last executing test programs: 15.532346138s ago: executing program 2 (id=843): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x40488c0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x0, 0x0, 0x0, 0x2900}}) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) (async) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}}, 0x24040084) (async) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000001a40)=""/4103, 0x1007}, {&(0x7f0000002c40)=""/190, 0xbe}], 0x3}, 0x15}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000001940)=""/229, 0xe5}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4077, 0xfed}, {&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000500)=""/225, 0xe1}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x10102, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1, r3}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r0, 0x4, 0xd, 0x0, 0x80000000, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x10000, 0x311b}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8f6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x10e, 0x2, 0x8001}, {0x3, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x48e7, 0x0, 0xe3e3}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 14.766678391s ago: executing program 2 (id=846): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000005000000000800040001000000", 0x24) 14.684608043s ago: executing program 2 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000037c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x1a0, 0x16, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x1bc, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x22, 0x6, "4d469878f2a85db2b720f976b16d39c219c98899cba620e3dcdccef10c05"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xcd, 0x6, "6ac5e4e28982e0d0b335b0db8b1a69bfdb6e411183e5eea2addcbeacbe5be01aeafed8a48fa8d5c2d7a39c7eda204d61e7837c90e1f2d6397191b29fbf0ef3d4769c367377b5de19988b9ed399332ca29a9e50909016f546b9cb53f6cb74da2b414413776d3c8d9c350a83555f77bcd5e87ceab0856df138db8b92e85fd6258e93d02e449a7cca34dc14eb9d7532dbb6a3eb2b1c9d72a4e94c4581df38abed8b354e442e9ad6dc2aaa4bf457f469310c485f39aca1cf895ae09718c7f11d37952ac0713e9580a57c11"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "746784be62ec45842192e713d24265b501538b8f69d36bf33aa5f46ac1ff9b4d2201c268c26610018e6349dfee1fa7b3c674400f596342b3bf54120c0766e1a60623555e03686ddec6cfcd77cf826f90f0b2f7d97fc724b364e427bd17ea249d64e428c3b64fd18710c6c5f904672c5dbb26725e26bab881ef996261ea0a276656f8f6080070351c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x1b8, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xb2, 0x6, "c4b162f4de95846a99dfaafd5f28c14d7ba18e2804a90050623908b8aedf50a413c86a420ec45f88e7ee3ba300080cedad3d2788cf79933002cb26c69b14719b907a4ae2ca01071987382ec20c5b8e78a81ee2c41bc8dabe4b83caba4c78b1c43a82692a5cf143e6254f403551900ece865d7c1de82d9e91443f7290b2c52e8f4f653c7db9b4a7fa8c0f03db7fc1b69eeeb660d1ef5f485f64dab918c77ac8b3668895d21c834e72d0bc3201af07"}, @NFTA_TABLE_USERDATA={0xcd, 0x6, "983dd859d0fd7309806f14d1b5d5a35836f90c9cbe801375f83b6bde20b3528276e5fabf4e7f719f785a88b925760e31d2532a15be586e3489436b098c081dd887eb3dfab1e26339f64c7b81ef035348e482aef887df4b4c3e52777ee33f276f913405f019b15209e98b415640d10d8541759db60857e02c3048085e222a0ff440cea5f7ea5a28733344d0d10d5a7a7b2b84fa3aa26a4e8fb0425cbab890a907e184de934b0e774af188cdb2d46670a995fbdf92ecf82010721b1a16cdd64c96960851060208f62741"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x60, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x1e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x184, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x53, 0x6, 0x1, 0x0, "2d354539e83aee6d11873e2a262344a0d7263575306f656c19592b527f2bc1d8d39f505bac283a6316b81ec96153a3481ac15e6aa561444bde74ad9b4b8822b7910a4a11077ffc6430c41877b4b95e"}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x73, 0x6, 0x1, 0x0, "38dfcf193633579b587698e177a7f1cee13794532c1b37d5da1d622790bcb7a9905c3b3270aafd97f58529dac5ab2df553ca09d08878cf1e48f31e28771d18b45772283d0fcde9a8748f12e5cb20d624a6d0143165bb66437d3a09b5029da29e39a028da7a924c9da02d2c76dd59c4"}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0xdc, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xaf, 0x8, "275b8cfd3753c1e900bde0cd548f0c78db8e73760ee74f61a4a33c2377a2975d4cdcfcb96668e60ff9b7054eb3a05dabbf0137da443627d0916099c93b8785da438f6d1c93f730be53cf9f10a063d91e246d9faf211b27ed50b5753bfe168e6cc1818cb5c63b637ed4b8f02a81e0788e90bf72a87a3e61adca92d58860d1d903d9a033921dda3dade7e6112899969b5bf7ec117bd7ecd62bf1b110c673e70a9d9f06f9a552837664970b6f"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x706, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}]}]}, @NFT_MSG_NEWFLOWTABLE={0xc0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf499}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffa69}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x984}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000002}, 0x18) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000240)={0x1d, r9, 0x8000000000000002, {0x0, 0x0, 0x4}}, 0x18) close(r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r11, &(0x7f0000000000), 0x10) io_submit(r12, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r14, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="02100f031a00000025bd7000fbdbdf250500060033a000000a004e2000000004000000000000000000000000000000000010000000000000020013000f00000028bd700000000000040004000600000000020000000000000800000000000000070000000000000005000600ff2000000a004e2000000009fc0200000000000000000000000000000700000000000000010015004e24000005001a0000000000002000000000000000001ee588cc75034c3438d703000000000000000000000000000000000001060010000200100000"], 0xd0}}, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="010000000000bf1608494422d3a4feffffff0800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) 12.313068034s ago: executing program 2 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000"], 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8080) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x100, 0x2932) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x7fd, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0x936, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x6, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0xfffffffe, 0xfffffff9, 0xe55, 0x1000, 0x4d, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x9, 0x8, 0x95e, 0x0, 0xe, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x969c, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x15f, 0x20008, 0x8a8, 0x2, 0x40, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x4, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) readv(r5, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) (async) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async) r6 = syz_open_procfs(0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r6, @ANYRESHEX=r7, @ANYRESDEC=r0, @ANYRESDEC=r3, @ANYRES32=r6, @ANYRESHEX=r0, @ANYRES32, @ANYRES8=r1, @ANYRESOCT=r3], 0x40}, 0x1, 0x0, 0x0, 0xc0c1}, 0x4000044) 9.676979898s ago: executing program 2 (id=861): fsmount(0xffffffffffffffff, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x232) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000180), 0x1, 0x0) recvmsg(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) 9.218814013s ago: executing program 2 (id=867): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8.627600297s ago: executing program 32 (id=867): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.794875313s ago: executing program 0 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x2, 0x21}}, 0x1c}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010025bd7000fbcbdf250ab0"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x8}}}}}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) (async) r4 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x19, &(0x7f0000000300), 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c000000000140000140042"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) (async) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x10100000000001f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x88000102, 0x3}) (async) ppoll(&(0x7f0000000100)=[{r5, 0x120}], 0x1, 0x0, 0x0, 0x0) (async) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="3800000003010101000009000000000000000000140019800800010008040000080002"], 0x38}}, 0x0) 5.676196305s ago: executing program 0 (id=883): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x3, "43b6a6"}], 0x18}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.882951037s ago: executing program 0 (id=884): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000000)=0x200, 0x4) (async) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x2, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) 4.003136769s ago: executing program 4 (id=886): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) close(r3) 3.846191207s ago: executing program 4 (id=887): ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev, 0x4}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltaction={0x1ac, 0x31, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xac7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x92a6}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x1ac}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000100), 0x9, 0x10000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8001, 0xfffffffc, 0x2, 0x5}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x70}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$midi(r1, 0x0, 0x20) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 2.601212785s ago: executing program 3 (id=889): fsmount(0xffffffffffffffff, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x232) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000180), 0x1, 0x0) recvmsg(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) 2.600041291s ago: executing program 4 (id=890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x20, 0x76, 0x80000}, 0x20) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = syz_io_uring_setup(0x4b9, &(0x7f0000010400)={0x0, 0xb1a6, 0x2, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x100000e00000, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r8}, 0x0, 0x0}, 0x1c) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2.318935046s ago: executing program 1 (id=892): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x11, 0xffffffffffffffff, 0x2000) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x3}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) (async, rerun: 64) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async, rerun: 64) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) (rerun: 64) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1, 0x100, 0x7) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) (async) io_uring_enter(0xffffffffffffffff, 0x11c6, 0xc909, 0x4, 0x0, 0x0) (async, rerun: 64) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (rerun: 64) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 1.50537095s ago: executing program 3 (id=893): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x87}}, '.\x00'}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0xdddd1000, 0x1000, &(0x7f0000ecb000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x1fe, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x87}}, '.\x00'}) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2200, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0xdddd1000, 0x1000, &(0x7f0000ecb000/0x1000)=nil}) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x1fe, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) 1.500472595s ago: executing program 4 (id=894): mkdir(0x0, 0x0) r0 = fanotify_init(0x8, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fanotify_mark(r0, 0x22, 0x800101b, r2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)={'nl80211\x00'}, 0x9, 0x3) creat(0x0, 0x150) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5, @ANYBLOB="c01a3b13bc37b95fb72f1cfd79f70e2bf8962ccfd59b192349ff32c730892098deb7dc55937cd203408e6831fba543e82269cd7851189bcaf94cf8b74d3269e7a67116229a06ea670db49384f119cce97c37ab3cdf4afc711a6e40be572e6db3a5c7c0e5a42df70d4fb1b2600e197e185e90d00b2a9a4908912c6006"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1.347842441s ago: executing program 1 (id=895): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r4, 0x5601, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.246731197s ago: executing program 0 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = epoll_create1(0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r5) shutdown(r4, 0x0) close(r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0xc4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0xec, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x41, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r10, 0x29, 0x3b, 0x0, 0x8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x2}}, 0x10) bind$tipc(r11, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) sendto$inet6(r10, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffff69}, 0x1c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d"], 0x74}}, 0x20000014) 1.228511686s ago: executing program 1 (id=897): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$addseals(r0, 0x409, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0xfffffffd, 0xa, @ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0x5, 0xde}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r1, r0, 0x3, 0x2, 0x1}, 0x50) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x89}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8c0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffffe, 0x0, 0x8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x150}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x40844}, 0x20000001) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001900)={&(0x7f0000000880)={0x104c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x27, 0x45, "10b0da7cf98c22ad8d34b10deebbe2d439ff637759ca371750633e888d7cd3c65ae7bd"}]}, 0x104c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001980)=0x16, 0x4) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000002fc0)={0xfffffff9, 0x0, &(0x7f0000002f00)=[{&(0x7f00000019c0)=""/248, 0xf8}, {&(0x7f0000001ac0)=""/125, 0x7d}, {&(0x7f0000001b40)=""/201, 0xc9}, {&(0x7f0000001c40)=""/211, 0xd3}, {&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/161, 0xa1}], &(0x7f0000002f80)=[0x7, 0x4, 0xeef7], 0x7}, 0x20) (async) lsetxattr$smack_xattr_label(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)='security.SMACK64IPIN\x00', &(0x7f0000003080)={'\x00'}, 0x2, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000030c0)=""/215) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000031c0)={{0x3b, @multicast2, 0x4e23, 0x0, 'wrr\x00', 0x1, 0x0, 0x13}, {@multicast2, 0x4e24, 0x10004, 0x3, 0x7, 0x3}}, 0x44) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8a}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000003b00)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003380)={0x70c, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x543, 0x9, 0x6, 0x4, 0x5d, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xca58, 0x400, 0xfffa, 0x0, 0xfffc, 0x9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18a2, 0x4, 0x3, 0xd, 0x3, 0x2, 0xa1e, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x1ff, 0x8000, 0xff, 0xc6, 0x1, 0x7]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x4, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x16, 0x6, 0xc, 0x24, 0x60, 0x12, 0x60, 0x36, 0x60, 0x12, 0x9, 0x4, 0x18, 0x18, 0x16, 0x12]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x6c, 0x36, 0x30, 0x4, 0x18, 0x36, 0x30, 0x4, 0x48, 0x6, 0x36, 0xa, 0x1b, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x16, 0x9, 0x1, 0x60, 0x60, 0xb, 0x1, 0x0, 0x24, 0x18, 0x6c, 0x30, 0x24, 0x10, 0x5, 0x36, 0x48, 0xc, 0x48, 0x30, 0x9, 0x48, 0x16, 0x12, 0x9]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5a, 0x9, 0x60, 0x9, 0x3, 0x9, 0x3, 0x0, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xdfd, 0x1, 0x4, 0x9db, 0x4, 0x0, 0x9]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0xfff, 0x9, 0x1, 0x7, 0x4, 0xadd]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x4}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0xa}, {0x6, 0x4}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x3, 0x6}, {0x2}, {0x0, 0x6}, {0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x7, 0xa}, {0x2, 0x9}, {0x3, 0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x3, 0x6}, {0x3, 0xa}, {0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x6}, {0x4, 0xa}, {0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x7, 0x3}, {0x3, 0x6}, {0x4, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x30, 0x30, 0x6]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x60, 0x24, 0x1, 0x5, 0x5, 0x6, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x8, 0x31e, 0x6, 0x3, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0xe, 0x1, 0x7, 0x401, 0xffff, 0x53d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6}, {0x0, 0x3}, {0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x5}, {0x7}, {0x3, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcd, 0x0, 0x63, 0x0, 0x80, 0x2, 0xc, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x5}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x2}, {}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0x4}, {0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x3, 0x7}, {0x5, 0x9}, {0x1, 0x5}, {0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x6}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x6}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x4, 0x4}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x400, 0x8902, 0x8001, 0x9, 0xbdbe, 0x4cc, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x9, 0x6, 0x1, 0x3ff, 0x3ff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x30, 0x9, 0x6, 0x5, 0x48, 0x12, 0x6c, 0x3, 0x6, 0x2, 0x16, 0xc, 0x24, 0x36, 0x28, 0x36, 0x9, 0x60, 0x16, 0x1, 0x1, 0x4, 0x0, 0x36, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0x19c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa, 0x2, 0xe, 0x0, 0x8001, 0x6, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4fc8, 0xb, 0x0, 0x2, 0x9, 0x5, 0x35d]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x400, 0x8, 0x0, 0xaf0, 0x48aa, 0x4, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x3, 0x2, 0x200, 0x7, 0xe3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x18, 0x9, 0x17, 0x6c, 0x18, 0x48, 0x30, 0x9, 0x1b, 0x6, 0x60, 0x5, 0xc, 0xc, 0x36, 0x0, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x8, 0x4, 0x3, 0x3, 0x0, 0x6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x0, 0x4, 0x5, 0x7, 0xfff, 0x1000, 0x9]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0xa}, {0x2, 0x1b}, {0x5}, {0x5, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x7, 0x7}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x3}, {0x6, 0x2}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x4, 0x1}, {0x2, 0x9}, {0x5}, {0x6, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x2}, {0x4}, {0x0, 0x4}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x6}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x8}, {0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x4}, {0x7}, {0x7, 0x9}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x6}, {0x2}, {0x2, 0x8}, {0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x1, 0x1}, {0x5, 0x8}, {0x6, 0x1}, {0x6, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x7, 0x2}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x8}, {0x2}, {0x1, 0x5}, {0x1}, {0x6, 0x6}, {0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf90, 0x3ff, 0x68b0, 0x2, 0x4, 0xff, 0xff01]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0xfe01, 0x5, 0x2, 0x25, 0x73, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x0, 0x6, 0x18, 0x30, 0x6c, 0x1b, 0x1, 0xc, 0x48, 0x12, 0x0, 0x24, 0x18, 0x3, 0x30, 0xc, 0x2, 0xc, 0x1b, 0x48, 0x36, 0x1b, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x9}, {0x5, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x4, 0x7fff, 0x80, 0x1, 0x4, 0xd]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x12c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x9}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x2}, {0x6, 0x7}, {}, {0x5, 0x4}, {}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x4}, {0x7}, {0x4, 0x8}, {0x1, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x4}, {0x3, 0x7}, {0x3, 0xa}, {0x6, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x4, 0x6}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0xa}, {0x7, 0x1a}, {0x0, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8000, 0x1, 0x0, 0xff90, 0x1, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1, 0xa, 0x6, 0x60, 0xfff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x1}, {0x7, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x5, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x8}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xb, 0x2, 0x0, 0xdc, 0xf, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x5, 0x7, 0x100, 0x6, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x9}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x1}, {0x1}, {0x0, 0xa}, {0x5, 0x7}, {0x4, 0x2}, {0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x7}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x7}, {0x5, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x2}, {0x7, 0x3}, {0x7, 0x6}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x2, 0x6}, {0x2}, {0x7, 0x5}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x5, 0x3}, {0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x7, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x28, 0x7, 0x7, 0x1, 0x6, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf001, 0x9, 0x7, 0x8, 0x2, 0x8, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x4, 0x0, 0x6, 0x18, 0x18, 0x18, 0x12, 0x22, 0x24, 0x2, 0x5, 0x30, 0x48, 0x1b, 0x46, 0x60, 0x1, 0x9, 0x9, 0x1, 0x18, 0x4d, 0x30, 0x60, 0x3, 0x30, 0x2, 0x3, 0x1, 0x2, 0x1]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x36, 0xc, 0x6, 0x0, 0x18, 0xc, 0x12, 0x9, 0x9, 0x18, 0x48, 0x48, 0x59, 0x60, 0x3, 0x1, 0x343395b96ed0148a, 0x6c, 0x60, 0x12, 0x30, 0x1b, 0x6, 0x6c, 0xb, 0x30]}]}]}]}, 0x70c}, 0x1, 0x0, 0x0, 0x811}, 0x2804a000) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) syz_emit_ethernet(0x5a, &(0x7f0000003b40)={@local, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x2}, 0x16, 0x1, 0x0, 0x0, "ff05cfbc76c575ceabdd52b077a7c012f7f5e4f1367b4c750d7c39b16fb841a97970585552e668db59ea59ce40fc4974b926a9c776c482f3b2906bc70885f85a"}}}}, 0x0) (async) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000003bc0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000003c00)) write(r5, &(0x7f0000003c40)="92b517d629dc39ffca5cd7430ef273ffc68282e2f97fc87675e8dee57585465202552783f10c7101d616c6c05b0f9d0b5c724079b2a757273c169bd99d19b6aafa3d2a65f557490b0cfcddeec4bbbaf9623aee96cd3c9e9caff537fd93a87a297e235408c568fd1d79a8795e8d91201d710fe8e1e1d824d0634212abf4e8ca89208557d429f5a5bc5fdaf3ba430e293160fd0998dcf1c466ec6900f02d9ba0620c10ea6d4fddd8a3fd2940af1d9f7bf4978fa9c30b98a5b8f887ce76bf798ccd2a0ec02b473ed88a2b35061238e010531fa917a5dcf4274f569bee28e6", 0xdd) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003d80), 0x481, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000003dc0)=@o_path={&(0x7f0000003d40)='./file0\x00', r0, 0x4000, r6}, 0x18) 1.203951233s ago: executing program 4 (id=898): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0xec, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_ife={0xd4, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x88, 0x6, "23b336578e12376ff483232a6603c0e986e9193a43089af2a0c6e7828f8401bfcdb4cfd951b7e36fed61cf88bce56e28224332add3000000001efcedcc54cd69cd80ada24ae64d96fb30128c0e09a500b55c69b52691948b8a8886ae12ec163a43becde1e21d8f14dae05c625bc2f8ef6841f09459059aab59e1ab45ce7decca41f43a52"}, {0xc}, {0xc}}}]}]}, 0xec}}, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b812569036"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 1.126915215s ago: executing program 3 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="05003400c4000000080026"], 0x3c}, 0x1, 0x0, 0x0, 0x200048d7}, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0xfffffffffffffffa, 0xfffffffffffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) r6 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/dev\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1004}], 0x1, 0x239, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x125}) 985.61014ms ago: executing program 1 (id=900): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000140)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2b, 0x6, 0x7, 0x0, 0x0, @mcast1, @private1, 0x7800, 0x40, 0x9, 0x26}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x4}}, @fwd={0x10}]}, {0x0, [0x30, 0x61, 0x2e, 0x0, 0x61, 0x30, 0x2e]}}, &(0x7f0000000340)=""/38, 0x45, 0x26, 0x1, 0x87}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0xbff, 0x7b9b}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x8, 0x1, 0x5, 0x6, 0x1a000, r1, 0x9, '\x00', r2, r3, 0x3, 0x0, 0x2, 0x0, @value=r4, @void, @value=r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000004c0)="79bf61b3a9ae5a425a519de4d2e9a966933214cac52d63dc05e6c3f5558c7f506dddc66f6c1ad8c72fddba60df6066e8b3aaaf2a038e9625c2115069d114c28c9847419e7f00d6d3ba34bd6ce9afb00e629fff853b2c", &(0x7f0000000540)=""/109, &(0x7f00000005c0)="e1a7de", &(0x7f0000000600)="d7f24ba3d998ea9e73f5c8109005a3ac6a6d9bec58006176f4e828ae6d523f427fba85ecda452dcb737a1c850e369972462d46e2d8", 