath_from_path+0x18c/0x690 [ 858.996685][T15369] tomoyo_path_number_perm+0x23c/0x580 [ 858.996698][T15369] ? tomoyo_path_number_perm+0x22e/0x580 [ 858.996713][T15369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 858.996741][T15369] ? find_held_lock+0x2b/0x80 [ 858.996753][T15369] ? hook_file_ioctl_common+0x146/0x410 [ 858.996767][T15369] ? __fget_files+0x215/0x3d0 [ 858.996781][T15369] ? __fget_files+0x21f/0x3d0 [ 858.996794][T15369] security_file_ioctl_compat+0xd3/0x230 [ 858.996810][T15369] __ia32_compat_sys_ioctl+0xc2/0x360 [ 858.996830][T15369] __do_fast_syscall_32+0xe3/0x8c0 [ 858.996844][T15369] do_fast_syscall_32+0x32/0x70 [ 858.996856][T15369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 858.996884][T15369] RIP: 0023:0xf7fa3f6c [ 858.996894][T15369] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 858.996905][T15369] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 858.996917][T15369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004010744d [ 858.996924][T15369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 858.996930][T15369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 858.996936][T15369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 858.996943][T15369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.996957][T15369] [ 858.997066][T15369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 859.240911][T15385] netlink: 'syz.1.2532': attribute type 1 has an invalid length. [ 859.267767][T15385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 860.665047][T15399] __nla_validate_parse: 12 callbacks suppressed [ 860.665059][T15399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2535'. [ 860.706643][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 861.483620][T15427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2545'. [ 861.544290][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 863.169633][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'. [ 863.172516][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'. [ 863.509596][T15452] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2554'. [ 863.976134][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2558'. [ 863.978973][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2558'. [ 863.986757][T15465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2558'. [ 866.020071][T15481] __nla_validate_parse: 4 callbacks suppressed [ 866.020105][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'. [ 866.025067][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2561'. [ 866.035899][T15481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2561'. [ 866.038730][T15481] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2561'. [ 866.049154][T15481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2561'. [ 866.120438][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 866.120452][ T40] audit: type=1326 audit(1775104195.376:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.136324][ T40] audit: type=1326 audit(1775104195.386:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.144884][ T40] audit: type=1326 audit(1775104195.386:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.155445][ T40] audit: type=1326 audit(1775104195.386:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.163432][ T40] audit: type=1326 audit(1775104195.386:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.181777][ T40] audit: type=1326 audit(1775104195.386:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.189244][ T40] audit: type=1326 audit(1775104195.386:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.197160][ T40] audit: type=1326 audit(1775104195.396:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.205965][ T40] audit: type=1326 audit(1775104195.396:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.213519][ T40] audit: type=1326 audit(1775104195.396:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15479 comm="syz.0.2562" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 866.268119][T15483] fuse: Unknown parameter '3‚y¨|ñ¼Ø)Ç Ÿ„hUΆø´KNÇ¡ì˾° nõžfF«[‹ÖQ†¾J\²ø÷ñ°šr' [ 866.467926][T11907] Bluetooth: hci1: sending frame failed (-49) [ 866.471258][ T5946] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 866.997795][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2564'. [ 868.259942][T15512] 9p: Bad value for 'rfdno' [ 869.087698][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2568'. [ 869.232317][T15521] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2574'. [ 870.114439][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 870.117435][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 871.528396][T15585] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 872.414930][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 872.458496][T15620] __nla_validate_parse: 1 callbacks suppressed [ 872.458512][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 872.464661][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 872.566216][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 872.569279][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.572531][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.577998][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 872.580900][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 872.583707][ T9] usb 7-1: Manufacturer: syz [ 872.587754][ T9] usb 7-1: config 0 descriptor?? [ 872.591112][ T9] igorplugusb 7-1:0.0: incorrect number of endpoints [ 872.714955][ T5946] Bluetooth: hci3: command 0x0401 tx timeout [ 872.795446][ T29] usb 7-1: USB disconnect, device number 40 [ 873.002994][T15623] syzkaller0: entered promiscuous mode [ 873.005806][T15623] syzkaller0: entered allmulticast mode [ 873.028934][T15623] tipc: Started in network mode [ 873.031017][T15623] tipc: Node identity da13e0584203, cluster identity 4711 [ 873.035950][T15623] tipc: Enabled bearer , priority 0 [ 873.040301][T15622] tipc: Resetting bearer [ 873.052674][T15622] tipc: Disabling bearer [ 873.214895][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 874.114492][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2596'. [ 874.806665][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.862364][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 874.865651][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 874.902449][T15657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2598'. [ 874.906567][T15657] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2598'. [ 874.911915][T15657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2598'. [ 875.187787][T11907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.192746][T11907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 875.197170][T11907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 875.201277][T11907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 875.206273][T11907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 875.233112][T15661] wg2 speed is unknown, defaulting to 1000 [ 875.560278][T15661] chnl_net:caif_netlink_parms(): no params data found [ 875.604739][T15661] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.607309][T15661] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.609744][T15661] bridge_slave_0: entered allmulticast mode [ 875.612954][T15661] bridge_slave_0: entered promiscuous mode [ 875.616931][T15661] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.621339][T15661] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.624571][T15661] bridge_slave_1: entered