last executing test programs: 5m11.631034427s ago: executing program 3 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="4e813c", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8) shutdown(r0, 0x1) 5m10.807936579s ago: executing program 3 (id=200): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 5m6.126181367s ago: executing program 3 (id=212): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5b70, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005cc0), 0x1, 0x40012000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40844) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000700)={0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f003}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 5m0.544937689s ago: executing program 3 (id=226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m0.097778387s ago: executing program 3 (id=228): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 4m58.77836941s ago: executing program 3 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffffffff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/237, 0xed}], 0x2) 4m43.635410002s ago: executing program 32 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffffffff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/237, 0xed}], 0x2) 35.513972578s ago: executing program 4 (id=1067): r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) 32.019653872s ago: executing program 4 (id=1080): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 29.604305318s ago: executing program 4 (id=1090): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x8}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xcc}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x6f27, 0x80, 0x0, 0x10a, 0x0, r8}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdaf, 0x8, 0x1, 0x278, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35ee, 0x8, 0x2, 0x1ba, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe6d, 0x20, 0x2, 0x3b3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb93c, 0x2, 0x3, 0x9e, 0x0, r8}}], 0x4, &(0x7f0000002080)={0x2e, 0x19, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x1, 0x221, 0x0, &(0x7f0000001080)=@buf_512="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"}}, &(0x7f0000002100)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r9, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xfff9, 0x25, 0x6, 0xfff7, 0xf}}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xc8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x668a, 0x200, 0x10fffff, 0x4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x0, 0x145, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0xfffffffd, 0x34a}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000540)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000001008d2af5ffffff000000000a0000009fb2754911073f6d3b94f8c60635f2359cdb1cbdc51c674bfde9812811569b83fd4c5a088cc276142ca52d2a3c23e63f1d1d4a38d5babbc0fd9af956e14977045f3161c8091c63e9b4820c1c0ad26d5d53fa28be877cd50316f36ce1ac4fc6fa805f4ebfde7d12499b81f3f4c9b3c892650a44bf7655bf73c83e11717a8b2ea51e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b'], 0x1c}}, 0x4004) 24.610614874s ago: executing program 4 (id=1099): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) poll(0x0, 0x0, 0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200040c5) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1015, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 23.978325119s ago: executing program 4 (id=1101): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0xc0, 0x11b, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x1000, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r2 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) close(r0) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) 22.502983817s ago: executing program 4 (id=1107): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff190100"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000080), 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) readv(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0}], 0x1) 22.029206101s ago: executing program 2 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x6, 0x3, 's9'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 21.607043897s ago: executing program 2 (id=1111): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0xc014) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 21.344619289s ago: executing program 1 (id=1112): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000100)={[0xffff]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 21.263468921s ago: executing program 2 (id=1113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004500)=@deltfilter={0x4e60, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x4e28, 0x2, [@TCA_BASIC_ACT={0x1cc, 0x3, [@m_csum={0x108, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff75, 0x8, 0x44, 0x10000}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x94, 0x1, 0xffffffffffffffff, 0x65027dcc, 0xf}, 0x4e}}]}, {0xa1, 0x6, "a65466d155423b8b5c6eecd904bd21b671369fe2a52d8d56dd8cd96cdf6eefe59e0f44b674364b059b7d2020ad54f9597f816654dc72723ebba599657a042ee9a699fc1208705147a8d68cbd6bf6af72760ee1e00665f87bfa4cecccaf6c8e22aaab8c1e0e603e3eae600596482436bd715f0caa8c3fc079664a70469d2b1e8fec2c076bac77d0f87ddd8ef75f785e2c43a0d6e12f106ba76480e31abb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x48, 0x9, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x5, 0x6, '|'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x78, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x456b}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x32ad, 0x4, 0x8, 0x7}}]}, {0x2a, 0x6, "cca6d64a9ee07471d810117d70950bf00d0e4e6fb8a44ba03fe155c8087719eb2c893bb1a3a1"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x2da8, 0x3, [@m_skbedit={0x60, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x48, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x1d, 0x6, "17a16fd19550b83696f9163949364946a374312d113f4d7d56"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xf0, 0x19, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0xfffffffa, 0x5}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xea7, 0xfffffffffffffff9, 0xa, 0xc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x55, 0x6, "1ee868ef8aeffbdb4688e12d0164ecc0e94b9f3e051e0acade5f1f68473c6e507642a9e35cb16c8cced3d5efcd3200997b16d681cf1f1b88606574afd4edc89b1f2038806c7019ab79065db83371c7c3c4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x2c0c, 0x8, 0x0, 0x0, {{0xa}, {0x2be0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffff, 0x80000001, 0x10000000, 0x9, 0x1}, 0xff, 0x8, [{0x38952188, 0xc, 0x800, 0x1, 0x5, 0x4}]}, [{0x9, 0x8, 0x10000, 0x6, 0x1, 0x9}, {0x9, 0x2, 0x2, 0x19b, 0x5, 0x8001}, {0x7fe0000, 0x5, 0x2, 0xfffffffe, 0x9, 0x100}, {0x9, 0x23a0, 0xfffffff5, 0x2, 0xfffffff5, 0x5}, {0x31a4, 0x6bdda5e0, 0x4, 0x3ff, 0x1, 0x5}, {0x2, 0x9, 0x7, 0x1, 0x4, 0x3}, {0xfffffff6, 0x3, 0x2, 0x6, 0xffff1762, 0xdd}, {0x4, 0x2, 0x4, 0x8, 0x0, 0x3}, {0x1, 0x1ff, 0x8001, 0x0, 0x2e, 0x5}, {0x37c, 0x4, 0x7, 0x0, 0x300, 0x3}, {0x6, 0x0, 0x1, 0x4d2, 0x2, 0x6}, {0x80000001, 0x9, 0x8, 0x3, 0x7, 0x10000}, {0x9, 0x605, 0xffffffff, 0xf4a, 0x9, 0x4}, {0x8, 0x6, 0x0, 0x9, 0x8, 0x100}, {0x18, 0x6, 0x1, 0x5, 0x4, 0x8}, {0x8de, 0xfffffffb, 0x7fffffff, 0x2, 0xc49, 0xfffffff8}, {0x4, 0xe, 0xfffffc01, 0xfffffff8, 0x9db1, 0x7}, {0x8, 0x8, 0xd1, 0x9, 0xfffffffd, 0xfff}, {0x9, 0x8, 0x5, 0x80, 0x2, 0x401}, {0x1000, 0x7, 0xee, 0x9, 0x16, 0x2}, {0x4, 0x80000001, 0xc43, 0xca2, 0xfffffff8, 0x9}, {0x3, 0x9, 0x51, 0x9, 0x4, 0x6}, {0xd, 0xfffff77f, 0x100, 0xff, 0x8, 0x7ca7}, {0xacda, 0x81, 0xd10, 0x9, 0x7, 0x9f9}, {0xa, 0x100, 0xe52a482d, 0x5, 0x6, 0x1}, {0x29e2, 0x80000000, 0x1, 0x8, 0xfff, 0xd6}, {0x4, 0x8, 0x7, 0x3ff, 0xe, 0x7f}, {0xc7d, 0x6, 0x7, 0x6, 0x0, 0x5}, {0x0, 0xd, 0x9, 0x0, 0x9}, {0xc34a, 0x6, 0x1db, 0xff}, {0x7, 0x0, 0xffff92b0, 0x7, 0x5, 0x1}, {0x2, 0x401, 0x8, 0x7, 0x5, 0x3}, {0x10001, 0x5c9, 0x3, 0x8, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x0, 0x1, 0x5, 0x873}, {0x10001, 0x4, 0x3, 0x28aea28f, 0x8f, 0x960}, {0x674, 0x4, 0x7, 0x2f6d158c, 0x9, 0x35}, {0xf0c0, 0x5, 0x5, 0x6, 0x2, 0x4}, {0x2, 0x0, 0x8, 0x2858fbb, 0x9179, 0x1}, {0x4, 0x1, 0x80000000, 0x57, 0x2a, 0x8}, {0x5, 0x79, 0x7fff, 0x6, 0x4, 0xfffff000}, {0x6, 0x3, 0x33c, 0x5, 0x4, 0x3}, {0x6, 0x9, 0x101, 0xbb15, 0x401, 0x3d8}, {0x5b, 0x0, 0x33, 0xb, 0x34, 0xff}, {0x5, 0x8, 0x5b, 0x401, 0x2, 0x5c}, {0x6, 0xfffffffd, 0x7, 0x0, 0xde9, 0x80}, {0x87, 0x9, 0x9, 0x5, 0x3, 0x634}, {0x10001, 0x7fff, 0x0, 0x0, 0x14f4, 0x7}, {0x4, 0x3, 0x5b7, 0x4, 0x7e7f0037, 0x566a}, {0x1, 0x7f, 0x8, 0xdd5, 0xe35, 0xac}, {0x5, 0x6, 0x3cf, 0x3, 0x6, 0x400}, {0x7, 0x1, 0x26c00, 0x80000001, 0x5, 0x5}, {0x297791bf, 0x5, 0x9, 0x7, 0x0, 0x7}, {0x7, 0x5, 0xa, 0x4, 0x4, 0x986a}, {0x200, 0xee, 0x401, 0x6, 0x6, 0x6}, {0x4, 0x0, 0x5, 0x7, 0x7fffffff, 0x3}, {0x7, 0x10001, 0x10001, 0x86, 0x7, 0xfffffff7}, {0x3, 0x6, 0xcc1, 0x0, 0x2, 0x2}, {0x5, 0x3, 0x10001, 0x92, 0x0, 0x1}, {0x7, 0x2, 0xfffffff2, 0xffffffff, 0x2, 0x2}, {0x7fffffff, 0xa619, 0x81, 0x2, 0x100, 0x7}, {0x4, 0x8000, 0x52b, 0x8, 0x9241, 0x1}, {0x3, 0x9, 0x4, 0x80, 0x7fffffff, 0xfff}, {0x6, 0x1ff, 0x7, 0x1, 0xffffffff, 0x22944000}, {0x8, 0xc, 0xb, 0x3ff, 0x5, 0x3}, {0x0, 0x8, 0x7, 0x0, 0xfffffff8, 0x8}, {0xfffffc01, 0x6, 0x10000, 0xfffffe00, 0x3ff, 0x7ff}, {0xfae2, 0x6, 0x81, 0x0, 0x5, 0x3}, {0x9c, 0x6, 0x81, 0x9, 0x2, 0x5}, {0x3, 0x8, 0xaa97, 0x7, 0x7, 0xfffffffa}, {0x101, 0x3, 0x69, 0x1001, 0x0, 0x7}, {0x7d32fd1c, 0x3, 0xfffffffa, 0xfc12, 0x0, 0x3}, {0x1ff, 0x9, 0x6, 0xd581, 0x85, 0xc}, {0xffff, 0x7, 0x2, 0x6, 0x9, 0x7}, {0x6, 0x69dd, 0x0, 0x800, 0x20, 0x1}, {0x198, 0x0, 0x5, 0x4, 0x4e, 0xe}, {0x2, 0x400, 0x7, 0x6, 0x2, 0x8}, {0xa, 0x4, 0x81, 0xffffff53, 0x3, 0x10001}, {0x6, 0xf8f, 0x6, 0x7, 0x3, 0x51}, {0x8, 0xd7, 0x7cb, 0x1, 0xf, 0x6}, {0x80000001, 0x7, 0x0, 0x1, 0x8573, 0x78}, {0x8, 0x100, 0xa8c, 0x5, 0x4, 0xa}, {0x2, 0x2, 0xc, 0xfffffffc, 0x88, 0x1}, {0x7c, 0xfffffff7, 0xf, 0x4, 0xff, 0x8000}, {0xffff, 0x607, 0x400, 0x9, 0x1, 0x75}, {0xffff, 0x0, 0x5, 0x1, 0x5b, 0x7}, {0x6df, 0x1000, 0x101, 0x80, 0x7, 0x3}, {0x3, 0x3, 0x0, 0x38, 0x6, 0xe}, {0x4, 0x8, 0x6, 0x3}, {0x6, 0x6, 0x9, 0x10000000, 0x6, 0x1}, {0x4, 0x8, 0x8, 0x1, 0x6}, {0x2a6, 0x4053, 0x7f, 0x0, 0x9c6, 0x3}, {0x0, 0x400, 0x2, 0x800, 0x200, 0x7}, {0x7fff, 0x2, 0x2, 0x2, 0x8001, 0x80000001}, {0x8000, 0xbba0, 0x2, 0x2, 0x67, 0x40}, {0x5, 0x4, 0x6, 0xe8, 0x6, 0x800}, {0x6, 0xfffffffa, 0x4, 0x3b60, 0xbb, 0x14000000}, {0x9, 0x0, 0x4, 0x52e5, 0x3, 0xe}, {0x80000000, 0xffffffff, 0x2066, 0x9, 0x5, 0x9}, {0x6, 0x8, 0x7, 0x1000000, 0x6, 0x5743}, {0x8001, 0x7fff, 0x4, 0x71, 0x7f, 0x8}, {0xbd, 0x6, 0x252e, 0xb, 0x1000, 0x7}, {0xa170, 0x6, 0x80000001, 0x7, 0x10, 0xdd65}, {0x8, 0x8000, 0x1, 0x0, 0x5}, {0xfffffffd, 0x9, 0x5, 0x1, 0xe67, 0xfff}, {0x9, 0x2e3c, 0x8, 0x8001, 0x9, 0x7}, {0x100000, 0x9, 0x5, 0x0, 0x8, 0x9}, {0x9, 0x3, 0x3, 0x3, 0x9, 0x232d03ea}, {0x7, 0x3, 0x2, 0x0, 0x6ba, 0x1}, {0x9, 0xb, 0x0, 0x0, 0x9c, 0x7}, {0x7f, 0x8, 0x8, 0xeca3, 0x3, 0x4}, {0x101, 0x5, 0x7fffffff, 0x40, 0xf6c4, 0x4}, {0x7, 0x5, 0x7, 0x6, 0x2, 0x3}, {0xe0dd, 0x408, 0x7ff, 0x1, 0x5}, {0x2, 0x504, 0x6, 0x2, 0x3, 0x2}, {0x7, 0x5, 0x1, 0x30, 0x1, 0x80000000}, {0xcba, 0x3, 0xffffff00, 0x7, 0x8, 0x7}, {0x2, 0x9, 0xfffffffc, 0x9, 0x6, 0xfff}, {0x8000, 0xffe8, 0xffffffe7, 0x7fff, 0x8, 0xfff}, {0xb, 0x2, 0x7, 0x9e1, 0xfffffffe, 0x1}, {0x1, 0x2, 0x46, 0xd0d, 0xc, 0x8e9}, {0x192c, 0x5, 0x81, 0x6, 0x5, 0x80000000}, {0x2, 0x8, 0x4, 0x1, 0x6, 0x2}, {0x8, 0x3, 0xa, 0x80000001, 0x4, 0x6}, {0x7ff, 0x8, 0x0, 0x6, 0x5, 0xc}, {0x401, 0xd, 0x8, 0x3ff, 0x5}, {0x410237b4, 0x1, 0x7ff, 0x4, 0x8, 0x10000}, {0x5, 0x9, 0x5, 0x7, 0x1, 0x1}], [{0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xb}, {0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x1eebfa374e9b39d1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x5}, {0x3}, {0x3}, {0x6}, {0x2}, {}, {0x4}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0xfc, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xfffffbff, 0x5, 0x5, 0x0, 0x1}, 0xf, 0x9, [{0x6, 0x8000, 0x6, 0x7fff, 0x1, 0xb}]}, [{0x6, 0x9, 0x8, 0x3, 0xa, 0x5}, {0x4, 0x2, 0x2, 0x8, 0x6, 0xfffffffd}, {0xfffffff9, 0x6, 0x4, 0x7, 0x7, 0x22}, {0xb, 0x1000, 0x1000, 0x400, 0x3, 0x23e8}, {0x10, 0xa6e, 0x1, 0x1, 0x5, 0x800}, {0xc, 0x3, 0xfffffffa, 0x101, 0x5, 0x2}, {0xfffffffa, 0x586, 0x8, 0x10001, 0x101, 0x80000000}, {0x7b5, 0x9, 0x41ca, 0x8001, 0xc, 0x7}, {0x20000000, 0x3, 0xbe, 0x800, 0x8, 0x6}, {0x4, 0x800, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x4, 0x2, 0x3, 0x614c, 0x54}, {0x9, 0x7c14, 0x13, 0x1, 0x2, 0x80000001}, {0xf, 0x2d2, 0x80000001, 0x6, 0x9, 0x2}, {0x7, 0x7b, 0x2, 0x1, 0x200}, {0xb, 0x81, 0x1f7c, 0x3, 0x9, 0xfa9}, {0x8, 0x5a0, 0x29, 0x9, 0x6, 0x80}, {0x2, 0x5cbc, 0x400, 0x2, 0x3, 0x7}, {0x400, 0x1ff, 0x6, 0x10000, 0xe000, 0x1534}, {0x800, 0x200, 0x5, 0x4, 0x6b, 0xf}, {0xd, 0x6, 0xbc8a, 0x7, 0x1, 0x2}, {0x7f, 0xc, 0x1, 0x515a, 0x6, 0x7}, {0x7, 0xe0, 0xfd, 0xe672, 0x4, 0x9}, {0x9, 0x5, 0xbb7d, 0x8000}, {0x9, 0x87f, 0x9, 0x9}, {0x1, 0x20000000, 0x5, 0x3, 0x1000000, 0x7c}, {0x2, 0xd, 0x7, 0x10, 0x4, 0x4}, {0x7, 0x0, 0x83b, 0x6, 0x8, 0x6}, {0x1, 0x5, 0xef, 0xfb90, 0x2, 0xff}, {0x4, 0x7, 0x8, 0x4, 0x1, 0xfffffffe}, {0x7c5, 0xa02, 0x2, 0x1, 0x4, 0x9f}, {0x7fffffff, 0x5, 0x0, 0x1, 0x8, 0xffff9e42}, {0x8001, 0xfffffff7, 0xa, 0x7fff, 0x800, 0x800}, {0x5, 0x9, 0xb41, 0x5, 0x9}, {0x8, 0x4, 0x7, 0x2, 0x5cc, 0x1}, {0x9, 0x8, 0x84, 0x5, 0x3, 0x594}, {0x2, 0x7, 0x1, 0x1, 0x40, 0x1}, {0x5, 0x3b, 0x6, 0xc133, 0x0, 0x18b3}, {0x2, 0x3, 0x6, 0x10000, 0xfffffff9, 0x7}, {0x3, 0xcb8, 0x1, 0x81, 0xd, 0x4}, {0x6, 0x99c8, 0x3, 0x7, 0x3, 0xb91}, {0x43d7, 0x3be, 0x2, 0x78, 0xffffffff, 0xf}, {0x5, 0x9, 0x9, 0x6b, 0x7f, 0x20000000}, {0x7, 0x2, 0xfffffbff, 0x9, 0x7, 0x2}, {0x96a2, 0x5, 0x8, 0xf, 0x5, 0x4}, {0x4, 0x5, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x435d, 0x400, 0x81, 0x9, 0x79}, {0x0, 0x8, 0x4, 0x6, 0x9, 0x8001}, {0x1ff, 0x5, 0x9, 0x2, 0x7fff, 0x9161843a}, {0x4d, 0x7f, 0x2, 0x3, 0x0, 0x200}, {0xf, 0x3, 0x3, 0x2, 0x6, 0x10001}, {0x7, 0x8, 0xe728, 0xacb, 0x400, 0x8}, {0xfffffffa, 0x1, 0x80000001, 0x217d, 0x7, 0x599}, {0x3, 0x10, 0x0, 0xa5, 0x400}, {0x2, 0x9a, 0x6, 0x3, 0x4, 0x7}, {0xb, 0xfffffff3, 0xbd, 0xb1, 0x5, 0x4}, {0x823, 0x0, 0xce, 0xfffffff7, 0x1, 0x9}, {0x3, 0x8, 0x6, 0x4ac, 0x6, 0x4}, {0x400, 0x7, 0xfffffffe, 0x6, 0x0, 0xfffffffc}, {0x3, 0x2, 0x8, 0xffff, 0x8}, {0x0, 0x0, 0x2000000, 0x9, 0xa, 0x8}, {0x800, 0x8, 0x2, 0x121, 0x1000, 0xfffffff7}, {0x81, 0x92, 0x4, 0x6, 0xffff02d0, 0x7}, {0x100, 0x0, 0xb, 0x2, 0x53f}, {0x8, 0x1ff, 0xe5b, 0x2, 0x4, 0x4}, {0x400, 0x9, 0x6, 0x7, 0x2, 0x7fff}, {0x2, 0xa, 0x9, 0x7, 0x3}, {0x4, 0x1, 0x3, 0xf7, 0x4, 0x1ff}, {0x6, 0x0, 0x41, 0x5, 0xfffff800, 0x2}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x4, 0x9de7, 0x10, 0xfff}, {0x9, 0xb04, 0x4, 0xf4, 0x3, 0x9}, {0x4, 0xfffffffa, 0x8, 0x5, 0x4, 0xf}, {0x9, 0x1, 0x7fff, 0x0, 0x8, 0x2}, {0x4, 0x6, 0x8, 0x3, 0x2, 0x1}, {0x6, 0x7fffffff, 0x7, 0xc5, 0x7, 0x2}, {0x8, 0xffffffa0, 0x8, 0x10001, 0x8, 0x800}, {0x71d, 0x3, 0x3, 0x8, 0x401, 0x2}, {0x9, 0x2, 0x2, 0xc, 0x3, 0x400}, {0x2f78, 0x50, 0xb0, 0x6e8, 0x5d, 0x8}, {0x8, 0x7, 0x8, 0x7, 0x40, 0x1000}, {0x3, 0xf68, 0x0, 0x2, 0x8001}, {0x0, 0x0, 0x1ff, 0x9f8, 0x4, 0xffffffff}, {0x7fffffff, 0xf9f, 0x4, 0x9, 0x5, 0xa5}, {0x32521048, 0xa, 0xfffffffd, 0x1, 0x4, 0x1}, {0x2000, 0x4ff, 0xb7b, 0xe02, 0x9, 0x2}, {0x8, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x1, 0xc, 0x2, 0x43, 0xfffffff9, 0x40}, {0xb, 0xb, 0xd, 0x5, 0x15, 0x1}, {0x2, 0xb9, 0x8, 0x3, 0x1ea2, 0xe4b}, {0x0, 0x3, 0x9, 0x0, 0x7, 0xf3}, {0x0, 0x2, 0x0, 0x5, 0x81, 0x6}, {0x7, 0x8, 0x6, 0x91f2, 0x8001, 0xe7c4}, {0x69f6836a, 0x4, 0xffff, 0xf108, 0x4, 0x1}, {0x7, 0xff, 0x4, 0x5, 0x7ff, 0x5}, {0xfff, 0xd3a, 0x7, 0x0, 0x32c2, 0x3}, {0x0, 0x7, 0x1, 0xff, 0x3, 0x1ec7}, {0x2, 0x3, 0x7, 0x10001, 0x5, 0xb7c3}, {0x1, 0x5, 0x1, 0xfe7f, 0x2, 0x8}, {0x5, 0x4, 0x7, 0x1, 0x0, 0x4}, {0xfffffff6, 0x3d, 0x6, 0x6eaf, 0x37f, 0x9}, {0x4, 0x0, 0x1000, 0x2, 0x5, 0xfffff328}, {0xfffffffc, 0x5, 0x3, 0x8, 0x3, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x8, 0x1}, {0x7, 0x9, 0xa7, 0x2, 0x0, 0xf}, {0x5, 0x7, 0x3, 0x2, 0x2}, {0x8, 0x4, 0x2, 0x5, 0xe27, 0x4}, {0x5, 0x800, 0x3ee1, 0x3, 0x5, 0x8}, {0x40, 0x7, 0xf, 0x0, 0x1, 0x4}, {0x0, 0x4000000, 0x1, 0x1, 0x28, 0x5}, {0x10001, 0x6, 0x4, 0xec, 0x3, 0xd}, {0x0, 0x9, 0x1, 0x3, 0x2f78, 0x7}, {0x7, 0x400, 0x8, 0x7ff, 0x0, 0x8}, {0x1, 0x1, 0x8, 0x6, 0x1, 0x9}, {0x4, 0xa91, 0x6, 0x7, 0xf6, 0x7}, {0x8, 0x40, 