0x4, r4}, 0x38) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x1f9, 0xad7}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000700)={0x48, 0x6, 0x0, 0x0, r6}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000780)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x5, 0x18ccf, 0x1c4a83}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, &(0x7f0000000800)={0x48, 0x9, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={&(0x7f0000000900), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x98, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}]}, 0x98}, 0x1, 0x0, 0x0, 0xc4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'tunl0\x00', r2, 0x8000, 0x8, 0x7, 0xf, {{0x11, 0x4, 0x0, 0x23, 0x44, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@end, @rr={0x7, 0x7, 0x69, [@multicast2]}, @timestamp_prespec={0x44, 0xc, 0x46, 0x3, 0x7, [{@local, 0x10}]}, @timestamp_prespec={0x44, 0xc, 0xf9, 0x3, 0x9, [{@rand_addr=0x64010101, 0xd55}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x91, 0x3, 0x4, [{@broadcast, 0x1}]}]}}}}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1c, 0x3, 0x1000, 0x66, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, r10, 0x1, 0x5, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000d00)={'veth1_virt_wifi\x00', &(0x7f0000000c40)=@ethtool_rx_ntuple={0x35, {0x3, @esp_ip4_spec={@multicast1, @local, 0xe11, 0x5}, @usr_ip4_spec={@loopback, @multicast2, 0x86fc, 0x4, 0x1, 0x9}, 0xa, 0xa10b, 0x80, 0x1, 0xfffffffffffffffe}}}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000006c80)={0x4000000, 0x17c9, &(0x7f0000000d40)=[0x6, 0x0, 0xa49, 0x7, 0x9, 0x4, 0x80000000, 0x6, 0x4, 0x3, 0x4d, 0x1000, 0x9, 0x0, 0xfffffc9c, 0x7, 0x3, 0x2, 0x3, 0x0, 0x40, 0x80000001, 0x9, 0x7, 0x5, 0x0, 0x10, 0x4, 0x7fffffff, 0x5, 0x23, 0x791e024b, 0x10, 0x0, 0x7, 0x354d, 0x200, 0xffff, 0x6, 0x6, 0x0, 0x2, 0x7, 0xfff, 0xf8, 0x3, 0x6, 0x200, 0x1, 0x9, 0x800, 0x6, 0xb, 0xffffff51, 0xfffffffa, 0x5, 0xfffffffc, 0x10000, 0x0, 0x7, 0x569, 0x0, 0x6, 0x2, 0x7, 0x8, 0x4, 0x7fff, 0xcd3, 0x0, 0x4, 0xd, 0x8, 0x66b8, 0x8, 0x10000, 0x0, 0x5, 0xa, 0x75, 0x8, 0x7, 0x6, 0x1, 0x7, 0x8, 0xbf11, 0x7, 0x5, 0x101, 0xbb6, 0x5, 0xff, 0x9963, 0xfffffff7, 0x800, 0xfe, 0x2, 0x0, 0x3f, 0x0, 0xe, 0xffff, 0x0, 0x4, 0x7, 0xfffffffa, 0x8, 0x8, 0x0, 0x9, 0x7, 0xbd, 0x5, 0xfffffff5, 0x1000, 0x8, 0x6000000, 0xffff0000, 0x100, 0x7, 0x0, 0x2, 0x9, 0x8, 0x100, 0x82ee, 0x6, 0x42e, 0xffffffff, 0x3, 0x5, 0x41, 0x0, 0x4, 0x1, 0x1200000, 0x1, 0x4, 0xa, 0x5fae, 0xaf, 0x6, 0x0, 0x2, 0x1, 0xeff, 0x7, 0x1, 0x8, 0x0, 0x10000000, 0x33, 0x6e78, 0x1, 0x9, 0xfd, 0x0, 0x9f, 0x0, 0x8001, 0x75550d31, 0xc, 0x8, 0x10000, 0x2, 0x6, 0x9, 0x855, 0xdf, 0x200, 0x0, 0x58087a0, 0x4, 0x80, 0xfffff241, 0x10, 0x9, 0x7, 0x8, 0x2, 0x80000001, 0x2, 0x6, 0x0, 0xc, 0x7, 0xfffffff9, 0xfffff1fc, 0x4, 0x32c, 0x60, 0xd3, 0x5, 0x7, 0x5, 0x1, 0xf2ea, 0x3, 0x0, 0x3, 0x9, 0x0, 0x8, 0x2, 0x4, 0x7, 0xffff0000, 0xf20, 0xfffffffe, 0xfffffffc, 0x4, 0x10, 0x1ff, 0x8, 0x10001, 0x3, 0xe9c, 0x2, 0xffff, 0x1000, 0x2, 0x3, 0x3, 0x9, 0x7, 0x8, 0x7f, 0xfffffffe, 0xb6d, 0x4, 0x7, 0x3, 0x7, 0xffffffff, 0x5, 0x0, 0x100, 0x7, 0x7, 0x3c, 0x3, 0x100, 0x100, 0x4, 0x9, 0x5, 0x2, 0x1000, 0x6, 0x0, 0x2, 0x8, 0x7fffffff, 0x7, 0x5b0, 0x7ff, 0x8622, 0x4, 0x3, 0x1, 0x80000000, 0x0, 0xc, 0x10001, 0xfffffff7, 0x0, 0x292, 0x0, 0x7, 0xfffff45a, 0x80000000, 0x273a, 0xffffffff, 0x2, 0xffffffff, 0x5, 0xf, 0xe, 0x0, 0x6, 0xe, 0x1, 0x2, 0x1, 0x1, 0x80000001, 0x7, 0xfff, 0x7fffffff, 0x8, 0x7, 0xfffffffb, 0x0, 0x8, 0x6, 0x1, 0xe9e, 0xefa7, 0x0, 0xb87, 0x7, 0x6, 0x8, 0x0, 0x4, 0x6, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0x2, 0xb02, 0x10000, 0x2, 0x7, 0x97, 0x0, 0x8, 0x7118369c, 0xa, 0x42, 0x8, 0x7, 0x2, 0x8d, 0x3, 0x26e3, 0x8, 0xda74, 0x9, 0x401, 0xe, 0x6b, 0x8000, 0xd18d, 0x80000000, 0x751, 0x10001, 0x2, 0x0, 0x7, 0x1, 0x8000, 0x33c, 0x400, 0x800, 0x1000, 0x7, 0x101, 0x8, 0x7fff, 0x1, 0x2, 0x4f5, 0x4, 0x4, 0x0, 0x38, 0x9, 0xfffffff8, 0x226e, 0x2, 0x1, 0x6, 0xe, 0x2, 0x9, 0x0, 0x100, 0x3, 0xff, 0x1, 0x9, 0x4, 0x5, 0x9, 0x9, 0x8, 0x2, 0xba, 0x7, 0x10, 0x5, 0x76f5, 0x4, 0x7ff, 0x40, 0xffff, 0x0, 0x5, 0x2, 0x0, 0x8000, 0xffffffff, 0x76e, 0x8, 0x57, 0x80000000, 0x61c, 0x9, 0xce70, 0x90, 0x1, 0x3, 0x3, 0x1, 0x76, 0x5, 0x200, 0x6, 0x40, 0x9, 0x3, 0x9, 0x4, 0x7, 0x5, 0x3, 0xfffffffa, 0x200, 0x7f, 0x6150c807, 0x9, 0x47744c87, 0x1a, 0x1ff, 0xe, 0x200, 0x7, 0x9, 0x6, 0x8, 0x9, 0x4, 0x2, 0x4, 0x3ff, 0x3, 0x9df3, 0x8, 0x6, 0x10, 0x3, 0xfffffffd, 0x3, 0x6, 0x4, 0x7, 0x101, 0x2, 0x8, 0x1, 0x58, 0xfffffc01, 0x3, 0x35, 0x344, 0x2, 0x4, 0x1, 0x3, 0x8, 0x3, 0x4, 0x7ff, 0x73, 0x0, 0xff, 0xe, 0x1000, 0x714a, 0x14b, 0x1, 0x800, 0x1, 0x3, 0x3, 0x8, 0xfff, 0x5, 0x5, 0x9, 0x0, 0x892, 0xb000, 0x7fffffff, 0x8, 0x9, 0x3, 0x5, 0xd, 0x0, 0xe, 0xfa, 0x81, 0x1000, 0x6, 0x7cee, 0x10001, 0x81, 0x7ff, 0x1, 0x81, 0x4d08, 0x10001, 0x5, 0x80, 0xa, 0x798c, 0x0, 0x0, 0x8, 0x80, 0x5, 0x332, 0xffffffff, 0xfb, 0x6, 0x6, 0x1, 0x5, 0x3, 0x9, 0x340, 0x4, 0x517d, 0xfffffffb, 0x5, 0xffff8001, 0x7, 0x4, 0x10000, 0x400, 0x3, 0x7a, 0x3, 0x2, 0x6, 0x3, 0xffff, 0x0, 0x35c, 0x0, 0x3, 0x9, 0x1ff, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x8, 0x40, 0x8001, 0x8, 0x9, 0x9, 0x8, 0x3, 0x1, 0x2, 0x5, 0x8, 0x1, 0x10001, 0xb7, 0xffff8001, 0x7fffffff, 0x5, 0x914, 0x8, 0x5, 0xfffffffb, 0x6, 0x8, 0x5, 0x7, 0x5, 0x7, 0x0, 0x40, 0x5, 0x8, 0x2, 0xd, 0x4, 0xe6ff, 0x0, 0x12, 0x1, 0x3, 0x6, 0xfffffffb, 0x7, 0x4, 0x3, 0x3, 0x5, 0xfffffbf3, 0x7fff, 0x401, 0x0, 0x800, 0x8eb, 0x7fffffff, 0x4, 0x80000000, 0x4, 0x101, 0x2, 0x9, 0x7, 0x2, 0x81, 0x4, 0xfffffff6, 0xa, 0x60b7, 0x1, 0x5, 0x8, 0x6, 0xe, 0x9, 0x100, 0xfffffffd, 0xc, 0x3, 0x9, 0x94d, 0x0, 0x8, 0x8, 0x9, 0x6, 0x3, 0x528, 0x2, 0x7, 0x2, 0x3, 0x5, 0x4, 0x691, 0x6, 0x1, 0x2, 0x4, 0xd4f, 0x2, 0x81, 0x800, 0x1, 0x1, 0x3e9f, 0x7, 0x2, 0x7cd7, 0x1, 0xfffffffd, 0x4, 0x141, 0x0, 0xc0, 0x7f, 0x5, 0x1, 0x1, 0x8, 0x5, 0x2, 0x7f, 0xb, 0x7, 0x9, 0x0, 0x9, 0x6, 0xc51, 0x7, 0x0, 0x0, 0x0, 0x59e1, 0x5, 0x0, 0x6, 0x101, 0x0, 0x6, 0xaa, 0x9, 0x80000000, 0x5e6, 0x0, 0x6, 0x4, 0x6, 0xa8, 0x400, 0x0, 0x9, 0x2ef, 0x6, 0x31a, 0x0, 0xa1aa, 0x4, 0x5, 0x4, 0xd1, 0x7, 0x5, 0xd5, 0x80000000, 0x6, 0x8, 0x1, 0x0, 0x8, 0x6, 0x8, 0x8, 0x2, 0x9, 0x0, 0xd0, 0x18a, 0x7, 0x80000001, 0x9, 0x8, 0x8f6, 0x7, 0x7, 0x9e, 0x1, 0x7, 0x9, 0xffffffff, 0x80, 0xc000, 0x8, 0x7f, 0x8, 0xff, 0x9, 0x1, 0x4, 0x1, 0xffffffff, 0x6, 0x6, 0x9, 0xd, 0x80000001, 0x7fff, 0x5, 0x2, 0x67, 0xd, 0x4, 0x1fce, 0x6c, 0x3e4b7978, 0x3, 0x1, 0x7, 0x1e, 0xc, 0x80, 0xffffff9a, 0x200, 0xffffe260, 0xd, 0x4, 0x5, 0x8, 0x3, 0x72, 0x8, 0x10001, 0xffff, 0xee7a, 0x4, 0x7, 0x4, 0xfffffffe, 0x80, 0x5, 0x3, 0xfffffffa, 0x8, 0x5, 0x2, 0x2, 0x15, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x80, 0x5, 0x3, 0x6, 0x4, 0x1, 0x7, 0x5, 0xa59a, 0x3, 0x3694dc6a, 0x15e, 0xa3, 0x1, 0xc, 0x0, 0x8, 0x4, 0x9, 0x1, 0x2, 0xb6b, 0x0, 0x7, 0x2, 0xffffff7f, 0x2, 0x8, 0x8, 0x10001, 0x2, 0x1, 0x9, 0x1, 0x7, 0x81, 0x9, 0xaabd, 0x7fffffff, 0x2, 0x8, 0xf, 0x0, 0x1, 0x6, 0x7, 0x0, 0x42, 0x9, 0x9344, 0x7e, 0x1fffc, 0x5, 0x3, 0x8000, 0x1000, 0x81, 0x9c, 0x65e, 0xc, 0x40, 0x8, 0x8, 0x2, 0x4d20, 0x7fffffff, 0x1, 0x6, 0x9b71, 0x4, 0x5, 0x10001, 0x3, 0x10000, 0x8, 0xff, 0x5, 0x5, 0x2, 0x2, 0x2, 0x5, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x2, 0x9, 0x0, 0x98, 0x5, 0x7fff, 0x9f, 0xfffffff9, 0xe60, 0x4, 0x3, 0xd, 0xfffffc01, 0x9, 0xbe, 0x3000, 0x7b6c28dc, 0x7ff, 0x1ff, 0x7, 0xffffffff, 0xc4fb384, 0x0, 0x80000000, 0x8, 0x4, 0x2, 0x84, 0x5, 0x0, 0x5, 0x7, 0x3, 0x9, 0x0, 0x7, 0x7, 0x2, 0x6, 0x80, 0x17, 0x400, 0xc, 0x76e, 0xfff, 0xeece, 0x2, 0xa0000000, 0x80, 0x3, 0x9, 0x1, 0x2e44, 0x1, 0x80000000, 0xdef, 0x7f, 0xffffffff, 0x615, 0x80, 0x5, 0x3e, 0x800, 0x2, 0x1, 0x7, 0x3, 0x0, 0x2, 0x3, 0x25, 0x1, 0xc9c, 0x4, 0x8, 0x4, 0x1, 0xa, 0x8000, 0xfe79, 0x80, 0x8, 0x261, 0x80000001, 0x2, 0x36e, 0x79, 0x6, 0x8, 0x6, 0x125d, 0xc, 0x6, 0x7fff, 0x5, 0x10, 0x80000001, 0xffff8000, 0xc, 0x3ff, 0xffffffff, 0x4, 0x9, 0x8, 0x800, 0x2b4e837f, 0x66, 0x7ff, 0x0, 0x6, 0x60000, 0xff, 0x2, 0xa6, 0x2, 0x2, 0x3, 0x4, 0x5, 0x6, 0x52924f3b, 0x4, 0x0, 0x5, 0xc66, 0xcca, 0xdd41, 0x40, 0x5b, 0x4fd6738d, 0x4, 0x5, 0x700000, 0x60000000, 0x2, 0xd060, 0xf, 0x3, 0xf, 0x9, 0x5, 0xfffffff9, 0x0, 0xc, 0x1, 0x9, 0xf1c, 0x6, 0x94, 0x6, 0x2, 0x43a, 0x81, 0x86ce, 0x0, 0x101, 0x1, 0x4, 0x7, 0x80000001, 0x0, 0x100, 0x9, 0x8, 0x200, 0x8, 0x80, 0xffffffff, 0x1, 0x1795, 0x9, 0xfffffff7, 0x9, 0xfffffff0, 0x43, 0x7, 0x0, 0x5, 0x963, 0x0, 0xe, 0x3, 0x80, 0xe89, 0x9, 0x9, 0x2, 0x1, 0x18, 0x0, 0x6, 0x4, 0x248000, 0x7, 0x81, 0x0, 0x0, 0x5, 0x7, 0xf, 0x3, 0x1, 0x2, 0x8000, 0x8, 0xffffffff, 0x1, 0x9, 0x4, 0x1, 0x1000, 0xdb, 0xffffffff, 0x0, 0x8, 0x4, 0x6, 0x9, 0x6, 0x1, 0xfff, 0x1, 0x4, 0xd1, 0x6448, 0x6, 0x8, 0x2, 0x80, 0x4, 0x2, 0x40000, 0x3, 0x100, 0x40, 0x5, 0x8, 0x7ff, 0x101, 0xad, 0x7fffffff, 0x401, 0xff1, 0xff, 0x3, 0x0, 0xc8f1, 0x0, 0x2e21, 0x80000000, 0x1, 0x9, 0x8, 0x65ccdc82, 0x5, 0x1, 0x9, 0x4, 0x5, 0x4, 0x6, 0x4, 0x8000, 0xfffffff5, 0x1ff, 0x3c92, 0x6, 0x472, 0x9, 0x81, 0x7, 0x5, 0x9, 0x7, 0xb, 0x7, 0x8c4, 0x4, 0x2, 0x2, 0x3, 0x38, 0x2, 0x3, 0x5, 0x81, 0x80, 0x3ff, 0x8, 0xa1dc, 0x2890bd21, 0x5, 0xffffff79, 0x1, 0x551, 0x87d5, 0x57b, 0x0, 0x3, 0x7, 0x0, 0x4, 0x7fffffff, 0x1ff, 0x6, 0x6, 0x5, 0x1, 0x75c, 0x4, 0x68, 0xf0, 0x8, 0xfffffffc, 0x2, 0x8, 0x2, 0x7fffffff, 0x57c, 0xa, 0xffffffff, 0x3, 0x4, 0x6, 0x8, 0x5, 0x7, 0xfffff016, 0x200, 0x4, 0xfffffffc, 0x5, 0x0, 0x9, 0x8, 0xc, 0x5292, 0xfffffffc, 0xa, 0x6, 0x0, 0xffff, 0x10000, 0xe, 0xfffffff9, 0x2d9f, 0xff, 0x4, 0xc81, 0x1f, 0x3, 0xa3, 0x9, 0x10000, 0x3ff, 0x80000000, 0xa, 0x2, 0x5f3, 0x5, 0xb, 0x5, 0x2a54, 0x2, 0x9, 0x1, 0x6c2, 0x9, 0x2, 0x7fffffff, 0x7, 0x3ff, 0x2, 0xfffffff3, 0x6, 0xa, 0x3, 0x1, 0x228, 0x0, 0xfff, 0x2, 0x4954, 0x80000001, 0x40, 0x4c, 0xe, 0x8001, 0x1, 0x5, 0x7, 0x7ff, 0x3, 0xfffffffd, 0xd, 0x9, 0x2a, 0x73, 0x9, 0x7, 0x80000001, 0x9, 0x7, 0x7, 0xa283, 0x600, 0x3, 0x81, 0x40000000, 0x8137, 0x6, 0x5, 0x7, 0x7, 0x8a88, 0xfffffff9, 0x9a9c, 0x0, 0x3, 0x4000000, 0x13c33eef, 0xb2e, 0x7dc, 0x1ff, 0x9, 0x6, 0x4, 0x5, 0x12, 0x3, 0x7fffffff, 0x0, 0x6, 0x9, 0x400, 0x400, 0x9, 0x0, 0x2, 0x0, 0x2, 0x4ce, 0xb2ae, 0x8, 0x7f, 0x3, 0xffffffff, 0x7, 0x4, 0xa5, 0xfffffffa, 0xfa3, 0x9, 0xa6f1, 0x6, 0x4, 0x33c, 0x8001, 0x2, 0x10001, 0x7fffffff, 0x5, 0xf038, 0x2d95, 0x1000, 0x8001, 0x8001, 0x4, 0x80, 0x8, 0x8, 0x1, 0x10001, 0x4, 0xb494, 0x1fa, 0x0, 0x80, 0x8, 0x9, 0x2, 0x10, 0x4, 0x59, 0x5, 0x6, 0x1, 0xc, 0x8, 0x4, 0x691, 0x4, 0x3, 0x2, 0x4, 0x9, 0xb7, 0x6, 0x7, 0xa, 0x6b, 0x4, 0x9, 0x3, 0x1, 0x5, 0x46dd7923, 0x1, 0x2, 0x0, 0xb, 0x8, 0xe, 0x7f, 0x3, 0x7, 0x7, 0x9, 0xfffffffa, 0x0, 0x4, 0xc, 0xf, 0x7, 0x10001, 0xffffffff, 0x80000000, 0x8, 0x8, 0xf9, 0x8000, 0x97a, 0x8, 0x0, 0xe, 0x4, 0x2, 0x9, 0x1, 0x7, 0x2, 0x328, 0x81f1, 0x0, 0x7, 0x14000, 0xe267, 0xdfd2, 0xa8, 0x100, 0xffffffff, 0x1, 0x3ff, 0x0, 0xb53, 0x1ca, 0x8e61, 0xfffffff0, 0x0, 0x61, 0x4, 0x2, 0x9, 0x0, 0x2e, 0x4, 0x7, 0x0, 0x200, 0x9, 0x5, 0x40, 0x0, 0x6, 0x8000, 0x6, 0x0, 0x1000, 0x5638, 0xffff, 0x8, 0x2, 0x1, 0x9, 0xf, 0xa, 0x4, 0x400, 0x8, 0x6, 0x7, 0xfffffff9, 0x4, 0x3, 0x7fffffff, 0x101, 0xc, 0x21e, 0x8, 0x9, 0x8, 0x7, 0x2c, 0x0, 0x0, 0xa76, 0x50, 0xae, 0x4, 0x0, 0x80, 0x101, 0x1fd, 0x3, 0x1, 0xc44, 0x2, 0xf, 0x2, 0xfff, 0x9, 0x46b, 0x5, 0xf9b0, 0x5, 0x8, 0x7, 0x2, 0x4c, 0x3, 0x449, 0x5, 0xff, 0x80, 0xfffffffc, 0x2, 0x36b5, 0x5, 0x80000001, 0x2, 0x0, 0x10001, 0x9, 0x1, 0x40, 0x9, 0x0, 0x80, 0x1, 0xdee, 0x0, 0x5, 0xfffffffa, 0x7, 0x5, 0xfffff506, 0x5, 0x2, 0x598a2717, 0xc02, 0x0, 0x4, 0x6, 0xffffffff, 0x1, 0x1, 0x6, 0x9, 0x7, 0x0, 0x17f, 0xe0, 0x5, 0x6, 0x2, 0x9, 0x7fffffff, 0x1ff, 0x3d2, 0x10000, 0x2, 0x7fff, 0x8, 0x95, 0x4, 0x7, 0x2, 0x2, 0x80000000, 0x8, 0x9e43, 0x8, 0x1, 0x455e4b22, 0x16, 0x2049, 0x200, 0x2, 0x6, 0x1, 0x1ff, 0x3ff, 0x6, 0x1, 0x5, 0x1, 0x0, 0x31a, 0xfffc0000, 0x8, 0x89e9, 0x2, 0x0, 0x2, 0x7fff, 0x1, 0x2, 0x5, 0x4a59396b, 0xd5, 0xfff, 0xffffffff, 0x22a86a41, 0x9, 0x2, 0x80000001, 0x2, 0x60000000, 0x425, 0x8, 0x8, 0x4, 0x7, 0x0, 0x1, 0x6, 0x4, 0x3, 0x9, 0x27, 0x2, 0x6, 0x3, 0x8, 0x5f, 0x92d8, 0x4, 0x4, 0x5, 0x0, 0x7fff, 0x5, 0x100, 0x8, 0xa28, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0xc6b, 0x5, 0x13, 0x3ed, 0x75, 0x7, 0x8, 0x6eb, 0xa5e, 0x2, 0x9, 0x800, 0x3, 0xf, 0x6, 0xc, 0x200, 0x6, 0x0, 0x9, 0x80, 0x6514, 0x7, 0x6, 0x2, 0x2, 0xffff, 0x6, 0x6, 0x4, 0x200, 0x72, 0x7, 0x4, 0xa, 0x3, 0x4, 0x9, 0x8, 0x6, 0x7, 0x0, 0x3ff, 0x1000, 0xfed, 0x10000, 0x1, 0x1, 0xfffffbff, 0x0, 0x2, 0xc, 0x23, 0x5, 0x400, 0xfffffffc, 0x0, 0x8, 0x0, 0x3a0f, 0x86, 0x5, 0x3, 0x4, 0xb8f7, 0x0, 0x8, 0x0, 0xb, 0x6, 0xfffffc00, 0x7fff, 0xe7c, 0x5, 0x979, 0x7, 0x58a, 0x88, 0x7, 0x0, 0x8, 0x1, 0x4, 0x7, 0x1, 0xf1, 0x4, 0x7, 0x2, 0x3, 0x2, 0x1000, 0x6, 0xc, 0x5, 0x3, 0x7, 0x81, 0x4, 0x2, 0x2, 0x200, 0xd, 0x6, 0x7, 0x5, 0xfffffff3, 0x8, 0x6, 0x200, 0xffff1b2b, 0x3c6, 0x5, 0x4, 0x5, 0x80000000, 0x1, 0x0, 0x3, 0x3e2, 0x9, 0x81, 0x8, 0x0, 0x1, 0xffffff01, 0x7ff, 0x1, 0x7, 0x81, 0x5, 0xffff8001, 0x3, 0x10, 0x1ff, 0x80, 0x39ac, 0x5, 0x3ff, 0x5, 0xb, 0x4, 0x3, 0x3, 0x3f, 0x10000, 0xc23, 0x3, 0x2, 0x4, 0xa1a, 0xffff, 0x6, 0x6, 0x400, 0x6, 0x6, 0x6, 0x1, 0xaa, 0x1000, 0x44, 0x5c2e5fa6, 0x0, 0x7, 0x6, 0x4a7, 0x8, 0x6, 0x4, 0x0, 0x4, 0x1000, 0x2, 0xa46, 0xfc42, 0x81, 0xfffffff9, 0x7fff, 0x8, 0x0, 0x8, 0x8000, 0x7, 0x1, 0xbf, 0x5, 0x0, 0x401, 0x1, 0x7, 0x81, 0x10001, 0x30, 0x5, 0x80000001, 0x800, 0x599, 0x9, 0xf, 0x3, 0x8, 0x3, 0x1, 0xd4, 0x25e, 0x6, 0x2, 0x0, 0x9, 0xffffffff, 0x80000001, 0xffffffff, 0x101, 0x6, 0x4, 0x8964, 0x8, 0x3, 0x3, 0x2, 0xb, 0x0, 0x9, 0x0, 0x6, 0x5, 0x1ff, 0x2, 0x7, 0x1, 0x101, 0x1, 0x10001, 0x9a8c, 0x6, 0x1, 0x1ff, 0x10000, 0x4, 0x3ff, 0x8, 0x7ff, 0x3, 0x80000001, 0x6, 0x9, 0x2, 0x4, 0x0, 0xffffffff, 0x3, 0x5, 0x40, 0x7, 0x3, 0x0, 0x0, 0x8, 0x3, 0x8, 0x2, 0x0, 0xff, 0x3, 0xac0, 0x6, 0xfffffffd, 0x9, 0xca2, 0x6, 0x5, 0x4, 0x8, 0x4, 0x5, 0xcdd, 0xd9d5, 0x80, 0xfffffff8, 0x6, 0xd298, 0x8e36, 0x4, 0x536, 0x4, 0x4, 0x9, 0x8, 0x7, 0x5, 0x0, 0x8, 0x7, 0x2, 0x9, 0x5, 0xa, 0x849, 0xfffffffa, 0x3, 0x80000000, 0x6, 0x4859ca0d, 0x1, 0x200, 0x7, 0x6, 0x1, 0xfffffffa, 0x2, 0xffff1cca, 0x4, 0x0, 0x10000, 0x355a, 0xffffffff, 0x5, 0x5, 0x1, 0x8, 0x7ff, 0x2, 0x4, 0x8, 0x10001, 0xfffffff5, 0x3ff, 0x4, 0x101, 0x10001, 0xc, 0x0, 0x4bf876e2, 0x1000, 0x7, 0x8, 0x9, 0xb, 0x7fffffff, 0x0, 0x8, 0xfffffff8, 0x0, 0x2, 0x4, 0x6, 0x2c91, 0x693e9906, 0x8, 0x7f, 0xe6, 0x1e9, 0x1, 0xa, 0x8, 0xa88d, 0x6, 0x7, 0x7, 0x5fd9, 0x5, 0x7ff, 0xff, 0xe, 0x6, 0x0, 0x9, 0x1, 0x7, 0x2, 0x5d, 0x6, 0x3, 0x800, 0x5, 0x3, 0x3, 0xd, 0x4, 0xe, 0xea6, 0x3080, 0xfc44, 0x8001, 0xffff, 0x3, 0xa3, 0x9, 0x0, 0x2, 0xffffffff, 0x2, 0x5d15e9de, 0x7d, 0x7, 0xf, 0x800, 0x4f58, 0x0, 0x5, 0x194, 0x4, 0x1, 0x0, 0x5, 0x0, 0x219f, 0xffffffc0, 0x4, 0xe926, 0x1, 0x1, 0x67b4, 0x7, 0x2, 0x2, 0x2, 0xf9, 0x8, 0x3, 0x3, 0x95f3, 0x2, 0x10000, 0x82ea, 0xb, 0x7f, 0xbfa, 0x278, 0x4, 0x9, 0x2, 0x0, 0xffffff00, 0xffffffff, 0x8, 0x9, 0x3, 0x2, 0x8000, 0x2383, 0x6, 0x2, 0x3, 0x263, 0x2, 0x6, 0x0, 0x7, 0x3, 0xd, 0xffffffff, 0x1, 0xb, 0xfffffff8, 0x7, 0x7, 0x80000001, 0xffffff1e, 0x81, 0x3ff, 0x3, 0xad, 0x10000, 0x2, 0x9, 0x8, 0x1, 0x9, 0x7, 0x3, 0xca01, 0x0, 0xfffff000, 0x9, 0x1, 0x212, 0x4, 0x6, 0xffff, 0x4, 0x9, 0x4, 0x1, 0xabdb, 0x7, 0x0, 0x3, 0x5, 0x4, 0x2, 0x3, 0x3, 0x1, 0x7, 0x1, 0xbf, 0x10000, 0x2, 0x1ff, 0x5, 0x0, 0x9, 0x1, 0x2, 0x4, 0x1, 0x6, 0x101, 0x6, 0x5, 0x7, 0x3639, 0x40, 0x4, 0x8, 0x1, 0xfffffe00, 0x5, 0x4, 0xb, 0x2, 0x5, 0x6c, 0x5, 0xfffffff7, 0x8, 0x9, 0x3ff, 0xeb64, 0x4e, 0x7f, 0x3, 0x80, 0x7, 0x3, 0x76b, 0x3, 0x7fffffff, 0x9, 0x4, 0x0, 0x3, 0x7f, 0x4, 0x3, 0x0, 0x1000, 0xbe, 0xfffffff8, 0x0, 0x7, 0xfff, 0x9, 0x0, 0x8, 0xf, 0x2, 0x5, 0x0, 0x2, 0x3f, 0x4, 0x101, 0xe, 0x2, 0x2, 0x0, 0x4, 0x2c, 0x7, 0x36, 0x7, 0xee, 0x2, 0x0, 0x6, 0xc6, 0x2, 0xffffff00, 0x2, 0x1000, 0x6, 0x2, 0x6, 0x1000000, 0x3, 0x0, 0x9, 0x7, 0xfe1, 0x7dc3, 0x6, 0x6, 0x8da0, 0x97, 0x200, 0x2, 0x8001, 0x80000001, 0x2bf, 0x8000, 0x80, 0x5, 0x1, 0x6, 0xfffffffd, 0x6, 0x4, 0xa09, 0xa, 0x7f, 0xe3ac, 0x9, 0xd, 0xfff, 0x10, 0x5, 0x7, 0xfffffff8, 0x4, 0x8, 0xa, 0x9, 0xc4, 0x9, 0x81, 0x6, 0x2, 0x0, 0xd, 0x5, 0x7fffffff, 0x9, 0x8, 0x0, 0x20893a69, 0xa35967f8, 0x243, 0x80000000, 0xfffffffe, 0x7, 0x2649066d, 0x9, 0x6, 0x7, 0xc, 0x4, 0x44c2, 0x7, 0x7, 0x7, 0x7, 0x7fff, 0x0, 0x4, 0x2, 0x1, 0x2, 0x1, 0x1800, 0x10000, 0xa, 0xfffffffd, 0x6382f241, 0x5, 0x8, 0xa, 0x6, 0x6, 0xb, 0x1, 0xdcf, 0x6, 0x1, 0x2, 0x5d62f586, 0x8, 0x4, 0x1ff, 0xfff, 0x6, 0x2, 0xc092, 0xffffff01, 0xe553, 0x8, 0x101, 0x8, 0x0, 0xba44, 0x4, 0x4, 0x8, 0x6d, 0x9, 0x8, 0x7, 0xa, 0x6, 0xac, 0x67c9, 0x5, 0xf, 0x7fffffff, 0xfffffffc, 0x5, 0x200, 0xa, 0x101, 0xfffffff0, 0x2, 0x9, 0x2, 0x0, 0x10000, 0x81, 0x1, 0xfffffbff, 0xb, 0x8, 0xc5, 0x1, 0x3ad71703, 0x7, 0x5, 0x27d, 0xea8, 0x3, 0x9, 0x3, 0x7, 0x8, 0x4, 0xc, 0x1, 0x3, 0x6, 0x9, 0x0, 0x2, 0x400, 0x7ff, 0x9e5, 0x6, 0x9, 0x4, 0x0, 0xe17, 0x3ff, 0x0, 0xb, 0x5, 0xa, 0x3f06, 0x1c, 0x1, 0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0xffffff97, 0x7f, 0x1, 0x6, 0x1, 0x8, 0x4, 0x8, 0x7, 0xd, 0x3, 0x3, 0x1, 0xdd0, 0x9, 0x4, 0x4, 0x10000, 0xfffffffd, 0x0, 0x3, 0x307, 0x81, 0x6, 0x5, 0xfff, 0x3, 0x6, 0x7fff, 0x8, 0xd, 0x40, 0x1, 0xffff, 0x9, 0x7f, 0x6, 0xef, 0x7b3, 0x3ff, 0x1, 0x3, 0xfffffffa, 0x5, 0x4, 0x7fffffff, 0xc, 0xfffffff9, 0x9c96, 0xffff, 0xfffffffb, 0x0, 0x81, 0x80, 0x33ae, 0x9, 0x100, 0x1fffc0, 0x1, 0x5, 0xc, 0xfffffff8, 0xffffffff, 0xd44, 0x3, 0x0, 0x2, 0x10, 0x1, 0x7, 0x4, 0x2, 0xb1, 0x10000, 0x345f9028, 0x8, 0x4c5, 0x6b6, 0xb5, 0x9, 0x9, 0x0, 0x9, 0x9, 0x2, 0x7, 0x1bb, 0x80, 0x0, 0x200, 0x2, 0x4, 0x5, 0x1, 0x6, 0xfffffff9, 0x5, 0x2, 0x9, 0x9, 0x4, 0x1, 0x4, 0x6, 0x9, 0xb9da, 0x7, 0x3, 0x800, 0x4, 0x8, 0xffffbd04, 0x2581, 0x5, 0x3, 0x6, 0x10001, 0x5, 0x9dc, 0x1a3, 0x9, 0x9, 0x8a6, 0x20f58b4a, 0x4, 0x4, 0xfac9, 0xffffff7f, 0x6, 0x5, 0x9, 0x7fff, 0x6, 0x10, 0x4, 0xffff, 0x7e6, 0x4, 0x1ff, 0x5, 0x9, 0x9, 0x9, 0x8, 0x8, 0x2, 0x3d26f085, 0x6, 0x3, 0xfffffffb, 0x6, 0x9, 0x5, 0x8, 0x5, 0x71c10048, 0x6, 0x9, 0x2704, 0x5, 0xfffffffb, 0x200, 0x3, 0x7, 0x2891, 0x1, 0xfffffffa, 0x7, 0x10, 0x5, 0x9, 0x7, 0x2ac4, 0x8855, 0x1000, 0x3, 0x1f0b9d5b, 0x1, 0x7, 0xffffff41, 0x17, 0x5, 0x2, 0xfffffffd, 0x1, 0x7fff, 0x6, 0x4, 0x9, 0x8, 0x7, 0x1000000, 0xfffffffa, 0xfff, 0x4, 0x0, 0x1, 0xf, 0x9, 0x8, 0x6, 0x1, 0x571, 0x8, 0x1, 0x7, 0x0, 0x80000000, 0x0, 0x2, 0x46, 0x1755, 0x1, 0x0, 0x400, 0x6, 0x4, 0x5, 0x5608, 0x4, 0x6470, 0x8, 0xfffffffb, 0x4, 0x9f3984c1, 0x10, 0x80000000, 0x4a5, 0x3, 0x1, 0x2, 0x49a2, 0x10001, 0x9c80, 0x0, 0x7ff, 0x2af9, 0x88, 0x0, 0x0, 0x9, 0x8, 0xd, 0xbc, 0x4, 0x4d, 0x4, 0x401, 0xfffffa7e, 0x2, 0xf0d, 0x6, 0xbb60, 0x6, 0x3ff, 0xfffffff9, 0x1, 0xffffffff, 0x8000, 0x0, 0x3ff, 0x5, 0x4a8e45d3, 0x16af461a, 0x7, 0x4, 0x3, 0x3, 0x8, 0xd90f, 0x4, 0x0, 0xd2, 0x9c18, 0x1, 0x2, 0x6, 0x80, 0x2, 0x80000000, 0x6, 0x60, 0x391, 0x7ff, 0x3, 0xc, 0xfffffffc, 0x8, 0x5, 0x4, 0xc12a, 0xe70, 0x8, 0x4, 0x1000, 0x3bf4, 0xd5, 0xfffffff8, 0xb, 0x6, 0xefd, 0x0, 0x3, 0x4, 0x3, 0x8, 0x7, 0x4, 0x4, 0x0, 0x10000, 0x7, 0x39800, 0x4, 0x400, 0x8cd, 0xfffffff0, 0x0, 0x8, 0x1, 0x1, 0xcc4, 0x2, 0x3, 0x5, 0x7, 0x3, 0x3, 0x7, 0x4, 0x7, 0xf7, 0x8, 0x1, 0x4, 0xb, 0x5, 0x0, 0x4, 0x5, 0x2, 0x5, 0xff, 0x3, 0x1, 0x80000001, 0x10031ce3, 0x1, 0x18000000, 0x32, 0x9, 0x2, 0x80000001, 0x8, 0xdc8, 0xfff, 0x8, 0x4, 0x5, 0x6, 0x3, 0x6, 0x1, 0x1, 0x9ecc, 0x81, 0x347f, 0x4, 0x3, 0xfffffff9, 0x9, 0x8001, 0x9, 0x6, 0x7fffffff, 0x4, 0xffffffff, 0x3, 0x1c00, 0x2, 0x0, 0x80, 0x8, 0x3, 0x1, 0x8, 0x9a8, 0x5, 0x8000, 0xfffffffa, 0x787a1a95, 0x6, 0x3, 0x1, 0x8, 0x8000, 0x1000, 0xd, 0xdb0d, 0x40, 0x40, 0x40, 0x8d2, 0x1, 0x4, 0x4, 0xd, 0xc, 0x9, 0xf, 0xfffffff6, 0x6, 0x2, 0x5, 0xffffffff, 0x80000000, 0x9, 0x4, 0x1, 0x7, 0x2f, 0xc24, 0x800, 0x2, 0xa0b, 0x5, 0x3, 0x80000000, 0x6, 0xfffffffa, 0x2, 0x9, 0x0, 0x0, 0x3, 0x3b985be1, 0x2, 0x3, 0x3, 0xfffffffe, 0xffe00, 0x3ff, 0x9, 0x9, 0x60000000, 0x9, 0x4, 0x4, 0x1, 0x80000001, 0xd, 0x2, 0x7f, 0x8, 0x5, 0x80000001, 0xab, 0x49, 0x200, 0x7f, 0x280, 0xc, 0xc, 0xc, 0x1, 0x2, 0x10, 0x4, 0x30000, 0x6, 0x6, 0x0, 0x7f, 0x1, 0x4, 0xfff, 0xe7, 0x4, 0xf, 0x8, 0x96a83f4, 0x6, 0x1, 0x0, 0x1, 0x1, 0x40, 0xffffffff, 0x8, 0x400, 0x800, 0x8, 0x1, 0x7, 0x8000, 0x1, 0x1, 0x2, 0x10, 0x7f, 0xff, 0xf, 0x800, 0x0, 0x0, 0x5, 0xd, 0x7fffffff, 0x4, 0x5, 0x10001, 0x80000001, 0x63b, 0x1, 0x6, 0x6, 0xef, 0x9, 0x7f, 0x275, 0x6, 0x5, 0x2, 0x1, 0x10001, 0x5, 0xffffff80, 0x3, 0x8, 0x7f, 0x6, 0x6, 0x1fffc000, 0x5, 0x8000, 0x7fff, 0x6, 0x1, 0xffffc514, 0x8, 0xd6ac, 0x10, 0x4, 0x7, 0x2, 0x2, 0xe9d, 0x8, 0x5, 0x7ff, 0x3, 0x10, 0x8, 0x8, 0xfffffffa, 0x466, 0x8, 0x6, 0x4, 0x6, 0x81, 0x3, 0x1000, 0x28, 0x1, 0x0, 0x3, 0x4, 0x80000001, 0x4, 0x7, 0xc, 0x1, 0xe34, 0x6, 0xfff, 0x4, 0x200, 0x4, 0xff, 0x3, 0x1, 0x2, 0x28000000, 0x1, 0x400, 0x8c, 0x8, 0x80000001, 0x7fffffff, 0x80000001, 0x3, 0x9, 0x7, 0x1000, 0x4, 0xb, 0x200, 0x62, 0xb, 0x0, 0x8, 0x1, 0x5, 0x8, 0x12ba5038, 0x5, 0xffffff57, 0xe3, 0xfe, 0xc8, 0x1, 0x8a2, 0xfffffffe, 0x6, 0x101, 0xc, 0x2, 0x101, 0x7f, 0x9, 0x254, 0xa52, 0x0, 0x1, 0x7, 0xf1, 0x8, 0x100, 0x2, 0x3, 0x1400000, 0x9, 0x5, 0x8a, 0x9, 0x9, 0x5, 0x5, 0x9, 0x0, 0xff, 0x2, 0x8, 0x3, 0x6, 0x6, 0x2bc, 0x2, 0x6cb, 0x3, 0x2, 0x8, 0x1000, 0x24d2, 0x1, 0xd, 0x4, 0x10000, 0x7, 0x0, 0x9, 0x6, 0x57f9d9d3, 0x3, 0x8, 0x200, 0xa7d3, 0xf8, 0x7, 0x100, 0x6, 0x8, 0x7, 0x2, 0x81, 0x3, 0x8, 0x101, 0x1, 0x80, 0x800, 0xaf85, 0x9, 0x9, 0x3d4bfac7, 0x2, 0xd6, 0x6, 0x7, 0x2, 0x3, 0xffffffff, 0xe7, 0xc, 0x6, 0x1, 0x2, 0x8, 0xd5, 0x3, 0x7, 0x3fa, 0xfffffff9, 0x2, 0x0, 0x3, 0x10001, 0x2, 0x200, 0x8, 0x2, 0x6, 0x4, 0x2, 0x5, 0x2, 0x5, 0x3, 0x1000000, 0xfffffff7, 0x7, 0x2, 0x13239fc9, 0x1, 0x9, 0x74, 0x8, 0xfffffffd, 0x10001, 0x6, 0x6, 0x4, 0xdbe, 0x7, 0x22, 0x1, 0x5, 0x2, 0x7fff, 0x8, 0x9, 0x8, 0x6, 0x1, 0x0, 0xd, 0x500, 0x4, 0x80, 0xfffff800, 0x0, 0xe5b, 0xfffffff5, 0x7, 0xb, 0x9, 0xc8, 0x8000, 0x934, 0x8000, 0x4, 0x1, 0xffff, 0x6, 0x6, 0x8c, 0xb8, 0x1, 0x4, 0x8, 0x1ff, 0x400, 0x8668, 0x0, 0x5, 0x80000000, 0x80, 0x81, 0x1, 0x4, 0x9, 0xff, 0x5, 0x3, 0x10000, 0x2, 0xf9d, 0x4, 0x9, 0x9, 0x11, 0x9, 0x80, 0x5, 0xe, 0xffffffff, 0x7, 0xda2a, 0x1, 0x9, 0x8d, 0xf6, 0x5, 0x6, 0x0, 0x3, 0x80000000, 0x7365, 0xff, 0x4, 0x10000, 0x7, 0x4, 0xbcd3, 0xd, 0x7, 0xffffffff, 0x9, 0x10, 0x4, 0x2, 0x60000, 0x10, 0x6, 0x101, 0x4b5, 0x5, 0x6, 0x0, 0x9, 0x813b, 0x5, 0x9, 0x3, 0x2, 0x7, 0x3ff, 0x4, 0x8, 0xe79, 0x7, 0x2, 0x0, 0x5, 0x1, 0x5, 0x0, 0x4, 0x800, 0x9, 0x9, 0x1124000, 0x575f, 0x5, 0x100, 0xe0000, 0xc, 0x0, 0x8001, 0x6671, 0x2, 0x80000000, 0x3, 0xfffffffa, 0x6, 0x80000001, 0x7f, 0x47, 0x800, 0x10000, 0x7ff, 0x8, 0x10000, 0xf97c, 0x101, 0xd, 0xfffffffd, 0x3213d718, 0x3, 0xc, 0x6f, 0x9, 0x7, 0x7, 0x7fc3, 0x9, 0x200, 0x4, 0x6, 0x3, 0x9f50, 0x6, 0x6, 0x6, 0x3b3, 0x40000, 0x7, 0x3, 0x93, 0xfff, 0xcd, 0x3, 0x10001, 0x80000001, 0x6, 0x7, 0x8fe4, 0x7, 0x7, 0x9, 0x4001, 0xd4, 0x6, 0x9, 0xd, 0x2, 0xfffffc00, 0x7, 0x0, 0x8, 0xd, 0xfff, 0xa, 0x2, 0x795, 0x5, 0x1, 0x1, 0xb, 0xb, 0x10000, 0x3, 0x4, 0x1, 0x1, 0x80000000, 0x6, 0x1a3, 0x9, 0xe23a, 0x8, 0x4, 0x3, 0x2, 0x7fff, 0x2, 0x80000001, 0x44, 0x6dd, 0x69d, 0x2, 0x4, 0x99, 0x4, 0x6, 0x0, 0x1, 0x3, 0x78, 0x8, 0x6, 0xf76d, 0x40, 0x6, 0x8000, 0x3ff, 0x3, 0x6, 0x4, 0x1, 0x1, 0x7, 0x6, 0xf, 0x8, 0xe, 0x80000001, 0x8, 0x7f, 0x4317, 0x80000000, 0xe6, 0x10001, 0xff, 0x10, 0xfffffffc, 0x7, 0x0, 0x8, 0x4, 0x2, 0xf, 0x4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x5, 0xff, 0x4, 0x9, 0xfffffffb, 0x5, 0x1, 0x3, 0x3, 0x8, 0x3, 0xa1600000, 0x9, 0x8, 0x1, 0x8, 0x3, 0x8, 0x1000, 0x800, 0x10001, 0x7, 0x0, 0x0, 0x4, 0x6, 0x120, 0x7, 0xd9ac, 0x8, 0x2c, 0x3, 0x918f, 0x3, 0x8, 0x4, 0x7, 0x6, 0x7, 0x8001, 0x2, 0x8, 0x3, 0x9, 0x6, 0x8001, 0x5, 0xf8d, 0x6, 0x9, 0x5c, 0xffff, 0x6, 0x80, 0x4, 0x8, 0x0, 0x9, 0x7, 0x0, 0x4, 0x9, 0x5, 0x7, 0x2, 0x3, 0x0, 0x587, 0x9, 0x6, 0x6, 0x9, 0x4b, 0x2, 0x48317e0d, 0x0, 0xffffffff, 0xfbe, 0x4, 0x4, 0xa28, 0x1, 0x1, 0x4, 0x7, 0x2, 0x3, 0x7f, 0xf, 0xfffffffa, 0x5, 0xdbc0, 0x6, 0x1, 0x62a, 0x5, 0x1, 0xbe3, 0xf, 0x6, 0xfffffffc, 0x8, 0x30, 0x62, 0x0, 0xa8, 0x7f, 0x1, 0x3, 0x6, 0x0, 0x100, 0xfff, 0x800, 0x4, 0xa, 0x2, 0xe6, 0xb5fe, 0x5, 0x0, 0x6, 0x0, 0xa09b, 0x7, 0x3, 0x6, 0x4, 0x7, 0x2, 0x6, 0x4c3ad5d, 0xff, 0xf, 0x1, 0x1, 0xe, 0xa4, 0x7, 0x3, 0x8, 0x8, 0x2, 0x1, 0x0, 0x152, 0xfffffffb, 0x69, 0xc, 0x1, 0x7, 0x9, 0x2f, 0x4, 0xfffffff9, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0xb9, 0x9, 0x7, 0xb, 0xfffff001, 0x7fff, 0x0, 0x5, 0x2, 0x3, 0x81, 0x4, 0x9, 0x9, 0xf9f8, 0xcb, 0x81, 0x0, 0x5, 0x4, 0x8, 0x9e4d, 0x4, 0x0, 0x9b8f, 0x0, 0x0, 0x6, 0x4, 0xfffffff8, 0x1, 0xb8cb, 0x9, 0x5, 0xfffffffc, 0x2, 0x6, 0xfffffffa, 0x7, 0x3e, 0x8, 0x7, 0x200, 0x6, 0x5, 0xfffff973, 0xa9, 0x5, 0x1, 0xff, 0x0, 0x9, 0x524b, 0x2, 0xa834, 0x2, 0x1, 0x5, 0x5, 0x200, 0x2, 0x9, 0x6, 0x8, 0x6, 0x3, 0x18, 0xff, 0xa0, 0xe0000000, 0x0, 0xe, 0x10000, 0x4, 0x6, 0x0, 0x63, 0x5, 0x2591518d, 0x9, 0x10000, 0x5, 0x3, 0x7, 0x0, 0xffffffff, 0xfe, 0x1ff, 0xe, 0x1, 0xa773, 0x4, 0x9, 0x7, 0x6, 0xffff0001, 0xfd5, 0x4, 0x401, 0x8, 0x739f, 0x1, 0x9, 0x2, 0xf, 0x10000, 0x6, 0x5, 0x0, 0xd7ca, 0x5, 0x2, 0x80000001, 0x2000000, 0x1ff, 0x2, 0x7, 0x8, 0xc6d1, 0x1, 0x101, 0x4d, 0x4, 0x9, 0x10001, 0x1, 0x8c800000, 0xdc, 0x10000, 0xffff, 0x9, 0x3, 0x0, 0xf, 0x5, 0x8, 0x9, 0x8, 0x10, 0xbb4, 0x1, 0x0, 0x9, 0x2, 0x80, 0x8, 0xb3, 0x7, 0xe8a0, 0x48c8902, 0x1, 0x8, 0x5, 0xfffff590, 0x3, 0x7fffffff, 0x9, 0x12d, 0x200, 0x35, 0x0, 0x5, 0x9, 0x6, 0x2, 0x200, 0x6, 0x0, 0x1, 0x2, 0x2, 0xe1d, 0x83a6, 0x0, 0x7fff, 0x8, 0xff, 0x0, 0x0, 0xdf8, 0x2, 0x5, 0x1, 0x0, 0xe35, 0x100, 0x83, 0xffffd28c, 0xfffffff6, 0x7, 0x9, 0x8, 0x1000, 0x9, 0x8, 0x100, 0x9, 0x4, 0x64, 0x800, 0x122, 0x9, 0x2, 0x94d, 0x9, 0x2, 0x1, 0x1, 0x2, 0x1, 0xa5, 0x7, 0x4, 0x2, 0x174, 0x4551, 0x6c9e, 0x0, 0xa, 0x2, 0x6, 0x8, 0x81, 0x10001, 0x7, 0x2, 0x5, 0xfffffff3, 0x0, 0x4, 0x7ff, 0x4, 0x1f800, 0x80, 0x1a0, 0x791, 0x0, 0x0, 0x845, 0x5, 0x4, 0x7, 0x7, 0x20000, 0xf, 0x2, 0xfffffffa, 0xff7, 0x4, 0x7ff, 0x579, 0x9, 0x3, 0x23d, 0xba5f, 0x9, 0x400, 0x7f, 0x2, 0x0, 0x1ff, 0xfffffffe, 0x6, 0x5, 0x8001, 0x6, 0x0, 0x3, 