allmulticast mode [ 875.628877][T15661] bridge_slave_1: entered promiscuous mode [ 875.644466][T15661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.650655][T15661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.666487][T15661] team0: Port device team_slave_0 added [ 875.668751][T15673] syz_tun: entered allmulticast mode [ 875.680106][T15661] team0: Port device team_slave_1 added [ 875.704981][T15661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.707347][T15661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.725298][T15661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.730108][T15661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.732353][T15661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.735247][T15670] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 875.742773][T15670] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 875.746650][T15661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.768359][T15670] vhci_hcd vhci_hcd.0: Device attached [ 875.781286][T15661] hsr_slave_0: entered promiscuous mode [ 875.783881][T15661] hsr_slave_1: entered promiscuous mode [ 875.786472][T15661] debugfs: 'hsr0' already exists in 'hsr' [ 875.788341][T15661] Cannot create hsr debugfs directory [ 875.925370][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 876.034993][ T841] usb 40-1: SetAddress Request (16) to port 0 [ 876.037034][ T841] usb 40-1: new SuperSpeed USB device number 16 using vhci_hcd [ 876.076933][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 876.080249][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.083887][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.089467][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 876.092563][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 876.096703][ T9] usb 5-1: Manufacturer: syz [ 876.106928][ T9] usb 5-1: config 0 descriptor?? [ 876.112336][ T9] igorplugusb 5-1:0.0: incorrect number of endpoints [ 876.173351][T15671] vhci_hcd: connection reset by peer [ 876.176258][ T103] vhci_hcd vhci_hcd.1: stop threads [ 876.177959][ T103] vhci_hcd vhci_hcd.1: release socket [ 876.180252][ T103] vhci_hcd vhci_hcd.1: disconnect device [ 876.196553][T15661] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.208416][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2606'. [ 876.290373][T14441] syz_tun (unregistering): left allmulticast mode [ 876.366581][T15661] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.374205][T15673] binder: BINDER_SET_CONTEXT_MGR already set [ 876.376344][T15673] binder: 15672:15673 ioctl 4018620d 80000040 returned -16 [ 876.384280][ T24] usb 5-1: USB disconnect, device number 38 [ 876.446562][T15672] syz_tun: left allmulticast mode [ 876.481561][T15661] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.557562][T15661] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.718046][T15661] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 876.723932][T15661] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 876.730718][T15661] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 876.735834][T15661] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 876.788633][T15661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.800337][T15661] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.810091][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.812588][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.820377][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.822749][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.846364][T15661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.994213][T15661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.028096][T15697] syzkaller0: entered promiscuous mode [ 877.030546][T15697] syzkaller0: entered allmulticast mode [ 877.048117][T15661] veth0_vlan: entered promiscuous mode [ 877.056919][T15661] veth1_vlan: entered promiscuous mode [ 877.080249][T15661] veth0_macvtap: entered promiscuous mode [ 877.084699][T15661] veth1_macvtap: entered promiscuous mode [ 877.096499][T15661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.118811][T15661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.136764][T14637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.142528][T14637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.146448][T14637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.150187][T14637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.275009][ T5946] Bluetooth: hci1: command tx timeout [ 877.871080][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.873713][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.889319][T14637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.892920][T14637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.965497][T15703] __nla_validate_parse: 1 callbacks suppressed [ 877.965510][T15703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2609'. [ 878.235234][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'. [ 878.323165][T15719] syzkaller0: entered promiscuous mode [ 878.325090][T15719] syzkaller0: entered allmulticast mode [ 878.339355][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 878.340139][ T40] audit: type=1326 audit(1775104207.596:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.353479][ T40] audit: type=1326 audit(1775104207.596:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.362077][ T40] audit: type=1326 audit(1775104207.596:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.377122][ T40] audit: type=1326 audit(1775104207.596:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.387575][ T40] audit: type=1326 audit(1775104207.596:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.396501][ T40] audit: type=1326 audit(1775104207.596:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.408633][ T40] audit: type=1326 audit(1775104207.596:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.417902][ T40] audit: type=1326 audit(1775104207.596:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.428477][ T40] audit: type=1326 audit(1775104207.596:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 878.438151][ T40] audit: type=1326 audit(1775104207.596:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15716 comm="syz.2.2613" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07f6c code=0x7fc00000 [ 879.038275][T15732] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2619'. [ 879.089788][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 879.181336][T15730] kvm: pic: single mode not supported [ 879.182515][T15730] kvm: pic: single mode not supported [ 879.186223][T15730] kvm: pic: single mode not supported [ 879.188174][T15730] kvm: pic: level sensitive irq not supported [ 879.192106][T15730] kvm: pic: single mode not supported [ 879.195257][T15730] kvm: pic: single mode not supported [ 879.197033][T15730] kvm: pic: level sensitive irq not supported [ 879.199408][T15730] kvm: pic: single mode not supported [ 879.202424][T15730] kvm: pic: single mode not supported [ 879.204173][T15730] kvm: pic: level sensitive irq not supported [ 879.206960][T15730] kvm: pic: non byte read [ 879.211174][T15730] kvm: pic: single mode not supported [ 879.212354][T15730] kvm: pic: single mode not supported [ 879.214108][T15730] kvm: pic: level sensitive irq not supported [ 879.355294][ T5946] Bluetooth: hci1: command tx timeout [ 879.365571][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2622'. [ 879.379254][T15730] wg2 speed is unknown, defaulting to 1000 [ 