0x82a, 0x64f, 0x2, 0x100}, {0x8, 0x5c, 0x6, 0x9, 0xfffffffd, 0xa3}, {0x8, 0x3, 0x401, 0x678, 0x8, 0xff}, {0x1, 0x4, 0x9, 0x0, 0x2b, 0x4}, {0xfff, 0x4, 0x8, 0x3, 0x2, 0x7}, {0x1, 0x9, 0x401, 0x6, 0x101, 0x1}, {0x793, 0x8, 0x33, 0x8000, 0x6909efb1, 0x95}, {0xfffffff7, 0xd0b, 0x5, 0x661800, 0x0, 0x1}, {0x1000, 0xffff, 0x4, 0x6055, 0x8, 0x2}, {0x2, 0xb, 0x7, 0x7, 0xe, 0x8000}, {0x10, 0xfffffff9, 0x2, 0x7, 0x80000001, 0x3}, {0xa, 0xfffffffb, 0x8, 0x7, 0x1, 0x3}, {0xfffff57d, 0x7f, 0xb, 0x5, 0x9, 0x49df}, {0x2, 0x4, 0x4, 0xe, 0x14b2, 0x6}], [{0x2}, {0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xf}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffd1d1, 0xd, 0x0, 0x8001, 0x2}, 0xc9, 0xf}, [{0x6, 0x6, 0x80000001, 0x3, 0x9, 0x71d}, {0x7fffffff, 0x5, 0x1, 0x3, 0x5, 0x400}, {0x4, 0x7fff, 0x6, 0x1, 0x2, 0x8b59}, {0x1, 0x7, 0xd, 0x3d87, 0x3, 0xd30}, {0x8, 0xfffffff8, 0xa, 0xffffffc7, 0xc, 0x4e06}, {0x9, 0x8, 0x2, 0x5, 0x40e4, 0x100}, {0x8000000, 0x7, 0x0, 0x9, 0x8, 0x1}, {0x40, 0x5, 0x8, 0xe, 0x5, 0x3}, {0x800, 0x3, 0x800, 0x134b, 0x2, 0x6}, {0x6, 0xd66, 0xfffffff9, 0x8, 0x7ef7, 0x1}, {0x1000, 0x2, 0x0, 0xfffffffa, 0x3, 0x8}, {0x6, 0xe456, 0x8001, 0xfffffff9, 0x2, 0x9}, {0x4, 0x7, 0xfffffffd, 0x800, 0x4, 0x2}, {0x3, 0x2, 0x1, 0x5, 0x7ff, 0x9a}, {0xfffffffe, 0x70b, 0x2a, 0x3, 0x9, 0x3}, {0x1, 0x81, 0x0, 0x1, 0xfffffffe, 0x3}, {0xf1, 0x3, 0x5, 0x1, 0x8000}, {0x2, 0x0, 0x9, 0xe710, 0x8}, {0x80000001, 0x80000001, 0x4, 0x81, 0x7, 0xa}, {0x1, 0x4, 0x6, 0xe9e2}, {0x9, 0x99, 0x3, 0xd93c, 0x188, 0x1}, {0x0, 0xff, 0x80000001, 0x5, 0xc, 0xed11}, {0x2, 0x5, 0xa, 0xc8c0, 0x5, 0x5}, {0x7, 0x37b8, 0x3, 0x6, 0xf, 0x7ff}, {0x0, 0x2, 0x7, 0x1, 0x3, 0x3f}, {0x3, 0x6, 0x7, 0x6, 0xffffff5c}, {0x7fff, 0xfffffff8, 0x10001, 0xa75, 0x4, 0x9}, {0x1f6, 0x3, 0xc0, 0x9, 0x7, 0x374}, {0xc78, 0x400, 0x5, 0x400, 0x8, 0xfffffffc}, {0x10000, 0x9, 0xdd5, 0x7fff, 0x77, 0x8}, {0x101, 0x5, 0x9, 0x5, 0x6}, {0x6, 0x0, 0x1, 0x2, 0x0, 0x1}, {0xffff, 0x6, 0x4, 0x3, 0x7, 0x10}, {0x4, 0x0, 0x8, 0x4, 0x40, 0x5}, {0x81, 0x10001, 0x101, 0x5, 0x50d, 0x2}, {0x3, 0x9, 0x5, 0x7ff, 0xfffffffe, 0x7}, {0x5, 0x8, 0x40, 0x7, 0x7, 0x7ff}, {0x9, 0x98d, 0xe79, 0x70759181, 0x27, 0x21b}, {0x0, 0x1, 0x0, 0x80000000, 0x40, 0x6}, {0xfffffff6, 0x9, 0x4, 0x5a, 0x1ff, 0x3}, {0xc15, 0x2, 0x9, 0xe4, 0x7f, 0x9}, {0x2281a9e4, 0xd, 0x75df1a41, 0x4, 0x1ff, 0x8}, {0x1, 0x7f, 0x2, 0x100, 0x5, 0x1}, {0x7182c2eb, 0xffffffff, 0x8, 0x3, 0x0, 0x9}, {0x8, 0xffffffff, 0x7, 0x8, 0x85, 0x9}, {0x6, 0xe, 0x200, 0xff, 0x8}, {0x3, 0x0, 0x5, 0x7, 0x80000000, 0x6}, {0x3a, 0x1, 0x6, 0x7ad, 0xa, 0x1559}, {0x200, 0x7, 0x4, 0x7, 0x8}, {0x7fff, 0x2, 0x427, 0x9, 0x7fffffff, 0x8}, {0x99aa, 0xff, 0x80000000, 0x3ff, 0x3, 0x8}, {0x5, 0x2, 0xc, 0x81, 0x10, 0x1ff}, {0xcae, 0x80, 0xa, 0x7f}, {0x1, 0x1, 0x7, 0x2, 0x1, 0x43f9}, {0x800, 0x1ff, 0x9, 0x5, 0x0, 0x6}, {0x7, 0x101, 0x0, 0x401, 0xffffffff, 0xfffeffff}, {0x92a9, 0x3, 0x4, 0x3, 0x1000, 0xed9}, {0xcc4, 0x6, 0x5, 0x0, 0xffffffff}, {0x5000000, 0x8000, 0x2000, 0x8000, 0x8, 0x8}, {0x6, 0x9197, 0x8, 0x7, 0x6, 0x400}, {0x10000, 0x6, 0x10000, 0x4, 0x428, 0x6}, {0x2, 0x1, 0x1, 0xb1a, 0x888b, 0x3}, {0x7, 0x9, 0x200, 0x7, 0x1c00000, 0xd}, {0x5, 0x6, 0x1, 0x5d, 0x7, 0xb}, {0x3, 0x2, 0x1909, 0x72bc, 0xf, 0x1ff}, {0x42, 0x7, 0x1, 0x60000, 0x3ff, 0xffff}, {0x3, 0xa0, 0x40, 0x10000, 0xa, 0x83}, {0xe308, 0x80000001, 0x2d56, 0xa, 0x6, 0x10}, {0x400, 0x401, 0x2, 0xfffffffb, 0x2, 0x3}, {0x3137, 0xa, 0x4, 0x3, 0x400, 0x800}, {0x5, 0x3, 0x8000, 0xe041, 0x9, 0x2}, {0x7, 0x2, 0x4, 0xb2, 0x37ade864, 0x5}, {0xc0000, 0xb, 0xa, 0x10001, 0x7805d5b5, 0x7}, {0x2, 0xc4b7, 0x3, 0x4, 0x9, 0xffffffbd}, {0x3, 0xe3, 0x4, 0xb, 0x7, 0xc}, {0x8000, 0x200, 0x5, 0x2, 0x400, 0x7}, {0x9, 0x6, 0x8, 0x1, 0x8, 0x7}, {0x9, 0xfff, 0x0, 0x9, 0x4, 0x5}, {0x3, 0xa, 0x1, 0x101, 0x1, 0x50000}, {0x9, 0x1, 0xf, 0x7602, 0x9, 0xfffffff7}, {0x1, 0x4, 0xfffffffa, 0x4, 0x8, 0x2}, {0x1, 0x7, 0x9, 0xffff7fff, 0x6, 0x8}, {0x0, 0x2, 0x5, 0x101, 0x49f, 0x4}, {0xfffffff9, 0x1ff, 0x5, 0xfffffffb, 0x80000000, 0x5}, {0x1, 0x9, 0x1beb, 0x83, 0x1000, 0xffffffff}, {0x40, 0x6af, 0x1000, 0x9fa, 0x4409, 0x8}, {0x3, 0x80000001, 0x395c9e41, 0x7, 0x9, 0x2}, {0xd, 0x7, 0x2, 0x2, 0x8a5e, 0x7f}, {0x9f, 0x6, 0x3, 0x4, 0x3, 0x1c}, {0x1, 0x12000000, 0x1, 0x0, 0x3ff, 0x7}, {0x10, 0x6, 0x1, 0x2, 0x659, 0xdf97}, {0x3, 0x9, 0x2e, 0x7, 0x400, 0x8}, {0x8, 0x0, 0x66f6, 0x1, 0x3, 0xf}, {0x9, 0x75b0, 0xfffffff9, 0x0, 0x4, 0x7}, {0x9, 0x101, 0x10001, 0x7, 0x3ff, 0x2}, {0x8, 0x8, 0xf224, 0x40, 0x4f2, 0x5}, {0xfffffff7, 0x7fffffff, 0x0, 0xfda, 0x4, 0x401}, {0x5, 0x0, 0x5, 0x9, 0x3, 0xff}, {0x8, 0x0, 0x9, 0x2, 0x4, 0x8}, {0x1ff, 0xb253, 0x401, 0x6e000000, 0x9, 0x800}, {0x60, 0x7, 0x800, 0x9, 0x3, 0xa}, {0xc, 0x0, 0x3, 0x3c000000, 0xfffffffd, 0x3}, {0xffff, 0x0, 0x109, 0x7fffffff, 0xdc, 0x401}, {0x4800, 0x9, 0x8, 0x9, 0x8001, 0x7}, {0x7, 0xa5b9, 0x6, 0x3, 0x7fff, 0x1}, {0x400, 0xffffff64, 0xfff, 0x3, 0x8, 0x6b}, {0x7f, 0x1, 0x10000, 0xf7, 0xfffffffe, 0x3}, {0x41fa, 0xfff, 0x6, 0x1, 0x5, 0xa5d}, {0x1ff, 0xff, 0x7, 0x5, 0xd177, 0xfffff4fb}, {0x1ff, 0x7, 0x0, 0x43, 0x3, 0x200}, {0x7, 0x1ff, 0x5, 0x5, 0x5, 0x1560000}, {0x2, 0x9, 0x1, 0x7, 0x8, 0x1}, {0x7, 0xec, 0x1, 0x0, 0x6, 0x4}, {0x8, 0x8, 0xa01b, 0x0, 0x7, 0x8}, {0x6de, 0xd, 0x3, 0x9, 0xfffffffc, 0x7fffffff}, {0x4, 0x9, 0x7, 0x0, 0x0, 0x5}, {0x6, 0x3, 0x3, 0x4, 0x7, 0x5}, {0x3, 0x4, 0x4, 0x8000, 0x8c3b, 0x10001}, {0x7, 0x3, 0x81, 0xffff7027, 0x3, 0x2}, {0x10000, 0xfffffff7, 0x5, 0x9, 0x8}, {0x0, 0xff5, 0x80000001, 0x52, 0x8, 0x7}, {0x7, 0x4, 0x6, 0x9, 0x7, 0x3}, {0x1, 0xfffff0f3, 0x8001, 0x53fa, 0x3, 0x6}, {0x3, 0x9, 0x40, 0x1, 0x8, 0xffffffff}, {0x521, 0x9, 0xf2559700, 0x5, 0x8, 0x3}, {0x374, 0x98, 0x4, 0x5, 0xfffffffd, 0x9}, {0x9, 0x3ff, 0x3, 0x4, 0x40, 0x80000001}, {0x101, 0x6, 0x9, 0xf, 0x9830, 0x1}], [{0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x22492505418d865c}, {0x0, 0x1}, {0x5}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x2, 0x45f93c04326d2b86}, {}, {0x5}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {}, {0x7}, {0x5}, {0x4}, {0x1}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x4}, {}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3c4ecdd063781aa9}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {}, {0x2}, {}, {0x4, 0x1}, {0x5, 0xc893fea3dc0ff4a9}, {}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x1}, {0x1, 0xcd050cde8a8f7298}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0xc0c4ce8578c1ebd7}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_ACT={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff2}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x7}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_BASIC_ACT={0x1e94, 0x3, [@m_ct={0xe8, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0x7, 0x1, 0x9, 0x4}}]}, {0xa6, 0x6, "8b00f79abafd85b4ac5770e96270d3779ea067e50db9580c17c0879c2a2350477cbcdca3d425e062d3c1f968c2a91ab3436c8f6da5c27df505a9a6186c1dd3cd4929e02dd3105e6ac22c60c4b1a4f9d575e8d04d757c2c9139fe7b0db4b89146670ad228ab4db62e4d83d0784bc26592895a34bb6f3b4832aa1583b25e8a7bc03f1c4897b6fa334ae30bc46c046acfe69d6e4884f380f09dc9f6035d285f7da9e0fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_pedit={0x1da8, 0x9, 0x0, 0x0, {{0xa}, {0x1d7c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x8, 0xafd, 0x4, 0x80000000, 0x9}, 0x8, 0xf1, [{0x5ff, 0x6f16, 0xd, 0xffff}, {0x6fa2, 0x0, 0x8000, 0x10000, 0x4, 0x931}, {0xd773, 0xb, 0x4, 0x2, 0x6, 0x2}]}, [{0xa000, 0x3, 0x80, 0x100, 0x8, 0xc}, {0x9, 0x7a23, 0x1, 0x4, 0x1, 0x7ff}, {0x9, 0x8, 0x80000000, 0x9, 0x6, 0x6}, {0xdaa, 0xfffffffd, 0xffffffff, 0x5, 0x4, 0xc4c9}, {0xffffffff, 0x5, 0x8, 0x6, 0x5}, {0x4, 0x8d2, 0x8001, 0x5, 0x4, 0x100}, {0x9, 0x4, 0xfffffffa, 0xfffffffd, 0x9, 0xb}, {0x2, 0x200, 0x305c5186, 0xfe000000, 0x2, 0xfff}, {0x3, 0xc9b5, 0x6, 0xffffffc0, 0x3, 0x817}, {0xe31, 0x0, 0xbad, 0x200, 0x6, 0xa6fa}, {0x8, 0x7fff, 0x8, 0x4, 0x7, 0x4}, {0x51, 0x9, 0x1000, 0x6336, 0x5, 0x5}, {0xfffffffb, 0x5, 0x7ff, 0x9, 0x80, 0x2}, {0xf4, 0xfffffffb, 0x583, 0xb6, 0x3, 0x3}, {0x80, 0x200, 0x1, 0x4, 0x9, 0xdf}, {0x6, 0x2, 0x80000001, 0x6, 0x0, 0x6}, {0x4, 0x7, 0xa0, 0x0, 0xa6f1, 0x6}, {0x9, 0xc834, 0x7, 0x9, 0xffffc76f, 0x5}, {0x1ff, 0x0, 0x8, 0x8, 0x10001, 0x7fff}, {0x7, 0x4, 0x7fffffff, 0x7, 0x7bc57504, 0x5}, {0x80000000, 0x3, 0x81, 0x8, 0x7, 0xb}, {0x9, 0x0, 0x2, 0x7, 0x8, 0x1}, {0x8, 0x9, 0x80, 0x100, 0xa, 0xa000}, {0x928b293, 0xfa0, 0x3, 0x6, 0x100, 0x9}, {0x49, 0x7f, 0xe2, 0x4, 0x81, 0x200020}, {0xfffffffe, 0x8, 0x8000, 0x9, 0x200, 0x8}, {0x7, 0x3, 0xf, 0x0, 0x1400000, 0x80}, {0x92, 0x81, 0xffffff80, 0x3, 0x9, 0x3ff}, {0xfffeffff, 0x9, 0x9, 0xb3, 0x7f, 0x10}, {0x6, 0x101, 0x101, 0x2, 0x0, 0xffffffff}, {0x4, 0x9, 0x9, 0x6, 0xc97, 0x2abfc542}, {0x6, 0xd61, 0x4, 0x4, 0x7, 0x80}, {0x100, 0x7, 0x7, 0x5, 0x7fff, 0x6}, {0xde6, 0x6, 0x3cce, 0x4, 0x3, 0xead6}, {0x84, 0x3, 0xd0f, 0xe, 0x6, 0x1}, {0x4, 0x0, 0x2, 0x3, 0x7, 0x7}, {0x2, 0x5, 0x10f, 0x0, 0x6, 0x5}, {0x4, 0x8, 0x8, 0x10000, 0xfffffffa, 0x20c}, {0x200, 0xfffffffb, 0x400, 0x4, 0x5, 0xfffffffa}, {0x80000001, 0xe948, 0xfffffff8, 0x6, 0x64f7, 0x6d4a}, {0x81, 0x1, 0xfff, 0x7, 0x9, 0x77}, {0x9, 0xffff, 0x7ff, 0x6, 0x0, 0xf6}, {0x6, 0x7fff, 0x3, 0x1, 0x4, 0x8f98}, {0x1, 0xe47b, 0x2, 0x9, 0x6, 0x7}, {0x2, 0x80000001, 0x7, 0x7, 0x0, 0x8}, {0xcd2, 0x7ff, 0x7ff, 0x4, 0xc6, 0x5}, {0x6, 0x8, 0x6, 0x3, 0x7f, 0x5}, {0x50, 0x7ff, 0x7ff, 0x6, 0x50ca3825, 0x2000}, {0x1, 0x5, 0x3, 0x86, 0x3, 0x10001}, {0x2, 0x1, 0x9, 0x8, 0x8, 0x3}, {0x44755705, 0x4, 0x3, 0x3ff, 0x800, 0x2}, {0x7, 0x21794d69, 0x80, 0x4, 0x0, 0x7d05}, {0x71, 0xffffff14, 0xc9, 0x8001, 0xa9c2, 0x2}, {0xd, 0x6, 0x7, 0xa1, 0xffff7fff, 0x3}, {0x876e, 0x8, 0x0, 0x2, 0xc, 0x10}, {0x4, 0x9, 0x1, 0x86, 0x7fffffff, 0x3}, {0x5, 0x8, 0x4, 0xff, 0x7ff, 0x1}, {0x8, 0x80000000, 0x0, 0x100, 0x7}, {0x0, 0xfffffffe, 0x2, 0x2, 0x1e, 0x8000}, {0x1be, 0x8, 0x1, 0xfffffff3, 0x802e, 0x31}, {0x9, 0x50000000, 0x7, 0x2, 0xf8}, {0x3, 0xfffffff8, 0x200, 0x9027, 0x1, 0x604}, {0x9, 0x9, 0x9, 0x7fff, 0x532c03ac, 0xa}, {0xfec8, 0x7, 0x8, 0x4, 0x7, 0x4}, {0x35d, 0x800, 0x9, 0x81, 0x10, 0xffff}, {0x6, 0x10, 0x9, 0x1, 0x7, 0x8}, {0x1, 0x4, 0x9, 0x6, 0x1000, 0xf3}, {0x2, 0x4, 0x6, 0x968, 0x7, 0x480}, {0x9, 0x1, 0x5, 0xfffffff9, 0x10001, 0x1}, {0xf, 0x6, 0x7, 0xc0b}, {0x200, 0x101, 0x4, 0xded, 0xc514, 0x9}, {0x7a, 0x800, 0x3, 0x1, 0x3, 0x3}, {0x100, 0x85, 0x6, 0x1, 0x6, 0x8}, {0x4, 0x4, 0x4, 0x2, 0x8, 0xb7}, {0x8, 0x3, 0xc, 0xffffffff, 0x3, 0x1}, {0x4, 0xc, 0x800, 0xdbe5, 0x0, 0xffff}, {0x10001, 0x3ff, 0x5, 0x1ff, 0x9, 0x8001}, {0x1, 0x1, 0x6bf, 0x2, 0x101, 0xcdb}, {0x9, 0x3, 0x1, 0x7, 0xd, 0x10000}, {0x800, 0x10001, 0xfffffffb, 0x2, 0x8d, 0xffffffff}, {0x101, 0x7, 0x10, 0xa6b2e787, 0x2, 0x6}, {0x96, 0x6, 0x2a, 0x6, 0x3, 0x1}, {0x43, 0x8001, 0x0, 0x7f, 0x7, 0x1ff}, {0x6, 0x8, 0x10, 0x3, 0x6, 0x8001}, {0xbab1, 0xc0, 0x5, 0x7, 0x401, 0x53d6}, {0x3, 0x1, 0x8, 0x4120, 0x1, 0x10}, {0x4, 0xc, 0x3ff, 0x9, 0x0, 0x1}, {0x81, 0x6, 0x2, 0x6, 0x5, 0x6fe}, {0xffff8000, 0x0, 0x9, 0x8, 0x5, 0x1000}, {0x4, 0x6, 0x9, 0x3, 0x101, 0x4}, {0x1, 0x2b5, 0x1, 0x2, 0x8000, 0x200}, {0x2c, 0xfffffffe, 0xe, 0x3, 0x3, 0x7}, {0x800, 0xfffffff7, 0x9, 0xdf3, 0x8}, {0x6, 0x6, 0x4, 0x5, 0x4, 0x9}, {0x5, 0x7, 0x60000, 0x3ff, 0x1, 0xfff}, {0xf44, 0x7f, 0x7f, 0x6, 0x2, 0x7f}, {0x8, 0x10000, 0x6, 0x1, 0x4, 0x8}, {0x9, 0x1, 0xfff, 0x2, 0x6, 0x7}, {0xb3b5, 0x6, 0x8, 0x6e6, 0x66, 0x151}, {0x4, 0xff, 0x400, 0x7, 0x7ff, 0xd03}, {0xffffb9c6, 0x8, 0xdff103f5, 0x2db3, 0x5}, {0x4, 0xff, 0x2, 0x80, 0x9, 0x1}, {0x9, 0x4, 0x103e, 0x2, 0x8, 0x4}, {0x3, 0x1aa0, 0x7, 0xa, 0x9a, 0xced2}, {0xfffffffb, 0x8001, 0x5, 0xfffffffd, 0x1, 0x9}, {0x101, 0x4, 0x8, 0x7e0f, 0x7}, {0xffff, 0x2, 0xfff, 0x2, 0x200, 0x1}, {0x8, 0x0, 0x7fff, 0x9, 0xffff, 0x4}, {0x4, 0xa89a, 0x2, 0xc, 0x0, 0x9}, {0x101, 0xffff, 0xa, 0x4, 0x7, 0x7}, {0x9, 0x7, 0x6, 0x5, 0x6, 0x9}, {0x3000000, 0x1, 0xff, 0x4, 0xe287, 0xffffffff}, {0xfffffff9, 0x6, 0xb, 0x8, 0x7, 0x7}, {0x8001, 0x380, 0x7ff, 0x0, 0x401, 0x4f9461a8}, {0x8, 0x5, 0xfffffff7, 0x0, 0xa, 0x5}, {0x6, 0xbd3, 0x10000, 0xffff, 0x9, 0x7}, {0x215, 0x5, 0x8, 0x0, 0x7, 0x4}, {0x1, 0x6, 0x2, 0x4, 0xf, 0x401}, {0x0, 0x7, 0x4f9, 0x800, 0x7, 0x400}, {0x6, 0x7, 0x0, 0x224, 0x8, 0x48b}, {0x34a9fc69, 0x54d0112, 0x7, 0x5, 0x9, 0x71}, {0x5c, 0x10, 0x6, 0x8, 0x3}, {0x13d0, 0x9d4a, 0xffff, 0x101, 0x9, 0x8000}, {0xfffffffe, 0x5, 0x7, 0x6, 0x4}, {0x5, 0x6, 0x2, 0x8, 0x100, 0x8}, {0x600, 0x3, 0x0, 0x10001, 0x2, 0x9}, {0x9, 0x8001, 0x5, 0x1, 0x9, 0x4dcf}, {0x7, 0x5, 0x101, 0x7, 0x8, 0xffffff99}], [{0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x4a6a578b8c191471}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5}, {0x4}, {0x6371cc7c651df9e2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x8649fb4313e3d2a2}, {0x3}, {0x4, 0x1}, {0x5}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x4}, {0x1, 0x1}, {0x3}, {0x4}, {0x5}, {0x1}, {}, {0x0, 0x1}, {0x4, 0xa2a1b818eb69d808}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x7, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x1}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {}, {}, {0x74b7551536495d13}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x7, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x5, 0xc4, 0x0, 0x8000}, 0x2, 0x66, [{0x9, 0x1, 0x9, 0x4, 0x0, 0x1}, {0xffff1ff4, 0xffff, 0x401, 0x2, 0x2f8, 0x40000}, {0x8c0, 0xb3b2, 0xfffffffc, 0x5, 0x8, 0x3c3}, {0x7d, 0x9, 0x3, 0x3, 0xf, 0x25c000}, {0x4, 0x3, 0x8, 0x854, 0x7fff, 0x3}, {0x7, 0x8, 0x0, 0x2}, {0x5, 0x9, 0x2, 0xffffffff, 0x1, 0xbda8}, {0xfff, 0x4, 0x5, 0x5, 0x1000, 0x2}, {0x2, 0x1, 0xffffffff, 0x1ff, 0xfffff26a, 0x8}, {0x101, 0x2, 0x2, 0x9, 0x9}]}, [{0x1000, 0x4, 0x0, 0x3, 0xfffffffd, 0x4}, {0xff, 0x1f, 0x7fff, 0x4, 0x4, 0x1}, {0x8, 0x5, 0x8, 0x2, 0x3, 0x1}, {0x3ff, 0x0, 0x3, 0x3, 0x45}, {0x5, 0x3, 0xd, 0x0, 0x9, 0x4}, {0x3, 0x3, 0x2, 0x7, 0x80000001}, {0x3, 0x200, 0x2, 0x1000, 0x7fffffff, 0xff}, {0x80000000, 0x0, 0x46d, 0x2, 0x17000000, 0x4}, {0x2, 0x8, 0x9, 0x82c8, 0x32b, 0x5}, {0xf4, 0x6, 0x9, 0xf, 0x1, 0x4f}, {0x8, 0x2, 0x1, 0x0, 0x1, 0x7f}, {0xe476, 0x9d5, 0x10001, 0x5, 0x5, 0x4}, {0x7, 0x1c, 0x6, 0x800, 0xe4, 0x6}, {0x0, 0x6, 0x82, 0x2, 0x10000, 0x7b}, {0x2, 0xe0, 0xb74, 0xa, 0x4, 0x7}, {0x6, 0xfffffc00, 0x80000000, 0x66, 0x4, 0x6}, {0x6, 0x9, 0x7, 0x4ab, 0x3, 0xd}, {0x4, 0xa37c, 0xfffffffb, 0x0, 0x4, 0x6}, {0x401, 0x5, 0x200, 0x8, 0x8, 0xb610}, {0x7, 0x4, 0x7, 0x8, 0x0, 0xff}, {0x2, 0xb65, 0xffffffff, 0xfffffffd, 0x3, 0x4}, {0x3770, 0x8000, 0x2, 0x7, 0xfffffffd, 0xd822}, {0x5, 0x3, 0x9, 0x5, 0x81, 0x1000}, {0x0, 0x1ff, 0x4, 0x7, 0x6, 0x7}, {0x4, 0x4, 0x9, 0x8, 0xe, 0x6}, {0x200, 0x0, 0x9, 0x9, 0x1, 0x3}, {0x0, 0x7, 0x1, 0x3, 0x2, 0x2711}, {0x2, 0x4, 0xfffffffc, 0x87, 0x2, 0xc7}, {0x7, 0xf, 0x5, 0x10000, 0x7f, 0x1d}, {0x3, 0x400, 0x200, 0xb4aa, 0xfffffff9, 0x9}, {0x1000, 0xc8, 0x5, 0xfff, 0x9, 0xa}, {0x3, 0xffffffff, 0x7, 0x3, 0x7, 0x7}, {0x7d858abb, 0xd, 0x10, 0x14, 0x2, 0x4}, {0x3, 0xffffffff, 0x2c, 0xc4e6, 0x7ff, 0x9}, {0x2, 0x4, 0xa, 0x80000, 0x3}, {0x8, 0x7fffffff, 0x0, 0x4, 0x1, 0x7f}, {0x40, 0x5, 0x6, 0xfa6, 0x4}, {0x4, 0x3, 0xffff, 0xfff, 0x6842, 0x101}, {0x0, 0x9, 0x2, 0x7, 0x4, 0xffff}, {0xff, 0x8, 0x7b, 0x200, 0x0, 0x3}, {0x4, 0x0, 0x7fffffff, 0x7, 0xc3fd, 0xc}, {0x718e, 0x8e3, 0x9, 0xd, 0x1ec, 0x1}, {0xa, 0x6, 0xc, 0x69ec, 0xe1a, 0xe8}, {0x4, 0xce9f, 0xf, 0x7, 0x40, 0x1}, {0x5, 0x1, 0x1000000, 0x101, 0x3}, {0x401, 0x0, 0x2, 0x1, 0x2, 0xc7}, {0x2, 0x3, 0x2, 0x1, 0x8, 0x5}, {0x8000, 0xf, 0x0, 0x2, 0x1b8, 0x401}, {0xff, 0x0, 0x5, 0x4ac, 0xe475, 0x8}, {0xb, 0x2, 0x8, 0x3, 0x2, 0x3}, {0x2, 0x0, 0xffff, 0x1, 0x80000001, 0x5}, {0x9, 0xde, 0xc, 0x3ff, 0x8, 0x101}, {0x400, 0x9, 0x80, 0xa0e9a5a1, 0x7, 0x5}, {0x5, 0x3, 0x9, 0x0, 0x7fff, 0x100}, {0xf849, 0x2, 0xa5db, 0x2, 0x2, 0x3}, {0x10000, 0x5, 0x81, 0x1, 0x3, 0x7}, {0x2, 0x8000, 0x40, 0x8, 0x7}, {0x6, 0x9, 0x7ff, 0x5, 0x9, 0x7}, {0x3ccc, 0xf30, 0x9, 0x3, 0xffffffff, 0xc}, {0x80000000, 0x66f, 0x81, 0xfff, 0x81, 0xffffad88}, {0x7ff, 0x23a, 0x1, 0x3, 0x9, 0x3}, {0x4, 0x3, 0x5, 0x10001, 0xfffffffd, 0x1000}, {0x5, 0x40, 0x3, 0x9, 0x7f, 0x9}, {0x74f, 0x0, 0x1, 0x5, 0x7fff, 0xc}, {0x9, 0xca35, 0xffffff81, 0x9, 0x9, 0x4}, {0x9, 0x80, 0x101, 0x9, 0xfffeffff, 0xfffffeff}, {0x6, 0x0, 0x4, 0xffff17b6, 0xa7c, 0x5}, {0x4, 0xff, 0xc71, 0x4, 0x7, 0x7}, {0x100, 0x1, 0x7, 0xba, 0x7fff, 0x2}, {0x4, 0x0, 0xfffffffe, 0x3db1, 0xffffff2f, 0x1}, {0x2, 0xff, 0x6da, 0x6, 0x5, 0x253f9b55}, {0x80000000, 0x1, 0x1, 0x100, 0x5, 0x5}, {0x100, 0x3, 0x4, 0x1, 0x7f, 0xb5a7}, {0x3, 0xfa, 0x4, 0x7, 0x2, 0x6}, {0x10000, 0xe3, 0x8, 0x1, 0x7ff, 0xf80a}, {0x5, 0x10000, 0x6a, 0x8, 0xc51, 0x8}, {0xffff, 0x1121, 0xfffffe00, 0x401, 0xffff}, {0x7d6d1fc1, 0x7, 0x7fffffff, 