0x4, 0x200, 0x400, 0x7, 0x9, 0x4, 0x401, 0x9, 0x219a8c11, 0x7, 0x7f, 0x8, 0x6, 0x5, 0x6, 0x8, 0x400, 0x66, 0x200, 0x7f, 0x0, 0x10000, 0xda3, 0x3, 0x2, 0x2, 0xe78e, 0x5, 0x0, 0x7, 0x3, 0x1ff, 0x217, 0x3, 0x1, 0x8000, 0x9, 0xfffffff7, 0xffff92fd, 0x1, 0x1000, 0xa210, 0x5, 0x6, 0x200, 0x6, 0xfffffff9, 0x7, 0xfff, 0xffffffff, 0x0, 0x1, 0x5f, 0x79, 0xffff000, 0x401, 0xd, 0x1, 0x0, 0x9, 0x4, 0xffff0000, 0x8, 0x74a, 0x2, 0x6a, 0xffffff01, 0x31, 0x4, 0xfff, 0xc1dd, 0x6, 0xa2, 0x10000, 0x4, 0x5, 0x6, 0x4, 0x5, 0x4, 0x4, 0x3, 0x0, 0x4, 0x550, 0x5, 0x0, 0xf081, 0xb8, 0x0, 0xffff, 0x10, 0x0, 0x7ff, 0x6, 0x40, 0x5, 0x4, 0x200, 0x9, 0x0, 0x94, 0x7ff, 0x8be, 0x2, 0x200000, 0x0, 0x7, 0x10f, 0x9, 0x4, 0x10, 0x3, 0xc1, 0x7, 0xb1, 0x6, 0x9, 0x4, 0x6, 0xfd, 0x5, 0x9, 0x9, 0xfff, 0x401, 0x0, 0xfa42, 0x0, 0x4b, 0x2, 0xd68d, 0x52, 0x7, 0x5, 0x4, 0x6, 0x3, 0x2, 0x461, 0x9, 0xdb, 0x8, 0x3, 0x4476, 0x3, 0x6, 0x4, 0x1, 0xfffffffd, 0x7, 0x101, 0x200, 0x3, 0x3, 0xe, 0x3, 0x7, 0xc, 0x7f, 0x38, 0x9, 0x200, 0x46, 0x0, 0xcd4, 0x0, 0x0, 0x400, 0x6, 0x8, 0x392d5822, 0x80, 0x6a, 0x121, 0x0, 0x6, 0x5, 0x100, 0x3, 0x2, 0x1, 0x3, 0x5, 0x0, 0x5, 0xa1, 0xfffffffe, 0x65507773, 0x4f, 0xc, 0xa, 0xb2, 0x4, 0x7, 0x9, 0x6a73, 0x5, 0x7, 0x9, 0x4, 0x0, 0xfffffff3, 0x3, 0xfffffffe, 0x0, 0x7, 0x72, 0x6, 0x3, 0xfc, 0x692, 0x5, 0xffffff2a, 0x0, 0x3, 0xc, 0xffff8000, 0x8001, 0xb5, 0x10001, 0x1, 0x7, 0x7, 0x136a400, 0xffffffff, 0x6, 0x5, 0xff, 0x3, 0x8, 0x2, 0x100, 0xa, 0x4, 0x2, 0xd, 0x80000001, 0x7, 0x5, 0xfffffff9, 0x2, 0x6, 0x180, 0xe, 0x8, 0x5, 0x0, 0x80, 0x80000001, 0x8, 0x2, 0x1ff, 0x798, 0x7fff, 0x4, 0x1, 0x9, 0x6, 0x10000, 0x6, 0x1, 0x8d91, 0x5, 0x5, 0x46f6, 0x61, 0x2, 0x2, 0xffff8000, 0x9, 0xe8, 0x7, 0x1, 0xce, 0x6, 0x1, 0x9, 0x8, 0x2, 0x1, 0x80, 0x6, 0x1, 0xfffffffa, 0x1000, 0x5, 0xa, 0x2, 0x8a07, 0xc, 0x7, 0x100, 0x5, 0x2, 0x22, 0x88, 0x7fff, 0xff, 0x0, 0x6, 0x401, 0x0, 0x1, 0x6, 0x2, 0x8, 0x5, 0x2, 0x3, 0x1000, 0xc0000, 0x8, 0x6, 0x9, 0x3, 0x9, 0x4, 0x48c6, 0x1, 0x97, 0xf709, 0x9, 0x4, 0x4, 0x8, 0xb40, 0x400, 0x9, 0x2, 0x10, 0x1ff, 0x1, 0x7fff, 0x9, 0x1, 0xcd0, 0x2, 0x3e, 0xb3, 0x8, 0x6, 0x1, 0x8, 0x7, 0x0, 0xb8, 0x10, 0x6, 0xcbda5964, 0x410135cd, 0x9, 0x3, 0x8, 0x2, 0x1, 0xe00, 0xfa66, 0x3, 0x9, 0x1b93624d, 0xd, 0x7, 0xc, 0xfffffffa, 0x9b, 0x1, 0x2, 0xfffffff1, 0xfffffffb, 0x5, 0x3, 0x0, 0x1000, 0xc, 0x4, 0x5, 0xbc, 0x3, 0xfffffffe, 0x1, 0x1, 0x5, 0x2, 0x6, 0x3964, 0x8, 0x54c, 0x40, 0x819, 0x8, 0x4, 0x3fe843a5, 0x4228, 0xf, 0xa09, 0x5, 0x7, 0x2, 0x5, 0x5, 0x800, 0x0, 0xfffffff8, 0xff, 0x7fff, 0x9, 0x8001, 0xe1, 0x8, 0x5, 0x4, 0x7, 0x31, 0x0, 0x7f, 0x0, 0xfd, 0x5, 0x9, 0x0, 0x0, 0xe191, 0x6, 0x80, 0x1, 0x1, 0x5, 0x7, 0xfffffffc, 0x9, 0x8, 0xa88b, 0x9, 0x4, 0xfffff550, 0xffffffbe, 0x0, 0x2, 0x5, 0x6, 0xe13, 0x5, 0x7f, 0x3, 0x5, 0x3, 0x3, 0x202, 0xf6, 0x7, 0x800, 0x2, 0x5, 0x2, 0x0, 0x6, 0x3, 0x9, 0x80000001, 0x4, 0x2, 0x2108, 0xfffffff8, 0x7, 0x200, 0x70634013, 0xffff, 0x2, 0x1, 0x5, 0xa, 0x31, 0x3, 0x10001, 0x0, 0x1, 0x7, 0xf, 0xff, 0xeaf, 0xfff, 0x3, 0x0, 0x401, 0x641e71ef, 0x9, 0x80000001, 0x8000, 0x95, 0x0, 0xe8000000, 0x7, 0x6, 0x1, 0x6, 0x1ff, 0x7, 0x8, 0x3, 0x10001, 0xffffffc2, 0x7, 0x5, 0x1, 0x5, 0x8, 0x5, 0x7, 0x9e, 0xcdf, 0x8, 0x4, 0x0, 0x1, 0x10001, 0x2, 0x3, 0xfffffff8, 0xdd, 0x5, 0x3, 0x9, 0x4, 0x10000, 0x4, 0x1, 0x7fff, 0x6, 0x6, 0x7fffffff, 0x4, 0x9, 0xad, 0x8, 0xffff, 0x5, 0x2, 0x3, 0x7b0, 0x2, 0xfffffff7, 0x3, 0xfffffff8, 0x1000, 0xb, 0xf515, 0x21, 0x10, 0x0, 0x7, 0xd57f, 0xfff, 0x8, 0x7, 0x5, 0xffffffc3, 0xf21, 0xfff, 0x2, 0x9, 0x7, 0x5, 0xffff, 0x80000000, 0x4, 0x2, 0x5d73, 0xe, 0x81, 0x6, 0x4, 0xf, 0x0, 0x2, 0x7, 0x4000, 0x2, 0x53ba, 0x7, 0x2f, 0x3, 0x401, 0x5, 0x5, 0x75, 0x1ff, 0x9, 0x7c66, 0xffff0000, 0x5, 0x0, 0x6, 0x100, 0x2, 0xffffffff, 0xf4de, 0x338, 0x5, 0x36, 0x3, 0x7, 0xced, 0x48, 0xfffffffc, 0x6, 0x100, 0x9, 0xf, 0xffff, 0x10, 0xa9, 0x796, 0x3, 0x953d, 0x891, 0x8, 0x1, 0x401, 0x0, 0x3, 0x35dc, 0x248, 0x8, 0x97, 0x0, 0xfffffffe, 0xea, 0x8000, 0x78, 0x81, 0x4, 0x6, 0x1, 0x6, 0x0, 0x5, 0x800, 0x6f5, 0x40, 0x8, 0x1, 0x7ff, 0x4, 0x9, 0x4, 0x9, 0xb2c, 0x401, 0x8001, 0x3, 0x0, 0x2, 0x80, 0x10, 0x0, 0xe, 0x81, 0x7, 0xb, 0x400, 0x4, 0x8, 0x5, 0x5, 0x401, 0x5, 0x9, 0x1ff, 0x80000000, 0x81, 0x8, 0x0, 0x1000, 0x9, 0x2, 0x7, 0x3ff, 0x7, 0x5, 0x10c8, 0x1, 0x9, 0x8, 0x8, 0x7, 0x7ace, 0x3, 0x400, 0xd02, 0x9, 0xd, 0x0, 0x6, 0x10000000, 0x0, 0x1, 0x81, 0x5, 0x4, 0x8, 0xffffffff, 0x1, 0xb, 0x0, 0x9, 0x800, 0x2, 0x8, 0x10000, 0x7, 0x7, 0x4, 0x5, 0x1, 0x0, 0x93, 0x2, 0x3, 0x40, 0x5, 0xe, 0x1, 0x401, 0x6, 0x2, 0x3f45, 0x100, 0x2, 0x2, 0xfffff001, 0x4, 0x12000000, 0x4f, 0x77, 0x2, 0x5, 0x8, 0x794, 0x6, 0x2, 0x8, 0x1, 0x8, 0x200, 0x4, 0x7, 0x4, 0x7, 0xebf, 0x1, 0x9, 0x1, 0x9, 0x9, 0x0, 0x8, 0x0, 0x3, 0x9, 0xbad, 0x7, 0x0, 0x4, 0x320, 0x4, 0xffff2257, 0x7f, 0xbfd, 0x9, 0x401, 0x101, 0x4, 0xfffffff8, 0x8, 0x64, 0xff, 0x9, 0x8001, 0x10001, 0x245, 0x10, 0x10001, 0x5, 0x4, 0x70, 0x400, 0xffffffff, 0xe0, 0x2, 0x6, 0x2, 0x4, 0xa, 0xbfc8, 0xb, 0x1ff, 0x1, 0x1, 0x5, 0x0, 0x8, 0xab, 0x9, 0x7, 0xffffff7f, 0x97a1, 0xc8b2, 0x7, 0x101, 0x3, 0x30, 0x6, 0x7, 0xc0, 0x7, 0x0, 0xfffffffc, 0x5, 0x5c7c, 0x5, 0x6, 0x3, 0x7, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x80, 0x8000, 0x4, 0xe, 0x17, 0xfffffffd, 0x8000, 0x9ff, 0x2, 0x0, 0x80, 0x1000, 0xfffffffc, 0x101, 0x5, 0x4, 0x0, 0xd66, 0x2, 0x7, 0x0, 0x0, 0x95db, 0x4, 0x10f22d63, 0xfff, 0x0, 0x7f, 0x6, 0xfffffff9, 0x1, 0x401, 0x923, 0x6, 0xcbf, 0xffffff81, 0x4, 0xfffffffb, 0x4, 0x6, 0x5, 0x8d0, 0x8, 0x7ff, 0x6, 0x2d, 0x5, 0x1, 0x5, 0x5d23171e, 0x7, 0x7, 0xe7, 0x80, 0x10, 0x41, 0x5, 0xd3, 0xfffffffe, 0x7fff, 0x2, 0x80, 0x6, 0xa, 0x80, 0x0, 0x1ff, 0xb, 0xfffffffc, 0x40, 0x6, 0x9, 0x8, 0x8, 0x8, 0x4, 0x0, 0x800, 0x6, 0x3, 0x2, 0xffff, 0xa, 0xbe4, 0x1, 0x9, 0x1, 0x8, 0x9, 0x5, 0x4, 0x9, 0x7e6, 0x9, 0x401, 0x9, 0xa1c, 0x3, 0x7ae5, 0x89, 0x1, 0x7, 0x4, 0x552, 0x0, 0x6, 0x6, 0xd, 0x6, 0x6, 0x8, 0x8, 0xb, 0x3, 0x2, 0x3, 0x0, 0x8, 0x1, 0x100, 0x2, 0x5, 0x9, 0xfff, 0xa89a, 0x8, 0xffffc0eb, 0xc, 0x7, 0x6, 0xff, 0xc08, 0x1, 0x81, 0xd54, 0x0, 0x4f01, 0x7ff, 0x7f, 0x9, 0x2, 0x743c, 0x6, 0x5, 0xffffffff, 0x809, 0xd2, 0x4, 0x8, 0x6, 0x3, 0x3, 0xa, 0x5, 0x5, 0x8, 0x3, 0xfffffff8, 0x3, 0x17d, 0x6, 0x37c27dc9, 0x9, 0x3, 0x2, 0x11, 0x8, 0x8001, 0x200, 0xd5d0, 0x3b17, 0x4, 0x8, 0x4, 0x7, 0x25d, 0x30, 0x80000001, 0x4d, 0x0, 0x3, 0x80000001, 0x9a, 0x80, 0x3, 0x9, 0x4, 0x6, 0xfffff621, 0x23e0, 0x556, 0x80000001, 0x2, 0x81, 0x5d6, 0x7, 0x10001, 0x3, 0x4, 0x2, 0x0, 0xc, 0xfff, 0x401, 0x7ff, 0x8, 0x9, 0x80000001, 0x4, 0x4b32, 0xa0, 0x9, 0x80000000, 0x1, 0x8, 0x5, 0x2, 0x1, 0x7, 0x5, 0x8, 0x9c6, 0x3, 0x2c34, 0x6, 0x10001, 0x5, 0x7, 0x5, 0x0, 0x7fff, 0x1, 0x0, 0x8, 0xc25, 0x0, 0x7, 0x7f, 0x7498cb40, 0x101, 0xc, 0x0, 0xe, 0x80000000, 0x8, 0x7, 0x40000000, 0x0, 0x80000000, 0x0, 0x9, 0x4, 0xfffffff7, 0xa, 0x0, 0x1000, 0x8, 0x8, 0xffffffff, 0x80000000, 0x3, 0x8, 0x1800000, 0x699ab018, 0x8, 0x7, 0x8, 0x8001, 0x8, 0x3, 0x8001, 0xf, 0xff, 0x22, 0x2, 0x6, 0x4, 0x4, 0x8, 0x1000, 0x6, 0x1, 0x40, 0x7, 0x0, 0x0, 0x1a8, 0x6, 0x5, 0x2, 0xff, 0x2, 0x100, 0x3, 0x38b9, 0x1, 0x9dd8, 0x1, 0xff, 0x8529, 0x83, 0x6, 0x86, 0x2, 0xfffffff8, 0x9ea, 0xd4a, 0x2, 0x0, 0x9, 0x6, 0xf, 0x4, 0x9, 0x2, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x9, 0xffff, 0x8, 0x4, 0xffffff6c, 0x7, 0x2, 0x7, 0x3, 0x17c, 0x0, 0x5, 0x101, 0x8001, 0x10, 0x3, 0x4, 0x8, 0x3, 0x2983c24f, 0x5, 0xfd, 0xa, 0x8, 0x8, 0x7, 0xb443, 0x8, 0x2337, 0x1, 0xf3, 0x1, 0x81, 0x0, 0x200, 0x5, 0x101, 0x1, 0x7ff, 0x1, 0x2bc, 0x400, 0x0, 0x6, 0x1, 0x81, 0x3, 0x4, 0x7a47c863, 0x80000000, 0x6, 0x9e, 0x6, 0x1, 0x1, 0x71, 0x5, 0x7, 0xfffffffa, 0x0, 0x2b3c, 0x5, 0x4, 0x8, 0x401, 0x3, 0x1c, 0x6, 0x8, 0x7, 0x4, 0x7, 0x0, 0x0, 0x6, 0x2, 0x77, 0x81, 0x8, 0x0, 0x0, 0x3, 0x1, 0x10000, 0x3f, 0x4, 0x10, 0xb, 0x10000, 0x10, 0x5, 0x4, 0x0, 0x1ff, 0x2, 0x34, 0x7, 0x2, 0x8001, 0x0, 0xe85c, 0xff, 0xfffffff8, 0x1, 0x2, 0x882a, 0x8000, 0x0, 0x5a, 0x1, 0x7ff, 0x3, 0x3, 0x8001, 0x4061, 0x9, 0x3, 0x40, 0x0, 0x29, 0x680e, 0x9, 0x3977ef07, 0x5, 0xd53b, 0x6, 0x4, 0x60000000, 0x200, 0x9b, 0x8, 0x7003e9c1, 0x800, 0x800, 0x675f, 0x4, 0x5, 0xff, 0x3a8, 0x80, 0xe, 0x8, 0x2, 0x7ff, 0x5, 0x6, 0xffffff81, 0x3ff, 0xf708, 0x0, 0xb22, 0x3, 0x4, 0x7, 0x7, 0xffff, 0x3ff, 0xf7, 0x7, 0x3, 0x6, 0x1, 0x1, 0x3, 0x8, 0x7, 0x9, 0x180000, 0x9, 0x5, 0x6, 0x3, 0x3, 0x8, 0x10001, 0x4, 0x0, 0xb12, 0x10, 0x1, 0xfffffffa, 0x7fff, 0x6, 0x8001, 0x100, 0xfffffffb, 0xc, 0x1000, 0x9, 0xfffffff7, 0xfffffffe, 0x2, 0x2, 0xd, 0x0, 0xf, 0x2, 0xffffffff, 0x1, 0xfe, 0x0, 0x80, 0x2, 0x2aee, 0xec, 0xff, 0x0, 0x9426, 0x7b3, 0x8000, 0x8, 0x3, 0xffffff00, 0x274, 0x7, 0x8, 0x6, 0x3, 0x1, 0x2, 0xffff0000, 0x80000001, 0x6f07, 0x5, 0x81, 0x1, 0x7, 0x1, 0x0, 0x5, 0x101, 0x337, 0x7fffffff, 0x1, 0x778, 0x28, 0x8001, 0x5, 0x5, 0x84e4, 0x8000, 0x4, 0x8, 0x1, 0x70000, 0x7f, 0x6, 0xfffff648, 0x0, 0x1, 0x8, 0x200, 0x7fff, 0x1, 0x4, 0x0, 0x81, 0x9, 0xe9, 0x3, 0x0, 0x2, 0x2b, 0x9, 0x1, 0x4, 0x0, 0x5, 0x401, 0x6, 0xf, 0x9, 0x4, 0x400, 0x6, 0x80000001, 0x7ff, 0x8, 0x43, 0x8, 0x3, 0xdd9, 0x3, 0x6, 0x240, 0x1ff, 0x53, 0x5, 0xfffffffb, 0x0, 0x10, 0x6, 0x8, 0x3, 0x6, 0x93e, 0x1, 0x6, 0x7, 0x2, 0x7fffffff, 0x7, 0x9, 0x3, 0x2, 0x10, 0x9, 0x5, 0x80000001, 0x9, 0x2, 0x3, 0x5b26, 0x7ca, 0x7e3a, 0xffffffe0, 0xf, 0xfffffffc, 0x10000, 0x8, 0x2, 0x8, 0x8, 0x0, 0x3ff, 0x5, 0xe2, 0xffffffff, 0x0, 0x2, 0xa, 0x1, 0x9, 0x0, 0x9, 0x2, 0xa61, 0x8000, 0xa391, 0x3, 0x80000000, 0x80000001, 0x0, 0x5, 0x1, 0x7f, 0x7, 0x1, 0x7, 0x358, 0x1, 0x1, 0x5, 0xffff, 0x1, 0x5, 0xc7a, 0x3, 0x2, 0x8, 0x6, 0x6, 0x255e, 0x5, 0xffffffff, 0x8, 0x2, 0x3, 0x2, 0x6, 0x2, 0xfffffffb, 0x9, 0x2, 0x10000, 0x0, 0x2da2fc92, 0x2, 0x50, 0x306800, 0xa6, 0x3, 0x0, 0x0, 0x5, 0x2, 0x101, 0x5, 0x3, 0x8, 0x8, 0x7, 0xe, 0x0, 0xcc2, 0x6, 0x80000000, 0x6, 0x0, 0xfffff86d, 0x1, 0x4218, 0x1, 0xfffff10f, 0x1, 0x27, 0x9, 0x29, 0x3, 0x400, 0x1, 0x8, 0x7, 0x30, 0x9, 0x0, 0xfffffff8, 0x9, 0xe, 0x8, 0x3, 0xfffffff7, 0x1, 0x3, 0x7fffffff, 0x33dff87, 0x3e7, 0xf6, 0x971, 0x3, 0x1, 0x6, 0x2, 0x4800, 0x2, 0x1, 0x2462, 0x0, 0x2, 0xfffff800, 0xfff, 0x3, 0x6, 0xc42, 0x0, 0x8000, 0xfffffffe, 0x8, 0xcb7, 0x3, 0x0, 0x3f, 0x0, 0x4, 0xffff, 0x1, 0x4, 0x8, 0x200, 0x8, 0x9, 0xb0e, 0x6, 0x0, 0x4, 0x10, 0x5, 0xffff8001, 0x5, 0x48c2, 0x5, 0x6, 0x81, 0x4ad2e8d2, 0x3, 0x10000, 0x2b3, 0x9, 0x6, 0x8, 0x5, 0x401, 0xfffffff9, 0x62, 0x8, 0x7f, 0xff0, 0x5, 0x100, 0x3, 0x8, 0x32, 0x17, 0x0, 0x0, 0x1, 0x2, 0x401, 0x5, 0x6, 0x2589, 0x8, 0x4, 0x3a53, 0x12b4, 0x9, 0xea41, 0x5, 0x4, 0x7, 0xe443, 0xff, 0x9, 0x0, 0x8000, 0x100, 0xf63, 0x5, 0x8, 0x9, 0x4, 0x2, 0x625, 0x3, 0xfc, 0x8, 0x8, 0x3, 0x6, 0xf36, 0x9, 0x7, 0x8, 0x8, 0x2, 0x8, 0x9, 0x9, 0x3, 0x5, 0x0, 0x6, 0x0, 0x10000, 0x3, 0xf, 0x7, 0x152, 0xeb4, 0x9, 0xd417, 0x80, 0x4, 0x76a, 0x10, 0x0, 0x2743cc81, 0xa5c, 0x4, 0x9, 0xf4, 0x7, 0x2, 0x7, 0x1, 0x3ff, 0x988, 0x40, 0x5dfb, 0x8, 0x1, 0x1, 0x7, 0x200, 0x66, 0x0, 0x8, 0x3, 0xfff, 0x7ff, 0x100, 0xfffffff2, 0x1b3, 0x7, 0x9, 0x1, 0xffffff7f, 0xa, 0xfff, 0x4d66, 0x4, 0x3, 0x2, 0x3, 0x4, 0xe, 0xffffffff, 0x4, 0x7ff, 0x2, 0x7, 0x5, 0x5, 0x1, 0x2, 0xd, 0x101, 0x3, 0x35, 0x4, 0xfffffffe, 0x5, 0x400, 0x311adba5, 0x0, 0x8, 0xb, 0xfffffffe, 0xa00000, 0x2813da4b, 0x9, 0x4, 0x6d4, 0x3, 0x3, 0x4, 0x19, 0x3, 0x3, 0x2, 0xc0, 0x6, 0x7, 0xb, 0x5, 0x100, 0x7fffffff, 0x5fd, 0x200, 0x40, 0x8000, 0x1, 0x4, 0xbe, 0x7f, 0x9c0, 0x80000001, 0x3ff, 0x3f6, 0x8, 0x9, 0x4, 0x7fff, 0x7937, 0x336ce3d1, 0x3af, 0x2, 0x8, 0x38, 0x3f, 0x8, 0xd33e, 0x8, 0x8, 0x6, 0x0, 0x4, 0x1, 0xfffffff8, 0x40, 0x0, 0x6, 0x6, 0x6, 0x5, 0xa, 0x8, 0xffff, 0x1, 0x40, 0x5, 0x88, 0xfffff000, 0x8, 0x3, 0x10, 0x0, 0xd, 0x88, 0x1ff, 0x6, 0x9, 0x3, 0x7f, 0x5, 0x10, 0x5, 0x1, 0x4, 0x9, 0x1, 0x2, 0xcdc5, 0x80, 0x8, 0x800, 0xdd, 0xe, 0x3, 0x5, 0x4b7, 0x16, 0xffffff81, 0x7fffffff, 0x6, 0x7, 0x29, 0x8, 0x101, 0x1, 0x8, 0xac, 0xfffff800, 0x5, 0x780e, 0x4, 0x8, 0x6, 0x8, 0x90, 0x3, 0x9, 0x0, 0x5, 0x100, 0x2, 0x2, 0x8, 0x1, 0xfc8, 0x5, 0x1, 0x4, 0xf2, 0x3, 0x1, 0x6, 0x2, 0x1, 0xfff, 0xa, 0x7, 0x5, 0x2, 0xce, 0xc, 0xffffff7f, 0x6, 0xfffffffb, 0x85d5, 0x40, 0x100, 0x6, 0x2, 0x0, 0x10001, 0x1, 0x8001, 0x7fffffff, 0x100, 0x947, 0x1a, 0x4, 0x2, 0x819a, 0xfffffff7, 0xffff0001, 0x2, 0x1, 0x800, 0x44f, 0x21, 0x10, 0xffffffff, 0x5, 0x6, 0x9e14, 0x7, 0x8, 0x0, 0xd, 0x7, 0x1000, 0x1, 0x70000000, 0xffffffff, 0x9, 0x2, 0x1ff, 0x101, 0xd, 0x400, 0x1, 0x4, 0x8, 0xe, 0x1, 0x6, 0xf, 0x0, 0x5, 0x6, 0x3ff, 0x1, 0x4da30, 0x6, 0x7, 0x6, 0x0, 0x10001, 0x80000000, 0x9, 0x8, 0xd, 0x9, 0x0, 0x7fff, 0x0, 0xb9fc, 0x0, 0x8, 0x5c70e0df, 0xd0, 0x539, 0x4ad, 0x5fd, 0x7, 0x7, 0x3, 0x80, 0x3, 0x7, 0x7, 0xfff, 0x6, 0xd, 0xfffffff8, 0x8, 0x401, 0x3, 0x7, 0x1ff, 0xb, 0xa7, 0x0, 0x80, 0xffff92f1, 0x53e, 0x4, 0x6, 0x8, 0x1, 0x93, 0x0, 0x4, 0x7f, 0x81, 0xd9e9, 0x20000000, 0x1, 0x5, 0xfffffffa, 0x9, 0x7, 0xcb6, 0xc, 0x2, 0x9, 0x6, 0x6, 0x4, 0x4, 0x1, 0x3, 0x4, 0x9, 0x538, 0x4, 0x3, 0x5, 0xfff, 0x12199922, 0x7, 0x3, 0x40, 0x9, 0xeb2b9a4, 0x21b, 0x1, 0x8, 0x400, 0x4, 0x9, 0x3, 0x8, 0x0, 0x40, 0x1000, 0x2, 0xe54, 0x5, 0x5, 0x0, 0x9, 0x13, 0x6de0, 0x1, 0x8, 0xda, 0x6, 0x9, 0xffffffff, 0x6, 0x3, 0x4, 0x2, 0x8001, 0x8, 0x5, 0xffffffff, 0x6, 0x3, 0x3, 0x3, 0x6, 0x10, 0x0, 0x80000001, 0x1, 0xd94, 0x3f480, 0x1, 0x0, 0x5, 0x8, 0x1, 0xfffffffa, 0x400, 0x1, 0x40, 0xbc9, 0x2, 0x2, 0x0, 0x3, 0xfffffffa, 0x5, 0xe, 0x3ff, 0x7ff, 0x6, 0x11, 0x0, 0x0, 0xffff7fff, 0x2, 0x4, 0xfffff804, 0x9, 0x7, 0x3072, 0xc, 0x9, 0x10000, 0x604db307, 0x8, 0x6, 0x2, 0x1, 0x900000, 0x0, 0x10001, 0x1, 0x4, 0x10, 0x3, 0x2, 0x0, 0xf21, 0x417c, 0x80, 0x9, 0xfffffffb, 0x0, 0x9, 0x80000000, 0x10, 0x2, 0x6, 0x2, 0xb37d, 0x10000, 0x3, 0x3, 0x8, 0xc, 0x200, 0x3, 0x4616, 0x7fffffff, 0x4, 0xdffa, 0x475, 0x800, 0xd, 0x8, 0x1, 0x9, 0x30, 0x168d, 0xfff, 0x2, 0x9, 0x1, 0x2, 0x881, 0x6, 0x3ff, 0x0, 0x18000, 0x7, 0x1000, 0x9, 0xb, 0x8, 0x3, 0xff, 0x3, 0x4, 0x3ffd, 0x1cf, 0x5, 0x9, 0x1, 0x10b0, 0x9, 0x1, 0x0, 0xb, 0x7, 0x4, 0x697c, 0xa9, 0x5, 0x10000, 0x9, 0xae, 0x9, 0x1, 0x7, 0x7, 0x6, 0x32, 0x8, 0x1, 0xd85, 0xfffffffc, 0x7ff, 0x1, 0x401, 0x8, 0x200, 0x81, 0x4, 0xff, 0x5, 0x5, 0xfffffffd, 0x9, 0xddfa, 0xff, 0x4, 0x2, 0x8, 0x7, 0x3, 0x2, 0x4, 0x10000000, 0xf0fd, 0x7fff, 0x1, 0x80000000, 0xffffff7f, 0x667], 0x101, 0x9}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000006cc0)) accept4$packet(r7, &(0x7f0000006d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006d40)=0x14, 0x0) fcntl$F_SET_FILE_RW_HINT(r11, 0x40e, &(0x7f0000006d80)) sendmmsg$alg(r4, &(0x7f000000ad80)=[{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000006dc0)="ac552eb747ab4621098ff32de4f8a0d26091e9b5aa7599c067a0def7e9586129d5c52e8b3342327554357a3bfb580d03e582b3a546de8a2995e75923e1b89b30bf0bcce94df54c784aa4a170647af8735a1aba1fade1", 0x56}, {&(0x7f0000006e40)="840a86dd79efbc576ee9126979ca9a5293615cb12732177cecadcb9b3be7", 0x1e}, {&(0x7f0000006e80)="d5e588784772833aede436850c349ff145e38626bc4d5725ac819889a71757a0466d990ee7a319ae26e739aa85dbf4", 0x2f}, {&(0x7f0000006ec0)="18f3fdbfde0d548fcc7fc191f071d2593ea2e49c30720fe833317b48d48fc95e77ae2938f86db79613033b06de0a423d893888189c33a3ee69a96cdff274bec766f912ef0c8fae5dfb8288ef81450ec6aeab20867742d1279220c734b3a73725fb1578ac93b9f24ce308427648a517b328c3a251a5ba32bd9e186a9aae4a3f73c159a1aebdcb82d79883b5567790556f1d280a8a9b148b7aa7", 0x99}, {&(0x7f0000006f80)="04", 0x1}, {&(0x7f0000006fc0)="2038375df3982c95e81cca9f3bfd572bb6bffffe21ac4f00e50d7a47d591f9f6ecb8c7db90ef4201c127d81320b49906a666ac4db2aafd7283e59aaaad76bbf66da5d2e8388da7d17d796637472727df763ebde45d81793ce0746f70da2fdf606d7d43c61cd5602992129a79c808cc90a86dc754474ad71a54ab183aaedc15bb1265e8b27c649a4507e500a6cdb542267ba47a4a4c923e4f702a8249939a554ca99140b119ba342cd6f60957e4a88fa994775246920797fe296a63af5f70a03dadb8665df9031af85b16e9051e9b31eb5894927b268397bdf1834758a74408fbb91904f21414d289471e8fb26a3d5f56a9620ee76f46db1f", 0xf8}, {&(0x7f00000070c0)="ca7f580bfeee54e03129e411eae14c0baebd11670c3e838fe3b2215074412e3dd42f2e2b3c245791608f0a62f9767ecde2e8b488e24e4ee19da1bf7b7544f49d2d499bf0945eb36a91d0665044500e0f309206999dae09d692f30576f5c7c9f2b1dce9978c5a6eb218fe17a1271ea9208ef5e5b6bcda5d399b3505e7c9a25dadec0d2a657eb7da854340f41672553b5ac16983c29e3359d86cec6949d1cb13199f981298c94c38f1d270f814d6d81742daead908ef5b", 0xb6}], 0x7, &(0x7f0000007200)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x118, 0x117, 0x2, 0xfe, "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"}], 0x130, 0x200004c0}, {0x0, 0x0, &(0x7f0000008440)=[{&(0x7f0000007340)="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", 0xfb}, {&(0x7f0000007440)="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", 0x1000}], 0x2, &(0x7f0000008480)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030, 0x20000}, {0x0, 0x0, &(0x7f000000aa40)=[{&(0x7f00000094c0)="8be4bc5618077c2dd4dc591e59db68fc1a7235eb0366318c786bc33c5738d0d6a28a288fac5dcd100ec1996fbaec52b1784c0faebfc18f763153f01cb8bbdea20d8473ff3baa015d933b29073e520be63cb6ff0e5bc0cfeea86e35a6788e4cc4b1d57e60bb1fdc2a7f59fa68c1e2845ccb1659f86c77a0c90f2559edb53e78bd9248ae49dea8c4a461576b0e6d13a5c5e2677687b7d0be8813931103cfe9283f1b9c6e41b3b105cfba28c0c0c01d5a5fe52a6b1ac3dc", 0xb6}, {&(0x7f0000009580)="fbf7696fe443322e9ed4430e7205f04ef71c22fb", 0x14}, {&(0x7f00000095c0)="39096761f686ec0c783d2a674318c411bd796949aaa1dfc85550028a83ead71aaa5ec800e6e100fd642f445e5d6218bf1475327451d80919e5d84183d503dd1466111f00a64ee0fc29a0fc1ef13b6281f8e9a935e00a5adcd60069eba7d6ae1e", 0x60}, {&(0x7f0000009640)="1b3225514eef24fb81dc6b3eb6c5a5e506dcfb7de35303df2c5528ff", 0x1c}, {&(0x7f0000009680)="43987a0a8d293a6e418baafa9ed0bc2241148a571f339aacfeadf3e9d4d2f7a0ddd7d0ac1b3595fecacdd626175655aa0531d572c499521cf2022c25b4ea5b1a1705444374fd245c14d7e0a56206fc7cac2dff0532fe3e51402db01c3131826bc07a08c69c3ddee0c04c09a537794231f79eb4b9d9f52fd3a2757140699fe388a641631ca0968c32c787552e9e0c4e4a5f3cc098bd1c58af4ef73caef74ef49bc3ff9dc35e7d6610c9", 0xa9}, {&(0x7f0000009740)="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", 0x1000}, {&(0x7f000000a740)="6ac9888016fc492467f917d37c3462dc7be611afc665a2c841c9e7b4dcc7816436e764d4628de82e00dc6fcb5ff3cfe8f926988b686e0a81e9a706350f25e0da9267f727f0263c316237bc9c93339312a6e268b842ea37da43f5b3194b0efc9d8352bdd8a27632e14096df2e11d1d5ff2f098fd7fa61eac1ce7ea0661f9e3da78f3617bed34c4d9e87f61ed7d4cab7a1a59abafb0d4a179f125de2f1e776bf41e37eec629135aeb6940c8d016f561aa0aeb91dee3157", 0xb6}, {&(0x7f000000a800)="01bb3455fcb9fdea21768b457fb94d41eb9874398375eb4d392cc6b78984a53d41668f5993b7ea829b18ad683d3ef0f01b23d84568a7a20c4de2b21716600afe1ef2973415389c2435dea22e349d651965bd6e50e5732b78602276b01b1dc118333132ba0ae51e1eb6599ddd1aa2168e2d82f8ac1dfae8ff1acd14ab67d07918e754622dca3e2161ae8d3dc6f53c4ff9c2a820850e6198d681bd66117cfbb1b29758a38b32e3fe75caeab4e2f18aed7b79586828e67188b5a56a3d3b752f7d38d3f29feeb25c7739aa5382f098a6aafa40dd2db839f7731a4b9252622ded143c4af2ed", 0xe3}, {&(0x7f000000a900)="b7a72807361a3ec4a3899ad0919d1aa2ea2b6551fa1e9d748675c728747692e3b11b7905f09d21886229a8dce1e6ee5423ad460a1cc784382c12dcb4c81f3ef69802738d435560f6f9abc2bab1389fb0db20ac7570103e8b31ae6d0d74689cc4374d726e33b470a4937c4743e448610dc9809de1bd", 0x75}, {&(0x7f000000a980)="f9681d70af1df6420b1cc9f2ffee21084e172bad49699064e501abf412ffae68e1cf78b174ac5fa6c7afe5fc6f703aa88bac45c7834aa4257ecbca12bb415ad7e0367469acdce4c5cb615e02d3625ba062abc96ad5d8ed0f5fe5877ab11a85b9ccb7622e342fa94aa86f1a7acdca23a43059a79f5193be9b559dd236bcf0fa1a90510076ec5299138ada12738278", 0x8e}], 0xa, &(0x7f000000ab00)=[@iv={0x100, 0x117, 0x2, 0xe6, "852152a91b9a0fe04921521808993db31b9f9ab8263de83ef370517fb41d54f639464c9113baaa50005188e257e1ca0efc7f2396e35ac505de681423c02231b48893d6e09b32bc6f9b8d6dff09578db4a127f7e0935a0c0e07a6bef5203d3b6f7cca833c73f06b609f8be0628794387c98e1025ef8ebf628273da52ed0e40092aa3392e18f45488faa8872c6458f7ebb06dd207be7801a595d503d9f59fdf250f7dd5401b31492971485d045a7a99fddfc9883414ab3aa6d41f0dfc0f045f4e2b99150103d2c84d4b3ee801cb896dcfb24dfbe0c2d153e2458cbbd9c48f9395ada51299249c2"}, @iv={0x40, 0x117, 0x2, 0x25, "359b9cbc18ae0acd1cd1dffc032b0ffdb22d4a1452fa21fcfab432e90c977885ff745010e7"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x100, 0x117, 0x2, 0xe6, "84c4c33aab409381f2a5dc0111226dcca8267969a0ceb7880ff4e4eca2c3cbbd0e2d4199f832dc98bef7c7357797b12fec17670b55295f0a141f731f088e87c33af38ad9511189a3271e51bccae20cf9ab062da51a456ae766b0e60eae3457ecf65bfec013438b2f7119638735250c3ef512efab75d141ad98c9b1e9292ae403d28ce50a7f6c71084a30f3a68dfc9b93f68b699cdb6e4ec70a67b993a18c4f2683c54c842a64c2efed84255da64dc1e7956759227fd8280eb6a4ffafd35b2c061f84c3d4f6ce34e3432564b543a30dd80a502306349f6bc0abae0739f8f0422fbfac9e60dd27"}], 0x258, 0x80}], 0x3, 0x10044884) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f000000ae40)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r7, 0x40086425, &(0x7f000000ae80)={r12, 0x2}) 468.176355ms ago: executing program 3 (id=901): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x162) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5, @ANYBLOB="c01a3b13bc37b95fb72f1cfd79f70e2bf8962ccfd59b192349ff32c730892098deb7dc55937cd203408e6831fba543e82269cd7851189bcaf94cf8b74d3269e7a67116229a06ea670db49384f119cce97c37ab3cdf4afc711a6e40be572e6db3a5c7c0e5a42df70d4fb1b2600e197e185e90d00b2a9a4908912c60066b48646bd26fafef353a0e1cdf85f684e5f71b5d08a0036cc8d9d14a9de671f7324d672f64934a050ef1191e75db0593"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=0x0, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) openat$hwrng(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) close(r2) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRES16=r7, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESDEC=r9, @ANYRESDEC=0x0]) syz_fuse_handle_req(r10, &(0x7f000000c400)="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", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x244242, 0x4) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x1}, 0x10) r12 = dup(r0) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) read$FUSE(r12, 0x0, 0x0) write$FUSE_POLL(r12, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x7}}, 0x18) 390.969672ms ago: executing program 1 (id=902): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffff9, 0x5, 0xfffff000}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffff9, 0x5, 0xfffff000}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140), &(0x7f00000004c0)={0x0, 0xfb, 0xa4, 0x7, 0x5, "6153641e01618922133dbc5f58e1203c", "a41fef5a32ffaf1cfe78c2c8684cd9b1c1ebcc81844974275c5f962e7766ccbbfcd4d0f95e60765be96418a45650ba1c7d6e663723612872987eca1625cff6441d992eb1553e10ecdfa84b3b17c0e41ed8776f760dc4e36dec62b8b3b81330c3c73f5509964cd836c6b013b69bfb80a2f33d0621758421231eb6ff676efe48a1e9c8a8546fa025b56b2de0fb4299d7"}, 0xa4, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000002000006"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x28) 357.34654ms ago: executing program 4 (id=903): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) prlimit64(r1, 0xf, &(0x7f0000000500)={0x5, 0x2}, &(0x7f0000000540)) syz_usb_control_io(r0, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x2c, 0x3, 0x0) setresuid(0xee00, 0xffffffffffffffff, 0xee00) r5 = getpid() r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r7) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioprio_set$pid(0x1, r5, 0x4000) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffc, 0xffffffff, &(0x7f0000006680)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 318.574284ms ago: executing program 0 (id=904): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001300290a2dbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008c4000008000c00ffff"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x89, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'rr\x00', 0x2c, 0x3, 0x77}, 0x2c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 170.463516ms ago: executing program 1 (id=905): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x8) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 165.727444ms ago: executing program 3 (id=906): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0}) 106.738481ms ago: executing program 0 (id=907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) fcntl$setstatus(r2, 0x4, 0x42400) write$evdev(r2, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000c40)='\r2', 0x2}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000195c01000000000000000000e00000020000000000000003000000000000000000000000000000000000000100000008000000000a0000000000000092733d6d628778ee14f3b663648f35e6b5aab51c5b480549f5f873a0a36bbfe20eb6ced135ca872b6bc8fb3a4ce78b0837926db5b80296d5df4cd74cebbffdb73f47e0b32b883f67dc449bf245446e433e635c62cc55cc3248449376f0a732bffa8f19951e1095834b556f44f4527716769f40163265a76e1ef19d3736f9e9469bc2f0174febc042b4e30086467e2d13d04166fd9fe899efb2cf6daedca50b361fc68dba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000002000000040300"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec00003db8054668e17b494f7c544395b20300210001000000000000000000fc020000000000000000000000000001fe8000b3ab000000000000000000003a00000000000000000a0000a02e00000021de6223090000000000000019f4d409c6d42216d6f6be74632e57075608a833f3f513fda9c8e295be031b5297204eab8e09b6e9c64ac73b363823fe896accdda986dcbbcf42ca4e3cfaea249d452827eb5baf1babd7e145b1cff67acb458c045d9900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000140)=r8) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000000)={0x0, 0x0, 0x13580, 0x20000000}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r9, 0x15f1, 0xff98, 0x69, 0x0, 0x0) 0s ago: executing program 3 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) kernel console output (not intermixed with test programs): n process `syz.4.34'. [ 92.927643][ T6079] netlink: 48 bytes leftover after parsing attributes in process `syz.4.34'. [ 93.528209][ T6083] process 'syz.3.35' launched './file2' with NULL argv: empty string added [ 94.135428][ T5846] usb 1-1: USB disconnect, device number 3 [ 94.941093][ T5846] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.693755][ T5846] usb 3-1: device descriptor read/64, error -71 [ 95.890799][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 95.948011][ T5846] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.087890][ T5846] usb 3-1: device descriptor read/64, error -71 [ 96.109672][ T6106] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 96.198778][ T5846] usb usb3-port1: attempt power cycle [ 96.256318][ T6123] befs: (nullb0): No write support. Marking filesystem read-only [ 96.272749][ T6123] befs: (nullb0): invalid magic header [ 96.343416][ T6126] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.540334][ T5846] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.600830][ T5846] usb 3-1: device descriptor read/8, error -71 [ 96.847583][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.897686][ T5846] usb 3-1: device descriptor read/8, error -71 [ 97.038972][ T5846] usb usb3-port1: unable to enumerate USB device [ 97.059958][ T6138] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.117352][ T6138] syz_tun: entered promiscuous mode [ 97.162650][ T6138] syz_tun: left promiscuous mode [ 97.168098][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.190482][ T6139] syz.4.53 uses obsolete (PF_INET,SOCK_PACKET) [ 97.339458][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.347678][ T5888] usb 4-1: config 0 has no interface number 0 [ 97.356866][ T5888] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 97.377619][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.386180][ T5888] usb 4-1: Product: syz [ 97.391479][ T5888] usb 4-1: Manufacturer: syz [ 97.396114][ T5888] usb 4-1: SerialNumber: syz [ 97.418786][ T5888] usb 4-1: config 0 descriptor?? [ 97.639883][ T5888] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 98.065364][ T5888] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.233058][ T5888] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 98.251183][ T6148] netlink: 452 bytes leftover after parsing attributes in process `syz.2.56'. [ 98.265413][ T5888] usb 4-1: media controller created [ 98.380386][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.462497][ T5888] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 98.612277][ T6158] binder: 6157:6158 ioctl 4028af11 200000000280 returned -22 [ 98.652570][ T5888] usb 4-1: USB disconnect, device number 3 [ 99.380906][ T6175] 9pnet_fd: Insufficient options for proto=fd [ 100.813146][ T6194] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 100.978705][ T6205] syz_tun: entered allmulticast mode [ 101.050025][ T6205] syz_tun: left allmulticast mode [ 102.858314][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.079157][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 103.112697][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 103.254545][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.276584][ T9] usb 4-1: config 0 descriptor?? [ 103.473533][ T6264] sctp: failed to load transform for md5: -2 [ 103.526324][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 103.559972][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.590445][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 103.615005][ T9] usb 4-1: media controller created [ 103.734366][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.776827][ T6280] loop2: detected capacity change from 0 to 7 [ 103.795649][ T9] az6027: usb out operation failed. (-71) [ 103.821390][ T9] az6027: usb out operation failed. (-71) [ 103.827224][ T6280] loop2: [ 103.844882][ T6280] loop2: partition table partially beyond EOD, truncated [ 103.847952][ T9] stb0899_attach: Driver disabled by Kconfig [ 103.862650][ T9] az6027: no front-end attached [ 103.862650][ T9] [ 103.901443][ T9] az6027: usb out operation failed. (-71) [ 103.921221][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 103.967962][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 104.034935][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 104.078244][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 104.118906][ T9] usb 4-1: USB disconnect, device number 4 [ 104.273437][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 104.284928][ T6287] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 104.874089][ T6286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.028021][ T5918] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.333603][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 105.351809][ T5918] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 105.364869][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 105.406307][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 105.430475][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.443209][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 105.515806][ T5918] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 105.557193][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.957699][ T6325] netlink: 452 bytes leftover after parsing attributes in process `syz.1.107'. [ 106.072357][ T5918] usb 3-1: Product: syz [ 106.094749][ T5918] usb 3-1: Manufacturer: syz [ 106.133094][ T5918] usb 3-1: SerialNumber: syz [ 106.300901][ T5918] usb 3-1: config 0 descriptor?? [ 106.319381][ T6298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.940617][ T5918] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 106.947682][ T5918] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 107.178755][ T5918] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 107.194071][ T6334] can0: slcan on ttyS3. [ 107.268966][ T6334] can0 (unregistered): slcan off ttyS3. [ 107.313954][ T5918] usb 3-1: USB disconnect, device number 7 [ 107.731039][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.457843][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 108.589022][ T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 108.638239][ T9] usb 2-1: config 0 has no interface number 0 [ 108.657698][ T9] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.708628][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.340546][ T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.394886][ T6370] use of bytesused == 0 is deprecated and will be removed in the future, [ 110.424114][ T6363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 110.427712][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 110.441503][ T6370] use the actual size instead. [ 110.459879][ T6363] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 110.494318][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 110.539134][ T9] usb 2-1: Product: syz [ 110.567626][ T9] usb 2-1: SerialNumber: syz [ 110.617631][ T5918] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.721206][ T9] usb 2-1: config 0 descriptor?? [ 110.757855][ T9] usb 2-1: can't set config #0, error -71 [ 110.777820][ T5918] usb 1-1: device descriptor read/64, error -71 [ 110.793372][ T9] usb 2-1: USB disconnect, device number 3 [ 110.803991][ T6373] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 111.290113][ T6389] netlink: 452 bytes leftover after parsing attributes in process `syz.4.120'. [ 111.445031][ T5918] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.752140][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.818348][ T5918] usb 1-1: device descriptor read/64, error -71 [ 111.947697][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 111.958811][ T5918] usb usb1-port1: attempt power cycle [ 111.986252][ T9] usb 2-1: config 0 has no interfaces? [ 112.001050][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 112.071773][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.091244][ T9] usb 2-1: Product: syz [ 112.096583][ T9] usb 2-1: Manufacturer: syz [ 112.121130][ T9] usb 2-1: SerialNumber: syz [ 112.153834][ T9] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 112.392735][ T5918] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.453677][ T5918] usb 1-1: device descriptor read/8, error -71 [ 112.573781][ T5895] apple-mfi-fastcharge 2-1: USB disconnect, device number 4 [ 112.667658][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.727634][ T5918] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.768642][ T5918] usb 1-1: device descriptor read/8, error -71 [ 112.785223][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 112.831577][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 112.846313][ T24] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 112.871985][ T24] usb 4-1: config 0 has an invalid interface number: 45 but max is 0 [ 112.892972][ T5918] usb usb1-port1: unable to enumerate USB device [ 112.902240][ T6166] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.913027][ T24] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 112.913057][ T24] usb 4-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 112.913077][ T24] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 112.913099][ T24] usb 4-1: config 0 has no interface number 0 [ 112.913116][ T24] usb 4-1: config 0 has no interface number 1 [ 112.913170][ T24] usb 4-1: config 0 interface 246 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 1024 [ 112.913195][ T24] usb 4-1: config 0 interface 246 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 112.913221][ T24] usb 4-1: config 0 interface 246 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 112.913247][ T24] usb 4-1: too many endpoints for config 0 interface 45 altsetting 192: 44, using maximum allowed: 30 [ 112.913283][ T24] usb 4-1: config 0 interface 45 altsetting 192 has a duplicate endpoint with address 0xD, skipping [ 112.913305][ T24] usb 4-1: config 0 interface 45 altsetting 192 has 2 endpoint descriptors, different from the interface descriptor's value: 44 [ 112.913329][ T24] usb 4-1: config 0 interface 246 has no altsetting 0 [ 112.913347][ T24] usb 4-1: config 0 interface 45 has no altsetting 0 [ 112.921380][ T24] usb 4-1: New USB device found, idVendor=deee, idProduct=0300, bcdDevice= 5.5b [ 112.921410][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.921429][ T24] usb 4-1: Product: syz [ 112.921460][ T24] usb 4-1: Manufacturer: syz [ 112.921475][ T24] usb 4-1: SerialNumber: syz [ 112.928929][ T24] usb 4-1: config 0 descriptor?? [ 112.930159][ T6405] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.201672][ T24] ftdi_sio 4-1:0.246: FTDI USB Serial Device converter detected [ 113.253363][ T24] ftdi_sio ttyUSB0: unknown device type: 0x55b [ 113.331513][ T6427] Zero length message leads to an empty skb [ 113.371066][ T24] ftdi_sio 4-1:0.45: FTDI USB Serial Device converter detected [ 113.442741][ T24] ftdi_sio ttyUSB1: unknown device type: 0x55b [ 113.612261][ T24] usb 4-1: USB disconnect, device number 5 [ 113.646550][ T24] ftdi_sio 4-1:0.246: device disconnected [ 113.671378][ T24] ftdi_sio 4-1:0.45: device disconnected [ 114.408454][ T6433] tipc: Started in network mode [ 114.408476][ T6433] tipc: Node identity 3e3dadeacd69, cluster identity 4711 [ 114.409217][ T6433] tipc: Enabled bearer , priority 0 [ 114.409764][ T6433] syzkaller0: entered promiscuous mode [ 114.409776][ T6433] syzkaller0: entered allmulticast mode [ 114.414303][ T6433] tipc: Resetting bearer [ 114.433929][ T6430] tipc: Resetting bearer [ 114.617805][ T6430] tipc: Disabling bearer [ 114.941463][ T5840] Bluetooth: hci5: command 0xfc11 tx timeout [ 114.949370][ T51] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 115.049296][ T5918] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.267637][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 115.329819][ T6460] netlink: 452 bytes leftover after parsing attributes in process `syz.0.138'. [ 115.342586][ T5918] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 115.418489][ T5918] usb 3-1: config 0 has no interface number 0 [ 115.637774][ T5918] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 115.731601][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.782963][ T5918] usb 3-1: Product: syz [ 115.852954][ T5918] usb 3-1: Manufacturer: syz [ 115.885643][ T5918] usb 3-1: SerialNumber: syz [ 115.898563][ T5918] usb 3-1: config 0 descriptor?? [ 115.926764][ T5918] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 116.037072][ T6477] netlink: 452 bytes leftover after parsing attributes in process `syz.1.143'. [ 116.221996][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 116.337141][ T5918] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 116.517941][ T5918] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 116.940467][ T5888] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 117.120385][ T5888] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 117.147697][ T5888] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 117.181233][ T6502] netlink: 'syz.3.150': attribute type 12 has an invalid length. [ 117.197627][ T5888] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 117.275645][ T5888] usb 1-1: config 8 has no interface number 0 [ 117.401893][ T5888] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 117.417693][ T5888] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.434217][ T5888] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 117.471342][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.481034][ T5888] usb 1-1: Product: syz [ 117.485232][ T5888] usb 1-1: Manufacturer: syz [ 117.508549][ T5888] usb 1-1: SerialNumber: syz [ 117.813980][ T5888] usb 1-1: USB disconnect, device number 8 [ 118.596195][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.598427][ T9] usb 3-1: USB disconnect, device number 8 [ 118.822173][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 118.823067][ T6516] netlink: 148 bytes leftover after parsing attributes in process `syz.1.154'. [ 118.842353][ T6516] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 118.894204][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 118.994639][ T9] quatech2 3-1:0.51: device disconnected [ 119.023280][ T6525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 119.420669][ T6540] fuse: Bad value for 'fd' [ 120.209898][ T6555] TCP: TCP_TX_DELAY enabled [ 120.223449][ T6555] program syz.1.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.239445][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.487888][ T6559] input: syz0 as /devices/virtual/input/input7 [ 123.948427][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 123.991458][ T9] usb 3-1: device descriptor read/all, error -71 [ 124.271063][ T6575] loop2: detected capacity change from 0 to 7 [ 124.297297][ T6575] loop2: [ 124.315342][ T6575] loop2: partition table partially beyond EOD, truncated [ 124.500693][ T6587] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 124.532976][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.175'. [ 124.574333][ T6591] FAULT_INJECTION: forcing a failure. [ 124.574333][ T6591] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 124.580212][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.175'. [ 124.590618][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.2.176 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 124.590641][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.590659][ T6591] Call Trace: [ 124.590669][ T6591] [ 124.590677][ T6591] dump_stack_lvl+0x189/0x250 [ 124.590704][ T6591] ? __pfx____ratelimit+0x10/0x10 [ 124.590724][ T6591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.590745][ T6591] ? __pfx__printk+0x10/0x10 [ 124.590770][ T6591] ? fs_reclaim_acquire+0x7d/0x100 [ 124.590801][ T6591] should_fail_ex+0x414/0x560 [ 124.590827][ T6591] prepare_alloc_pages+0x213/0x610 [ 124.590858][ T6591] __alloc_frozen_pages_noprof+0x123/0x370 [ 124.590885][ T6591] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.590907][ T6591] ? vmx_vcpu_pi_load+0x128/0x870 [ 124.590939][ T6591] ? policy_nodemask+0x27c/0x720 [ 124.590956][ T6591] ? __lock_acquire+0xab9/0xd20 [ 124.590985][ T6591] alloc_pages_mpol+0x232/0x4a0 [ 124.591011][ T6591] vma_alloc_folio_noprof+0xe4/0x200 [ 124.591033][ T6591] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 124.591066][ T6591] folio_prealloc+0x30/0x180 [ 124.591087][ T6591] __handle_mm_fault+0x2c88/0x5620 [ 124.591136][ T6591] ? __pfx___handle_mm_fault+0x10/0x10 [ 124.591179][ T6591] ? follow_page_pte+0x8d6/0x14b0 [ 124.591206][ T6591] handle_mm_fault+0x2d5/0x7f0 [ 124.591234][ T6591] ? vma_is_secretmem+0xd/0x50 [ 124.591262][ T6591] __get_user_pages+0x1af4/0x30b0 [ 124.591302][ T6591] ? __lock_acquire+0xab9/0xd20 [ 124.591344][ T6591] ? __pfx___get_user_pages+0x10/0x10 [ 124.591372][ T6591] ? get_user_pages_unlocked+0xb9/0x740 [ 124.591398][ T6591] ? down_read_killable+0x1d1/0x350 [ 124.591420][ T6591] ? is_valid_gup_args+0x11f/0x200 [ 124.591449][ T6591] get_user_pages_unlocked+0x1e3/0x740 [ 124.591489][ T6591] hva_to_pfn+0x313/0xc90 [ 124.591521][ T6591] ? __pfx_hva_to_pfn+0x10/0x10 [ 124.591550][ T6591] ? xas_start+0x390/0x770 [ 124.591569][ T6591] ? xa_load+0x60/0x210 [ 124.591599][ T6591] ? kvm_follow_pfn+0x21a/0x3c0 [ 124.591624][ T6591] __kvm_faultin_pfn+0xaa/0x100 [ 124.591653][ T6591] kvm_mmu_faultin_pfn+0x765/0x1d10 [ 124.591694][ T6591] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 124.591718][ T6591] ? __pfx_fast_page_fault+0x10/0x10 [ 124.591741][ T6591] ? __kvm_mmu_topup_memory_cache+0x31a/0x610 [ 124.591773][ T6591] kvm_tdp_page_fault+0x273/0x370 [ 124.591803][ T6591] kvm_mmu_do_page_fault+0x2c5/0x640 [ 124.591836][ T6591] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 124.591877][ T6591] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 124.591897][ T6591] ? __pfx_current_save_fsgs+0x10/0x10 [ 124.591925][ T6591] kvm_mmu_page_fault+0x22f/0xb70 [ 124.591958][ T6591] ? __pfx_handle_ept_violation+0x10/0x10 [ 124.591990][ T6591] vmx_handle_exit+0x1090/0x18a0 [ 124.592011][ T6591] ? vcpu_run+0x361c/0x6f70 [ 124.592048][ T6591] vcpu_run+0x432e/0x6f70 [ 124.592092][ T6591] ? vcpu_run+0x361c/0x6f70 [ 124.592164][ T6591] ? __pfx_vcpu_run+0x10/0x10 [ 124.592194][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 124.592224][ T6591] ? rcu_is_watching+0x15/0xb0 [ 124.592248][ T6591] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 124.592284][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 124.592307][ T6591] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 124.592335][ T6591] ? rcu_is_watching+0x15/0xb0 [ 124.592355][ T6591] ? trace_contention_end+0x39/0x120 [ 124.592377][ T6591] ? __mutex_lock+0x330/0xe80 [ 124.592400][ T6591] ? kasan_quarantine_put+0xdd/0x220 [ 124.592432][ T6591] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 124.592457][ T6591] ? __pfx___mutex_lock+0x10/0x10 [ 124.592479][ T6591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 124.592502][ T6591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 124.592522][ T6591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.592549][ T6591] kvm_vcpu_ioctl+0x95c/0xe90 [ 124.592579][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.592598][ T6591] ? __lock_acquire+0xab9/0xd20 [ 124.592619][ T6591] ? __asan_memset+0x22/0x50 [ 124.592644][ T6591] ? smack_file_ioctl+0x302/0x340 [ 124.592664][ T6591] ? __pfx_smack_file_ioctl+0x10/0x10 [ 124.592693][ T6591] ? __fget_files+0x2a/0x420 [ 124.592713][ T6591] ? __fget_files+0x3a0/0x420 [ 124.592731][ T6591] ? __fget_files+0x2a/0x420 [ 124.592755][ T6591] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.592777][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.592799][ T6591] __se_sys_ioctl+0xfc/0x170 [ 124.592828][ T6591] do_syscall_64+0xfa/0x3b0 [ 124.592847][ T6591] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.592865][ T6591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.592884][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 124.592906][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.592923][ T6591] RIP: 0033:0x7f923098ebe9 [ 124.592944][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.592963][ T6591] RSP: 002b:00007f92318d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.592989][ T6591] RAX: ffffffffffffffda RBX: 00007f9230bb5fa0 RCX: 00007f923098ebe9 [ 124.593003][ T6591] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 124.593013][ T6591] RBP: 00007f92318d1090 R08: 0000000000000000 R09: 0000000000000000 [ 124.593025][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.593035][ T6591] R13: 00007f9230bb6038 R14: 00007f9230bb5fa0 R15: 00007ffea3d11718 [ 124.593067][ T6591] [ 124.781642][ T6603] loop8: detected capacity change from 0 to 7 [ 125.157759][ T6603] Dev loop8: unable to read RDB block 7 [ 125.175091][ T6603] loop8: unable to read partition table [ 125.207224][ T6603] loop8: partition table beyond EOD, truncated [ 125.236371][ T6603] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 125.309125][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.490512][ T5888] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 125.513429][ T5888] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 125.572502][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.620303][ T5888] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 125.670186][ T6629] loop2: detected capacity change from 0 to 7 [ 125.690541][ T6629] loop2: [ 125.705211][ T6629] loop2: partition table partially beyond EOD, truncated [ 125.945676][ T6641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.099784][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 126.708763][ T5888] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 126.726602][ T5888] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 126.736640][ T5888] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 126.756964][ T5888] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 126.797616][ T6650] FAULT_INJECTION: forcing a failure. [ 126.797616][ T6650] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.814387][ T6650] CPU: 0 UID: 0 PID: 6650 Comm: syz.0.191 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 126.814411][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.814421][ T6650] Call Trace: [ 126.814429][ T6650] [ 126.814437][ T6650] dump_stack_lvl+0x189/0x250 [ 126.814462][ T6650] ? __pfx____ratelimit+0x10/0x10 [ 126.814482][ T6650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.814502][ T6650] ? __pfx__printk+0x10/0x10 [ 126.814542][ T6650] should_fail_ex+0x414/0x560 [ 126.814567][ T6650] __kvm_read_guest_page+0x18d/0x240 [ 126.814596][ T6650] kvm_fetch_guest_virt+0x12b/0x170 [ 126.814627][ T6650] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 126.814654][ T6650] __do_insn_fetch_bytes+0x2f9/0x6d0 [ 126.814681][ T6650] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 126.814716][ T6650] x86_decode_insn+0x33c/0x5310 [ 126.814757][ T6650] ? kvm_is_mmio_pfn+0x123/0x610 [ 126.814792][ T6650] ? handle_changed_spte+0x3f5/0x10a0 [ 126.814827][ T6650] ? __pfx_x86_decode_insn+0x10/0x10 [ 126.814860][ T6650] ? __asan_memset+0x22/0x50 [ 126.814886][ T6650] ? init_decode_cache+0x78/0x90 [ 126.814906][ T6650] ? init_emulate_ctxt+0x4d6/0x660 [ 126.814930][ T6650] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 126.814951][ T6650] ? trace_rcu_utilization+0x47/0x1d0 [ 126.814974][ T6650] ? rcu_note_context_switch+0xdc1/0x1140 [ 126.814999][ T6650] ? kvm_pmu_is_valid_msr+0x8d/0xb0 [ 126.815034][ T6650] x86_emulate_instruction+0x60a/0x1ef0 [ 126.815062][ T6650] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 126.815095][ T6650] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 126.815114][ T6650] ? __get_current_cr3_fast+0x90/0x150 [ 126.815138][ T6650] ? clear_bhb_loop+0x60/0xb0 [ 126.815157][ T6650] ? clear_bhb_loop+0x60/0xb0 [ 126.815177][ T6650] ? vmx_vcpu_run+0xd8b/0x25d0 [ 126.815196][ T6650] ? __vmx_complete_interrupts+0xe7/0x690 [ 126.815230][ T6650] handle_ud+0x142/0x590 [ 126.815252][ T6650] ? __pfx_handle_ud+0x10/0x10 [ 126.815267][ T6650] ? vmx_handle_exit_irqoff+0x6c9/0xad0 [ 126.815287][ T6650] ? kvm_multiple_exception+0x69a/0xc00 [ 126.815313][ T6650] ? __lock_acquire+0xab9/0xd20 [ 126.815334][ T6650] ? __pfx_handle_exception_nmi+0x10/0x10 [ 126.815357][ T6650] vmx_handle_exit+0x1090/0x18a0 [ 126.815378][ T6650] ? vcpu_run+0x361c/0x6f70 [ 126.815417][ T6650] vcpu_run+0x432e/0x6f70 [ 126.815461][ T6650] ? vcpu_run+0x361c/0x6f70 [ 126.815535][ T6650] ? __pfx_vcpu_run+0x10/0x10 [ 126.815563][ T6650] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 126.815594][ T6650] ? rcu_is_watching+0x15/0xb0 [ 126.815620][ T6650] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 126.815655][ T6650] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 126.815679][ T6650] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 126.815708][ T6650] ? rcu_is_watching+0x15/0xb0 [ 126.815728][ T6650] ? trace_contention_end+0x39/0x120 [ 126.815751][ T6650] ? __mutex_lock+0x330/0xe80 [ 126.815774][ T6650] ? kasan_quarantine_put+0xdd/0x220 [ 126.815805][ T6650] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 126.815830][ T6650] ? __pfx___mutex_lock+0x10/0x10 [ 126.815851][ T6650] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 126.815873][ T6650] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 126.815893][ T6650] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.815922][ T6650] kvm_vcpu_ioctl+0x95c/0xe90 [ 126.815951][ T6650] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.815972][ T6650] ? __lock_acquire+0xab9/0xd20 [ 126.815993][ T6650] ? __asan_memset+0x22/0x50 [ 126.816024][ T6650] ? smack_file_ioctl+0x302/0x340 [ 126.816046][ T6650] ? __pfx_smack_file_ioctl+0x10/0x10 [ 126.816076][ T6650] ? __fget_files+0x2a/0x420 [ 126.816097][ T6650] ? __fget_files+0x3a0/0x420 [ 126.816116][ T6650] ? __fget_files+0x2a/0x420 [ 126.816140][ T6650] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.816162][ T6650] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 