879.468352][T15746] can0: slcan on ttyS3. [ 879.697105][T15748] can0 (unregistered): slcan off ttyS3. [ 880.247321][T15768] fuse: Bad value for 'fd' [ 880.504985][T15779] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 880.507765][T15779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2629'. [ 880.781239][T15790] fuse: Bad value for 'fd' [ 880.924943][ T828] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 881.076157][ T828] usb 7-1: Using ep0 maxpacket: 32 [ 881.086682][ T828] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 881.089680][ T828] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 881.092411][ T828] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 881.096516][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 881.100328][ T828] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 881.103384][ T828] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 881.114919][ T841] usb 40-1: device descriptor read/8, error -110 [ 881.115308][ T828] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 881.122101][ T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.127464][ T828] usb 7-1: config 0 descriptor?? [ 881.271117][T15813] fuse: Bad value for 'fd' [ 881.369720][ T828] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 881.451747][ T5946] Bluetooth: hci1: command tx timeout [ 881.525471][ T841] usb usb40-port1: attempt power cycle [ 881.571637][T15784] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2632'. [ 881.572570][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2642'. [ 881.644563][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 881.722781][T15815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2643'. [ 882.096531][ T841] usb usb40-port1: unable to enumerate USB device [ 882.238680][ T841] usb 7-1: USB disconnect, device number 41 [ 882.254941][ T841] usblp0: removed [ 883.065024][ T841] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 883.182216][T15841] create_pit_timer: 11 callbacks suppressed [ 883.182233][T15841] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 883.194232][T15841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 883.197648][ T5946] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 883.206871][T15841] syzkaller0: entered promiscuous mode [ 883.209005][T15841] syzkaller0: entered allmulticast mode [ 883.235120][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 883.241375][ T841] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 883.244489][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.260335][ T841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 883.263171][ T841] pvrusb2: ********** [ 883.265134][ T841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 883.268602][ T841] pvrusb2: Important functionality might not be entirely working. [ 883.271217][ T841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 883.275647][ T841] pvrusb2: ********** [ 883.510208][ T2487] pvrusb2: Invalid write control endpoint [ 883.514968][T11907] Bluetooth: hci1: command tx timeout [ 883.621076][ T2487] pvrusb2: Invalid write control endpoint [ 883.623790][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 883.628911][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 883.631637][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 883.635660][ T2487] pvrusb2: Device being rendered inoperable [ 883.641102][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 883.644781][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 883.654987][ T2487] pvrusb2: Attached sub-driver cx25840 [ 883.658082][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 883.661960][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 883.669994][T15854] __nla_validate_parse: 1 callbacks suppressed [ 883.670008][T15854] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2659'. [ 883.745399][ T841] usb 7-1: USB disconnect, device number 42 [ 884.742943][T15864] Cannot find set identified by id 0 to match [ 885.362720][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 885.655159][T15878] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 885.657315][T15878] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 885.688950][T15878] vhci_hcd vhci_hcd.0: Device attached [ 885.955096][ T6000] usb 42-1: SetAddress Request (18) to port 0 [ 885.957895][ T6000] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 885.986750][T15885] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 885.990019][T15885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2668'. [ 886.235461][T15893] C: renamed from team_slave_0 (while UP) [ 886.239233][T15893] netlink: 'syz.0.2671': attribute type 2 has an invalid length. [ 886.241729][T15893] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2671'. [ 886.245876][T15893] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 886.255160][T15879] vhci_hcd: connection reset by peer [ 886.267862][T14637] vhci_hcd vhci_hcd.2: stop threads [ 886.270449][T14637] vhci_hcd vhci_hcd.2: release socket [ 886.273368][T14637] vhci_hcd vhci_hcd.2: disconnect device [ 886.708587][T15904] FAULT_INJECTION: forcing a failure. [ 886.708587][T15904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.712821][T15904] CPU: 0 UID: 0 PID: 15904 Comm: syz.0.2674 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.712840][T15904] Tainted: [L]=SOFTLOCKUP [ 886.712844][T15904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 886.712851][T15904] Call Trace: [ 886.712856][T15904] [ 886.712860][T15904] dump_stack_lvl+0x100/0x190 [ 886.712883][T15904] should_fail_ex.cold+0x5/0xa [ 886.712897][T15904] _copy_from_user+0x2e/0xd0 [ 886.712913][T15904] get_compat_msghdr+0xb3/0x4b0 [ 886.712930][T15904] ? _parse_integer_limit+0x17f/0x1d0 [ 886.712949][T15904] ? __pfx_get_compat_msghdr+0x10/0x10 [ 886.712967][T15904] ? ___sys_sendmsg+0x19d/0x1e0 [ 886.712981][T15904] ? kfree+0x2ec/0x6b0 [ 886.712996][T15904] ? __pfx__kstrtoull+0x10/0x10 [ 886.713015][T15904] ___sys_sendmsg+0x1b6/0x1e0 [ 886.713031][T15904] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.713045][T15904] ? __lock_acquire+0x4a5/0x2630 [ 886.713070][T15904] ? find_held_lock+0x2b/0x80 [ 886.713086][T15904] ? __pfx___might_resched+0x10/0x10 [ 886.713106][T15904] __sys_sendmmsg+0x2ff/0x430 [ 886.713119][T15904] ? __pfx___sys_sendmmsg+0x10/0x10 [ 886.713134][T15904] ? __fget_files+0x215/0x3d0 [ 886.713152][T15904] ? fput+0x79/0x100 [ 886.713166][T15904] ? ksys_write+0x1ac/0x250 [ 886.713176][T15904] ? __pfx_ksys_write+0x10/0x10 [ 886.713189][T15904] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 886.713207][T15904] ? lockdep_hardirqs_on+0x78/0x100 [ 886.713220][T15904] __do_fast_syscall_32+0xe3/0x8c0 [ 886.713234][T15904] do_fast_syscall_32+0x32/0x70 [ 886.713246][T15904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 886.713261][T15904] RIP: 0023:0xf7fa3f6c [ 886.713271][T15904] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 886.713282][T15904] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 886.713294][T15904] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000000 [ 886.713301][T15904] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 886.713308][T15904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 886.713315][T15904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.713321][T15904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.713334][T15904] [ 887.017178][T11907] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 887.021468][T11907] CPU: 2 UID: 0 PID: 11907 