0x9, 0x7, 0x1}, {0x40, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7}, {0x9, 0x7, 0x0, 0x6, 0x10, 0x7ff}, {0x4, 0xa, 0x3ff, 0x8, 0xd, 0x3}, {0x5, 0x9, 0x401, 0x9, 0x8, 0x4}, {0xe, 0x3, 0x8, 0xd9, 0x100, 0x7f}, {0x6, 0x3, 0x0, 0x8, 0x32c, 0x2}, {0x81, 0x79d8, 0x2, 0x7, 0x3ff, 0x2}, {0x3, 0x9, 0x1, 0x6, 0xf3, 0x4}, {0x7f0, 0x1, 0xf9c, 0xf, 0x8, 0x4}, {0x0, 0x581, 0xe, 0xfffffe00, 0x4, 0x4}, {0x2, 0x0, 0x7ff, 0x0, 0x6f8, 0xfff}, {0x80000000, 0x6, 0x6, 0x9, 0x8, 0x52d}, {0x6, 0x1, 0x1000, 0x5, 0x6, 0x2}, {0x0, 0xfffeffff, 0x2, 0x0, 0xbd, 0x1}, {0x9, 0xfffffff7, 0x23d1, 0x1, 0x6691}, {0x1000, 0x200, 0x7f, 0x401, 0x3, 0x41d8}, {0x3, 0x6, 0x9, 0xe, 0xff, 0x4}, {0x6, 0x3, 0x6, 0xf, 0x8c, 0x7}, {0x5, 0x5, 0x3, 0x5, 0x60, 0x928b}, {0x600, 0x9, 0x1, 0x8001, 0xffffffa6, 0xf}, {0xfffffffc, 0x5, 0xe70, 0x2, 0x80000000}, {0x3000000, 0xe, 0x200, 0x6, 0x9, 0x5}, {0x8, 0xf, 0x1, 0x0, 0x4, 0x5}, {0x3, 0x400, 0x7, 0x2, 0x3, 0x401}, {0x0, 0x4, 0x6, 0x4d9f, 0x0, 0x207}, {0x1d44, 0x6f9, 0x6, 0x10, 0xfffffff8, 0x10}, {0xbe84, 0xffff8001, 0x7fff, 0xffffffff, 0x999, 0x6}, {0x0, 0x200000, 0x4, 0x8, 0x1, 0x94}, {0x3ff, 0x4, 0x9, 0xfffffff8, 0x1, 0xffff8000}, {0x8, 0x7ff, 0x9, 0xffffffff, 0x81, 0x1}, {0x8, 0x6, 0x1, 0x0, 0xbf8, 0x7}, {0xffffffff, 0x9, 0x3ff, 0x101, 0x4, 0xd}, {0x2a, 0x8, 0x2a, 0x0, 0x9, 0x7}, {0x0, 0x2, 0x5, 0x7fffffff, 0x8, 0x2}, {0xc367, 0x1000, 0x0, 0xf, 0xfffffffa, 0x1}, {0x40000, 0x7, 0x6285, 0xc}, {0x1, 0x81, 0xff, 0xa6, 0x8000}, {0x4d8, 0x0, 0x6, 0x8e95, 0x8, 0x3}, {0x2, 0x200, 0x40, 0x9de5, 0x5, 0x612}, {0x3, 0x80, 0x4, 0xb4c, 0x7, 0x7}, {0x8000, 0x7, 0x4, 0x3ffc0, 0xfffffe00, 0x7}, {0x9, 0x3, 0x3ff, 0x7, 0x5}, {0xfffffffb, 0xedb1, 0x10000, 0xfffffff9, 0x9, 0x1}, {0x2, 0x32ea17bb, 0x5, 0x1000, 0x9, 0x2}, {0x4, 0x5, 0x8, 0x0, 0x7, 0x5}, {0x7c6e, 0x1db0, 0x7, 0x1ff, 0x5, 0x2}, {0x7, 0x1, 0x7, 0x36, 0xa9e, 0x8000}, {0x7, 0x2, 0x6, 0xe, 0x7, 0xbe461880}, {0x51c, 0xfffffff0, 0x6, 0x6, 0x8000, 0x8000}, {0x80000000, 0xffffffff, 0x1a6df2f3, 0x7, 0x0, 0x8}], [{0x0, 0x1}, {0x2}, {0x4}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x2}, {0x2, 0x1}, {}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x9}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0xb}, {0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x6}, {0x3}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x4e60}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) connect(r2, &(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) userfaultfd(0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/240, 0xf0}], 0x1}, 0xa5f}], 0x2, 0x40000163, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 20.044038388s ago: executing program 2 (id=1114): r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) 15.463626371s ago: executing program 2 (id=1126): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xffffff79, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x5, 0xc06, 0xffffffff, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x1a, 0x1, 0x0, 0x0, "8aee974fff186584d25af3abfe3e407370d621fd21a4b939372d2e9563a75eb616e70c2d99a8440a163e7e88f2e01967c14cf0c34c9258ec7685ffc3aba57e0f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) 11.650384541s ago: executing program 1 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) close(r3) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 8.834652614s ago: executing program 5 (id=1138): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf580672"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) 8.554937392s ago: executing program 5 (id=1139): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x1}], 0x1, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8.210884986s ago: executing program 6 (id=1141): mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) 8.144604027s ago: executing program 0 (id=1142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x4000, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0xfffffff9, 0x274, 0x7, 0x8, 0x400004, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 8.085374315s ago: executing program 5 (id=1143): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044885}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x2, @loopback, 0x74000000}, 0x1c, 0x0, 0x0, &(0x7f0000001940)}}], 0x1, 0x4000040) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setreuid(0x0, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/212, 0xd4}, 0x400800}], 0x3, 0x20000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) 8.010251341s ago: executing program 1 (id=1144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41", 0x2e}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.883023608s ago: executing program 6 (id=1145): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='.', 0x1}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 7.579523632s ago: executing program 6 (id=1146): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000100)={[0xffff]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 7.540649861s ago: executing program 0 (id=1147): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="6d0800000080"}) 7.488826108s ago: executing program 1 (id=1148): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 7.363541128s ago: executing program 33 (id=1107): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff190100"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000080), 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) readv(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0}], 0x1) 7.056846451s ago: executing program 1 (id=1150): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="edaa64c308d3eade6e71a36aa0a4a845264b59887a3a0a8978653a88d3042e46a2e9dac3", 0x24}, {&(0x7f0000000100)="f48ba253d9eb66672fd2908c10aa1e5788a5ad", 0x13}, {&(0x7f0000000280)="34451d3af9980aaa8f7b1d36b18056e0cc07ca92cef401778e4e7d6d0e66dba5a7856b8d582bea0d0f0db50a660697f1a20d10e4f54cab228a3e361dd378719dc9b1ab335356ffaa0f4b906643702dc421be9e8a113f8d90c525187501c5c801b97d0a36ec7c613be5134b719cde44c62c823e97da82b6000ab06484a9eec7e13b97680e7a5688abe917fb97e067a4edd368ad", 0x93}, {&(0x7f0000000e40)="b9383182d2bc0d783a23ac65c98be813d82f4e0e6d1f043e0ea2c0b6c3af8280ef7ea02f7ed55d2032b95aaaed0c6c0463f57d076cf48303eccd4e47dbba8662796b6119f1e335aee63103d3d512db206e5c1651f997cd968cd185f309afb402830dc42690d2c45da26e68bec6a9fbcd555b257684c846f4e57917fda452c2aa9ecd2b6780f31e37d77f8203a11d985d14f2ef1827c5e93b0c584ea2c7f9fddb127f0a812eaadb7ad96c8a4b9e274481023418051270c2c886891d6e3b178b4e0979400b9040060c46dd1587af39ee182857236ca07de99bb99083e4dda6ee4842aa8c5beffa9b8a7f0634aba04190d89985cfcfa26a6f1af1c2b63a4dbd93b48dc8a68795402c9b2f8b552166c71e616183df67edfd727f25dd2c2a92bb246f5bb10fa3e59c1bf91546170a4977e7bfcb042f28e74d7c45614977252154814fd199c3aa68e03b60d6c35ec640381bbe942cde10ab6190bd73171c9912f3df533bfbc0abea639be49ab9f6623e9e95a0fe91b67190db0a62eeb603327e4389a5a234b1a95a64b151b6dacf3cea4eb686b372b709d6f29689d87b27c829ec7721d84ffd78918d00720f10879444b0d3c025a092ff0dd1feb56640d4ba1e2fb3552c208ca1aac09e885cbacf3aa934af96f998f55d4241c15ced12e5e0197d2eef8fb6a6a0d9afe4c5406015ef7135d2d95652b741655500337b21144490958d3cfa24c305ed76e3e0b7bb73626ea014935e9d1337eed9b0595f514af4ab7706acf226a8f7dcefc23b80df5b36607e3885aa41c55a14827b5fbf41c956a124fa9dc0d6b494ad913b44279de1df339cab09fbbbb0bf414848df4daa2b0b0f4dcbd4f7c6aeb0cdb9dacae01f7de524fa07b88289092ecbeea1aa865b6fba12c11f841e9ec13447edfc3d1b4961f13eea47ed9a1f3b1d9ede679e1e0521abf771b130f1148ca9ed0ba07dbbdc4ffdda050de57eeea1f7105e248c4394049143f9b357cee9c723d2d12ea023ceff9a641afd09b05197116af1b4840274b7738d6cdf4d6324ff7550617998db701586fdb2db42e27fcfce65c3eaf01e8f03dde86f10e45861d4e6ec41d0da9f066db26bd4168f701329d676b03e696ad529af79faef1d0c9ea9a478f4e6f63775d8f92d99902f0415934975c68a7ccb04c338dc4fc77b30379cb454b00cfa66f3ed699732fd94228fa557fe1cac2d07ded82f9dc75038d2a24346ff6de3776ba3cb92d22eaf2c57d62d9cad4038ffa80c4a0fa1496a626a922cefcae6e7b7f09e66b932f980ea894ec7a881c3335d86936e8345c03a19865ec9a4fdd93e3d627ccb62e41230465dd025370b7ec91495d77561f1ba5848e13e9a8b5aac42be453af6422fd89ab1e8855b57ffdc341c5727007dddedbf9f3d62fbf1751c426b5ed1b0a2c244f292c01b2ed568e7eb521403383f7374d4b392dff8605b6536fa01a523488ebc303585ea60e1b7eaf7361a74c08ce21f2a43b0fcb4d49714399b23390fd3e32990e8b602fcebe63951d3081c55f2765b8920e5aab56df8598bcbdde1f3356dae281dcde779020955e3871c7a387dfe246ff7b8e69592cde2fd64e87a4146d0b15aafd5e5d93120b0c743c9b698770ad9dba15300ce0a8b707bb9de0343aa8ed9cf14a32fec41714546a6f8b9f407de2d9741c03de2753abd085afa6872a21ff0c936d5371d0bec46b98ce78e88dbb0afe7270c0c80f2f1e548aa3313bd9a5cf873dbd2ea6d657afc56c919b5f409034e5db850a9b9a245fb1a4f66b8183f6725da5abe797f99cfdcbb6170807da8137474e4a74cc51be10965a62e63011344805a52a134d709bf7ff2798e053667424213fe1f4d0d32b3e58b1b04190e24a6df29db95470e1fc64c993b0fdbad9c40c276f40db6784c4c60d22c431ea353a4519e6b9fb5781b30e34aa95ae0bfdca47e92807ea1ce6543d92f838d892da45115b4df0ae2bd0b430c4c6839122abb41bfcf674e7e8a512506a7feb8a2afc5119a08dfb6e64944d016ed47bda23b1ffa5654ff4b40e441f17d40ac9ae5228b3adbc1b9d06695e192e6ea0f39d297106970289bd8187e1d78d0be252fb3205b095fdc3ffe3aa82e322ae5f0b77e235ee3c65ade6dffda374b62b346677f6f27028439e60618523b667858a0e2d43b5effa23f61b8881d7d730e1a1dde3ce361bb44bad2b4cc84d199ab1dfa7ea3c5f2ce9dc93b913cc032b5023d38b48548663fdcf4fc847aa50c0fe802e3420597ec12657e663d9139833c08b7f70dc07d70e0335537103b8ce03337b2e6307c5d16c87905314b9715d48167dd4c4f7d284d98d4b4186adf8385503b1049f74e150fc47c5865dcbeb754207ca76fa248e60ee4d1a886694a6a708b77daaf1b0e9426219abbee8a6c53419e5ce1ca28b1d7a9ce227322e6c542ee96d4055c26d36220afa9d27aa066f963c48f4ad38a7a1967c2c41ffe81b2499ece401387dbc72b2b34e4012f40cc44349faee3c4f4fa29b138b2dafe0d5a414b7d9108ac005b874d5499c5fa24e98e8df96ed3530955775b4ec9d81498d69309c32d9a02ac66179311a36bc7de35be76b6e255510e3b3e21ea41789c26fea13a2e0bcb57eda98e4bb59d9445a63d1dea072937689b5b44ff11edc03de0bc2b095ff76a27788a6891e45517fc84d6566ee998dee04a3190a29722cca76522a0d55474e06b5286e56a8facd3d3657812376bdc5614630573bceeed57eeaceade7da0b9b7b74b4fe526d15bc6b53ce297b6d05da41ecebe623978c0065aa403878424e9063caae78d7c2860a2f2c4b52a86c8c65792e65477b4366489dd5c5e723c6f10f883e5b4355a27912c6d7d0c036fa4753fcc298b8d3cc63dc4b8168911154b8cf5a067301a23078cb1263ef29b32c9bd3ea39222e7c22915539661baca2073e37d0d25a165e0cb7765b12c16f40cda8252cab6ccc121f3ede26a018764f1a09cd30ccf319922e7451fe69c0036ed9ce25233d75cd091d0ef849a5df979836360ca1a3dd7b944a1514e78c5fd3a9e177a1548645bec24d59e27ccc808a7f01906935c8410235e3f615d5de3265456d792ac94f19bed244783a8574e0a85211f6dbf9919faf185216c54947fe66d1a8658b1c477c8c0c6592692d6f0c9c2caee8244d49a2cd42ab27df151f2b9d709eb013656bad3352551dc790dd2473a7bc1d8104fe1fc633c318ec9669c13b292b817809acccbc2192ccf1895b8e77c8fe67e255adbbeb1afd7812c4e246acbaf722d561e513ed9e8457baf98eb81e03207ce196576f543976cfc90f4fc5a1d8eb0beb707873f0927a5eb76e76376b5c24cee092e92e1f7f605f41d223646bc049f8360c707f8e3d1d5c2442d40dd4cb37fa58f538f5eaa242b95eaa884ec8672f236b3d370b432080e7a65e64f5807fecbb17dc2ae7ceffec741660602877e5ed26f57a197c3310d9fb8fd835c84618362a3e9993d7fe7a2c2dbc84e956cf48c4b57d65bf45ef90373e1a93451aaefcd12f07f2a4fe05aa41b712316ac4737ab63cc638f052ace6c4c7e245774938e2b7dcc6d88dc9f3ec5d124b0de85e47ea65717ed735554b85229887c76517a90534c70cecbeab2f29375f28455774f9d4dec8a9cf3183df7296fdddcd051aceef09978690106dfbb0149e86e734e1607a8f85f6100b9eeaa79fbf5d9ec526e978d9fa8419cbbbd9930b9d159f3f367e659378bba33b91f1ebd33c9ad34ac485c08909524c8f7211bea5e87e9831fdc0f1571bd4922757621d43a7e2c4b624e0cf9566f43d975d695fe7f732b92fd4465e2801e7c338e709de2eba9ab678e67781efaa67c26d331e51952bf9e9a849371fd66b5d6c0f60e11b792467626470ff058ed15721332aea39a54c15a6f328b4806482838e4853c043043433eec1f543751b2f728e89f29880dcdaadc077ec9e966bd29615e24c9c485487a7cffe90b069d1316b0076d47dadabf7e1cfc5cbf9517abfe354694aa784cba07c9751e3a1a8cd0315f371fed67aaa6612fce8a29b6daf2cfce23d43b040cdec2f540bb8992c88108ae42fc1d2bdb08c55c7500050150a51f420e687dd7c5ffd16711da70f6cdd85ce596f16bcef63f5f18d29e77f7ce35e7b37607d10960660e20d504000e17e48b22bf18b90d8dd0ca7328a580ddbcb70d76cb187efe3ae9f55b8f09b206b1d08a4c0e158666a2d709cce2ae4b6b18a25b6e831fb603badc96ecdf77d046f0a3f608651fa1333c4d7ceffa12cd81e28ea0e9e2c865b6b115baa8aac83a8a14b8c5eae760743acb71a94a41739db20ac00a99c0abd13628c5cb2e398bdf4c4b09a7c39fde0b6c866011c8126bde9751f5ea72a565674a4dbc68b36ea64c8ca8072b288526ee4f94bedd1d76bc56e67e5933c06462ed59b429cbb9a461185433a75f57abc21200d6318ea17b253a2fe9e06e7c0397b46f5463853cadf091584ec074ea2dc05b114cb88427df6178bde3587550fed4e9943ed31b306a7f8d6890479fe9ba55c2d35249d4816eec0ba80776458bdbaec2330983aab7c5973c0d7c65f9aa3288b1aeb80c42e94ff6f00c3e3d8bbd062d33449a6c853d782a0a54fcadc62365a43aa16241c6190cbc87e6b8adec197edc41756dba79c752491fc7d851d2795eb95d643625404da6ee2d1c0a3234f87957fd5726751d11d9a8ecbcacb13c316cf190eb89e76465b2ccfddcb300df68baadefc2fecdd63710215b36856767fda45309029f0f16d8e6f9ef52d5d13f0faec12a1f93d8fcc93ccaf4a79876811b608deafb275f05d2376d4b7e125d08be7c7487974951ae8e8a862bd843009175ea4a728e2ed38081986c86a8044df6ba7ed839a7cb5381f945197b048e14b7ac6fec3c943ba003e9ba9335685a6015c2bdf55acfb1143f153df77ed42910248887f8d99e3bcee020b8cb998cb39ba80812b06077ae8a7354c3bfedbde59b2321af71fc2983fa8557dcf022d989e4613c2a37ad9b0770629c1e0ccb9ecb43d0ac3137eacf46382ea16dd227dc7fe5c89e91ddb7984d2c80d05759f5deed957f430e00bea02f2f41ffc02514045e071fbf5023f44bc820d344dc8313ee80aa0945885be02b0f7abcd14adea33dc5255049c50a0aba175ab7c1a02084030b9abc277023fcf6913d223d3cda7cfe67a30f42c731c413c1f28d3f5d16ba9688b920a79d87e10df85b19c0f9681e7dcd2d7236db5195c04a9786ee27e4f92fb02f757be06d27cd65a871f8b59bfff95dc2d51c0e5d45f0bd0659a74bd3e8680fbab8c085d0f6310140b5bb3b772668b5978d28203c682e01c10b8d114a23e84d2786d5c86dc1ac2f33b152b53b7dd1165aeb21f599063bfd9f2aefd66958b32029cd1b91ec0a00e4dcf2d08829b4d21411ceac5bf36bf352f1f0f439aae0a341798ffa26438b6fa49015cfc64765341c785285714145580db46dba2aca7910b2242b84648bc4568d8e3adf00636acb9c6cc38722c9d14ee688420e1a6aa57b8f979f", 0xf36}], 0x4) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r11 = syz_usb_connect(0x0, 0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x802, 0x0) close(r12) syz_usb_disconnect(r11) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000241400001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) 6.986768555s ago: executing program 0 (id=1151): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9354b27b553aeeee8ae0b0000a4df2a9080f3", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4d) 4.224701412s ago: executing program 0 (id=1152): openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 3.954016793s ago: executing program 5 (id=1153): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c617374000000001800028008000140000000040c0002400080"], 0xfc}}, 0x0) 3.782024959s ago: executing program 6 (id=1154): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0xc014) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r4, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 2.828908374s ago: executing program 0 (id=1155): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x1}], 0x1, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.243707102s ago: executing program 6 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.173109302s ago: executing program 2 (id=1157): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)="62696c654e7f59f823ba6645ee646576696f2e2a202b60c780ff79b9790dd8c1f1166dc6554a40dae43b", 0x2a) write$dsp(r1, &(0x7f0000002200)="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", 0xffc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) 1.619251495s ago: executing program 5 (id=1158): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='.', 0x1}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.429615079s ago: executing program 1 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x4000, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0xfffffff9, 0x274, 0x7, 0x8, 0x400004, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1.346681408s ago: executing program 6 (id=1160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41", 0x2e}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74", 0x54}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbf", 0xbc}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 601.215587ms ago: executing program 0 (id=1161): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/i2c-adapter/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='tahvo 2', 0x7) write(0xffffffffffffffff, &(0x7f0000000600)='tahvo 2', 0x7) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='tahv', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='tahvo 2', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000e00)='tahvo 2', 0x7) nanosleep(&(0x7f0000000f00)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/platform/devices/tahvo-usb/vbus\x00', 0x0, 0x0) 0s ago: executing program 5 (id=1162): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) kernel console output (not intermixed with test programs): 43][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce14cd4a0 [ 149.299058][ T5621] RBP: 00007ffce14cd4a0 R08: 00007ffce14ce4a0 R09: 00000000ffffffff [ 149.299084][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce14ce530 [ 149.299100][ T5621] R13: 00007f2e1703445c R14: 0000000000023ee7 R15: 00007ffce14ce570 [ 149.299138][ T5621] [ 149.299148][ T5621] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 149.715510][ T6367] ntfs3(loop5): Failed to read $AttrDef (-4). [ 150.821124][ T6398] vivid-004: kernel_thread() failed [ 153.992666][ T5760] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 154.937802][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 155.031598][ T5760] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 155.084114][ T5760] usb 4-1: config 127 has no interface number 0 [ 155.124292][ T5760] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 155.193854][ T5760] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 155.229840][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.285775][ T5760] usb 4-1: Product: syz [ 155.300856][ T5760] usb 4-1: Manufacturer: syz [ 155.322118][ T5760] usb 4-1: SerialNumber: syz [ 155.429790][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 155.516186][ T6435] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 155.545432][ T6418] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.708902][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 156.425385][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 156.759495][ T5760] asix 4-1:127.57: probe with driver asix failed with error -71 [ 156.947497][ T6448] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 156.956304][ T6448] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 156.965088][ T6448] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 157.071796][ T5788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.087762][ T5760] usb 4-1: USB disconnect, device number 2 [ 158.283065][ T5788] usb 1-1: Dual-Role OTG device on HNP port [ 158.350706][ T5788] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 158.389638][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.550310][ T5788] gspca_main: spca501-2.14.0 probing 0000:0000 [ 158.604856][ T5788] gspca_spca501: reg write: error -32 [ 158.638178][ T5788] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 158.686804][ T5788] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 162.223370][ T6476] loop0: detected capacity change from 0 to 32768 [ 162.457555][ T6476] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.197 (6476) [ 162.676310][ T6476] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.729234][ T6476] BTRFS info (device loop0): using sha256 checksum algorithm [ 163.104297][ T6476] BTRFS info (device loop0): enabling ssd optimizations [ 163.141914][ T6476] BTRFS info (device loop0): turning on sync discard [ 163.171792][ T6476] BTRFS info (device loop0): enabling free space tree [ 163.216354][ T6476] BTRFS info (device loop0): use zlib compression, level 3 [ 165.466110][ T5758] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.662421][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.706828][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 165.737837][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.773897][ T5758] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 165.800315][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.854323][ T5758] usb 2-1: config 0 descriptor?? [ 167.025593][ T5758] usbhid 2-1:0.0: can't add hid device: -71 [ 167.033878][ T5758] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 167.057705][ T5758] usb 2-1: USB disconnect, device number 4 [ 167.146292][ T5621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.856864][ T6553] loop1: detected capacity change from 0 to 2048 [ 169.901874][ T5780] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 170.103355][ T5780] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.159815][ T5780] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 170.240596][ T5780] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.317470][ T5780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 4 [ 170.449668][ T5780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13368, setting to 1023 [ 170.901432][ T5780] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.038947][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.144271][ T5780] usb 5-1: Product: syz [ 171.197936][ T5780] usb 5-1: Manufacturer: syz [ 171.343470][ T5780] cdc_wdm 5-1:1.0: skipping garbage [ 171.348868][ T5780] cdc_wdm 5-1:1.0: skipping garbage [ 171.351529][ T6553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.355582][ T5780] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 171.474864][ T6553] xt_l2tp: wrong L2TP version: 0 [ 171.564774][ T5780] usb 5-1: USB disconnect, device number 2 [ 175.881946][ T5780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.904326][ T6600] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 175.912436][ T6600] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 175.921362][ T6600] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 175.929605][ T6600] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 176.395761][ T5780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.438300][ T5780] usb 2-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 176.474155][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.538377][ T5780] cdc_phonet 2-1:1.0: probe with driver cdc_phonet failed with error -22 [ 176.746527][ T5780] usb 2-1: USB disconnect, device number 5 [ 176.862665][ T6613] loop0: detected capacity change from 0 to 256 [ 176.895613][ T6613] exfat: Deprecated parameter 'namecase' [ 176.919787][ T6613] exfat: Deprecated parameter 'namecase' [ 176.975434][ T6613] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 176.993072][ T6616] loop4: detected capacity change from 0 to 164 [ 177.213171][ T6613] process 'syz.0.239' launched './file0' with NULL argv: empty string added [ 177.319072][ T6620] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 177.461658][ T6620] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 177.473138][ T6620] overlayfs: failed to look up (tracing) for ino (-66) [ 177.968925][ T30] audit: type=1800 audit(1785467896.585:10): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.239" name="file0" dev="loop0" ino=1048611 res=0 errno=0 [ 178.072874][ T5632] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 178.273556][ T5632] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.308365][ T5632] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 178.351712][ T5632] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.405436][ T5632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 4 [ 178.454583][ T5632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13368, setting to 1023 [ 178.529516][ T5632] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.467569][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.476041][ T5632] usb 3-1: Product: syz [ 179.480348][ T5632] usb 3-1: Manufacturer: syz [ 179.496972][ T5632] cdc_wdm 3-1:1.0: skipping garbage [ 179.502391][ T5632] cdc_wdm 3-1:1.0: skipping garbage [ 179.508503][ T5632] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 179.762414][ T5758] usb 3-1: USB disconnect, device number 15 [ 180.767904][ T6636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.776457][ T6636] IPv6: NLM_F_CREATE should be set when creating new route [ 180.783791][ T6636] IPv6: NLM_F_CREATE should be set when creating new route [ 180.791042][ T6636] IPv6: NLM_F_CREATE should be set when creating new route [ 180.965334][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.129549][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.632033][ T5758] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.822951][ T5758] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 182.851225][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.873970][ T5758] usb 5-1: Product: syz [ 182.886419][ T5758] usb 5-1: Manufacturer: syz [ 182.908176][ T5758] usb 5-1: SerialNumber: syz [ 182.943259][ T5758] usb 5-1: config 0 descriptor?? [ 182.952276][ T6663] capability: warning: `syz.2.257' uses 32-bit capabilities (legacy support in use) [ 182.979530][ T5758] go7007 5-1:0.0: Sensoray 2250 found [ 182.996023][ T5758] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 183.091714][ T5780] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 183.270510][ T5788] usb 5-1: USB disconnect, device number 3 [ 183.280480][ T5780] usb 2-1: Using ep0 maxpacket: 16 [ 183.325728][ T5780] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 183.354048][ T5780] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 183.391791][ T5780] usb 2-1: config 4 has no interface number 0 [ 183.415022][ T5780] usb 2-1: config 4 interface 9 has no altsetting 0 [ 183.460342][ T5780] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 183.481317][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.524642][ T5780] usb 2-1: Product: syz [ 183.540883][ T5780] usb 2-1: Manufacturer: syz [ 183.545659][ T5780] usb 2-1: SerialNumber: syz [ 183.695840][ T5780] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 183.885187][ T48] usb 2-1: Failed to submit usb control message: -71 [ 183.893346][ T5758] usb 2-1: USB disconnect, device number 6 [ 183.935327][ T48] usb 2-1: unable to send the bmi data to the device: -71 [ 183.954435][ T48] usb 2-1: unable to get target info from device [ 184.004653][ T48] usb 2-1: could not get target info (-71) [ 184.004716][ T6677] loop0: detected capacity change from 0 to 164 [ 184.056170][ T48] usb 2-1: could not probe fw (-71) [ 185.325973][ T6687] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 185.473736][ T6687] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 185.484102][ T6687] overlayfs: failed to look up (tracing) for ino (-66) [ 187.773328][ T6701] netlink: 'syz.1.265': attribute type 4 has an invalid length. [ 187.912652][ T6701] netlink: 'syz.1.265': attribute type 4 has an invalid length. [ 189.363306][ T30] audit: type=1800 audit(1785467907.985:11): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.271" name="idVendor" dev="configfs" ino=12268 res=0 errno=0 [ 190.611279][ T5644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.635267][ T5644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.646984][ T5644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.660962][ T5644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.675070][ T5644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.453611][ T6735] netlink: 'syz.5.273': attribute type 4 has an invalid length. [ 191.503788][ T6739] netlink: 'syz.5.273': attribute type 4 has an invalid length. [ 192.167945][ T6745] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 192.221829][ T30] audit: type=1107 audit(1785467910.775:12): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 192.721888][ T5644] Bluetooth: hci6: command tx timeout [ 193.582402][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.598697][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.891857][ T5644] Bluetooth: hci6: command tx timeout [ 195.341884][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 195.646261][ T6801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.653643][ T6801] IPv6: NLM_F_CREATE should be set when creating new route [ 195.660967][ T6801] IPv6: NLM_F_CREATE should be set when creating new route [ 195.668371][ T6801] IPv6: NLM_F_CREATE should be set when creating new route [ 196.129391][ T6789] loop4: detected capacity change from 0 to 8192 [ 196.173915][ T6789] ======================================================= [ 196.173915][ T6789] WARNING: The mand mount option has been deprecated and [ 196.173915][ T6789] and is ignored by this kernel. Remove the mand [ 196.173915][ T6789] option from the mount to silence this warning. [ 196.173915][ T6789] ======================================================= [ 196.410516][ T6789] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.962639][ T5644] Bluetooth: hci6: command tx timeout [ 197.292560][ T185] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.514957][ T185] usb 2-1: Using ep0 maxpacket: 8 [ 197.544475][ T185] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.581485][ T185] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.627795][ T185] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.654750][ T185] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.693041][ T185] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.726302][ T185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.012255][ T185] usb 2-1: GET_CAPABILITIES returned 0 [ 198.032713][ T185] usbtmc 2-1:16.0: can't read capabilities [ 198.327191][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.441159][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.253196][ T5644] Bluetooth: hci6: command tx timeout [ 199.259056][ T185] usb 2-1: USB disconnect, device number 7 [ 199.336614][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.617675][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 199.665275][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.683047][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.697491][ T6725] bridge_slave_0: entered allmulticast mode [ 199.706336][ T6725] bridge_slave_0: entered promiscuous mode [ 199.735578][ T6823] loop5: detected capacity change from 0 to 32768 [ 199.760530][ T6823] btrfs: Deprecated parameter 'usebackuproot' [ 199.784422][ T6823] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 199.836205][ T6823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.294 (6823) [ 199.996818][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.154299][ T5788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.234996][ T6863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.242371][ T6863] IPv6: NLM_F_CREATE should be set when creating new route [ 200.249782][ T6863] IPv6: NLM_F_CREATE should be set when creating new route [ 200.257173][ T6863] IPv6: NLM_F_CREATE should be set when creating new route [ 200.426527][ T5788] usb 2-1: Using ep0 maxpacket: 32 [ 200.427460][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.558538][ T5788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 200.596294][ T5788] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 200.597281][ T6823] BTRFS error (device loop5): open_ctree failed: -4 [ 200.606130][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 200.615566][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.622923][ T5788] usb 2-1: Product: syz [ 200.632022][ T5788] usb 2-1: Manufacturer: syz [ 200.636776][ T5788] usb 2-1: SerialNumber: syz [ 200.666728][ T6725] bridge_slave_1: entered allmulticast mode [ 200.706370][ T6725] bridge_slave_1: entered promiscuous mode [ 200.732779][ T5788] usb 2-1: config 0 descriptor?? [ 200.764655][ T6860] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.808569][ T5788] hub 2-1:0.0: bad descriptor, ignoring hub [ 200.840052][ T5788] hub 2-1:0.0: probe with driver hub failed with error -5 [ 200.905493][ T185] IPVS: starting estimator thread 0... [ 200.914201][ T6866] IPVS: nq: FWM 3 0x00000003 - no destination available [ 200.944763][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.983735][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.047263][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.061808][ T6868] IPVS: using max 27 ests per chain, 64800 per kthread [ 201.134721][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.175390][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.278557][ T6876] loop5: detected capacity change from 0 to 4096 [ 201.343083][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.404732][ T6725] team0: Port device team_slave_0 added [ 201.440551][ T6725] team0: Port device team_slave_1 added [ 