126.816186][ T6650] __se_sys_ioctl+0xfc/0x170 [ 126.816217][ T6650] do_syscall_64+0xfa/0x3b0 [ 126.816236][ T6650] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.816256][ T6650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.816274][ T6650] ? clear_bhb_loop+0x60/0xb0 [ 126.816298][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.816316][ T6650] RIP: 0033:0x7fe59e38ebe9 [ 126.816334][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.816350][ T6650] RSP: 002b:00007fe59f2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.816370][ T6650] RAX: ffffffffffffffda RBX: 00007fe59e5b5fa0 RCX: 00007fe59e38ebe9 [ 126.816383][ T6650] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 126.816394][ T6650] RBP: 00007fe59f2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 126.816405][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.816416][ T6650] R13: 00007fe59e5b6038 R14: 00007fe59e5b5fa0 R15: 00007ffefcdd0548 [ 126.816448][ T6650] [ 127.317665][ T5888] usb 4-1: USB disconnect, device number 6 [ 127.383925][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 127.390631][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 127.614969][ T6653] ceph: No mds server is up or the cluster is laggy [ 128.098301][ T5932] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.140695][ T5918] kernel write not supported for file /register (pid: 5918 comm: kworker/1:5) [ 128.267634][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 128.293659][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.305707][ T5932] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 128.337566][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.358956][ T5932] usb 4-1: config 0 descriptor?? [ 128.557584][ T5918] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.737846][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 128.745213][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 128.759234][ T5918] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 128.768397][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.780222][ T5918] usb 1-1: config 0 descriptor?? [ 128.827771][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.093364][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.109254][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.134203][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 129.152397][ T6689] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 129.153117][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 129.178484][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.179117][ T6689] CIFS mount error: No usable UNC path provided in device string! [ 129.179117][ T6689] [ 129.186854][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 129.193748][ T6689] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.212446][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.221879][ T24] usb 3-1: config 0 descriptor?? [ 129.244346][ T5918] corsair 0003:1B1C:1B09.0001: unbalanced delimiter at end of report description [ 129.261461][ T5932] usb 4-1: USB disconnect, device number 7 [ 129.279544][ T5918] corsair 0003:1B1C:1B09.0001: parse failed [ 129.290204][ T5918] corsair 0003:1B1C:1B09.0001: probe with driver corsair failed with error -22 [ 129.456974][ T5888] usb 1-1: USB disconnect, device number 9 [ 129.682421][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 129.724391][ T24] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 129.851443][ T6695] FAULT_INJECTION: forcing a failure. [ 129.851443][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.890590][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.4.203 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 129.890616][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.890628][ T6695] Call Trace: [ 129.890635][ T6695] [ 129.890643][ T6695] dump_stack_lvl+0x189/0x250 [ 129.890668][ T6695] ? __pfx____ratelimit+0x10/0x10 [ 129.890689][ T6695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.890708][ T6695] ? __pfx__printk+0x10/0x10 [ 129.890743][ T6695] should_fail_ex+0x414/0x560 [ 129.890766][ T6695] __kvm_read_guest_page+0x18d/0x240 [ 129.890792][ T6695] kvm_fetch_guest_virt+0x12b/0x170 [ 129.890824][ T6695] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 129.890851][ T6695] __do_insn_fetch_bytes+0x2f9/0x6d0 [ 129.890879][ T6695] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 129.890905][ T6695] ? x86_decode_insn+0x12d7/0x5310 [ 129.890930][ T6695] x86_decode_insn+0x33c/0x5310 [ 129.890947][ T6695] ? kvm_is_mmio_pfn+0x123/0x610 [ 129.890995][ T6695] ? __pfx_x86_decode_insn+0x10/0x10 [ 129.891027][ T6695] ? __asan_memset+0x22/0x50 [ 129.891053][ T6695] ? init_decode_cache+0x78/0x90 [ 129.891073][ T6695] ? init_emulate_ctxt+0x4d6/0x660 [ 129.891095][ T6695] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 129.891113][ T6695] ? trace_rcu_utilization+0x47/0x1d0 [ 129.891134][ T6695] ? rcu_note_context_switch+0xdc1/0x1140 [ 129.891157][ T6695] ? kvm_pmu_is_valid_msr+0x8d/0xb0 [ 129.891183][ T6695] x86_emulate_instruction+0x60a/0x1ef0 [ 129.891211][ T6695] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 129.891240][ T6695] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 129.891258][ T6695] ? __get_current_cr3_fast+0x90/0x150 [ 129.891279][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 129.891294][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 129.891312][ T6695] ? vmx_vcpu_run+0xd8b/0x25d0 [ 129.891328][ T6695] ? __vmx_complete_interrupts+0xe7/0x690 [ 129.891361][ T6695] handle_ud+0x142/0x590 [ 129.891381][ T6695] ? __pfx_handle_ud+0x10/0x10 [ 129.891395][ T6695] ? vmx_handle_exit_irqoff+0x6c9/0xad0 [ 129.891415][ T6695] ? kvm_multiple_exception+0x69a/0xc00 [ 129.891449][ T6695] ? __lock_acquire+0xab9/0xd20 [ 129.891470][ T6695] ? __pfx_handle_exception_nmi+0x10/0x10 [ 129.891493][ T6695] vmx_handle_exit+0x1090/0x18a0 [ 129.891515][ T6695] ? vcpu_run+0x361c/0x6f70 [ 129.891554][ T6695] vcpu_run+0x432e/0x6f70 [ 129.891596][ T6695] ? vcpu_run+0x361c/0x6f70 [ 129.891664][ T6695] ? __pfx_vcpu_run+0x10/0x10 [ 129.891691][ T6695] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 129.891718][ T6695] ? rcu_is_watching+0x15/0xb0 [ 129.891741][ T6695] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 129.891777][ T6695] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 129.891799][ T6695] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 129.891827][ T6695] ? rcu_is_watching+0x15/0xb0 [ 129.891848][ T6695] ? trace_contention_end+0x39/0x120 [ 129.891872][ T6695] ? __mutex_lock+0x330/0xe80 [ 129.891895][ T6695] ? kasan_quarantine_put+0xdd/0x220 [ 129.891927][ T6695] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 129.891951][ T6695] ? __pfx___mutex_lock+0x10/0x10 [ 129.891973][ T6695] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 129.891994][ T6695] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 129.892013][ T6695] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.892037][ T6695] kvm_vcpu_ioctl+0x95c/0xe90 [ 129.892064][ T6695] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.892084][ T6695] ? __lock_acquire+0xab9/0xd20 [ 129.892104][ T6695] ? __asan_memset+0x22/0x50 [ 129.892128][ T6695] ? smack_file_ioctl+0x302/0x340 [ 129.892148][ T6695] ? __pfx_smack_file_ioctl+0x10/0x10 [ 129.892178][ T6695] ? __fget_files+0x2a/0x420 [ 129.892197][ T6695] ? __fget_files+0x3a0/0x420 [ 129.892216][ T6695] ? __fget_files+0x2a/0x420 [ 129.892241][ T6695] ? bpf_lsm_file_ioctl+0x9/0x20 [ 129.892262][ T6695] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 129.892283][ T6695] __se_sys_ioctl+0xfc/0x170 [ 129.892313][ T6695] do_syscall_64+0xfa/0x3b0 [ 129.892336][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.892354][ T6695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.892371][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 129.892394][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.892411][ T6695] RIP: 0033:0x7f908238ebe9 [ 129.892429][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.892454][ T6695] RSP: 002b:00007f9083269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.892475][ T6695] RAX: ffffffffffffffda RBX: 00007f90825b5fa0 RCX: 00007f908238ebe9 [ 129.892489][ T6695] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 129.892500][ T6695] RBP: 00007f9083269090 R08: 0000000000000000 R09: 0000000000000000 [ 129.892512][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.892522][ T6695] R13: 00007f90825b6038 R14: 00007f90825b5fa0 R15: 00007fff5aecc248 [ 129.892555][ T6695] [ 129.894175][ T24] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 130.832569][ T24] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 130.874401][ T24] usb 3-1: USB disconnect, device number 11 [ 131.208917][ T6720] input: syz0 as /devices/virtual/input/input8 [ 132.086628][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 132.133353][ T6738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.213'. [ 132.209955][ T6746] FAULT_INJECTION: forcing a failure. [ 132.209955][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.295858][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.4.217 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 132.295886][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.295897][ T6746] Call Trace: [ 132.295905][ T6746] [ 132.295914][ T6746] dump_stack_lvl+0x189/0x250 [ 132.295941][ T6746] ? __pfx____ratelimit+0x10/0x10 [ 132.295962][ T6746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.295984][ T6746] ? __pfx__printk+0x10/0x10 [ 132.296025][ T6746] should_fail_ex+0x414/0x560 [ 132.296052][ T6746] __kvm_read_guest_page+0x18d/0x240 [ 132.296081][ T6746] kvm_fetch_guest_virt+0x12b/0x170 [ 132.296113][ T6746] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 132.296142][ T6746] __do_insn_fetch_bytes+0x2f9/0x6d0 [ 132.296170][ T6746] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 132.296198][ T6746] ? x86_decode_insn+0x12d7/0x5310 [ 132.296223][ T6746] x86_decode_insn+0x33c/0x5310 [ 132.296241][ T6746] ? kvm_is_mmio_pfn+0x123/0x610 [ 132.296296][ T6746] ? __pfx_x86_decode_insn+0x10/0x10 [ 132.296331][ T6746] ? __asan_memset+0x22/0x50 [ 132.296358][ T6746] ? init_decode_cache+0x78/0x90 [ 132.296379][ T6746] ? init_emulate_ctxt+0x4d6/0x660 [ 132.296403][ T6746] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 132.296425][ T6746] ? trace_rcu_utilization+0x47/0x1d0 [ 132.296448][ T6746] ? rcu_note_context_switch+0xdc1/0x1140 [ 132.296474][ T6746] ? kvm_pmu_is_valid_msr+0x8d/0xb0 [ 132.296503][ T6746] x86_emulate_instruction+0x60a/0x1ef0 [ 132.296542][ T6746] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 132.296577][ T6746] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 132.296596][ T6746] ? __get_current_cr3_fast+0x90/0x150 [ 132.296621][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 132.296640][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 132.296660][ T6746] ? vmx_vcpu_run+0xd8b/0x25d0 [ 132.296680][ T6746] ? __vmx_complete_interrupts+0xe7/0x690 [ 132.296716][ T6746] handle_ud+0x142/0x590 [ 132.296738][ T6746] ? __pfx_handle_ud+0x10/0x10 [ 132.296753][ T6746] ? vmx_handle_exit_irqoff+0x6c9/0xad0 [ 132.296774][ T6746] ? kvm_multiple_exception+0x69a/0xc00 [ 132.296801][ T6746] ? __lock_acquire+0xab9/0xd20 [ 132.296827][ T6746] ? __pfx_handle_exception_nmi+0x10/0x10 [ 132.296851][ T6746] vmx_handle_exit+0x1090/0x18a0 [ 132.296874][ T6746] ? vcpu_run+0x361c/0x6f70 [ 132.296914][ T6746] vcpu_run+0x432e/0x6f70 [ 132.296961][ T6746] ? vcpu_run+0x361c/0x6f70 [ 132.297040][ T6746] ? __pfx_vcpu_run+0x10/0x10 [ 132.297071][ T6746] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 132.297103][ T6746] ? rcu_is_watching+0x15/0xb0 [ 132.297129][ T6746] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 132.297167][ T6746] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 132.297191][ T6746] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 132.297221][ T6746] ? rcu_is_watching+0x15/0xb0 [ 132.297242][ T6746] ? trace_contention_end+0x39/0x120 [ 132.297265][ T6746] ? __mutex_lock+0x330/0xe80 [ 132.297362][ T6746] ? kasan_quarantine_put+0xdd/0x220 [ 132.297398][ T6746] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 132.297425][ T6746] ? __pfx___mutex_lock+0x10/0x10 [ 132.297449][ T6746] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 132.297469][ T6746] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 132.297486][ T6746] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.297511][ T6746] kvm_vcpu_ioctl+0x95c/0xe90 [ 132.297538][ T6746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 132.297556][ T6746] ? __lock_acquire+0xab9/0xd20 [ 132.297575][ T6746] ? __asan_memset+0x22/0x50 [ 132.297599][ T6746] ? smack_file_ioctl+0x302/0x340 [ 132.297619][ T6746] ? __pfx_smack_file_ioctl+0x10/0x10 [ 132.297650][ T6746] ? __fget_files+0x2a/0x420 [ 132.297670][ T6746] ? __fget_files+0x3a0/0x420 [ 132.297689][ T6746] ? __fget_files+0x2a/0x420 [ 132.297711][ T6746] ? bpf_lsm_file_ioctl+0x9/0x20 [ 132.297731][ T6746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 132.297751][ T6746] __se_sys_ioctl+0xfc/0x170 [ 132.297781][ T6746] do_syscall_64+0xfa/0x3b0 [ 132.297802][ T6746] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.297822][ T6746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.297841][ T6746] ? clear_bhb_loop+0x60/0xb0 [ 132.297865][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.297883][ T6746] RIP: 0033:0x7f908238ebe9 [ 132.297901][ T6746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.297917][ T6746] RSP: 002b:00007f9083269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.297937][ T6746] RAX: ffffffffffffffda RBX: 00007f90825b5fa0 RCX: 00007f908238ebe9 [ 132.297952][ T6746] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 132.297964][ T6746] RBP: 00007f9083269090 R08: 0000000000000000 R09: 0000000000000000 [ 132.297976][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.297988][ T6746] R13: 00007f90825b6038 R14: 00007f90825b5fa0 R15: 00007fff5aecc248 [ 132.298022][ T6746] [ 132.950436][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.958131][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.277817][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.286279][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 133.427742][ T43] usb 1-1: device descriptor read/64, error -32 [ 133.581851][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 133.704570][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.877769][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 133.892324][ T43] usb 1-1: config 211 has an invalid interface number: 228 but max is 0 [ 133.922681][ T43] usb 1-1: config 211 has an invalid descriptor of length 89, skipping remainder of the config [ 133.952769][ T43] usb 1-1: config 211 has no interface number 0 [ 133.969813][ T43] usb 1-1: config 211 interface 228 has no altsetting 0 [ 133.994921][ T43] usb 1-1: New USB device found, idVendor=7392, idProduct=d611, bcdDevice=f1.43 [ 134.010758][ T6781] netlink: 300 bytes leftover after parsing attributes in process `syz.1.227'. [ 134.127544][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.136851][ T43] usb 1-1: Product: syz [ 134.144270][ T43] usb 1-1: Manufacturer: syz [ 134.148955][ T43] usb 1-1: SerialNumber: syz [ 134.260446][ T6784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 134.416653][ T43] usb 1-1: USB disconnect, device number 11 [ 134.426690][ T6788] xt_hashlimit: max too large, truncated to 1048576 [ 135.009470][ T6815] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 135.048011][ T6815] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 135.082002][ T6815] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 135.162168][ T6824] netlink: 'syz.3.240': attribute type 6 has an invalid length. [ 135.169994][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 135.366963][ T6829] syz.3.240 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 135.474960][ T6829] netlink: 68 bytes leftover after parsing attributes in process `syz.3.240'. [ 137.227579][ T5846] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.528478][ T5846] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 137.539163][ T5846] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 137.554742][ T5846] usb 3-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=84.b2 [ 137.666902][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.715872][ T5846] usb 3-1: Product: syz [ 137.744481][ T5846] usb 3-1: Manufacturer: syz [ 137.767702][ T5846] usb 3-1: SerialNumber: syz [ 137.985938][ T6845] netlink: 'syz.0.244': attribute type 41 has an invalid length. [ 138.435358][ T5846] usb 3-1: selecting invalid altsetting 1 [ 138.487436][ T5846] snd-usb-caiaq 3-1:4.0: can't set alt interface. [ 138.532565][ T5846] usb 3-1: unable to init card! (ret=-5) [ 138.582143][ T5846] snd-usb-caiaq 3-1:4.0: probe with driver snd-usb-caiaq failed with error -5 [ 138.625713][ T5846] usb 3-1: USB disconnect, device number 12 [ 139.027872][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.207960][ T24] usb 1-1: device descriptor read/64, error -71 [ 139.467829][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 139.657841][ T24] usb 1-1: device descriptor read/64, error -71 [ 139.763448][ T6870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.804522][ T24] usb usb1-port1: attempt power cycle [ 140.356539][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.388734][ T24] usb 1-1: device descriptor read/8, error -71 [ 140.403871][ T6886] delete_channel: no stack [ 140.668773][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.719794][ T24] usb 1-1: device descriptor read/8, error -71 [ 140.841033][ T24] usb usb1-port1: unable to enumerate USB device [ 141.210279][ T51] Bluetooth: hci4: link tx timeout [ 141.216311][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.890279][ T6932] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 143.267560][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 143.489740][ T6943] netlink: 'syz.1.270': attribute type 21 has an invalid length. [ 143.619975][ T6945] xt_connbytes: Forcing CT accounting to be enabled [ 143.626742][ T6945] Cannot find set identified by id 0 to match [ 145.130017][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 146.066093][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 146.102549][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 146.123033][ T6967] netlink: 'syz.3.276': attribute type 7 has an invalid length. [ 146.183750][ T6950] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 146.195453][ T6950] team0 (unregistering): Port device team_slave_0 removed [ 146.220491][ T6950] team0 (unregistering): Failed to send options change via netlink (err -105) [ 146.233519][ T6950] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 146.251917][ T6950] team0 (unregistering): Port device team_slave_1 removed [ 146.335181][ T6972] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 146.346984][ T6972] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 146.817601][ T1207] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 147.017634][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 147.030116][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.080576][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.279'. [ 147.089926][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.279'. [ 147.141348][ T1207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.264250][ T1207] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 147.357814][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.376508][ T1207] usb 3-1: config 0 descriptor?? [ 147.496272][ T6987] autofs: Unknown parameter '/dev/kvm' [ 147.504070][ T6988] autofs: Unknown parameter '/dev/kvm' [ 147.540019][ T6987] overlayfs: failed to clone lowerpath [ 147.565239][ T6988] overlayfs: failed to clone lowerpath [ 150.100538][ T1207] usbhid 3-1:0.0: can't add hid device: -71 [ 150.106531][ T1207] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.154911][ T7004] netlink: 300 bytes leftover after parsing attributes in process `syz.3.282'. [ 150.473142][ T1207] usb 3-1: USB disconnect, device number 13 [ 150.898167][ T7012] netlink: 'syz.4.288': attribute type 21 has an invalid length. [ 151.145965][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.286'. [ 151.424558][ T7012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.288'. [ 151.467713][ T7013] wlan1: mtu less than device minimum [ 151.638201][ T7023] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 151.645026][ T7023] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.667564][ T7023] vhci_hcd vhci_hcd.0: Device attached [ 151.746364][ T7024] vhci_hcd: connection closed [ 151.747581][ T5932] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.770146][ T49] vhci_hcd: stop threads [ 151.775186][ T49] vhci_hcd: release socket [ 151.809511][ T49] vhci_hcd: disconnect device [ 151.838301][ T24] vhci_hcd: vhci_device speed not set [ 151.908215][ T5932] usb 4-1: device descriptor read/64, error -71 [ 152.024169][ T7040] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 152.025704][ T5888] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 152.830813][ T5888] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 152.932875][ T5932] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.078064][ T5932] usb 4-1: device descriptor read/64, error -71 [ 153.083262][ T5888] usb 3-1: config 0 has no interface number 0 [ 153.370998][ T5888] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 153.373095][ T5902] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 153.394444][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.414727][ T5888] usb 3-1: Product: syz [ 153.421806][ T5888] usb 3-1: Manufacturer: syz [ 153.426554][ T5888] usb 3-1: SerialNumber: syz [ 153.444563][ T5902] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 153.471064][ T5902] usb 5-1: USB disconnect, device number 2 [ 153.498042][ T5932] usb usb4-port1: attempt power cycle [ 153.502531][ T5888] usb 3-1: config 0 descriptor?? [ 153.965067][ T5888] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 153.999465][ T5888] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 154.037217][ T7043] usb usb1: check_ctrlrecip: process 7043 (syz.0.294) requesting ep 01 but needs 81 [ 154.105206][ T7044] tmpfs: Unknown parameter 'quta' [ 154.216357][ T5888] usb 3-1: USB disconnect, device number 14 [ 154.227841][ T5932] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.281859][ T5932] usb 4-1: device descriptor read/8, error -71 [ 155.499838][ T5932] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 155.853359][ T5932] usb 4-1: device descriptor read/8, error -71 [ 156.017890][ T5932] usb usb4-port1: unable to enumerate USB device [ 156.518781][ T7077] netlink: 452 bytes leftover after parsing attributes in process `syz.1.304'. [ 156.581490][ T7079] cgroup: none used incorrectly [ 156.698856][ T5932] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.989703][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 157.063219][ T5932] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.123230][ T5932] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.499408][ T5932] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 157.512516][ T5932] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 157.585396][ T5932] usb 4-1: Product: syz [ 157.589715][ T5932] usb 4-1: Manufacturer: syz [ 157.633338][ T5932] hub 4-1:4.0: USB hub found [ 157.708617][ T7097] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.311'. [ 157.757602][ T7097] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.311'. [ 157.784381][ T7097] netlink: 584 bytes leftover after parsing attributes in process `syz.0.311'. [ 157.987179][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.028656][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.079595][ T5932] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 158.149987][ T5932] usb 4-1: USB disconnect, device number 12 [ 158.181155][ T7109] Bluetooth: MGMT ver 1.23 [ 158.655836][ T7121] netlink: 452 bytes leftover after parsing attributes in process `syz.4.317'. [ 159.071751][ T7128] ======================================================= [ 159.071751][ T7128] WARNING: The mand mount option has been deprecated and [ 159.071751][ T7128] and is ignored by this kernel. Remove the mand [ 159.071751][ T7128] option from the mount to silence this warning. [ 159.071751][ T7128] ======================================================= [ 159.114398][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 159.132130][ T7128] dummy0: entered promiscuous mode [ 159.297103][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 954 [ 159.298465][ T7129] 9pnet_virtio: no channels available for device 3A%v [ 159.923899][ T30] audit: type=1326 audit(1755920455.422:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.025973][ T30] audit: type=1326 audit(1755920455.452:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.095563][ T30] audit: type=1326 audit(1755920455.452:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.157644][ T30] audit: type=1326 audit(1755920455.452:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.211259][ T30] audit: type=1326 audit(1755920455.452:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.428883][ T30] audit: type=1326 audit(1755920455.462:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.451663][ T30] audit: type=1326 audit(1755920455.462:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.473552][ T30] audit: type=1326 audit(1755920455.462:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.544906][ T30] audit: type=1326 audit(1755920455.462:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.701189][ T30] audit: type=1326 audit(1755920455.462:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7137 comm="syz.1.