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.021503][T11907] Tainted: [L]=SOFTLOCKUP [ 887.021512][T11907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 887.021554][T11907] Workqueue: hci1 hci_rx_work [ 887.021587][T11907] Call Trace: [ 887.021594][T11907] [ 887.021602][T11907] dump_stack_lvl+0x100/0x190 [ 887.021667][T11907] sysfs_warn_dup.cold+0x1c/0x28 [ 887.021711][T11907] sysfs_create_dir_ns+0x24b/0x2b0 [ 887.021738][T11907] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 887.021784][T11907] ? find_held_lock+0x2b/0x80 [ 887.021805][T11907] ? kobject_add_internal+0x25f/0x930 [ 887.021849][T11907] ? kobject_add_internal+0x25f/0x930 [ 887.021874][T11907] ? do_raw_spin_unlock+0x145/0x1e0 [ 887.021918][T11907] kobject_add_internal+0x2c8/0x930 [ 887.021955][T11907] kobject_add+0x16a/0x1e0 [ 887.021970][T11907] ? __pfx_kobject_add+0x10/0x10 [ 887.022001][T11907] ? class_to_subsys+0x10f/0x150 [ 887.022022][T11907] ? kobject_put+0xb9/0x640 [ 887.022054][T11907] ? _raw_spin_unlock+0x28/0x50 [ 887.022078][T11907] device_add+0x294/0x1950 [ 887.022114][T11907] ? __pfx_dev_set_name+0x10/0x10 [ 887.022147][T11907] ? __pfx_device_add+0x10/0x10 [ 887.022164][T11907] ? mgmt_send_event_skb+0x2fb/0x460 [ 887.022202][T11907] hci_conn_add_sysfs+0x1a3/0x260 [ 887.022239][T11907] le_conn_complete_evt+0x11cb/0x1f40 [ 887.022261][T11907] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 887.022301][T11907] hci_le_conn_complete_evt+0x23c/0x3a0 [ 887.022337][T11907] ? skb_pull_data+0x15f/0x1e0 [ 887.022356][T11907] hci_le_meta_evt+0x34a/0x5f0 [ 887.022390][T11907] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 887.022429][T11907] hci_event_packet+0x682/0x11c0 [ 887.022450][T11907] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 887.022499][T11907] ? __pfx_hci_event_packet+0x10/0x10 [ 887.022528][T11907] ? kcov_remote_start+0x374/0x660 [ 887.022571][T11907] ? lockdep_hardirqs_on+0x78/0x100 [ 887.022597][T11907] hci_rx_work+0x451/0xfc0 [ 887.022648][T11907] process_one_work+0xa23/0x19a0 [ 887.022732][T11907] ? __pfx_process_one_work+0x10/0x10 [ 887.022769][T11907] ? __pfx_hci_rx_work+0x10/0x10 [ 887.022823][T11907] worker_thread+0x5ef/0xe50 [ 887.022874][T11907] ? __pfx_worker_thread+0x10/0x10 [ 887.022905][T11907] ? kthread+0x13a/0x450 [ 887.022947][T11907] ? __pfx_worker_thread+0x10/0x10 [ 887.022993][T11907] kthread+0x370/0x450 [ 887.023019][T11907] ? __pfx_kthread+0x10/0x10 [ 887.023065][T11907] ret_from_fork+0x754/0xd80 [ 887.023097][T11907] ? __pfx_ret_from_fork+0x10/0x10 [ 887.023150][T11907] ? __switch_to+0x7b4/0x1120 [ 887.023192][T11907] ? __pfx_kthread+0x10/0x10 [ 887.023219][T11907] ret_from_fork_asm+0x1a/0x30 [ 887.023269][T11907] [ 887.023288][T11907] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 887.150455][T11907] Bluetooth: hci1: failed to register connection device [ 887.889502][T15934] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 888.436396][T15938] netlink: 'syz.0.2684': attribute type 1 has an invalid length. [ 888.443286][T15938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2684'. [ 889.239117][T15963] netlink: 'syz.1.2693': attribute type 5 has an invalid length. [ 889.564057][T15975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2697'. [ 889.570332][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2697'. [ 889.882104][T15983] netlink: 'syz.3.2700': attribute type 1 has an invalid length. [ 889.885677][T15983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2700'. [ 890.543266][T15996] syz_tun: entered allmulticast mode [ 890.695727][T16000] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2706'. [ 890.702067][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2706'. [ 890.794970][T11032] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 890.892296][T16001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2707'. [ 890.957068][T11032] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 890.960994][T11032] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.967947][T11032] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 890.974620][T11032] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 890.978724][T11032] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 890.981868][T11032] usb 6-1: Manufacturer: syz [ 890.985554][T11032] usb 6-1: config 0 descriptor?? [ 890.989231][T11032] igorplugusb 6-1:0.0: incorrect number of endpoints [ 891.035100][ T6000] usb 42-1: device descriptor read/8, error -110 [ 891.091640][T16011] netlink: 'syz.0.2710': attribute type 12 has an invalid length. [ 891.095169][T16011] netlink: 'syz.0.2710': attribute type 29 has an invalid length. [ 891.098677][T16011] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2710'. [ 891.102074][T16011] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2710'. [ 891.150826][T16013] FAULT_INJECTION: forcing a failure. [ 891.150826][T16013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.155627][T16013] CPU: 3 UID: 0 PID: 16013 Comm: syz.0.2711 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.155649][T16013] Tainted: [L]=SOFTLOCKUP [ 891.155654][T16013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 891.155661][T16013] Call Trace: [ 891.155665][T16013] [ 891.155670][T16013] dump_stack_lvl+0x100/0x190 [ 891.155693][T16013] should_fail_ex.cold+0x5/0xa [ 891.155708][T16013] _copy_to_user+0x32/0xd0 [ 891.155724][T16013] simple_read_from_buffer+0xcb/0x170 [ 891.155765][T16013] proc_fail_nth_read+0x1af/0x230 [ 891.155782][T16013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.155810][T16013] ? rw_verify_area+0xce/0x6d0 [ 891.155828][T16013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.155843][T16013] vfs_read+0x1e4/0xb30 [ 891.155857][T16013] ? __pfx_vfs_read+0x10/0x10 [ 891.155867][T16013] ? find_held_lock+0x2b/0x80 [ 891.155879][T16013] ? __fget_files+0x215/0x3d0 [ 891.155893][T16013] ? __fget_files+0x21f/0x3d0 [ 891.155909][T16013] ksys_read+0x12a/0x250 [ 891.155933][T16013] ? __pfx_ksys_read+0x10/0x10 [ 891.155948][T16013] do_int80_emulation+0x141/0x6b0 [ 891.155964][T16013] asm_int80_emulation+0x1a/0x20 [ 891.155976][T16013] RIP: 0023:0xf71a5cab [ 891.155986][T16013] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 891.155997][T16013] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 891.156009][T16013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0 [ 891.156016][T16013] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 891.156023][T16013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 891.156029][T16013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 891.156036][T16013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 891.156050][T16013] [ 891.231258][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2705'. [ 891.243988][T15996] syz_tun (unregistering): left allmulticast mode [ 891.446634][ T6000] usb usb42-port1: attempt power cycle [ 891.500582][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 891.535407][T11032] usb 6-1: USB disconnect, device number 36 [ 891.719809][T16026] netlink: 'syz.3.2716': attribute type 1 has an invalid length. [ 892.005534][ T6000] usb usb42-port1: unable to enumerate USB device [ 892.097934][T16033] 9pnet_fd: Insufficient options for proto=fd [ 892.187253][T16030] /dev/sr0: Can't open blockdev [ 892.341859][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 892.341871][ T40] audit: type=1326 audit(1775104221.596:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.362512][ T40] audit: type=1326 audit(1775104221.606:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.381762][ T40] audit: type=1326 audit(1775104221.606:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.393297][ T40] audit: type=1326 audit(1775104221.606:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.406203][ T40] audit: type=1326 audit(1775104221.606:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.421886][ T40] audit: type=1326 audit(1775104221.606:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.473046][ T40] audit: type=1326 audit(1775104221.606:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.481471][ T40] audit: type=1326 audit(1775104221.606:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.492267][ T40] audit: type=1326 audit(1775104221.606:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.499424][ T40] audit: type=1326 audit(1775104221.606:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2721" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x7ffc0000 [ 892.646242][T16047] No source specified [ 893.232412][T16057] netlink: 'syz.1.2727': attribute type 62 has an invalid length. [ 893.235265][T16057] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 893.284983][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 893.416009][T16062] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 893.418163][T16062] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 893.430865][T16062] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 893.440725][T16062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 893.443059][T16062] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 893.454633][T16062] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 893.461931][T16062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 893.464141][T16062] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 893.476823][T16062] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 893.486503][T16062] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 893.495220][T16062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 893.497854][T16062] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 893.506381][T16062] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 893.517801][T16062] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 893.767811][T16076] netlink: 'syz.1.2731': attribute type 1 has an invalid length. [ 893.934699][T16082] fuse: Bad value for 'fd' [ 893.989637][T16084] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 894.210062][T16087] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 895.180284][T16108] __nla_validate_parse: 7 callbacks suppressed [ 895.180306][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2740'. [ 895.436292][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 895.514941][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 895.518196][T11907] Bluetooth: hci3: command 0x0401 tx timeout [ 895.524895][T11907] Bluetooth: hci1: command 0x0406 tx timeout [ 896.295404][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'. [ 896.390724][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 896.718847][T16131] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 896.722245][T16131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2748'. [ 897.525005][T11907] Bluetooth: hci4: command 0x0c1a tx timeout [ 897.595603][ T5946] Bluetooth: hci3: command 0x0401 tx timeout [ 897.598713][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 897.601589][T11907] Bluetooth: hci1: command 0x0406 tx timeout [ 899.604948][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 899.674975][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 899.675209][T16150] Bluetooth: hci1: command 0x0406 tx timeout [ 899.678233][ T5946] Bluetooth: hci3: command 0x0401 tx timeout [ 901.755190][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 901.755227][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 901.912275][T16165] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 901.915471][T16165] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 901.918164][T16165] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 901.920174][T16165] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 903.167103][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2766'. [ 903.170480][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2766'. [ 903.835007][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 903.994903][ T5946] Bluetooth: hci3: command 0x0401 tx timeout [ 904.076368][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 904.076476][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 904.289327][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 905.239591][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'. [ 905.938739][T16229] syz_tun: entered allmulticast mode [ 906.184934][ T24] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 906.186632][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'. [ 906.336592][ T24] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 906.339617][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.343270][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 906.349718][ T24] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 906.352884][ T24] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 906.357278][ T24] usb 8-1: Manufacturer: syz [ 906.362152][ T24] usb 8-1: config 0 descriptor?? [ 906.366816][ T24] igorplugusb 8-1:0.0: incorrect number of endpoints [ 906.571988][ T24] usb 8-1: USB disconnect, device number 37 [ 906.576532][T16228] syz_tun: left allmulticast mode [ 906.999533][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 907.043684][T16248] FAULT_INJECTION: forcing a failure. [ 907.043684][T16248] name failslab, interval 1, probability 0, space 0, times 0 [ 907.048242][T16248] CPU: 1 UID: 0 PID: 16248 Comm: syz.2.2787 Tainted: G L syzkaller #0 PREEMPT(full) [ 907.048262][T16248] Tainted: [L]=SOFTLOCKUP [ 907.048266][T16248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 907.048273][T16248] Call Trace: [ 907.048278][T16248] [ 907.048283][T16248] dump_stack_lvl+0x100/0x190 [ 907.048306][T16248] should_fail_ex.cold+0x5/0xa [ 907.048320][T16248] ? tomoyo_encode2+0xfb/0x3c0 [ 907.048336][T16248] should_failslab+0xc2/0x120 [ 907.048350][T16248] __kmalloc_noprof+0xe0/0x850 [ 907.048371][T16248] tomoyo_encode2+0xfb/0x3c0 [ 907.048389][T16248] tomoyo_encode+0x29/0x50 [ 907.048405][T16248] tomoyo_realpath_from_path+0x18c/0x690 [ 907.048425][T16248] tomoyo_path_number_perm+0x23c/0x580 [ 907.048452][T16248] ? tomoyo_path_number_perm+0x22e/0x580 [ 907.048467][T16248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 907.048496][T16248] ? find_held_lock+0x2b/0x80 [ 907.048507][T16248] ? hook_file_ioctl_common+0x146/0x410 [ 907.048522][T16248] ? __fget_files+0x215/0x3d0 [ 907.048537][T16248] ? __fget_files+0x21f/0x3d0 [ 907.048551][T16248] security_file_ioctl_compat+0xd3/0x230 [ 907.048566][T16248] __ia32_compat_sys_ioctl+0xc2/0x360 [ 907.048587][T16248] __do_fast_syscall_32+0xe3/0x8c0 [ 907.048603][T16248] do_fast_syscall_32+0x32/0x70 [ 907.048615][T16248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 907.048630][T16248] RIP: 0023:0xf7f07f6c [ 907.048639][T16248] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 907.048651][T16248] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 907.048663][T16248] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 907.048670][T16248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 907.048676][T16248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 