201.542172][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.559558][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.665251][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.049515][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.267176][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.388344][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.294327][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'. [ 203.305302][ T5795] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 203.345938][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.321'. [ 203.438388][ T6725] hsr_slave_0: entered promiscuous mode [ 203.454209][ T6725] hsr_slave_1: entered promiscuous mode [ 203.468408][ T6725] debugfs: 'hsr0' already exists in 'hsr' [ 203.482210][ T5795] usb 3-1: Using ep0 maxpacket: 8 [ 203.484532][ T6725] Cannot create hsr debugfs directory [ 203.496219][ T5795] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.517560][ T5795] usb 3-1: config 6 has an invalid interface number: 54 but max is 0 [ 203.534985][ T5795] usb 3-1: config 6 has no interface number 0 [ 203.553268][ T5795] usb 3-1: config 6 interface 54 has no altsetting 0 [ 203.575168][ T5795] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74 [ 203.588785][ T13] bridge_slave_1: left allmulticast mode [ 203.599527][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.612101][ T13] bridge_slave_1: left promiscuous mode [ 203.624260][ T5795] usb 3-1: Product: syz [ 203.634499][ T5795] usb 3-1: Manufacturer: syz [ 203.635460][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.646347][ T5795] usb 3-1: SerialNumber: syz [ 203.751275][ T13] bridge_slave_0: left allmulticast mode [ 203.777320][ T13] bridge_slave_0: left promiscuous mode [ 203.802068][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.940560][ T5795] comedi comedi5: Wrong number of endpoints [ 203.963189][ T5795] dt9812 3-1:6.54: driver 'dt9812' failed to auto-configure device. [ 204.013837][ T5795] usb 3-1: USB disconnect, device number 16 [ 204.251201][ T6903] loop0: detected capacity change from 0 to 32768 [ 204.308002][ T6903] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 204.338179][ T6903] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 204.392203][ T6895] syz.2.317 (6895) used greatest stack depth: 18312 bytes left [ 204.583142][ T6903] gfs2: fsid=syz:syz.0: gfs2_check_dirent: zero inode number (not first in block) [ 204.599177][ T6903] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 3 2073, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 204.654131][ T6903] gfs2: fsid=syz:syz.0: G: s:SH n:2/819 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 204.671434][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.687727][ T6903] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6903 [syz.0.320] init_inodes+0xdb/0x320 [ 204.746635][ T6903] gfs2: fsid=syz:syz.0: I: n:3/2073 t:4 f:0x00 d:0x00000201 s:3864 p:0 [ 204.848512][ T6903] CPU: 1 UID: 0 PID: 6903 Comm: syz.0.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.848552][ T6903] Tainted: [L]=SOFTLOCKUP [ 204.848561][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.848576][ T6903] Call Trace: [ 204.848585][ T6903] [ 204.848595][ T6903] dump_stack_lvl+0xe8/0x150 [ 204.848639][ T6903] gfs2_withdraw+0xc3/0x1b0 [ 204.848668][ T6903] gfs2_dirent_scan+0x54d/0x690 [ 204.848699][ T6903] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 204.848731][ T6903] gfs2_dirent_search+0x358/0x8e0 [ 204.848758][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.848790][ T6903] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 204.848819][ T6903] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 204.848845][ T6903] ? __pfx_sprintf+0x10/0x10 [ 204.848873][ T6903] gfs2_dir_check+0x4a/0x240 [ 204.848901][ T6903] init_journal+0x3ce/0x2330 [ 204.848937][ T6903] ? init_inodes+0xdb/0x320 [ 204.848969][ T6903] ? __pfx_init_journal+0x10/0x10 [ 204.848993][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849020][ T6903] ? vsnprintf+0xe42/0xef0 [ 204.849070][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849105][ T6903] ? snprintf+0xe8/0x140 [ 204.849131][ T6903] ? init_inodes+0xdb/0x320 [ 204.849157][ T6903] ? __pfx_snprintf+0x10/0x10 [ 204.849182][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849211][ T6903] ? gfs2_glock_nq_num+0x13d/0x170 [ 204.849246][ T6903] init_inodes+0xdb/0x320 [ 204.849276][ T6903] gfs2_fill_super+0x1942/0x20b0 [ 204.849312][ T6903] ? __pfx_gfs2_fill_super+0x10/0x10 [ 204.849335][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849370][ T6903] ? init_locking+0xb8/0x210 [ 204.849393][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849421][ T6903] ? sb_set_blocksize+0x155/0x240 [ 204.849462][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849491][ T6903] ? setup_bdev_super+0x4c1/0x5b0 [ 204.849522][ T6903] get_tree_bdev_flags+0x430/0x4f0 [ 204.849550][ T6903] ? __pfx_gfs2_fill_super+0x10/0x10 [ 204.849577][ T6903] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 204.849606][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849644][ T6903] gfs2_get_tree+0x51/0x1e0 [ 204.849673][ T6903] vfs_get_tree+0x92/0x2a0 [ 204.849701][ T6903] do_new_mount+0x319/0xdc0 [ 204.849735][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849768][ T6903] ? __pfx_do_new_mount+0x10/0x10 [ 204.849805][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849834][ T6903] ? ns_capable+0x89/0xe0 [ 204.849867][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849897][ T6903] ? path_mount+0x647/0x1040 [ 204.849935][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.849964][ T6903] ? user_path_at+0xd4/0x160 [ 204.850006][ T6903] __se_sys_mount+0x31d/0x420 [ 204.850049][ T6903] ? __pfx___se_sys_mount+0x10/0x10 [ 204.850090][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.850128][ T6903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.850157][ T6903] ? __x64_sys_mount+0x20/0xc0 [ 204.850193][ T6903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.850221][ T6903] do_syscall_64+0x174/0x580 [ 204.850252][ T6903] ? trace_irq_disable+0x3b/0x140 [ 204.850294][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.850319][ T6903] RIP: 0033:0x7f2e16f9f28a [ 204.850343][ T6903] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.850364][ T6903] RSP: 002b:00007f2e17e2ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.850390][ T6903] RAX: ffffffffffffffda RBX: 00007f2e17e2eee0 RCX: 00007f2e16f9f28a [ 204.850409][ T6903] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f2e17e2eea0 [ 204.850426][ T6903] RBP: 00002000000124c0 R08: 00007f2e17e2eee0 R09: 0000000000000000 [ 204.850442][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 204.850458][ T6903] R13: 00007f2e17e2eea0 R14: 00000000000124a6 R15: 0000200000000200 [ 204.850496][ T6903] [ 205.232923][ T6903] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 205.584176][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.648657][ T13] bond0 (unregistering): Released all slaves [ 206.742474][ T6944] evm: overlay not supported [ 206.775029][ T6940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.008711][ T6940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.116769][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.364269][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.373423][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.408053][ T185] usb 2-1: USB disconnect, device number 8 [ 208.911126][ T6977] loop5: detected capacity change from 0 to 1024 [ 209.036828][ T6977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.159283][ T6725] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.324727][ T6725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.043576][ T6725] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.061849][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.139705][ T6725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.268153][ T13] hsr_slave_0: left promiscuous mode [ 210.304612][ T13] hsr_slave_1: left promiscuous mode [ 210.330434][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.365500][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.578603][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.611521][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.965489][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 210.965924][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 210.971560][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 210.971678][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 210.978569][ T13] veth1_macvtap: left promiscuous mode [ 211.066846][ T13] veth0_macvtap: left promiscuous mode [ 211.105547][ T13] veth1_vlan: left promiscuous mode [ 211.122002][ T13] veth0_vlan: left promiscuous mode [ 211.549182][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 211.668952][ T7028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.676347][ T7028] IPv6: NLM_F_CREATE should be set when creating new route [ 211.683792][ T7028] IPv6: NLM_F_CREATE should be set when creating new route [ 211.691093][ T7028] IPv6: NLM_F_CREATE should be set when creating new route [ 212.007216][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 212.043105][ T9] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 212.065829][ T9] usb 6-1: config 64 has no interface number 0 [ 212.100189][ T9] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 212.144947][ T9] usb 6-1: config 64 interface 44 has no altsetting 0 [ 212.178890][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 212.209027][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.234984][ T9] usb 6-1: Product: syz [ 212.260039][ T9] usb 6-1: Manufacturer: syz [ 212.273744][ T9] usb 6-1: SerialNumber: syz [ 212.550116][ T30] audit: type=1800 audit(1785467931.165:13): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="file0" dev="overlay" ino=399 res=0 errno=0 [ 213.263182][ T9] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 213.373905][ T9] usb 6-1: USB disconnect, device number 6 [ 213.931789][ T5760] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.967283][ T13] team0 (unregistering): Port device team_slave_1 removed [ 214.043493][ T13] team0 (unregistering): Port device team_slave_0 removed [ 214.104658][ T5760] usb 6-1: config index 0 descriptor too short (expected 65088, got 120) [ 214.127547][ T5760] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.143784][ T5760] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 214.155334][ T5760] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.182884][ T5760] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.213927][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.247228][ T5760] usb 6-1: Product: syz [ 214.262636][ T5760] usb 6-1: Manufacturer: syz [ 214.272247][ T5760] usb 6-1: SerialNumber: syz [ 214.389532][ T6725] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.400235][ T6725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.425450][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.433295][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.460520][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 214.486551][ T6725] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.544301][ T5760] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.559396][ T6725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.581504][ T9] usb 6-1: USB disconnect, device number 7 [ 214.721980][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 214.740402][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.798935][ T5760] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.845287][ T5760] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.889667][ T5760] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.940135][ T5760] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.969515][ T5760] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 214.980394][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.001082][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.036135][ T5760] usb 2-1: config 0 descriptor?? [ 215.064449][ T6725] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.126819][ T7079] can0: slcan on ttyS3. [ 215.145012][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.152207][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.263571][ T5760] usbhid 2-1:0.0: can't add hid device: -71 [ 215.287763][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.295027][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.306860][ T5760] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.328030][ T5760] usb 2-1: USB disconnect, device number 9 [ 215.345626][ T7075] can0 (unregistered): slcan off ttyS3. [ 215.562114][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 215.762958][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 215.790718][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.845264][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 215.869799][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.905722][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.991880][ T5760] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 216.539092][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.551692][ T10] usb 6-1: Product: syz [ 216.551869][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 216.579460][ T10] usb 6-1: Manufacturer: syz [ 216.589930][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.596444][ T10] usb 6-1: SerialNumber: syz [ 216.604800][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 216.610683][ T5760] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.627202][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.645021][ T5760] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.670556][ T5760] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.675204][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.702873][ T10] usb 6-1: 0:2 : does not exist [ 216.708195][ T5760] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.708237][ T5760] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 216.708261][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.732018][ T5760] usb 2-1: config 0 descriptor?? [ 216.745387][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.774025][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.826653][ T9] usb 5-1: config 0 descriptor?? [ 216.852923][ T9] hub 5-1:0.0: USB hub found [ 217.000641][ T10] usb 6-1: USB disconnect, device number 8 [ 217.048852][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 217.060906][ T9] hub 5-1:0.0: 1 port detected [ 217.149933][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.189495][ T5760] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 217.222457][ T5760] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 217.250485][ T5760] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 217.275144][ T5760] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 217.295113][ T5760] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 217.400361][ T5760] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 217.623347][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.632094][ T5760] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -38 [ 217.674025][ T5760] usb 2-1: USB disconnect, device number 10 [ 218.552750][ T5795] hub 5-1:0.0: activate --> -90 [ 218.587622][ T7114] fido_id[7114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 218.925382][ T10] usb 5-1: USB disconnect, device number 4 [ 219.740028][ T6725] veth0_vlan: entered promiscuous mode [ 219.775766][ T6725] veth1_vlan: entered promiscuous mode [ 219.920047][ T6725] veth0_macvtap: entered promiscuous mode [ 219.946909][ T6725] veth1_macvtap: entered promiscuous mode [ 220.039997][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.066495][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.077383][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 220.282027][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.972159][ T1108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.063556][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 221.065367][ T24] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 221.065389][ T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 221.065406][ T24] usb 2-1: config 4 has no interface number 0 [ 221.065438][ T24] usb 2-1: config 4 interface 9 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 221.065458][ T24] usb 2-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.065481][ T24] usb 2-1: config 4 interface 9 has no altsetting 0 [ 221.067264][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 