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 160.724179][ T7144] erspan0: entered promiscuous mode [ 161.516468][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 162.570464][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 163.055828][ T7167] netlink: 76 bytes leftover after parsing attributes in process `syz.2.329'. [ 164.447674][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 164.652425][ T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 96, changing to 10 [ 164.713487][ T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 16 [ 164.742435][ T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 32 [ 164.823533][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 164.826651][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.826681][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.826701][ T9] usb 4-1: Product: syz [ 164.826716][ T9] usb 4-1: Manufacturer: 韊䑙䳟㥣࿊䏲姂慩㥑⬖苢뉷뾢삟붟喻ꇄ嘓ꚑ豏⹛ᡳ毳倖㍳谱ず콃㊛⃟坂틤웒뵶貋ᓕ䑞袇鉧硗벱쯚⎘鶛尓䌁썚ⷋ䑐枞緝ঢ䋖ᵥ鞧䡊㑖兯໊൉绅袲ᓢ鴠ૣ嫦८⣁섓꤭뻻밍 [ 164.826744][ T9] usb 4-1: SerialNumber: syz [ 164.832859][ T7198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.832994][ T7198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.429433][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.473193][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.565637][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.576244][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.797531][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 165.825639][ T9] usb 4-1: USB disconnect, device number 13 [ 165.862262][ T7223] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 166.088432][ T7239] autofs4:pid:7239:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 166.446844][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 168.261708][ T7284] 9pnet_fd: Insufficient options for proto=fd [ 168.300883][ T7283] fuse: Bad value for 'group_id' [ 168.329206][ T7283] fuse: Bad value for 'group_id' [ 168.409186][ T7290] fuse: Bad value for 'fd' [ 168.548960][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.548484][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 170.548510][ T30] audit: type=1326 audit(1755920466.042:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 170.652312][ T30] audit: type=1326 audit(1755920466.042:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 170.683546][ T30] audit: type=1326 audit(1755920466.092:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 170.858508][ T30] audit: type=1326 audit(1755920466.092:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 170.921628][ T30] audit: type=1326 audit(1755920466.092:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 171.055609][ T30] audit: type=1326 audit(1755920466.102:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 171.087758][ T30] audit: type=1326 audit(1755920466.102:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 171.119940][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.710882][ T30] audit: type=1326 audit(1755920466.102:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 171.853887][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 171.882960][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.891351][ T5902] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 171.917620][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.931419][ T30] audit: type=1326 audit(1755920466.112:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 171.948624][ T5902] usb 5-1: config 0 descriptor?? [ 172.014952][ T7334] fuse: Bad value for 'fd' [ 172.135289][ T30] audit: type=1326 audit(1755920466.112:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz.2.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ffc0000 [ 172.495656][ T5902] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 172.556206][ T5902] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 172.656862][ T5902] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 172.681948][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 172.780073][ T5902] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 172.807612][ T5902] aureal 0003:0755:2626.0003: unknown main item tag 0x0 [ 172.838123][ T5902] aureal 0003:0755:2626.0003: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0 [ 172.894981][ T5902] usb 5-1: USB disconnect, device number 3 [ 173.246854][ T7349] fido_id[7349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 173.839034][ T7344] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 173.917991][ T7344] team0 (unregistering): Port device team_slave_0 removed [ 173.989976][ T7344] team0 (unregistering): Failed to send options change via netlink (err -105) [ 174.008239][ T7344] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 174.048300][ T7344] team0 (unregistering): Port device team_slave_1 removed [ 174.267995][ T5902] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 174.846067][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.947403][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.987773][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 175.016038][ T5902] usb 4-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 175.027008][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.042969][ T5902] usb 4-1: config 0 descriptor?? [ 175.077214][ T7375] fuse: Bad value for 'fd' [ 176.113876][ T5902] wacom 0003:056A:005D.0004: item fetching failed at offset 5/7 [ 176.340783][ T5902] wacom 0003:056A:005D.0004: parse failed [ 176.376627][ T5902] wacom 0003:056A:005D.0004: probe with driver wacom failed with error -22 [ 176.385067][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 176.415755][ T5902] usb 4-1: USB disconnect, device number 14 [ 176.451612][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 176.647765][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 177.407760][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 177.418830][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 177.440104][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 177.539016][ T7410] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 177.574319][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.592962][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.746786][ T9] usb 5-1: SerialNumber: syz [ 177.759499][ T7398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.768705][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 177.776581][ T9] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 177.798846][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 178.744651][ T7430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.400'. [ 178.756487][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 179.756888][ T24] usb 5-1: USB disconnect, device number 4 [ 180.736087][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 180.778646][ T7462] xt_TCPMSS: Only works on TCP SYN packets [ 181.919526][ T7477] wg1 speed is unknown, defaulting to 1000 [ 181.925782][ T7477] wg1 speed is unknown, defaulting to 1000 [ 181.951525][ T7477] wg1 speed is unknown, defaulting to 1000 [ 181.970792][ T7477] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.992243][ T7477] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 182.044608][ T7477] wg1 speed is unknown, defaulting to 1000 [ 182.054026][ T7477] wg1 speed is unknown, defaulting to 1000 [ 182.062199][ T7477] wg1 speed is unknown, defaulting to 1000 [ 182.074068][ T7477] wg1 speed is unknown, defaulting to 1000 [ 182.086533][ T7477] wg1 speed is unknown, defaulting to 1000 [ 182.179428][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 182.741465][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.756011][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 182.774518][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.796232][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 182.832306][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.871165][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.893156][ T9] usb 5-1: Manufacturer: syz [ 182.921938][ T9] usb 5-1: config 0 descriptor?? [ 182.984675][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 182.999200][ T7499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.423'. [ 183.301140][ T9] rc_core: IR keymap rc-hauppauge not found [ 183.338215][ T9] Registered IR keymap rc-empty [ 183.362159][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.411532][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 183.457834][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 183.649523][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 184.228873][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 184.370831][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 184.407618][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 184.428902][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 184.452740][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 184.497620][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 184.538905][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 184.696459][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 185.067996][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 185.129261][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 185.168809][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 185.224535][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 185.261383][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 185.312488][ T9] usb 5-1: USB disconnect, device number 5 [ 185.651889][ T7522] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 185.655292][ T5902] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.827845][ T5902] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 185.855676][ T5902] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 185.885059][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.912263][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.932953][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.951601][ T5902] usb 4-1: Product: syz [ 185.960432][ T5902] usb 4-1: Manufacturer: syz [ 185.976637][ T5902] usb 4-1: SerialNumber: syz [ 186.101902][ T7543] netlink: 452 bytes leftover after parsing attributes in process `syz.2.434'. [ 186.205168][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 186.223875][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 186.233675][ T7550] netlink: 48 bytes leftover after parsing attributes in process `syz.0.435'. [ 186.408981][ T5902] usb 4-1: 0:2 : does not exist [ 187.595968][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 187.794888][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 187.931358][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 187.940691][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.118376][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.607722][ T5902] usb 4-1: USB disconnect, device number 15 [ 188.827725][ T7577] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 188.879328][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 188.891099][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 188.900560][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.3.448'. [ 190.205076][ T7604] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 190.281207][ T7604] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 191.999562][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.065168][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.421077][ T7640] syz.4.460: attempt to access beyond end of device [ 192.421077][ T7640] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 192.437686][ T7640] efs: cannot read volume header [ 192.479981][ T1207] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 192.784760][ T1207] usb 3-1: device descriptor read/64, error -71 [ 193.027593][ T1207] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 193.167641][ T1207] usb 3-1: device descriptor read/64, error -71 [ 193.214920][ T7657] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 193.281340][ T1207] usb usb3-port1: attempt power cycle [ 193.757986][ T1207] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 193.815432][ T1207] usb 3-1: device descriptor read/8, error -71 [ 194.087952][ T1207] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 194.129138][ T7678] netlink: 452 bytes leftover after parsing attributes in process `syz.1.473'. [ 194.173734][ T1207] usb 3-1: device descriptor read/8, error -71 [ 194.304957][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.308367][ T1207] usb usb3-port1: unable to enumerate USB device [ 194.312215][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.371695][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 194.389557][ T7682] netlink: 48 bytes leftover after parsing attributes in process `syz.1.475'. [ 194.717919][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 194.744536][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 194.771038][ T7701] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.780351][ T7701] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.789734][ T7701] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.798880][ T7701] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.811304][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 194.854510][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 194.874041][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 195.188682][ T7707] netlink: 76 bytes leftover after parsing attributes in process `syz.3.482'. [ 195.988401][ T5918] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 196.167671][ T5918] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.224709][ T5918] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 196.252083][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.260661][ T5918] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 196.271721][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.286275][ T5918] usb 3-1: config 0 descriptor?? [ 196.294165][ T7728] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 196.717171][ T7740] wg1 speed is unknown, defaulting to 1000 [ 196.978534][ T5918] usbhid 3-1:0.0: can't add hid device: -71 [ 197.007219][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 197.090555][ T5918] usb 3-1: USB disconnect, device number 20 [ 198.181841][ T7772] pim6reg: entered allmulticast mode [ 198.226434][ T7774] dummy0: entered promiscuous mode [ 198.249947][ T5918] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 198.278352][ T7774] dummy0: left promiscuous mode [ 198.441994][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.477383][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 198.495903][ T5918] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 198.516075][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 198.534489][ T5918] usb 4-1: can't read configurations, error -61 [ 198.636464][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 198.636481][ T30] audit: type=1326 audit(1755920494.132:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7791 comm="syz.0.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe59e38ebe9 code=0x0 [ 198.678646][ T5918] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 198.747105][ T7796] random: crng reseeded on system resumption [ 198.767554][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.840074][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.872064][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 198.892930][ T5918] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 198.911019][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 198.922858][ T5918] usb 4-1: can't read configurations, error -61 [ 198.931881][ T5918] usb usb4-port1: attempt power cycle [ 199.018218][ T5888] usb 5-1: device descriptor read/64, error -71 [ 199.078686][ T7807] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.516'. [ 199.248157][ T7813] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 199.267762][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.286430][ T5918] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 199.341025][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.353525][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 199.363037][ T5918] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 199.377175][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 199.386066][ T7818] netlink: 452 bytes leftover after parsing attributes in process `syz.1.521'. [ 199.400027][ T5918] usb 4-1: can't read configurations, error -61 [ 199.421858][ T5888] usb 5-1: device descriptor read/64, error -71 [ 199.548473][ T5888] usb usb5-port1: attempt power cycle [ 199.557564][ T5918] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 199.593812][ T7823] trusted_key: syz.1.522 sent an empty control message without MSG_MORE. [ 199.637934][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.659777][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 199.679990][ T5918] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 199.692893][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 199.706563][ T5918] usb 4-1: can't read configurations, error -61 [ 199.714233][ T5918] usb usb4-port1: unable to enumerate USB device [ 199.908001][ T5888] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 199.958760][ T5888] usb 5-1: device descriptor read/8, error -71 [ 200.658586][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 200.704621][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 200.808470][ T5888] usb 5-1: device descriptor read/8, error -71 [ 200.949945][ T5888] usb usb5-port1: unable to enumerate USB device [ 202.007682][ T7819] Bluetooth: hci0: command 0x0406 tx timeout [ 202.014823][ T7819] Bluetooth: hci1: command 0x0406 tx timeout [ 202.020989][ T7819] Bluetooth: hci2: command 0x0406 tx timeout [ 202.027148][ T7819] Bluetooth: hci3: command 0x0406 tx timeout [ 202.302884][ T7857] netlink: 452 bytes leftover after parsing attributes in process `syz.3.532'. [ 203.338744][ T5888] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 203.528123][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 203.556910][ T5888] usb 4-1: config 1 interface 0 altsetting 11 endpoint 0x82 has invalid maxpacket 55944, setting to 1024 [ 203.584646][ T5888] usb 4-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 1024 [ 203.617239][ T5888] usb 4-1: config 1 interface 0 has no altsetting 0 [ 203.639787][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.656426][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.682506][ T5888] usb 4-1: Product: syz [ 203.741552][ T5888] usb 4-1: Manufacturer: syz [ 203.746209][ T5888] usb 4-1: SerialNumber: syz [ 203.794401][ T7865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.523585][ T5888] usb 4-1: bad CDC descriptors [ 204.550610][ T5888] usb 4-1: USB disconnect, device number 20 [ 204.965341][ T7891] fuse: Bad value for 'group_id' [ 204.972076][ T7891] fuse: Bad value for 'group_id' [ 205.496443][ T7901] netlink: 452 bytes leftover after parsing attributes in process `syz.2.545'. [ 206.852980][ T5918] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.421529][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 207.587898][ T5918] usb 5-1: device descriptor read/64, error -71 [ 207.837699][ T5918] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 208.027690][ T5918] usb 5-1: device descriptor read/64, error -71 [ 208.177581][ T5918] usb usb5-port1: attempt power cycle [ 208.554625][ T7944] overlayfs: failed to clone upperpath [ 208.567637][ T5918] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.588160][ T5918] usb 5-1: device descriptor read/8, error -71 [ 208.637593][ T5888] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 208.753592][ T7950] netlink: 452 bytes leftover after parsing attributes in process `syz.1.560'. [ 208.768144][ T5888] usb 3-1: device descriptor read/64, error -71 [ 208.976607][ T5918] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.034367][ T7953] xt_SECMARK: invalid mode: 2 [ 209.067054][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 209.227757][ T5888] usb 3-1: device descriptor read/64, error -71 [ 209.354704][ T5918] usb 5-1: device descriptor read/8, error -71 [ 209.879915][ T5888] usb usb3-port1: attempt power cycle [ 210.019200][ T5918] usb usb5-port1: unable to enumerate USB device [ 210.520964][ T5888] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 210.557982][ T5888] usb 3-1: device descriptor read/8, error -71 [ 211.340242][ T5888] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 211.599387][ T5888] usb 3-1: device descriptor read/8, error -71 [ 212.197045][ T5888] usb usb3-port1: unable to enumerate USB device [ 212.592269][ T7990] netlink: 452 bytes leftover after parsing attributes in process `syz.1.571'. [ 213.571009][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 214.142269][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 216.372735][ T24] usb 4-1: device descriptor read/all, error -71 [ 216.425147][ T30] audit: type=1326 audit(1755920511.902:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 216.511402][ T30] audit: type=1326 audit(1755920511.902:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 216.585831][ T30] audit: type=1326 audit(1755920511.902:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 216.613461][ T30] audit: type=1326 audit(1755920511.902:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 216.741943][ T30] audit: type=1326 audit(1755920511.902:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 216.775396][ T30] audit: type=1326 audit(1755920511.902:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 217.579355][ T8021] 9pnet_fd: Insufficient options for proto=fd [ 217.606415][ T30] audit: type=1326 audit(1755920511.902:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 217.812624][ T30] audit: type=1326 audit(1755920511.902:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908238ebe9 code=0x7ffc0000 [ 218.487975][ T8045] ALSA: mixer_oss: invalid OSS volume 'N#' [ 218.539085][ T1207] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 218.630993][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 218.689092][ T8050] netlink: 'syz.1.590': attribute type 21 has an invalid length. [ 218.709782][ T1207] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.724199][ T1207] usb 3-1: config 0 has no interface number 0 [ 218.754593][ T1207] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 218.779458][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.813252][ T1207] usb 3-1: config 0 descriptor?? [ 218.833529][ T1207] usb 3-1: selecting invalid altsetting 1 [ 218.855624][ T1207] dvb_ttusb_budget: ttusb_init_controller: error [ 218.864899][ T1207] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 219.036967][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.105101][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.124838][ T1207] DVB: Unable to find symbol ves1820_attach() [ 219.444132][ T8069] binder: BINDER_SET_CONTEXT_MGR already set [ 219.450537][ T8069] binder: 8068:8069 ioctl 4018620d 200000000040 returned -16 [ 219.820225][ T8082] netlink: 'syz.3.595': attribute type 3 has an invalid length. [ 220.208755][ T1207] DVB: Unable to find symbol stv0297_attach() [ 220.225748][ T1207] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 220.324037][ T1207] usb 3-1: USB disconnect, device number 25 [ 221.682601][ T8104] Illegal XDP return value 4294967274 on prog (id 180) dev N/A, expect packet loss! [ 225.898759][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.057924][ T1207] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 226.227971][ T1207] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.248942][ T1207] usb 3-1: not running at top speed; connect to a high speed hub [ 226.699008][ T1207] usb 3-1: config 3 has an invalid interface number: 1 but max is 0 [ 226.708448][ T1207] usb 3-1: config 3 has no interface number 0 [ 226.715157][ T1207] usb 3-1: config 3 interface 1 has no altsetting 0 [ 226.727021][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.729762][ T1207] usb 3-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 226.757561][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.768298][ T1207] usb 3-1: Product: syz [ 226.773844][ T1207] usb 3-1: Manufacturer: syz [ 226.814088][ T1207] usb 3-1: SerialNumber: syz [ 226.943438][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.825953][ T1207] cx231xx 3-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 227.902990][ T1207] cx231xx 3-1:3.1: Not found matching IAD interface [ 227.927345][ T1207] usb 3-1: USB disconnect, device number 26 [ 228.074028][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.225686][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.827672][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.027790][ T5888] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 230.061454][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 230.198894][ T5888] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 230.247078][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 230.279477][ T5888] usb 5-1: can't read configurations, error -61 [ 230.303781][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.448553][ T5888] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 230.856522][ T5888] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 230.869393][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 231.077771][ T5888] usb 5-1: can't