907.048683][T16248] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 907.048689][T16248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 907.048703][T16248] [ 907.048727][T16248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 907.146415][T16252] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2789'. [ 907.200617][T16252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 907.500795][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'. [ 907.615859][T16275] syz_tun: entered allmulticast mode [ 907.696132][T16278] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 907.699221][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2799'. [ 907.864929][T10992] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 908.026679][T10992] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 908.029645][T10992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.033186][T10992] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 908.040354][T10992] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 908.044017][T10992] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 908.047451][T10992] usb 5-1: Manufacturer: syz [ 908.052518][T10992] usb 5-1: config 0 descriptor?? [ 908.056467][T10992] igorplugusb 5-1:0.0: incorrect number of endpoints [ 908.255445][T16287] Bluetooth: MGMT ver 1.23 [ 908.260698][ T24] usb 5-1: USB disconnect, device number 39 [ 908.264660][T16274] syz_tun: left allmulticast mode [ 908.849872][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 910.381975][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2810'. [ 910.545267][T16320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 911.747563][T16340] syzkaller0: entered promiscuous mode [ 911.749197][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'. [ 911.750425][T16340] syzkaller0: entered allmulticast mode [ 911.963374][T16342] netlink: 'syz.3.2818': attribute type 10 has an invalid length. [ 912.504891][ T5949] Bluetooth: hci1: command 0x0406 tx timeout [ 912.715780][T16342] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 912.899226][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'. [ 912.903603][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'. [ 913.015850][ T6000] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 913.086844][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2821'. [ 913.174948][ T6000] usb 6-1: Using ep0 maxpacket: 32 [ 913.177628][ T6000] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 913.181129][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.183689][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.187381][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.190737][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.194340][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.197048][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.199696][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.202139][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.205144][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.208105][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.211297][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.214329][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.217477][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.219918][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.223782][ T6000] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.226504][ T6000] usb 6-1: config 0 has no interface number 0 [ 913.230211][ T6000] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 913.232996][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.235940][ T6000] usb 6-1: Product: syz [ 913.237571][ T6000] usb 6-1: Manufacturer: syz [ 913.239460][ T6000] usb 6-1: SerialNumber: syz [ 913.243581][ T6000] usb 6-1: config 0 descriptor?? [ 913.246968][ T6000] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 913.434954][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 913.788874][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 913.792261][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 913.807517][ T6000] etas_es58x 6-1:0.2: could not parse product info: '424242424242' [ 913.868850][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 913.973992][T16370] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2828'. [ 913.993434][T16370] netlink: 'syz.0.2828': attribute type 2 has an invalid length. [ 914.001109][T16373] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2829'. [ 914.200106][ T5649] etas_es58x 6-1:0.2 can0: bit-timing not yet defined [ 914.205251][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 914.205732][ T6000] usb 6-1: USB disconnect, device number 37 [ 914.208641][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 914.214960][ T6000] etas_es58x 6-1:0.2: Disconnecting syz syz [ 914.215095][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 914.222608][ T5649] etas_es58x 6-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 914.282995][T16384] FAULT_INJECTION: forcing a failure. [ 914.282995][T16384] name failslab, interval 1, probability 0, space 0, times 0 [ 914.287599][T16384] CPU: 2 UID: 0 PID: 16384 Comm: syz.0.2831 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.287618][T16384] Tainted: [L]=SOFTLOCKUP [ 914.287641][T16384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 914.287648][T16384] Call Trace: [ 914.287652][T16384] [ 914.287657][T16384] dump_stack_lvl+0x100/0x190 [ 914.287679][T16384] should_fail_ex.cold+0x5/0xa [ 914.287693][T16384] should_failslab+0xc2/0x120 [ 914.287706][T16384] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 914.287724][T16384] ? do_getname+0x35/0x390 [ 914.287738][T16384] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 914.287754][T16384] do_getname+0x35/0x390 [ 914.287770][T16384] user_path_at+0x26/0x60 [ 914.287781][T16384] __ia32_sys_umount+0x109/0x190 [ 914.287794][T16384] ? __pfx___ia32_sys_umount+0x10/0x10 [ 914.287811][T16384] __do_fast_syscall_32+0xe3/0x8c0 [ 914.287825][T16384] do_fast_syscall_32+0x32/0x70 [ 914.287837][T16384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 914.287852][T16384] RIP: 0023:0xf7fa3f6c [ 914.287862][T16384] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 914.287873][T16384] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 914.287887][T16384] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 914.287894][T16384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 914.287901][T16384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 914.287907][T16384] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 914.287914][T16384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 914.287927][T16384] [ 914.351848][ C2] hpet_rtc_timer_reinit: 28 callbacks suppressed [ 914.351859][ C2] hpet: Lost 3 RTC interrupts [ 914.424435][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2830'. [ 915.062917][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2833'. [ 915.066086][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2833'. [ 915.761211][ T5946] ================================================================== [ 915.763831][ T5946] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xde7/0xf80 [ 915.766571][ T5946] Read of size 8 at addr ffff888023cb1480 by task kworker/u33:4/5946 [ 915.772148][ T5946] [ 915.773257][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.773289][ T5946] Tainted: [L]=SOFTLOCKUP [ 915.773297][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 915.773312][ T5946] Workqueue: hci1 