221.067289][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.067307][ T24] usb 2-1: Product: syz [ 221.067320][ T24] usb 2-1: Manufacturer: syz [ 221.067334][ T24] usb 2-1: SerialNumber: syz [ 221.135967][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 221.138129][ T6063] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.143741][ T1108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.209834][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.209896][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.219099][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.248937][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.248959][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.321464][ T6063] usb 2-1: Failed to submit usb control message: -71 [ 221.321521][ T6063] usb 2-1: unable to send the bmi data to the device: -71 [ 221.321545][ T6063] usb 2-1: unable to get target info from device [ 221.321564][ T6063] usb 2-1: could not get target info (-71) [ 221.321594][ T6063] usb 2-1: could not probe fw (-71) [ 221.323260][ T9] usb 2-1: USB disconnect, device number 11 [ 223.012660][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 223.174748][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 223.199172][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 223.232428][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.294072][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 223.329640][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.383837][ T24] usb 2-1: config 0 descriptor?? [ 223.423053][ T24] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 223.442394][ T24] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 223.815477][ T7200] overlayfs: failed to resolve './file1': -2 [ 225.721731][ T5632] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 225.837071][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.403'. [ 225.837339][ T24] usb 2-1: USB disconnect, device number 12 [ 225.883002][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.890788][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.903984][ T5632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.946170][ T5632] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.993684][ T5632] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 226.026501][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.047188][ T7229] loop1: detected capacity change from 0 to 1024 [ 226.063594][ T5632] usb 3-1: Product: syz [ 226.081523][ T5632] usb 3-1: Manufacturer: syz [ 226.092319][ T7229] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 226.112926][ T5632] usb 3-1: SerialNumber: syz [ 226.161217][ T7229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e018, mo2=0000] [ 226.189711][ T7233] overlayfs: failed to resolve './file1': -2 [ 226.323988][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 226.353494][ T7229] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.405: lblock 2 mapped to illegal pblock 2 (length 1) [ 226.394139][ T5632] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 226.416302][ T7229] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 226.431641][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 226.441957][ T7229] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 226.448046][ C0] EXT4-fs (loop1): initial error at time 1785467945: ext4_map_blocks:791: inode 3: block 2 [ 226.465380][ C0] EXT4-fs (loop1): last error at time 1785467945: ext4_map_blocks:791: inode 3: block 2 [ 226.474900][ T7229] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.405: lblock 0 mapped to illegal pblock 48 (length 1) [ 226.574392][ T7229] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 226.574840][ T7229] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 226.633603][ T7229] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.405: Failed to acquire dquot type 0 [ 226.682986][ T7229] loop1: lost filesystem error report for type 5 error -117 [ 226.716182][ T7229] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 226.753874][ T7229] loop1: lost filesystem error report for type 5 error -117 [ 226.754478][ T7229] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.405: mark_inode_dirty error [ 226.820911][ T7229] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 226.829756][ T5632] usb 3-1: USB disconnect, device number 17 [ 226.851377][ T7229] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 226.913626][ T7229] EXT4-fs (loop1): 1 orphan inode deleted [ 226.955988][ T7229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.965672][ T7204] loop0: detected capacity change from 0 to 32768 [ 226.972746][ T753] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.992870][ T5632] usblp0: removed [ 227.052000][ T753] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 227.086637][ T7204] workqueue: Failed to create a rescuer kthread for wq "gfs2-glock/syz:syz": -EINTR [ 227.116522][ T753] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 227.200156][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.219471][ T13] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 227.275284][ T13] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 227.275738][ T13] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 227.341778][ T5780] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 227.359597][ T13] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 227.409230][ T13] loop1: lost filesystem error report for type 5 error -117 [ 227.441047][ T5622] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 227.543997][ T5780] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.583007][ T5622] loop1: lost filesystem error report for type 5 error -117 [ 227.584963][ T5622] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 227.611031][ T5780] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.654549][ T5622] loop1: lost filesystem error report for type 5 error -117 [ 227.657602][ T5622] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 227.679333][ T5622] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.478473][ T5780] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 228.497873][ T5780] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.589449][ T5780] usb 7-1: config 0 descriptor?? [ 229.086918][ T5780] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 229.114950][ T5780] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 229.146489][ T5780] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 229.168855][ T5780] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 229.190787][ T5780] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 229.201738][ T185] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 229.230363][ T5780] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 229.265123][ T5780] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 229.361162][ T5780] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 229.390859][ T185] usb 3-1: Using ep0 maxpacket: 16 [ 229.432041][ T185] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 229.458515][ T7267] overlayfs: missing 'lowerdir' [ 229.502119][ T185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.544931][ T185] usb 3-1: Product: syz [ 229.555441][ T5780] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 229.563640][ T185] usb 3-1: Manufacturer: syz [ 229.563666][ T185] usb 3-1: SerialNumber: syz [ 229.603850][ T185] usb 3-1: config 0 descriptor?? [ 229.645105][ T5780] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 229.669201][ T185] usb 3-1: selecting invalid altsetting 1 [ 229.701723][ T185] technisat-usb2: could not set alternate setting to 0 [ 229.717377][ T5780] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32 [ 229.731229][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 229.802567][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.810399][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.862155][ T185] technisat-usb2: firmware version: 0.0 [ 229.869419][ T185] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 230.036845][ T7277] overlayfs: failed to resolve './file1': -2 [ 230.287995][ T185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.299508][ T185] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 230.313187][ T185] usb 3-1: media controller created [ 230.319977][ T185] technisat-usb2: i2c-error: out failed 53 = -22 [ 230.330767][ T185] dvb-usb: MAC address reading failed. [ 230.484151][ T185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.847755][ T185] DVB: Unable to find symbol stv090x_attach() [ 231.824248][ T5780] IPVS: starting estimator thread 0... [ 231.969777][ T5780] usb 7-1: USB disconnect, device number 2 [ 231.991934][ T7292] IPVS: using max 25 ests per chain, 60000 per kthread [ 232.067126][ T7294] loop5: detected capacity change from 0 to 512 [ 232.075370][ T185] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 232.099686][ T7294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 232.140458][ T7294] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.204018][ T7302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.240606][ T7294] EXT4-fs (loop5): 1 truncate cleaned up [ 232.270879][ T7294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.312201][ T185] rc_core: IR keymap rc-technisat-usb2 not found [ 232.340594][ T185] Registered IR keymap rc-empty [ 232.367654][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.423172][ T185] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 232.530595][ T185] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 233.294989][ T185] dvb-usb: schedule remote query interval to 100 msecs. [ 233.353582][ T185] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 233.396314][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.431'. [ 233.453656][ T7325] overlayfs: failed to resolve './file0': -2 [ 233.455016][ T5758] dvb-usb: error -71 while querying for an remote control event. [ 233.496756][ T185] usb 3-1: USB disconnect, device number 18 [ 233.830637][ T7333] netlink: 592 bytes leftover after parsing attributes in process `syz.5.438'. [ 233.999442][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 234.512886][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.605843][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.649146][ T10] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 234.708376][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.760195][ T10] usb 7-1: Product: syz [ 234.783309][ T10] usb 7-1: Manufacturer: syz [ 234.809237][ T10] usb 7-1: SerialNumber: syz [ 235.784274][ T185] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 235.795649][ T10] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 235.837847][ T10] usb 7-1: USB disconnect, device number 3 [ 235.879233][ T10] usblp0: removed [ 236.254648][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 236.365869][ T185] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 236.412585][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 236.430291][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.543869][ T24] usb 5-1: config 6 has an invalid interface number: 54 but max is 0 [ 236.557763][ T7372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.818798][ T24] usb 5-1: config 6 has no interface number 0 [ 236.819124][ T185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.908386][ T24] usb 5-1: config 6 interface 54 has no altsetting 0 [ 237.101397][ T24] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74 [ 237.121760][ T185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.163089][ T185] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 237.192619][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.225071][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.234979][ T185] usb 3-1: config 0 descriptor?? [ 237.249425][ T24] usb 5-1: Product: syz [ 237.255929][ T24] usb 5-1: Manufacturer: syz [ 237.268865][ T185] usb 3-1: can't set config #0, error -71 [ 237.292649][ T24] usb 5-1: SerialNumber: syz [ 237.330946][ T185] usb 3-1: USB disconnect, device number 19 [ 237.494360][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 237.542641][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.550425][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.576371][ T24] comedi comedi5: Wrong number of endpoints [ 237.606208][ T24] dt9812 5-1:6.54: driver 'dt9812' failed to auto-configure device. [ 237.617696][ T7386] syzkaller0: entered promiscuous mode [ 237.633430][ T7386] syzkaller0: entered allmulticast mode [ 237.649112][ T24] usb 5-1: USB disconnect, device number 5 [ 237.660486][ T7389] overlayfs: failed to resolve './file0': -2 [ 237.745006][ T7386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.146713][ T7404] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 239.154812][ T7404] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 239.163579][ T7404] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 239.171378][ T7404] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 240.421528][ T7429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.171767][ T185] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 241.703292][ T185] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.722054][ T185] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 241.752451][ T185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.787075][ T185] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.849678][ T185] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.877494][ T185] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.995271][ T185] usb 3-1: Product: syz [ 242.371839][ T185] usb 3-1: Manufacturer: syz [ 242.403760][ T185] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 242.617766][ T185] usb 3-1: USB disconnect, device number 20 [ 242.681694][ T5773] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 242.881444][ T7444] ceph: No mds server is up or the cluster is laggy [ 242.899114][ T7451] loop5: detected capacity change from 0 to 40427 [ 242.911190][ T7451] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 242.919032][ T7451] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 242.930609][ T7451] F2FS-fs (loop5): invalid crc value [ 243.003308][ T5773] usb 7-1: Using ep0 maxpacket: 32 [ 243.028643][ T7451] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 243.064140][ T7451] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 243.071423][ T7451] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 243.254426][ T5773] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 243.981943][ T5773] usb 7-1: config 0 has no interface number 0 [ 244.039632][ T5773] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 244.079484][ T5773] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.127136][ T5773] usb 7-1: Product: syz [ 244.143105][ T5773] usb 7-1: Manufacturer: syz [ 244.158531][ T5773] usb 7-1: SerialNumber: syz [ 244.176631][ T5773] usb 7-1: config 0 descriptor?? [ 244.233485][ T5773] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 244.596187][ T7474] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 244.627331][ T5773] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 244.648691][ T7474] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 244.822494][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 244.882128][ T7474] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 244.891152][ T7474] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 245.728765][ T5773] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 245.756650][ T5773] usb 7-1: USB disconnect, device number 4 [ 245.785382][ T5773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 245.802250][ T5773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 245.840577][ T5773] quatech2 7-1:0.51: device disconnected [ 247.382049][ T7501] loop2: detected capacity change from 0 to 2048 [ 247.546118][ T7504] fuse: Bad value for 'fd' [ 247.890101][ T7501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.329265][ T7501] Process accounting resumed [ 248.492116][ T5845] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 248.674409][ T5845] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.711822][ T5845] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 248.738863][ T5845] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.761109][ T5845] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.799743][ T5845] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.801148][ T7529] loop2: detected capacity