read configurations, error -61 [ 231.088110][ T5888] usb usb5-port1: attempt power cycle [ 231.437864][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.469231][ T5888] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 231.589476][ T5888] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 231.620187][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 231.628130][ T5888] usb 5-1: can't read configurations, error -61 [ 231.754808][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 231.825747][ T5888] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 231.845604][ T8181] netlink: 76 bytes leftover after parsing attributes in process `syz.2.622'. [ 231.980784][ T5888] usb 5-1: too many configurations: 18, using maximum allowed: 8 [ 232.001792][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 232.020889][ T5888] usb 5-1: can't read configurations, error -61 [ 232.038122][ T5888] usb usb5-port1: unable to enumerate USB device [ 232.183292][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 232.444002][ T8191] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 232.470400][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.604139][ T5902] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.632196][ T8190] wg1 speed is unknown, defaulting to 1000 [ 232.653067][ T5902] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.807869][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'. [ 232.827351][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'. [ 232.934047][ T8208] ip6gretap0: entered promiscuous mode [ 232.951012][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.003537][ T8208] syz_tun: entered promiscuous mode [ 233.047689][ T5888] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 233.571611][ T5888] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 233.669675][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.692321][ T5888] usb 3-1: config 0 has no interface number 0 [ 233.692682][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.699840][ T5888] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 233.717803][ T5888] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 233.720856][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 233.775936][ T5888] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 233.795470][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.826307][ T5888] usb 3-1: Product: syz [ 233.851474][ T5888] usb 3-1: Manufacturer: syz [ 233.856130][ T5888] usb 3-1: SerialNumber: syz [ 233.857629][ T8224] loop2: detected capacity change from 0 to 7 [ 233.885888][ T8224] loop2: [ 233.900654][ T5888] usb 3-1: config 0 descriptor?? [ 233.903049][ T8224] loop2: partition table partially beyond EOD, truncated [ 233.941110][ T5888] HFC-S_USB 3-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 234.161906][ T8204] capability: warning: `syz.2.629' uses 32-bit capabilities (legacy support in use) [ 234.220770][ T8204] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 234.378035][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 234.698567][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.208035][ T5902] usb 3-1: USB disconnect, device number 27 [ 235.738410][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.802312][ T8255] netlink: 'syz.1.642': attribute type 6 has an invalid length. [ 235.875493][ T8255] netlink: 'syz.1.642': attribute type 7 has an invalid length. [ 235.936292][ T8255] netlink: 'syz.1.642': attribute type 8 has an invalid length. [ 235.977874][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.983902][ T8255] netlink: 'syz.1.642': attribute type 13 has an invalid length. [ 236.778238][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.788986][ T8266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.797773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.806433][ T8266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.823807][ T3461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.837696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.925565][ T8252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.925914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.937813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.553936][ T8277] input: syz1 as /devices/virtual/input/input11 [ 238.160577][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.272716][ T8272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 238.623020][ T8272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.639072][ T8276] xt_l2tp: missing protocol rule (udp|l2tpip) [ 238.818734][ T8289] dvmrp0: entered allmulticast mode [ 238.978001][ T8294] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 241.280130][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 241.617664][ T5918] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 241.767726][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 241.804393][ T5918] usb 3-1: config 80 has an invalid interface number: 207 but max is 0 [ 241.827541][ T5918] usb 3-1: config 80 has no interface number 0 [ 241.833808][ T5918] usb 3-1: config 80 interface 207 altsetting 3 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 241.870541][ T5918] usb 3-1: config 80 interface 207 altsetting 3 endpoint 0x8B has an invalid bInterval 201, changing to 11 [ 241.912735][ T5918] usb 3-1: config 80 interface 207 altsetting 3 endpoint 0x8B has invalid maxpacket 42693, setting to 1024 [ 241.938961][ T5918] usb 3-1: config 80 interface 207 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 241.966580][ T5918] usb 3-1: config 80 interface 207 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.002652][ T5918] usb 3-1: config 80 interface 207 has no altsetting 0 [ 242.021783][ T5918] usb 3-1: New USB device found, idVendor=0f11, idProduct=2060, bcdDevice=90.59 [ 242.037788][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.045979][ T5918] usb 3-1: Product: syz [ 242.055877][ T5918] usb 3-1: Manufacturer: syz [ 242.067194][ T5888] net_ratelimit: 4 callbacks suppressed [ 242.067212][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.073252][ T5918] usb 3-1: SerialNumber: syz [ 242.085838][ T30] audit: type=1326 audit(1755920537.582:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.126206][ T8321] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.148627][ T30] audit: type=1326 audit(1755920537.582:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.193622][ T8311] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 242.194915][ T30] audit: type=1326 audit(1755920537.622:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.219071][ T8311] team0 (unregistering): Port device team_slave_0 removed [ 242.233305][ T30] audit: type=1326 audit(1755920537.622:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.266286][ T8311] team0 (unregistering): Failed to send options change via netlink (err -105) [ 242.267154][ T30] audit: type=1326 audit(1755920537.622:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.277543][ T8311] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 242.297381][ T30] audit: type=1326 audit(1755920537.622:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.297433][ T30] audit: type=1326 audit(1755920537.622:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.358139][ T8311] team0 (unregistering): Port device team_slave_1 removed [ 242.381072][ T30] audit: type=1326 audit(1755920537.622:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x7ffc0000 [ 242.403002][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.483068][ T30] audit: type=1326 audit(1755920537.632:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30a4b8d550 code=0x7ffc0000 [ 242.506216][ T30] audit: type=1326 audit(1755920537.632:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30a4b8d550 code=0x7ffc0000 [ 242.542920][ T8324] warning: `syz.1.658' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 242.565512][ T8336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.572696][ T5918] ldusb 3-1:80.207: LD USB Device #0 now attached to major 180 minor 0 [ 242.574229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.614766][ T5918] usb 3-1: USB disconnect, device number 28 [ 242.620610][ T8336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.629208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.643561][ T8337] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 242.654831][ T8336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.657212][ T5918] ldusb 3-1:80.207: LD USB Device #0 now disconnected [ 242.663306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.677980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.688418][ T8336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.750682][ T8353] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 244.647435][ T8376] program syz.4.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.033849][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 247.293839][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 249.269577][ T8450] comedi comedi1: pcl730: I/O port conflict (0x2f00,4) [ 250.215099][ T8474] overlay: filesystem on ./file1 not supported [ 252.349923][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 252.349957][ T30] audit: type=1326 audit(1755920547.832:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 252.378585][ T30] audit: type=1326 audit(1755920547.832:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 252.399023][ T8509] netlink: 96 bytes leftover after parsing attributes in process `syz.4.709'. [ 252.587635][ T30] audit: type=1326 audit(1755920547.832:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 252.880015][ T8517] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.200114][ T30] audit: type=1326 audit(1755920547.832:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 253.221700][ T30] audit: type=1326 audit(1755920547.832:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 253.243418][ T30] audit: type=1326 audit(1755920547.832:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 253.287638][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 253.363541][ T30] audit: type=1326 audit(1755920547.832:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 253.386675][ T30] audit: type=1326 audit(1755920547.832:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 253.410617][ T30] audit: type=1326 audit(1755920547.832:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 253.432458][ T30] audit: type=1326 audit(1755920547.832:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923098ebe9 code=0x7ff00000 [ 253.453928][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.467365][ T8554] loop2: detected capacity change from 0 to 7 [ 255.510006][ T8554] loop2: [ 255.526579][ T8554] loop2: partition table partially beyond EOD, truncated [ 255.790586][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.797035][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.909511][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 256.683596][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 257.880210][ T8596] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.731'. [ 258.176510][ T8598] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 258.211080][ T8589] gfs2: path_lookup on c:::!(>yo=O-FmSH_Y8yu [ 258.211080][ T8589] FãzR #xI6BYCg)'!A{g [ 258.211080][ T8589] }m]x%{qm*PN~%U5JhBoGhN].L.`$ returned error -2 [ 258.555705][ T8596] mmap: syz.4.731 (8596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 260.866422][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 260.866476][ T30] audit: type=1326 audit(1755920556.332:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8619 comm="syz.1.739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30a4b8ebe9 code=0x0 [ 260.984343][ T8625] FAULT_INJECTION: forcing a failure. [ 260.984343][ T8625] name failslab, interval 1, probability 0, space 0, times 1 [ 261.005296][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz.0.740 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 261.005323][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.005336][ T8625] Call Trace: [ 261.005344][ T8625] [ 261.005354][ T8625] dump_stack_lvl+0x189/0x250 [ 261.005384][ T8625] ? __pfx____ratelimit+0x10/0x10 [ 261.005406][ T8625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.005429][ T8625] ? __pfx__printk+0x10/0x10 [ 261.005461][ T8625] ? __pfx___might_resched+0x10/0x10 [ 261.005483][ T8625] ? fs_reclaim_acquire+0x7d/0x100 [ 261.005512][ T8625] should_fail_ex+0x414/0x560 [ 261.005539][ T8625] should_failslab+0xa8/0x100 [ 261.005564][ T8625] __kmalloc_noprof+0xcb/0x4f0 [ 261.005582][ T8625] ? kfree+0x4d/0x440 [ 261.005607][ T8625] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 261.005640][ T8625] tomoyo_realpath_from_path+0xe3/0x5d0 [ 261.005668][ T8625] ? tomoyo_domain+0xda/0x130 [ 261.005708][ T8625] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 261.005730][ T8625] tomoyo_path_number_perm+0x1e8/0x5a0 [ 261.005756][ T8625] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.005797][ T8625] ? __lock_acquire+0xab9/0xd20 [ 261.005840][ T8625] ? __fget_files+0x2a/0x420 [ 261.005866][ T8625] ? __fget_files+0x2a/0x420 [ 261.005886][ T8625] ? __fget_files+0x3a0/0x420 [ 261.005906][ T8625] ? __fget_files+0x2a/0x420 [ 261.005932][ T8625] security_file_ioctl+0xcb/0x2d0 [ 261.005957][ T8625] __se_sys_ioctl+0x47/0x170 [ 261.005987][ T8625] do_syscall_64+0xfa/0x3b0 [ 261.006008][ T8625] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.006029][ T8625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.006047][ T8625] ? clear_bhb_loop+0x60/0xb0 [ 261.006071][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.006090][ T8625] RIP: 0033:0x7fe59e38ebe9 [ 261.006112][ T8625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.006130][ T8625] RSP: 002b:00007fe59f2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.006151][ T8625] RAX: ffffffffffffffda RBX: 00007fe59e5b5fa0 RCX: 00007fe59e38ebe9 [ 261.006166][ T8625] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 261.006177][ T8625] RBP: 00007fe59f2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 261.006190][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.006202][ T8625] R13: 00007fe59e5b6038 R14: 00007fe59e5b5fa0 R15: 00007ffefcdd0548 [ 261.006234][ T8625] [ 261.006243][ T8625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.278138][ T8629] syz.3.741 uses old SIOCAX25GETINFO [ 261.367146][ T8635] netlink: 248 bytes leftover after parsing attributes in process `syz.4.742'. [ 262.037587][ T5846] IPVS: starting estimator thread 0... [ 262.265023][ T8645] IPVS: using max 33 ests per chain, 79200 per kthread [ 262.342017][ T8652] autofs4:pid:8652:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc018937e) [ 262.394541][ T8652] autofs4:pid:8652:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 263.551092][ T8676] FAULT_INJECTION: forcing a failure. [ 263.551092][ T8676] name failslab, interval 1, probability 0, space 0, times 0 [ 263.713891][ T8676] CPU: 0 UID: 0 PID: 8676 Comm: syz.3.754 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 263.713920][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.713932][ T8676] Call Trace: [ 263.713940][ T8676] [ 263.713950][ T8676] dump_stack_lvl+0x189/0x250 [ 263.713981][ T8676] ? __pfx____ratelimit+0x10/0x10 [ 263.714001][ T8676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.714023][ T8676] ? __pfx__printk+0x10/0x10 [ 263.714052][ T8676] ? __pfx___might_resched+0x10/0x10 [ 263.714073][ T8676] ? fs_reclaim_acquire+0x7d/0x100 [ 263.714101][ T8676] should_fail_ex+0x414/0x560 [ 263.714128][ T8676] should_failslab+0xa8/0x100 [ 263.714152][ T8676] __kmalloc_noprof+0xcb/0x4f0 [ 263.714170][ T8676] ? tomoyo_encode+0x28b/0x550 [ 263.714199][ T8676] tomoyo_encode+0x28b/0x550 [ 263.714231][ T8676] tomoyo_realpath_from_path+0x58d/0x5d0 [ 263.714258][ T8676] ? tomoyo_domain+0xda/0x130 [ 263.714290][ T8676] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 263.714311][ T8676] tomoyo_path_number_perm+0x1e8/0x5a0 [ 263.714335][ T8676] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.714376][ T8676] ? __lock_acquire+0xab9/0xd20 [ 263.714417][ T8676] ? __fget_files+0x2a/0x420 [ 263.714443][ T8676] ? __fget_files+0x2a/0x420 [ 263.714462][ T8676] ? __fget_files+0x3a0/0x420 [ 263.714491][ T8676] ? __fget_files+0x2a/0x420 [ 263.714517][ T8676] security_file_ioctl+0xcb/0x2d0 [ 263.714543][ T8676] __se_sys_ioctl+0x47/0x170 [ 263.714574][ T8676] do_syscall_64+0xfa/0x3b0 [ 263.714595][ T8676] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.714615][ T8676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.714635][ T8676] ? clear_bhb_loop+0x60/0xb0 [ 263.714659][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.714678][ T8676] RIP: 0033:0x7f358d58ebe9 [ 263.714695][ T8676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.714712][ T8676] RSP: 002b:00007f358e4e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.714732][ T8676] RAX: ffffffffffffffda RBX: 00007f358d7b5fa0 RCX: 00007f358d58ebe9 [ 263.714747][ T8676] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 263.714759][ T8676] RBP: 00007f358e4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 263.714771][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.714783][ T8676] R13: 00007f358d7b6038 R14: 00007f358d7b5fa0 R15: 00007ffcee525f88 [ 263.714817][ T8676] [ 263.958233][ T8676] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.968970][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 264.978087][ T8695] netlink: 'syz.3.759': attribute type 30 has an invalid length. [ 265.165063][ T8695] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.174251][ T8695] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.184039][ T8695] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.193144][ T8695] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.362696][ T8699] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 265.377067][ T8699] netlink: 'syz.1.761': attribute type 5 has an invalid length. [ 265.400413][ T8699] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.761'. [ 266.513610][ T8726] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.769'. [ 266.556306][ T8726] netlink: zone id is out of range [ 266.590601][ T8726] netlink: get zone limit has 8 unknown bytes [ 267.517986][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 268.588685][ T8769] tty tty3: ldisc open failed (-12), clearing slot 2 [ 269.695603][ T8790] overlayfs: failed to clone upperpath [ 270.357805][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.388481][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.634880][ T8824] ubi31: attaching mtd0 [ 272.436301][ T8824] ubi31: scanning is finished [ 272.445901][ T8824] ubi31: empty MTD device detected [ 272.775337][ T8845] sctp: [Deprecated]: syz.1.801 (pid 8845) Use of int in maxseg socket option. [ 272.775337][ T8845] Use struct sctp_assoc_value instead [ 272.808905][ T5846] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 272.867653][ T8824] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 272.880880][ T8824] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 272.901556][ T8824] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 272.910501][ T8824] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 272.942169][ T8849] netlink: 'syz.2.802': attribute type 12 has an invalid length. [ 273.005156][ T8824] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 273.117827][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 273.248204][ T5846] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.275257][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 273.405054][ T5846] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.447623][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.492591][ T5846] usb 5-1: Product: syz [ 273.498691][ T8824] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 273.517281][ T5846] usb 5-1: Manufacturer: syz [ 273.556618][ T5846] usb 5-1: SerialNumber: syz [ 273.574503][ T8824] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 560018141 [ 273.606123][ T8824] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 273.630813][ T8846] ubi31: background thread "ubi_bgt31d" started, PID 8846 [ 273.639402][ T5846] usb 5-1: config 0 descriptor?? [ 273.677044][ T8839] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 274.136666][ T5846] usb 5-1: USB disconnect, device number 18 [ 274.586306][ T8865] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 274.658130][ T8865] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 274.844098][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.877054][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.125038][ T8904] netlink: 88 bytes leftover after parsing attributes in process `syz.2.817'. [ 277.299632][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.819'. [ 277.792911][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'. [ 277.844766][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 277.865661][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 277.882665][ T8908] netlink: 48 bytes leftover after parsing attributes in process `syz.4.818'. [ 278.078445][ T8927] netlink: 'syz.3.824': attribute type 5 has an invalid length. [ 278.094639][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 278.411878][ T8945] macvlan0: entered promiscuous mode [ 278.417688][ T8945] macvlan0: entered allmulticast mode [ 278.424616][ T8945] syz_tun: entered promiscuous mode [ 278.431926][ T8945] syz_tun: entered allmulticast mode [ 278.477060][ T8945] team0: Port device macvlan0 added [ 279.825085][ T8958] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.047730][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 280.319838][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 280.350294][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 281.172332][ T8979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.278277][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 284.354134][ T9037] __nla_validate_parse: 1 callbacks suppressed [ 284.354155][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 284.411664][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 284.421362][ T9037] netlink: 48 bytes leftover after parsing attributes in process `syz.3.853'. [ 284.436088][ T9052] overlayfs: failed to clone upperpath [ 284.477807][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 284.490334][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.509538][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 284.526598][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 284.555642][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 284.596465][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.854611][ T43] usb 3-1: config 0 descriptor?? [ 284.915343][ T9041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.034320][ T43] hub 3-1:0.0: USB hub found [ 285.232562][ T43] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 286.270753][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 286.288225][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 286.328592][ T43] usb 3-1: USB disconnect, device number 30 [ 286.701813][ T9079] delete_channel: no stack [ 286.783611][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 286.904138][ T9088] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 287.079850][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.225136][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 287.236350][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 287.245594][ T9093] netlink: 48 bytes leftover after parsing attributes in process `syz.3.868'. [ 287.263868][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.389157][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.548904][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.858986][ T5895] wg1 speed is unknown, defaulting to 1000 [ 287.887176][ T5895] syz0: Port: 1 Link DOWN [ 288.370599][ T13] bridge_slave_1: left allmulticast mode [ 288.393170][ T13] bridge_slave_1: left promiscuous mode [ 288.407833][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.468391][ T13] bridge_slave_0: left allmulticast mode [ 288.487586][ T13] bridge_slave_0: left promiscuous mode [ 288.493510][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.665595][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.742543][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.789118][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.799607][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.810736][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.006490][ T9135] netlink: 'syz.3.877': attribute type 72 has an invalid length. [ 289.650609][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 289.907780][ T1207] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 290.069905][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.083735][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.095135][ T1207] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.106532][ T13] bond0 (unregistering): Released all slaves [ 290.117780][ T1207] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.132493][ T1207] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.170488][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.347136][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.882'. [ 290.432150][ T1207] usb 4-1: usb_control_msg returned -32 [ 290.437992][ T1207] usbtmc 4-1:16.0: can't read capabilities [ 290.525495][ T9140] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 290.587618][ T9140] team0 (unregistering): Port device team_slave_0 removed [ 290.609980][ T9140] team0 (unregistering): Failed to send options change via netlink (err -105) [ 290.635464][ T9140] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 290.670007][ T5895] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 290.680635][ T9140] team0 (unregistering): Port device team_slave_1 removed [ 290.707989][ T9140] syz_tun: left allmulticast mode [ 290.713392][ T9140] syz_tun: left promiscuous mode [ 290.756404][ T9140] team0 (unregistering): Failed to send options change via netlink (err -105) [ 290.779936][ T9140] team0 (unregistering): Failed to send port change of device macvlan0 via netlink (err -105) [ 290.786844][ T9161] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -32 [ 290.794657][ T9140] team0 (unregistering): Port device macvlan0 removed [ 290.824487][ T1207] usb 4-1: USB disconnect, device number 23 [ 290.839986][ T5895] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 290.861970][ T5895] usb 5-1: config 0 has no interface number 0 [ 290.868990][ T5895] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.894680][ T13] tipc: Left network mode [ 290.897136][ T5895] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 290.931087][ T5895] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 290.942518][ T5157] Bluetooth: hci3: command tx timeout [ 290.950502][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.966022][ T5895] usb 5-1: Product: syz [ 290.972577][ T5895] usb 5-1: Manufacturer: syz [ 290.980736][ T5895] usb 5-1: SerialNumber: syz [ 290.990158][ T5895] usb 5-1: config 0 descriptor?? [ 290.996155][ T9155] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 291.162881][ T9123] wg1 speed is unknown, defaulting to 1000 [ 291.306923][ T5895] usb 5-1: USB disconnect, device number 19 [ 291.342233][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.500134][ T13] hsr_slave_0: left promiscuous mode [ 291.507412][ T13] hsr_slave_1: left promiscuous mode [ 291.513705][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.523595][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.535169][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.544396][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.669888][ T1207] IPVS: starting estimator thread 0... [ 291.735210][ T13] veth1_macvtap: left promiscuous mode [ 291.762791][ T13] veth0_macvtap: left promiscuous mode [ 291.773388][ T9171] IPVS: using max 26 ests per chain, 62400 per kthread [ 293.027729][ T5157] Bluetooth: hci3: command tx timeout [ 293.544098][ T9123] chnl_net:caif_netlink_parms(): no params data found [ 293.724670][ T9188] loop8: detected capacity change from 0 to 7 [ 293.736346][ T9188] Dev loop8: unable to read RDB block 7 [ 293.742343][ T9188] loop8: AHDI p3 [ 293.746151][ T9188] loop8: partition table partially beyond EOD, truncated [ 293.985051][ T9191] netlink: 'syz.3.889': attribute type 72 has an invalid length. [ 294.785237][ T9210] syz.1.895 (9210) used greatest stack depth: 19576 bytes left [ 294.882780][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.914188][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.926755][ T9123] bridge_slave_0: entered allmulticast mode [ 294.936028][ T9123] bridge_slave_0: entered promiscuous mode [ 294.955137][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.976428][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.993524][ T9123] bridge_slave_1: entered allmulticast mode [ 295.053871][ T9123] bridge_slave_1: entered promiscuous mode [ 295.097645][ T5157] Bluetooth: hci3: command tx timeout [ 295.401101][ T5888] IPVS: starting estimator thread 0... [ 295.567823][ T9228] IPVS: using max 25 ests per chain, 60000 per kthread [ 295.677814][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.716249][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.832337][ T9234] fuse: Bad value for 'fd' [ 295.835493][ T9123] team0: Port device team_slave_0 added [ 295.864234][ T9123] team0: Port device team_slave_1 added [ 296.005975][ T9245] usb usb8: usbfs: process 9245 (syz.3.906) did not claim interface 0 before use [ 296.047804][ T5902] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 296.136774][ T9250] [ 296.139151][ T9250] ===================================================== [ 296.146093][ T9250] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 296.153564][ T9250] 6.16.0-syzkaller #0 Not tainted [ 296.158582][ T9250] ----------------------------------------------------- [ 296.165512][ T9250] syz.0.907/9250 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 296.173063][ T9250] ffff888033d73408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 296.181795][ T9250] [ 296.181795][ T9250] and this task is already holding: [ 296.189165][ T9250] ffff888029e0f028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 296.198929][ T9250] which would create a new lock dependency: [ 296.204818][ T9250] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 296.212930][ T9250] [ 296.212930][ T9250] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 296.222380][ T9250] (&dev->event_lock#2){..-.}-{3:3} [ 296.222419][ T9250] [ 296.222419][ T9250] ... which became SOFTIRQ-irq-safe at: [ 296.235344][ T9250] lock_acquire+0x120/0x360 [ 296.239953][ T9250] _raw_spin_lock_irqsave+0xa7/0xf0 [ 296.245247][ T9250] input_inject_event+0xab/0x320 [ 296.250299][ T9250] led_trigger_event+0x138/0x210 [ 296.255333][ T9250] kbd_bh+0x1c6/0x2e0 [ 296.259402][ T9250] tasklet_action_common+0x369/0x580 [ 296.264776][ T9250] handle_softirqs+0x283/0x870 [ 296.269629][ T9250] __irq_exit_rcu+0xca/0x1f0 [ 296.274312][ T9250] irq_exit_rcu+0x9/0x30 [ 296.278674][ T9250] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 296.284487][ T9250] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.290559][ T9250] _raw_spin_unlock_irq+0x29/0x50 [ 296.295671][ T9250] n_tty_ioctl_helper+0x27e/0x340 [ 296.300797][ T9250] tty_ioctl+0x9c6/0xde0 [ 296.305218][ T9250] __se_sys_ioctl+0xfc/0x170 [ 296.309905][ T9250] do_syscall_64+0xfa/0x3b0 [ 296.314511][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.320501][ T9250] [ 296.320501][ T9250] to a SOFTIRQ-irq-unsafe lock: [ 296.327533][ T9250] (tasklist_lock){.+.+}-{3:3} [ 296.327567][ T9250] [ 296.327567][ T9250] ... which became SOFTIRQ-irq-unsafe at: [ 296.340197][ T9250] ... [ 296.340208][ T9250] lock_acquire+0x120/0x360 [ 296.347375][ T9250] _raw_read_lock+0x36/0x50 [ 296.351966][ T9250] __do_wait+0xde/0x740 [ 296.356214][ T9250] do_wait+0x1f8/0x520 [ 296.360382][ T9250] kernel_wait+0xab/0x170 [ 296.364801][ T9250] call_usermodehelper_exec_work+0xbe/0x230 [ 296.370786][ T9250] process_scheduled_works+0xade/0x17b0 [ 296.376425][ T9250] worker_thread+0x8a0/0xda0 [ 296.381102][ T9250] kthread+0x70e/0x8a0 [ 296.385266][ T9250] ret_from_fork+0x3fc/0x770 [ 296.389960][ T9250] ret_from_fork_asm+0x1a/0x30 [ 296.394814][ T9250] [ 296.394814][ T9250] other info that might help us debug this: [ 296.394814][ T9250] [ 296.405043][ T9250] Chain exists of: [ 296.405043][ T9250] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 296.405043][ T9250] [ 296.418626][ T9250] Possible interrupt unsafe locking scenario: [ 296.418626][ T9250] [ 296.426944][ T9250] CPU0 CPU1 [ 296.432310][ T9250] ---- ---- [ 296.437666][ T9250] lock(tasklist_lock); [ 296.441932][ T9250] local_irq_disable(); [ 296.448707][ T9250] lock(&dev->event_lock#2); [ 296.455933][ T9250] lock(&client->buffer_lock); [ 296.463334][ T9250] [ 296.466782][ T9250] lock(&dev->event_lock#2); [ 296.471654][ T9250] [ 296.471654][ T9250] *** DEADLOCK *** [ 296.471654][ T9250] [ 296.479800][ T9250] 7 locks held by syz.0.907/9250: [ 296.484864][ T9250] #0: ffff888145ffc118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 296.494053][ T9250] #1: ffff888020f80230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 296.504171][ T9250] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 296.513962][ T9250] #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 296.523568][ T9250] #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 296.532727][ T9250] #5: ffff888029e0f028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 296.542919][ T9250] #6: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 296.551988][ T9250] [ 296.551988][ T9250] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 296.562480][ T9250] -> (&dev->event_lock#2){..-.}-{3:3} { [ 296.568163][ T9250] IN-SOFTIRQ-W at: [ 296.572261][ T9250] lock_acquire+0x120/0x360 [ 296.578588][ T9250] _raw_spin_lock_irqsave+0xa7/0xf0 [ 296.585624][ T9250] input_inject_event+0xab/0x320 [ 296.592394][ T9250] led_trigger_event+0x138/0x210 [ 296.599164][ T9250] kbd_bh+0x1c6/0x2e0 [ 296.604981][ T9250] tasklet_action_common+0x369/0x580 [ 296.612096][ T9250] handle_softirqs+0x283/0x870 [ 296.618684][ T9250] __irq_exit_rcu+0xca/0x1f0 [ 296.625099][ T9250] irq_exit_rcu+0x9/0x30 [ 296.631183][ T9250] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 296.638683][ T9250] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.646499][ T9250] _raw_spin_unlock_irq+0x29/0x50 [ 296.653347][ T9250] n_tty_ioctl_helper+0x27e/0x340 [ 296.660201][ T9250] tty_ioctl+0x9c6/0xde0 [ 296.666282][ T9250] __se_sys_ioctl+0xfc/0x170 [ 296.672714][ T9250] do_syscall_64+0xfa/0x3b0 [ 296.679055][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.686777][ T9250] INITIAL USE at: [ 296.690758][ T9250] lock_acquire+0x120/0x360 [ 296.696998][ T9250] _raw_spin_lock_irqsave+0xa7/0xf0 [ 296.703945][ T9250] input_inject_event+0xab/0x320 [ 296.710627][ T9250] kbd_led_trigger_activate+0xbc/0x100 [ 296.717823][ T9250] led_trigger_set+0x52d/0x950 [ 296.724332][ T9250] led_trigger_set_default+0x260/0x2a0 [ 296.731535][ T9250] led_classdev_register_ext+0x73d/0x930 [ 296.738910][ T9250] input_leds_connect+0x517/0x790 [ 296.745674][ T9250] input_register_device+0xceb/0x10b0 [ 296.752826][ T9250] atkbd_connect+0x70e/0x9c0 [ 296.759174][ T9250] serio_driver_probe+0x82/0xa0 [ 296.765770][ T9250] really_probe+0x26a/0x9a0 [ 296.772016][ T9250] __driver_probe_device+0x18c/0x2f0 [ 296.779048][ T9250] driver_probe_device+0x4f/0x430 [ 296.785812][ T9250] __driver_attach+0x452/0x700 [ 296.792314][ T9250] bus_for_each_dev+0x230/0x2b0 [ 296.798903][ T9250] serio_handle_event+0x1a2/0x860 [ 296.805671][ T9250] process_scheduled_works+0xade/0x17b0 [ 296.812954][ T9250] worker_thread+0x8a0/0xda0 [ 296.819281][ T9250] kthread+0x70e/0x8a0 [ 296.825092][ T9250] ret_from_fork+0x3fc/0x770 [ 296.831509][ T9250] ret_from_fork_asm+0x1a/0x30 [ 296.838537][ T9250] } [ 296.841116][ T9250] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 296.850272][ T9250] -> (&client->buffer_lock){....}-{3:3} { [ 296.856016][ T9250] INITIAL USE at: [ 296.859908][ T9250] lock_acquire+0x120/0x360 [ 296.866064][ T9250] _raw_spin_lock+0x2e/0x40 [ 296.872140][ T9250] evdev_pass_values+0xb9/0xbd0 [ 296.878554][ T9250] evdev_events+0x1e6/0x340 [ 296.884629][ T9250] input_pass_values+0x285/0x890 [ 296.891140][ T9250] input_event_dispose+0x330/0x6b0 [ 296.897820][ T9250] input_inject_event+0x1fe/0x320 [ 296.904418][ T9250] evdev_write+0x2fc/0x480 [ 296.910395][ T9250] vfs_write+0x27e/0xa90 [ 296.916200][ T9250] ksys_write+0x145/0x250 [ 296.922098][ T9250] do_syscall_64+0xfa/0x3b0 [ 296.928168][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.935630][ T9250] } [ 296.938123][ T9250] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 296.946381][ T9250] ... acquired at: [ 296.950180][ T9250] lock_acquire+0x120/0x360 [ 296.954867][ T9250] _raw_spin_lock+0x2e/0x40 [ 296.959554][ T9250] evdev_pass_values+0xb9/0xbd0 [ 296.964578][ T9250] evdev_events+0x1e6/0x340 [ 296.969265][ T9250] input_pass_values+0x285/0x890 [ 296.974383][ T9250] input_event_dispose+0x330/0x6b0 [ 296.979852][ T9250] input_inject_event+0x1fe/0x320 [ 296.985065][ T9250] evdev_write+0x2fc/0x480 [ 296.989741][ T9250] vfs_write+0x27e/0xa90 [ 296.994169][ T9250] ksys_write+0x145/0x250 [ 296.998693][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.003375][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.009440][ T9250] [ 297.011758][ T9250] [ 297.011758][ T9250] the dependencies between the lock to be acquired [ 297.011768][ T9250] and SOFTIRQ-irq-unsafe lock: [ 297.025278][ T9250] -> (tasklist_lock){.+.+}-{3:3} { [ 297.030594][ T9250] HARDIRQ-ON-R at: [ 297.034744][ T9250] lock_acquire+0x120/0x360 [ 297.041334][ T9250] _raw_read_lock+0x36/0x50 [ 297.047834][ T9250] __do_wait+0xde/0x740 [ 297.053999][ T9250] do_wait+0x1f8/0x520 [ 297.060172][ T9250] kernel_wait+0xab/0x170 [ 297.066519][ T9250] call_usermodehelper_exec_work+0xbe/0x230 [ 297.074414][ T9250] process_scheduled_works+0xade/0x17b0 [ 297.081958][ T9250] worker_thread+0x8a0/0xda0 [ 297.088549][ T9250] kthread+0x70e/0x8a0 [ 297.094621][ T9250] ret_from_fork+0x3fc/0x770 [ 297.101211][ T9250] ret_from_fork_asm+0x1a/0x30 [ 297.107978][ T9250] SOFTIRQ-ON-R at: [ 297.112133][ T9250] lock_acquire+0x120/0x360 [ 297.118637][ T9250] _raw_read_lock+0x36/0x50 [ 297.125142][ T9250] __do_wait+0xde/0x740 [ 297.131302][ T9250] do_wait+0x1f8/0x520 [ 297.137378][ T9250] kernel_wait+0xab/0x170 [ 297.143710][ T9250] call_usermodehelper_exec_work+0xbe/0x230 [ 297.151619][ T9250] process_scheduled_works+0xade/0x17b0 [ 297.159161][ T9250] worker_thread+0x8a0/0xda0 [ 297.165755][ T9250] kthread+0x70e/0x8a0 [ 297.171824][ T9250] ret_from_fork+0x3fc/0x770 [ 297.178439][ T9250] ret_from_fork_asm+0x1a/0x30 [ 297.185214][ T9250] INITIAL USE at: [ 297.189282][ T9250] lock_acquire+0x120/0x360 [ 297.195696][ T9250] _raw_write_lock_irq+0xa2/0xf0 [ 297.202545][ T9250] copy_process+0x21d5/0x3b80 [ 297.209132][ T9250] kernel_clone+0x224/0x7f0 [ 297.215577][ T9250] user_mode_thread+0xdd/0x140 [ 297.222255][ T9250] rest_init+0x23/0x300 [ 297.228320][ T9250] start_kernel+0x47d/0x500 [ 297.234736][ T9250] x86_64_start_reservations+0x24/0x30 [ 297.242111][ T9250] x86_64_start_kernel+0x143/0x1c0 [ 297.249140][ T9250] common_startup_64+0x13e/0x147 [ 297.256000][ T9250] INITIAL READ USE at: [ 297.260507][ T9250] lock_acquire+0x120/0x360 [ 297.267443][ T9250] _raw_read_lock+0x36/0x50 [ 297.274288][ T9250] __do_wait+0xde/0x740 [ 297.280883][ T9250] do_wait+0x1f8/0x520 [ 297.287314][ T9250] kernel_wait+0xab/0x170 [ 297.293995][ T9250] call_usermodehelper_exec_work+0xbe/0x230 [ 297.302240][ T9250] process_scheduled_works+0xade/0x17b0 [ 297.310140][ T9250] worker_thread+0x8a0/0xda0 [ 297.317076][ T9250] kthread+0x70e/0x8a0 [ 297.323492][ T9250] ret_from_fork+0x3fc/0x770 [ 297.330454][ T9250] ret_from_fork_asm+0x1a/0x30 [ 297.337581][ T9250] } [ 297.340262][ T9250] ... key at: [] tasklist_lock+0x18/0x40 [ 297.348168][ T9250] ... acquired at: [ 297.352158][ T9250] lock_acquire+0x120/0x360 [ 297.356854][ T9250] _raw_read_lock+0x36/0x50 [ 297.361555][ T9250] send_sigurg+0x12b/0x420 [ 297.366166][ T9250] sk_send_sigurg+0x6c/0x2e0 [ 297.370928][ T9250] queue_oob+0x490/0x5a0 [ 297.375353][ T9250] unix_stream_sendmsg+0xaf9/0xc90 [ 297.380643][ T9250] __sock_sendmsg+0x21c/0x270 [ 297.385502][ T9250] ____sys_sendmsg+0x52d/0x830 [ 297.390532][ T9250] ___sys_sendmsg+0x21f/0x2a0 [ 297.395424][ T9250] __sys_sendmmsg+0x227/0x430 [ 297.400281][ T9250] __x64_sys_sendmmsg+0xa0/0xc0 [ 297.405313][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.409988][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.416053][ T9250] [ 297.418379][ T9250] -> (&f_owner->lock){....}-{3:3} { [ 297.423692][ T9250] INITIAL USE at: [ 297.427672][ T9250] lock_acquire+0x120/0x360 [ 297.433998][ T9250] _raw_write_lock_irq+0xa2/0xf0 [ 297.440686][ T9250] __f_setown+0x67/0x370 [ 297.446673][ T9250] fcntl_dirnotify+0x3fa/0x6a0 [ 297.453196][ T9250] do_fcntl+0x6d0/0x1910 [ 297.459181][ T9250] __se_sys_fcntl+0xc8/0x150 [ 297.465599][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.471836][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.479462][ T9250] INITIAL READ USE at: [ 297.483905][ T9250] lock_acquire+0x120/0x360 [ 297.490608][ T9250] _raw_read_lock_irqsave+0xaf/0x100 [ 297.498070][ T9250] send_sigurg+0x55/0x420 [ 297.504599][ T9250] sk_send_sigurg+0x6c/0x2e0 [ 297.511367][ T9250] queue_oob+0x490/0x5a0 [ 297.517801][ T9250] unix_stream_sendmsg+0xaf9/0xc90 [ 297.525087][ T9250] __sock_sendmsg+0x21c/0x270 [ 297.531955][ T9250] ____sys_sendmsg+0x52d/0x830 [ 297.538908][ T9250] ___sys_sendmsg+0x21f/0x2a0 [ 297.545763][ T9250] __sys_sendmmsg+0x227/0x430 [ 297.552621][ T9250] __x64_sys_sendmmsg+0xa0/0xc0 [ 297.559672][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.566467][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.574540][ T9250] } [ 297.577124][ T9250] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 297.586066][ T9250] ... acquired at: [ 297.589951][ T9250] lock_acquire+0x120/0x360 [ 297.594623][ T9250] _raw_read_lock_irqsave+0xaf/0x100 [ 297.600088][ T9250] send_sigio+0x38/0x370 [ 297.604510][ T9250] kill_fasync+0x24d/0x4d0 [ 297.609104][ T9250] sock_wake_async+0x137/0x160 [ 297.614043][ T9250] sock_def_readable+0x3bb/0x550 [ 297.619151][ T9250] queue_oob+0x4c4/0x5a0 [ 297.623570][ T9250] unix_stream_sendmsg+0xaf9/0xc90 [ 297.628854][ T9250] __sock_sendmsg+0x21c/0x270 [ 297.633705][ T9250] ____sys_sendmsg+0x52d/0x830 [ 297.638647][ T9250] ___sys_sendmsg+0x21f/0x2a0 [ 297.643506][ T9250] __sys_sendmmsg+0x227/0x430 [ 297.648362][ T9250] __x64_sys_sendmmsg+0xa0/0xc0 [ 297.653400][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.658076][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.664166][ T9250] [ 297.666485][ T9250] -> (&new->fa_lock){....}-{3:3} { [ 297.671623][ T9250] INITIAL USE at: [ 297.675511][ T9250] lock_acquire+0x120/0x360 [ 297.681663][ T9250] _raw_write_lock_irq+0xa2/0xf0 [ 297.688173][ T9250] fasync_remove_entry+0xf1/0x1c0 [ 297.694769][ T9250] __fput+0x8a2/0xa70 [ 297.700356][ T9250] task_work_run+0x1d1/0x260 [ 297.706527][ T9250] exit_to_user_mode_loop+0xec/0x110 [ 297.713392][ T9250] do_syscall_64+0x2bd/0x3b0 [ 297.719924][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.727423][ T9250] INITIAL READ USE at: [ 297.731755][ T9250] lock_acquire+0x120/0x360 [ 297.738260][ T9250] _raw_read_lock_irqsave+0xaf/0x100 [ 297.745557][ T9250] kill_fasync+0x199/0x4d0 [ 297.751990][ T9250] sock_wake_async+0x137/0x160 [ 297.758865][ T9250] sk_send_sigurg+0x1f1/0x2e0 [ 297.765572][ T9250] queue_oob+0x490/0x5a0 [ 297.771822][ T9250] unix_stream_sendmsg+0xaf9/0xc90 [ 297.779018][ T9250] __sock_sendmsg+0x21c/0x270 [ 297.785694][ T9250] ____sys_sendmsg+0x52d/0x830 [ 297.792461][ T9250] ___sys_sendmsg+0x21f/0x2a0 [ 297.799226][ T9250] __sys_sendmmsg+0x227/0x430 [ 297.805950][ T9250] __x64_sys_sendmmsg+0xa0/0xc0 [ 297.812814][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.819318][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.827214][ T9250] } [ 297.829705][ T9250] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 297.838388][ T9250] ... acquired at: [ 297.842182][ T9250] lock_acquire+0x120/0x360 [ 297.846858][ T9250] _raw_read_lock_irqsave+0xaf/0x100 [ 297.852315][ T9250] kill_fasync+0x199/0x4d0 [ 297.856916][ T9250] evdev_pass_values+0x627/0xbd0 [ 297.862026][ T9250] evdev_events+0x1e6/0x340 [ 297.866742][ T9250] input_pass_values+0x285/0x890 [ 297.871857][ T9250] input_event_dispose+0x330/0x6b0 [ 297.877144][ T9250] input_inject_event+0x1fe/0x320 [ 297.882362][ T9250] evdev_write+0x2fc/0x480 [ 297.886955][ T9250] vfs_write+0x27e/0xa90 [ 297.891375][ T9250] ksys_write+0x145/0x250 [ 297.895875][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.900553][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.906625][ T9250] [ 297.908945][ T9250] [ 297.908945][ T9250] stack backtrace: [ 297.914863][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.0.907 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 297.914884][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.914894][ T9250] Call Trace: [ 297.914903][ T9250] [ 297.914910][ T9250] dump_stack_lvl+0x189/0x250 [ 297.914933][ T9250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.914951][ T9250] ? __pfx__printk+0x10/0x10 [ 297.914975][ T9250] validate_chain+0x1f05/0x2140 [ 297.915002][ T9250] __lock_acquire+0xab9/0xd20 [ 297.915018][ T9250] ? kill_fasync+0x199/0x4d0 [ 297.915040][ T9250] lock_acquire+0x120/0x360 [ 297.915053][ T9250] ? kill_fasync+0x199/0x4d0 [ 297.915079][ T9250] _raw_read_lock_irqsave+0xaf/0x100 [ 297.915095][ T9250] ? kill_fasync+0x199/0x4d0 [ 297.915123][ T9250] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 297.915137][ T9250] ? do_raw_spin_lock+0x121/0x290 [ 297.915161][ T9250] kill_fasync+0x199/0x4d0 [ 297.915182][ T9250] ? kill_fasync+0x53/0x4d0 [ 297.915203][ T9250] evdev_pass_values+0x627/0xbd0 [ 297.915220][ T9250] ? evdev_pass_values+0x5b1/0xbd0 [ 297.915237][ T9250] evdev_events+0x1e6/0x340 [ 297.915260][ T9250] ? evdev_events+0x79/0x340 [ 297.915283][ T9250] ? input_pass_values+0x8d/0x890 [ 297.915306][ T9250] input_pass_values+0x285/0x890 [ 297.915332][ T9250] ? input_handle_event+0x70c/0xf30 [ 297.915352][ T9250] input_event_dispose+0x330/0x6b0 [ 297.915373][ T9250] input_inject_event+0x1fe/0x320 [ 297.915393][ T9250] ? input_inject_event+0xbc/0x320 [ 297.915413][ T9250] evdev_write+0x2fc/0x480 [ 297.915430][ T9250] ? __pfx_evdev_write+0x10/0x10 [ 297.915444][ T9250] ? bpf_lsm_file_permission+0x9/0x20 [ 297.915463][ T9250] ? security_file_permission+0x75/0x290 [ 297.915481][ T9250] ? rw_verify_area+0x258/0x650 [ 297.915505][ T9250] ? __pfx_evdev_write+0x10/0x10 [ 297.915520][ T9250] vfs_write+0x27e/0xa90 [ 297.915537][ T9250] ? __pfx_vfs_write+0x10/0x10 [ 297.915551][ T9250] ? __fget_files+0x2a/0x420 [ 297.915570][ T9250] ? __fget_files+0x2a/0x420 [ 297.915586][ T9250] ? __fget_files+0x3a0/0x420 [ 297.915603][ T9250] ? __fget_files+0x2a/0x420 [ 297.915623][ T9250] ksys_write+0x145/0x250 [ 297.915637][ T9250] ? __pfx_ksys_write+0x10/0x10 [ 297.915653][ T9250] ? do_syscall_64+0xbe/0x3b0 [ 297.915672][ T9250] do_syscall_64+0xfa/0x3b0 [ 297.915689][ T9250] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.915705][ T9250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.915721][ T9250] ? clear_bhb_loop+0x60/0xb0 [ 297.915739][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.915755][ T9250] RIP: 0033:0x7fe59e38ebe9 [ 297.915770][ T9250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.915786][ T9250] RSP: 002b:00007fe59f292038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.915804][ T9250] RAX: ffffffffffffffda RBX: 00007fe59e5b6180 RCX: 00007fe59e38ebe9 [ 297.915816][ T9250] RDX: 000000000000005b RSI: 00002000000000c0 RDI: 0000000000000005 [ 297.915827][ T9250] RBP: 00007fe59e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 297.915837][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.915847][ T9250] R13: 00007fe59e5b6218 R14: 00007fe59e5b6180 R15: 00007ffefcdd0548 [ 297.915864][ T9250] [ 298.244432][ T5157] Bluetooth: hci3: command tx timeout [ 298.266848][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.273863][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.300082][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.448453][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.455442][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.481673][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.505116][ T5902] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 298.531733][ T9123] hsr_slave_0: entered promiscuous mode [ 298.571592][ T9123] hsr_slave_1: entered promiscuous mode [ 298.596370][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.621294][ T9123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.629218][ T9123] Cannot create hsr debugfs directory [ 298.691857][ T5902] usb 5-1: config 0 descriptor?? [ 298.742957][ T5902] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 298.838839][ T5902] gspca_cpia1: usb_control_msg 05, error -71 [ 298.845394][ T5902] gspca_cpia1: usb_control_msg 01, error -71 [ 298.885258][ T5902] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 298.915128][ T5902] usb 5-1: USB disconnect, device number 20 [ 298.960154][ T9123] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.970129][ T9123] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.990917][ T9123] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.010399][ T9123] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.142734][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.176442][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.203350][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.210515][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.239839][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.247014][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.441523][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.571450][ T9123] veth0_vlan: entered promiscuous mode [ 299.580515][ T9123] veth1_vlan: entered promiscuous mode [ 299.602392][ T9123] veth0_macvtap: entered promiscuous mode [ 299.610295][ T9123] veth1_macvtap: entered promiscuous mode [ 299.623833][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.635673][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.647208][ T9123] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.656314][ T9123] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.665121][ T9123] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.673881][ T9123] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.701584][ T9123] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 299.721773][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.723273][ T9123] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 299.733562][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.754894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.762944][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50