hci_rx_work [ 915.773363][ T5946] Call Trace: [ 915.773371][ T5946] [ 915.773379][ T5946] dump_stack_lvl+0x100/0x190 [ 915.773408][ T5946] print_report+0x156/0x4c9 [ 915.773433][ T5946] ? __virt_addr_valid+0x81/0x620 [ 915.773457][ T5946] ? __phys_addr+0xe8/0x180 [ 915.773479][ T5946] ? l2cap_connect_cfm+0xde7/0xf80 [ 915.773500][ T5946] kasan_report+0xdf/0x1e0 [ 915.773519][ T5946] ? l2cap_connect_cfm+0xde7/0xf80 [ 915.773546][ T5946] l2cap_connect_cfm+0xde7/0xf80 [ 915.773571][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 915.773594][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 915.773616][ T5946] le_conn_complete_evt+0x195c/0x1f40 [ 915.773643][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 915.773671][ T5946] hci_le_conn_complete_evt+0x23c/0x3a0 [ 915.773695][ T5946] ? skb_pull_data+0x15f/0x1e0 [ 915.773717][ T5946] hci_le_meta_evt+0x34a/0x5f0 [ 915.773741][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 915.773765][ T5946] hci_event_packet+0x682/0x11c0 [ 915.773788][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 915.773811][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 915.773835][ T5946] ? kcov_remote_start+0x374/0x660 [ 915.773853][ T5946] ? lockdep_hardirqs_on+0x78/0x100 [ 915.773874][ T5946] hci_rx_work+0x451/0xfc0 [ 915.773899][ T5946] process_one_work+0xa23/0x19a0 [ 915.773929][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 915.773955][ T5946] ? __pfx_hci_rx_work+0x10/0x10 [ 915.773981][ T5946] worker_thread+0x5ef/0xe50 [ 915.774009][ T5946] ? kthread+0x13a/0x450 [ 915.774033][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 915.774059][ T5946] kthread+0x370/0x450 [ 915.774080][ T5946] ? __pfx_kthread+0x10/0x10 [ 915.774105][ T5946] ret_from_fork+0x754/0xd80 [ 915.774134][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 915.774162][ T5946] ? __switch_to+0x7b4/0x1120 [ 915.774182][ T5946] ? __pfx_kthread+0x10/0x10 [ 915.774217][ T5946] ret_from_fork_asm+0x1a/0x30 [ 915.774247][ T5946] [ 915.774254][ T5946] [ 915.853688][ T5946] Allocated by task 5946: [ 915.855075][ T5946] kasan_save_stack+0x30/0x50 [ 915.856775][ T5946] kasan_save_track+0x14/0x30 [ 915.858518][ T5946] __kasan_kmalloc+0xaa/0xb0 [ 915.860282][ T5946] l2cap_chan_create+0x44/0x940 [ 915.861937][ T5946] l2cap_sock_alloc.constprop.0+0xf5/0x1e0 [ 915.863860][ T5946] l2cap_sock_new_connection_cb+0x101/0x260 [ 915.865751][ T5946] l2cap_connect_cfm+0x4e2/0xf80 [ 915.867354][ T5946] le_conn_complete_evt+0x195c/0x1f40 [ 915.869100][ T5946] hci_le_conn_complete_evt+0x23c/0x3a0 [ 915.870882][ T5946] hci_le_meta_evt+0x34a/0x5f0 [ 915.872417][ T5946] hci_event_packet+0x682/0x11c0 [ 915.873993][ T5946] hci_rx_work+0x451/0xfc0 [ 915.875436][ T5946] process_one_work+0xa23/0x19a0 [ 915.877079][ T5946] worker_thread+0x5ef/0xe50 [ 915.878632][ T5946] kthread+0x370/0x450 [ 915.880004][ T5946] ret_from_fork+0x754/0xd80 [ 915.881552][ T5946] ret_from_fork_asm+0x1a/0x30 [ 915.883244][ T5946] [ 915.884143][ T5946] Freed by task 16408: [ 915.885542][ T5946] kasan_save_stack+0x30/0x50 [ 915.887185][ T5946] kasan_save_track+0x14/0x30 [ 915.888727][ T5946] kasan_save_free_info+0x3b/0x70 [ 915.890175][ T5946] __kasan_slab_free+0x5f/0x80 [ 915.891692][ T5946] kfree+0x1f6/0x6b0 [ 915.892966][ T5946] l2cap_chan_put+0x235/0x300 [ 915.894544][ T5946] l2cap_sock_cleanup_listen+0x4d/0x2d0 [ 915.896423][ T5946] l2cap_sock_release+0x69/0x280 [ 915.898170][ T5946] __sock_release+0xb3/0x260 [ 915.899887][ T5946] sock_close+0x1c/0x30 [ 915.901331][ T5946] __fput+0x3ff/0xb40 [ 915.902648][ T5946] task_work_run+0x150/0x240 [ 915.904180][ T5946] exit_to_user_mode_loop+0x100/0x4a0 [ 915.905908][ T5946] __do_fast_syscall_32+0x578/0x8c0 [ 915.907535][ T5946] do_fast_syscall_32+0x32/0x70 [ 915.909098][ T5946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.911191][ T5946] [ 915.912000][ T5946] The buggy address belongs to the object at ffff888023cb1000 [ 915.912000][ T5946] which belongs to the cache kmalloc-2k of size 2048 [ 915.916440][ T5946] The buggy address is located 1152 bytes inside of [ 915.916440][ T5946] freed 2048-byte region [ffff888023cb1000, ffff888023cb1800) [ 915.920796][ T5946] [ 915.921589][ T5946] The buggy address belongs to the physical page: [ 915.923716][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23cb0 [ 915.926632][ T5946] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 915.929294][ T5946] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 915.931679][ T5946] page_type: f5(slab) [ 915.932965][ T5946] raw: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 915.935666][ T5946] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 915.938489][ T5946] head: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 915.941726][ T5946] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 915.944567][ T5946] head: 00fff00000000003 ffffea00008f2c01 00000000ffffffff 00000000ffffffff [ 915.947293][ T5946] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 915.950089][ T5946] page dumped because: kasan: bad access detected [ 915.952161][ T5946] page_owner tracks the page as allocated [ 915.953988][ T5946] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5344, tgid 5344 (udevd), ts 22864595820, free_ts 22861128670 [ 915.961116][ T5946] post_alloc_hook+0x153/0x170 [ 915.962740][ T5946] get_page_from_freelist+0x111d/0x3140 [ 915.964516][ T5946] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 915.966414][ T5946] new_slab+0xa6/0x6b0 [ 915.967744][ T5946] refill_objects+0x26b/0x400 [ 915.969285][ T5946] __pcs_replace_empty_main+0x1ab/0x660 [ 915.971085][ T5946] __kmalloc_noprof+0x688/0x850 [ 915.972843][ T5946] sk_prot_alloc+0x10b/0x2a0 [ 915.974521][ T5946] sk_alloc+0x36/0xe80 [ 915.975968][ T5946] __netlink_create+0x5e/0x2c0 [ 915.977626][ T5946] netlink_create+0x293/0x610 [ 915.979238][ T5946] __sock_create+0x339/0x860 [ 915.980803][ T5946] __sys_socket+0x14d/0x260 [ 915.982261][ T5946] __x64_sys_socket+0x72/0xb0 [ 915.983793][ T5946] do_syscall_64+0x106/0xf80 [ 915.985296][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.987253][ T5946] page last free pid 5344 tgid 5344 stack trace: [ 915.989410][ T5946] __free_frozen_pages+0x7e1/0x10d0 [ 915.991306][ T5946] qlist_free_all+0x47/0xe0 [ 915.993033][ T5946] kasan_quarantine_reduce+0x1a0/0x1f0 [ 915.994993][ T5946] __kasan_slab_alloc+0x69/0x90 [ 915.996698][ T5946] __kmalloc_cache_noprof+0x243/0x6f0 [ 915.998437][ T5946] tomoyo_init_log+0x1a0/0x20c0 [ 916.000053][ T5946] tomoyo_supervisor+0x506/0x1340 [ 916.001787][ T5946] tomoyo_path_permission+0x270/0x3b0 [ 916.003595][ T5946] tomoyo_path_perm+0x364/0x460 [ 916.005190][ T5946] security_inode_getattr+0x116/0x280 [ 916.006932][ T5946] vfs_fstat+0x4b/0xe0 [ 916.008394][ T5946] __do_sys_newfstat+0x8b/0x110 [ 916.010073][ T5946] do_syscall_64+0x106/0xf80 [ 916.011813][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.014005][ T5946] [ 916.014890][ T5946] Memory state around the buggy address: [ 916.016788][ T5946] ffff888023cb1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.019389][ T5946] ffff888023cb1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.021938][ T5946] >ffff888023cb1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.024482][ T5946] ^ [ 916.025803][ T5946] ffff888023cb1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.028363][ T5946] ffff888023cb1580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.031200][ T5946] ================================================================== [ 916.036467][ T5946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 916.039146][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.042914][ T5946] Tainted: [L]=SOFTLOCKUP [ 916.044368][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 916.048105][ T5946] Workqueue: hci1 hci_rx_work [ 916.049744][ T5946] Call Trace: [ 916.050950][ T5946] [ 916.052012][ T5946] dump_stack_lvl+0x100/0x190 [ 916.053734][ T5946] vpanic+0x552/0x970 [ 916.055146][ T5946] ? __pfx_vpanic+0x10/0x10 [ 916.056659][ T5946] ? l2cap_connect_cfm+0xde7/0xf80 [ 916.058336][ T5946] panic+0xd1/0xe0 [ 916.059556][ T5946] ? __pfx_panic+0x10/0x10 [ 916.061062][ T5946] ? l2cap_connect_cfm+0xde7/0xf80 [ 916.062768][ T5946] ? preempt_schedule_common+0x42/0xc0 [ 916.064673][ T5946] check_panic_on_warn.cold+0x19/0x34 [ 916.066626][ T5946] end_report.part.0+0x3a/0x90 [ 916.068332][ T5946] kasan_report.cold+0xe/0x18 [ 916.069851][ T5946] ? l2cap_connect_cfm+0xde7/0xf80 [ 916.071501][ T5946] l2cap_connect_cfm+0xde7/0xf80 [ 916.073093][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 916.074851][ T5946] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 916.076846][ T5946] le_conn_complete_evt+0x195c/0x1f40 [ 916.078920][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 916.080830][ T5946] hci_le_conn_complete_evt+0x23c/0x3a0 [ 916.082657][ T5946] ? skb_pull_data+0x15f/0x1e0 [ 916.084298][ T5946] hci_le_meta_evt+0x34a/0x5f0 [ 916.085845][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 916.087759][ T5946] hci_event_packet+0x682/0x11c0 [ 916.089468][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 916.091795][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 916.093890][ T5946] ? kcov_remote_start+0x374/0x660 [ 916.095831][ T5946] ? lockdep_hardirqs_on+0x78/0x100 [ 916.097782][ T5946] hci_rx_work+0x451/0xfc0 [ 916.099530][ T5946] process_one_work+0xa23/0x19a0 [ 916.101379][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 916.103012][ T5946] ? __pfx_hci_rx_work+0x10/0x10 [ 916.104606][ T5946] worker_thread+0x5ef/0xe50 [ 916.105981][ T5946] ? kthread+0x13a/0x450 [ 916.107404][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 916.109159][ T5946] kthread+0x370/0x450 [ 916.110595][ T5946] ? __pfx_kthread+0x10/0x10 [ 916.112273][ T5946] ret_from_fork+0x754/0xd80 [ 916.113909][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 916.115576][ T5946] ? __switch_to+0x7b4/0x1120 [ 916.117162][ T5946] ? __pfx_kthread+0x10/0x10 [ 916.118666][ T5946] ret_from_fork_asm+0x1a/0x30 [ 916.120242][ T5946] [ 916.122083][ T5946] Kernel Offset: disabled [ 916.123526][ T5946] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:30:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85781095 RDI=ffffffff9b495680 RBP=ffffffff9b495640 RSP=ffffc900043ff250 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6333323038386552 R12=0000000000000000 R13=0000000000000030 R14=0000000000000010 R15=ffffffff85781030 RIP=ffffffff857810bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097143000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7187310 CR3=000000005bbea000 CR4=00352ef0 DR0=0000000000007fff DR1=0000000000000002 DR2=0000000000000081 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000010 RBX=ffff888042350540 RCX=0000000000000004 RDX=ffff888029774980 RSI=ffffc90000415134 RDI=ffff888029774980 RBP=ffff88802764c028 RSP=ffffc900038ef088 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000004 R11=00000000000001c6 R12=ffffc90000415100 R13=ffff88804235059c R14=ffff888042350548 R15=0000000000000004 RIP=ffffffff86811bff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3ae7e24300 ffffffff 00c00000 GS =0000 ffff888097243000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b6cc253f40 CR3=000000004b106000 CR4=00352ef0 DR0=0000000000007fff DR1=0000000000000002 DR2=0000000000000081 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=ce292447c52c932e 5857c06e4162d9cb ce292447c52c932e 5857c06e4162d9cb ce292447c52c932e 5857c06e4162d9cb ce292447c52c932e 5857c06e4162d9cb ZMM18=8785afb2a4ed0515 f616748ad576a87c 8785afb2a4ed0515 f616748ad576a87c 8785afb2a4ed0515 f616748ad576a87c 8785afb2a4ed0515 f616748ad576a87c ZMM19=a217000000000000 0000000000000004 a217000000000000 0000000000000003 a217000000000000 0000000000000002 a217000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4020001f6960328 020001f694032802 0001f6920302d802 0001f69003000800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01f6880300020001 f6860300020001f6 840300040001f680 0308080001f58002 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0390080000080001 00000008060a016c e400080001f58003 0408000608000408 ZMM24=5db12b3d5db12b3d 5db12b3d5db12b3d 5db12b3d5db12b3d 5db12b3d5db12b3d 5db12b3d5db12b3d 5db12b3d5db12b3d 5db12b3d5db12b3d 5db12b3d5db12b3d ZMM25=8aace5d08aace5d0 8aace5d08aace5d0 8aace5d08aace5d0 8aace5d08aace5d0 8aace5d08aace5d0 8aace5d08aace5d0 8aace5d08aace5d0 8aace5d08aace5d0 ZMM26=ebf2ea46ebf2ea46 ebf2ea46ebf2ea46 ebf2ea46ebf2ea46 ebf2ea46ebf2ea46 ebf2ea46ebf2ea46 ebf2ea46ebf2ea46 ebf2ea46ebf2ea46 ebf2ea46ebf2ea46 ZMM27=7a7bd4d47a7bd4d4 7a7bd4d47a7bd4d4 7a7bd4d47a7bd4d4 7a7bd4d47a7bd4d4 7a7bd4d47a7bd4d4 7a7bd4d47a7bd4d4 7a7bd4d47a7bd4d4 7a7bd4d47a7bd4d4 ZMM28=000000e0000000df 000000de000000dd 000000dc000000db 000000da000000d9 000000d8000000d7 000000d6000000d5 000000d4000000d3 000000d2000000d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=da220000da220000 da220000da220000 da220000da220000 da220000da220000 da220000da220000 da220000da220000 da220000da220000 da220000da220000 info registers vcpu 2 CPU#2 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff81fbea22 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff888021f2a4c0 RBP=ffff88802b242ca0 RSP=ffffc900010af870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed1005648595 R14=0000000000000001 R15=ffff88802b43c580 RIP=ffffffff8208422a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097343000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2b3c38 CR3=000000000e598000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000e5f1c5 RBX=ffff88801c7da4c0 RCX=ffffffff8b8e4c75 RDX=0000000000000000 RSI=ffffffff8de826d5 RDI=ffffffff8c1b19a0 RBP=0000000000000000 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a679d R10=ffff88802b533ceb R11=0000000000000000 R12=0000000000000003 R13=ffffed10038fb498 R14=0000000000000003 R15=ffffffff90d9f310 RIP=ffffffff8b8e35df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097443000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000081000000 CR3=000000000e598000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6890094aca59dc35 a512a92570ec3a94 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32530aa96f76f5de 280bc2387fd97a9d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54178bcb952530b8 d7b60d53abff91e9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e59d163d3097de61 b103fdcd9009b188 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000048c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5aa8000025200000 022ba128652e0080 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17a6000001000000 0100000080e40080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59650000000003ee 022ba0d000004c24 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000022ba189 022ba129022ba090 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a9cadd433f85f3c2 c1bcc6dbcef15d67 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e33bd445e6ccea36 7b30dbdcc828c8ef ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000