change from 0 to 512 [ 248.828683][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.856310][ T5845] usb 5-1: Product: syz [ 248.874410][ T5845] usb 5-1: Manufacturer: syz [ 249.041367][ T5845] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 249.067539][ T7529] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.487: inode has both inline data and extents flags [ 249.163071][ T7533] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 249.170923][ T7533] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 249.179386][ T7533] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 249.187263][ T7533] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 249.285044][ T7529] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.285417][ T7529] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.487: couldn't read orphan inode 15 (err -117) [ 249.294665][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 249.294690][ C0] EXT4-fs (loop2): initial error at time 1785467967: ext4_orphan_get:1399: inode 15 [ 249.294728][ C0] EXT4-fs (loop2): last error at time 1785467967: ext4_orphan_get:1399: inode 15 [ 249.321813][ T5845] usb 5-1: USB disconnect, device number 6 [ 249.440746][ T7529] loop2: lost filesystem error report for type 5 error -117 [ 249.529492][ T7546] overlayfs: missing 'lowerdir' [ 249.542839][ T7529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.695982][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 250.001086][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.944237][ T7561] fuse: Bad value for 'fd' [ 253.786262][ T7598] overlayfs: missing 'lowerdir' [ 253.950775][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 253.956818][ T7581] ceph: No mds server is up or the cluster is laggy [ 253.967806][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 254.378598][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 254.386178][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 254.812901][ T7604] loop1: detected capacity change from 0 to 164 [ 255.095318][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.105035][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.219839][ T7609] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 255.228387][ T7609] overlayfs: overlapping lowerdir path [ 255.240485][ T185] libceph: connect (1)[c::]:6789 error -101 [ 255.441779][ T5644] Bluetooth: hci0: command 0x1003 tx timeout [ 255.452425][ T5641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 256.133741][ T185] libceph: mon0 (1)[c::]:6789 connect error [ 256.906762][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 257.087662][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.095270][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.200179][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.273531][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.583673][ T7626] fuse: Bad value for 'fd' [ 259.796849][ T7646] netlink: 'syz.4.521': attribute type 2 has an invalid length. [ 259.862847][ T7646] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 260.206981][ T7648] overlayfs: missing 'lowerdir' [ 260.362182][ T185] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 260.534023][ T185] usb 7-1: Using ep0 maxpacket: 16 [ 260.556206][ T185] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.594490][ T185] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.615400][ T7665] loop4: detected capacity change from 0 to 1024 [ 260.633796][ T185] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.663565][ T185] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.700075][ T185] usb 7-1: Product: syz [ 260.720871][ T185] usb 7-1: Manufacturer: syz [ 260.747833][ T185] usb 7-1: SerialNumber: syz [ 260.813134][ T185] usb 7-1: 0:2 : does not exist [ 260.852228][ T5632] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 261.044037][ T185] usb 7-1: USB disconnect, device number 5 [ 261.178330][ T7673] fuse: Bad value for 'fd' [ 261.219354][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.334870][ T5632] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.391569][ T5632] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 261.395625][ T7675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.529'. [ 261.427175][ T5632] usb 3-1: config 64 has no interface number 0 [ 261.456405][ T5632] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 261.506280][ T5632] usb 3-1: config 64 interface 44 has no altsetting 0 [ 261.538077][ T5632] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 261.571019][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.599975][ T5632] usb 3-1: Product: syz [ 261.618001][ T5632] usb 3-1: Manufacturer: syz [ 261.636773][ T5632] usb 3-1: SerialNumber: syz [ 261.677257][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 261.940601][ T5632] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 262.001437][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.026462][ T5632] usb 3-1: USB disconnect, device number 21 [ 262.050216][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.222024][ T5845] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 262.541816][ T5845] usb 7-1: Using ep0 maxpacket: 32 [ 262.549878][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.562362][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.575288][ T5845] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.449812][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.537193][ T5845] usb 7-1: config 0 descriptor?? [ 264.586448][ T5845] hub 7-1:0.0: USB hub found [ 265.185853][ T7700] overlayfs: missing 'lowerdir' [ 265.242810][ T5845] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 265.312276][ T7706] loop5: detected capacity change from 0 to 16 [ 265.325593][ T5845] usbhid 7-1:0.0: can't add hid device: -71 [ 265.339130][ T7706] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 265.371473][ T5845] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 265.445251][ T5845] usb 7-1: USB disconnect, device number 6 [ 265.467653][ T7710] loop6: detected capacity change from 0 to 1024 [ 265.833092][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.908851][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.938337][ T7721] loop5: detected capacity change from 0 to 164 [ 266.303349][ T7727] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 266.441721][ T7727] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 266.498289][ T7727] overlayfs: failed to look up (tracing) for ino (-66) [ 268.413475][ T5845] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 269.222066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 270.333120][ T5845] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.364242][ T5845] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 270.385103][ T7738] ceph: No mds server is up or the cluster is laggy [ 270.415208][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.426846][ T24] libceph: connect (1)[c::]:6789 error -101 [ 270.498964][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 270.507293][ T5845] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.605769][ T5845] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.640868][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.689682][ T5845] usb 3-1: Product: syz [ 270.729744][ T5845] usb 3-1: Manufacturer: syz [ 270.793990][ T5632] libceph: connect (1)[c::]:6789 error -101 [ 270.824865][ T5845] cdc_wdm 3-1:1.0: skipping garbage [ 270.834258][ T5632] libceph: mon0 (1)[c::]:6789 connect error [ 270.863400][ T5845] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 271.398116][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 271.557701][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 271.584460][ T7753] overlayfs: missing 'lowerdir' [ 271.596020][ T24] usb 3-1: USB disconnect, device number 22 [ 272.164872][ T7763] netlink: 'syz.5.560': attribute type 10 has an invalid length. [ 273.048957][ T7763] team0 (unregistering): Port device team_slave_0 removed [ 273.132010][ T7763] team0 (unregistering): Port device team_slave_1 removed [ 273.413187][ T7775] loop2: detected capacity change from 0 to 164 [ 273.739481][ T7778] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 273.870147][ T7778] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 273.880428][ T7778] overlayfs: failed to look up (tracing) for ino (-66) [ 276.772390][ T185] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 276.994486][ T185] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.023321][ T185] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 277.036375][ T185] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.055182][ T185] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.097083][ T185] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.127617][ T185] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.165158][ T185] usb 5-1: Product: syz [ 277.181220][ T185] usb 5-1: Manufacturer: syz [ 277.228337][ T185] cdc_wdm 5-1:1.0: skipping garbage [ 277.246812][ T185] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 277.474250][ T185] usb 5-1: USB disconnect, device number 7 [ 277.626972][ T7810] bond0: entered promiscuous mode [ 277.646712][ T7810] bond_slave_0: entered promiscuous mode [ 277.670448][ T7810] bond_slave_1: entered promiscuous mode [ 278.958082][ T7822] ubi0: attaching mtd0 [ 278.965293][ T7822] ubi0: scanning is finished [ 278.971177][ T7822] ubi0: empty MTD device detected [ 279.260341][ T7822] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 279.557834][ T7827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.864953][ T7831] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 282.022340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 282.651478][ T7862] netlink: 'syz.4.596': attribute type 6 has an invalid length. [ 282.673742][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 283.635001][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.6.601'. [ 283.678830][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.6.601'. [ 283.738507][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.6.601'. [ 286.680874][ T7946] loop5: detected capacity change from 0 to 512 [ 287.155324][ T7946] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.614: iget: bad i_size value: 38620345925642 [ 287.168781][ T7946] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.169972][ T7946] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.614: couldn't read orphan inode 15 (err -117) [ 287.179199][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 287.179228][ C1] EXT4-fs (loop5): initial error at time 1785468005: ext4_orphan_get:1399: inode 15 [ 287.179267][ C1] EXT4-fs (loop5): last error at time 1785468005: ext4_orphan_get:1399: inode 15 [ 287.216479][ T7946] loop5: lost filesystem error report for type 5 error -117 [ 287.224009][ T7946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.954458][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.525132][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 290.860994][ T8029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.920527][ T8030] loop0: detected capacity change from 0 to 512 [ 291.616567][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 291.637955][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 291.651182][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 291.663948][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 291.664785][ T8030] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.633: iget: bad i_size value: 38620345925642 [ 291.687343][ T8030] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.691657][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 291.707254][ C0] EXT4-fs (loop0): initial error at time 1785468010: ext4_orphan_get:1399: inode 15 [ 291.716661][ C0] EXT4-fs (loop0): last error at time 1785468010: ext4_orphan_get:1399: inode 15 [ 291.726906][ T8030] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.633: couldn't read orphan inode 15 (err -117) [ 291.738719][ T8030] loop0: lost filesystem error report for type 5 error -117 [ 291.747335][ T8030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.779431][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 291.841468][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.005266][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.037621][ T24] usb 7-1: config 0 descriptor?? [ 292.288605][ T24] hdpvr 7-1:0.0: unexpected answer of status request, len -32 [ 292.301275][ T24] hdpvr 7-1:0.0: device init failed [ 292.308253][ T24] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 292.356160][ T24] usb 7-1: USB disconnect, device number 7 [ 293.320005][ T8038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.519552][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'. [ 293.921888][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 294.072257][ T24] usb 7-1: device descriptor read/64, error -71 [ 294.314787][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 294.451743][ T24] usb 7-1: device descriptor read/64, error -71 [ 294.600458][ T24] usb usb7-port1: attempt power cycle [ 295.012064][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 295.087831][ T24] usb 7-1: device descriptor read/8, error -71 [ 295.379092][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 295.405362][ T24] usb 7-1: device descriptor read/8, error -71 [ 295.472232][ T8017] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.629'. [ 295.522167][ T24] usb usb7-port1: unable to enumerate USB device [ 295.813319][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.026398][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.054386][ T8061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.922137][ T5845] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 296.922251][ T185] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 297.146774][ T8079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.155509][ T5845] usb 2-1: device descriptor read/64, error -71 [ 297.325067][ T185] usb 7-1: device descriptor read/64, error -71 [ 297.553874][ T5845] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 297.691807][ T5845] usb 2-1: device descriptor read/64, error -71 [ 297.761742][ T185] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 297.812257][ T5845] usb usb2-port1: attempt power cycle [ 297.911725][ T185] usb 7-1: device descriptor read/64, error -71 [ 298.036368][ T185] usb usb7-port1: attempt power cycle [ 298.116176][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 298.171739][ T5845] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 298.204306][ T5845] usb 2-1: device descriptor read/8, error -71 [ 298.411880][ T185] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 298.442530][ T185] usb 7-1: device descriptor read/8, error -71 [ 298.451746][ T5845] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 298.495366][ T5845] usb 2-1: device descriptor read/8, error -71 [ 298.562165][ T5780] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 298.612329][ T5845] usb usb2-port1: unable to enumerate USB device [ 298.721821][ T5780] usb 6-1: Using ep0 maxpacket: 8 [ 298.721877][ T185] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 298.739057][ T5780] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 298.765459][ T5780] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.782837][ T185] usb 7-1: device descriptor read/8, error -71 [ 298.806951][ T5780] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.835057][ T5780] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.863302][ T5780] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.888159][ T5780] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.905077][ T5780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.906583][ T185] usb usb7-port1: unable to enumerate USB device [ 299.264788][ T5780] usb 6-1: usb_control_msg returned -32 [ 299.271763][ T5780] usbtmc 6-1:16.0: can't read capabilities [ 300.462260][ T5780] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 300.471472][ T8113] loop1: detected capacity change from 0 to 1024 [ 300.578446][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.613143][ T5780] usb 3-1: device descriptor read/64, error -71 [ 300.652452][ T5795] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 300.781060][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 300.821790][ T5795] usb 7-1: Using ep0 maxpacket: 16 [ 300.837086][ T5795] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.862734][ T5795] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.872324][ T5780] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 300.914067][ T5795] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.924539][ T5795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.938637][ T5795] usb 7-1: Product: syz [ 300.948147][ T5795] usb 7-1: Manufacturer: syz [ 300.957714][ T5795] usb 7-1: SerialNumber: syz [ 300.999155][ T5795] usb 7-1: 0:2 : does not exist [ 301.002566][ T5780] usb 3-1: device descriptor read/64, error -71 [ 301.135373][ T5780] usb usb3-port1: attempt power cycle [ 301.215992][ T5845] usb 7-1: USB disconnect, device number 16 [ 301.394479][ T5795] usb 6-1: USB disconnect, device number 9 [ 301.482649][ T5780] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 301.546225][ T5780] usb 3-1: device descriptor read/8, error -71 [ 301.804276][ T5780] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 301.852471][ T5780] usb 3-1: device descriptor read/8, error -71 [ 302.026841][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.035163][ T5780] usb usb3-port1: unable to enumerate USB device [ 303.241656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.291660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 303.322072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 303.371666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.381653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.471666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.481654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.652275][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.846003][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 303.855530][ T24] usb 5-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 303.866316][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.884671][ T24] cdc_phonet 5-1:1.0: probe with driver cdc_phonet failed with error -22 [ 304.941279][ T5795] usb 5-1: USB disconnect, device number 8 [ 305.221720][ T7347] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 305.524803][ T7347] usb 7-1: device descriptor read/64, error -71 [ 305.884105][ T7347] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 306.189150][ T7347] usb 7-1: device descriptor read/64, error -71 [ 306.491885][ T7347] usb usb7-port1: attempt power cycle [ 306.743080][ T8153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.812504][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 306.981849][ T7347] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 307.044820][ T7347] usb 7-1: device descriptor read/8, error -71 [ 307.383406][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 307.548641][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.571758][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 307.583719][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.602022][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 307.629872][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.667375][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.698249][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.730512][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.771158][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.802392][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.044899][ T24] usb 6-1: usb_control_msg returned -32 [ 308.060737][ T24] usbtmc 6-1:16.0: can't read capabilities [ 310.116202][ T8186] xt_hashlimit: size too large, truncated to 1048576 [ 310.148980][ T8186] xt_hashlimit: max too large, truncated to 1048576 [ 310.280184][ T8192] loop1: detected capacity change from 0 to 256 [ 310.338310][ T8192] exFAT-fs (loop1): error, no upcase table entry. Please run fsck [ 310.365116][ T8192] exFAT-fs (loop1): Filesystem has been set read-only [ 310.396289][ T8192] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 311.017225][ T8192] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 311.025823][ T8192] fuse: Bad value for 'fd' [ 311.411803][ T8197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.687958][ T5773] usb 6-1: USB disconnect, device number 10 [ 312.252005][ T5845] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 312.422215][ T5845] usb 5-1: device descriptor read/64, error -71 [ 312.682340][ T5845] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 312.821878][ T5845] usb 5-1: device descriptor read/64, error -71 [ 312.951059][ T5845] usb usb5-port1: attempt power cycle [ 313.312943][ T5845] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 313.355580][ T5845] usb 5-1: device descriptor read/8, error -71 [ 315.307333][ T8231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.331795][ T5845] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 315.573330][ T5845] usb 5-1: device not accepting address 12, error -71 [ 315.619255][ T5845] usb usb5-port1: unable to enumerate USB device [ 315.842861][ T5773] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 316.052072][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 316.067898][ T5773] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 316.277404][ T8244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.414729][ T5773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.442967][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.457642][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.458127][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.622245][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.674017][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.695911][ T8246] loop0: detected capacity change from 0 to 256 [ 316.741471][ T5773] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.788112][ T8246] exFAT-fs (loop0): error, no upcase table entry. Please run fsck [ 316.800459][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.826093][ T8246] exFAT-fs (loop0): Filesystem has been set read-only [ 316.863814][ T8246] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 317.148302][ T5773] usb 3-1: usb_control_msg returned -32 [ 317.168064][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 317.177212][ T5773] usbtmc 3-1:16.0: can't read capabilities [ 317.347825][ T8253] exFAT-fs (loop0): start_clu is invalid cluster(0x400) [ 317.372620][ T8253] fuse: Bad value for 'fd' [ 318.073796][ T8259] netlink: 6 bytes leftover after parsing attributes in process `syz.4.716'. [ 319.694954][ T5644] Bluetooth: hci6: command 0x0406 tx timeout [ 319.728925][ T8259] netlink: 6 bytes leftover after parsing attributes in process `syz.4.716'. [ 320.521132][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.648921][ T24] usb 3-1: USB disconnect, device number 27 [ 321.730594][ T30] audit: type=1800 audit(1785468040.245:14): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.726" name="file0" dev="overlay" ino=733 res=0 errno=0 [ 322.391872][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 322.507258][ T8302] loop5: detected capacity change from 0 to 256 [ 322.562231][ T8302] exFAT-fs (loop5): error, no upcase table entry. Please run fsck [ 322.611689][ T8302] exFAT-fs (loop5): Filesystem has been set read-only [ 322.716973][ T8302] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 325.319469][ T8310] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 325.327727][ T8310] fuse: Bad value for 'fd' [ 327.881901][ T185] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 328.074296][ T185] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.097053][ T185] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 328.108857][ T185] usb 3-1: config 64 has no interface number 0 [ 328.117492][ T185] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 328.129926][ T185] usb 3-1: config 64 interface 44 has no altsetting 0 [ 328.144483][ T185] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 328.145123][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.742'. [ 328.164081][ T185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.172784][ T185] usb 3-1: Product: syz [ 328.177360][ T185] usb 3-1: Manufacturer: syz [ 328.185670][ T185] usb 3-1: SerialNumber: syz [ 328.439726][ T185] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 328.488068][ T185] usb 3-1: USB disconnect, device number 28 [ 330.796920][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 330.848263][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.755'. [ 331.992254][ T8387] loop6: detected capacity change from 0 to 256 [ 332.124845][ T8387] exFAT-fs (loop6): error, no upcase table entry. Please run fsck [ 332.164934][ T8387] exFAT-fs (loop6): Filesystem has been set read-only [ 332.204905][ T8387] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 332.601855][ T8392] exFAT-fs (loop6): start_clu is invalid cluster(0x400) [ 332.620138][ T8392] fuse: Bad value for 'fd' [ 334.112277][ T185] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 334.376189][ T185] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.418231][ T185] usb 7-1: config 64 has an invalid interface number: 44 but max is 0 [ 335.218194][ T185] usb 7-1: config 64 has no interface number 0 [ 335.276236][ T185] usb 7-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 335.333270][ T185] usb 7-1: config 64 interface 44 has no altsetting 0 [ 335.378126][ T185] usb 7-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 335.400340][ T185] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.423337][ T185] usb 7-1: Product: syz [ 335.439515][ T185] usb 7-1: Manufacturer: syz [ 335.453085][ T185] usb 7-1: SerialNumber: syz [ 335.591979][ T5795] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 335.735539][ T185] iowarrior 7-1:64.44: no interrupt-out endpoint found [ 335.773900][ T5795] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.796294][ T185] usb 7-1: USB disconnect, device number 21 [ 335.819959][ T5795] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 335.864391][ T5795] usb 6-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 335.899491][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.952984][ T5795] cdc_phonet 6-1:1.0: skipping garbage [ 336.175447][ T185] usb 6-1: USB disconnect, device number 11 [ 336.288821][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 336.321218][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 336.701727][ T5773] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 336.851909][ T5773] usb 7-1: device descriptor read/64, error -71 [ 336.968995][ T8443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.115437][ T5773] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 338.155654][ T5773] usb 7-1: device descriptor read/64, error -71 [ 339.293575][ T5773] usb usb7-port1: attempt power cycle [ 339.661967][ T5773] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 339.983715][ T5773] usb 7-1: device descriptor read/8, error -71 [ 340.215746][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 340.257242][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 340.663023][ T5795] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 340.986931][ T5795] usb 5-1: unable to get BOS descriptor or descriptor too short [ 341.010189][ T5795] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 341.020279][ T5795] usb 5-1: config 64 has no interface number 0 [ 341.026820][ T5795] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 341.038016][ T5795] usb 5-1: config 64 interface 44 has no altsetting 0 [ 341.345359][ T5795] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 341.357101][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.378004][ T5795] usb 5-1: Product: syz [ 341.388721][ T5795] usb 5-1: Manufacturer: syz [ 341.403106][ T5795] usb 5-1: SerialNumber: syz [ 341.842373][ T5795] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 341.902281][ T5795] usb 5-1: USB disconnect, device number 13 [ 343.421772][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 343.594185][ T24] usb 2-1: device descriptor read/64, error -71 [ 343.863600][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 343.959990][ T8516] syzkaller0: entered promiscuous mode [ 343.966689][ T8516] syzkaller0: entered allmulticast mode [ 344.032427][ T24] usb 2-1: device descriptor read/64, error -71 [ 344.163587][ T24] usb usb2-port1: attempt power cycle [ 344.532907][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 344.568527][ T8525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.973373][ T24] usb 2-1: device descriptor read/8, error -71 [ 345.221766][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 346.301769][ T5845] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 346.370268][ T24] usb 2-1: device descriptor read/8, error -71 [ 346.503018][ T5845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.734938][ T24] usb usb2-port1: unable to enumerate USB device [ 346.787216][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 346.825806][ T5845] usb 3-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 346.836084][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.898684][ T5845] cdc_phonet 3-1:1.0: skipping garbage [ 348.156091][ T5845] usb 3-1: USB disconnect, device number 29 [ 350.233949][ T5845] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 350.397546][ T8563] syzkaller0: entered promiscuous mode [ 350.427673][ T8563] syzkaller0: entered allmulticast mode [ 350.442374][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 350.474757][ T5845] usb 2-1: config 64 has an invalid interface number: 44 but max is 0 [ 350.496330][ T5845] usb 2-1: config 64 has no interface number 0 [ 350.517919][ T5845] usb 2-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 350.566384][ T5845] usb 2-1: config 64 interface 44 has no altsetting 0 [ 350.593190][ T5845] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 350.624024][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.662512][ T5845] usb 2-1: Product: syz [ 350.676402][ T5845] usb 2-1: Manufacturer: syz [ 350.691975][ T5845] usb 2-1: SerialNumber: syz [ 350.694686][ T5773] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 350.884041][ T5773] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.904165][ T5773] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 350.930346][ T5773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.955184][ T5773] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 350.959399][ T5845] iowarrior 2-1:64.44: no interrupt-out endpoint found [ 350.989546][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 4 [ 351.014814][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 13368, setting to 1023 [ 351.029664][ T5845] usb 2-1: USB disconnect, device number 21 [ 351.052042][ T5795] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 351.064643][ T5773] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.090275][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 351.123009][ T5773] usb 3-1: Product: syz [ 351.131504][ T5773] usb 3-1: Manufacturer: syz [ 351.160623][ T5773] cdc_wdm 3-1:1.0: skipping garbage [ 351.181751][ T5773] cdc_wdm 3-1:1.0: skipping garbage [ 351.187103][ T5773] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 351.211917][ T5795] usb 5-1: device descriptor read/64, error -71 [ 351.377652][ T5773] usb 3-1: USB disconnect, device number 30 [ 351.507204][ T5795] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 351.520664][ T8583] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 352.322563][ T5795] usb 5-1: device descriptor read/64, error -71 [ 352.433097][ T8589] netlink: 104 bytes leftover after parsing attributes in process `syz.1.821'. [ 352.467237][ T5795] usb usb5-port1: attempt power cycle [ 352.841778][ T5795] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 352.952579][ T5795] usb 5-1: device descriptor read/8, error -71 [ 353.451831][ T5795] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 353.652370][ T5795] usb 5-1: device descriptor read/8, error -71 [ 354.459458][ T5795] usb usb5-port1: unable to enumerate USB device [ 355.709808][ T8625] syzkaller0: entered promiscuous mode [ 355.728701][ T8625] syzkaller0: entered allmulticast mode [ 357.249427][ T8644] MTRR 0 not used [ 357.295488][ T30] audit: type=1800 audit(1785468075.915:15): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.833" name="file0" dev="overlay" ino=853 res=0 errno=0 [ 357.316323][ T8648] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 358.737111][ T8656] loop0: detected capacity change from 0 to 1024 [ 359.939103][ T8681] syzkaller0: entered promiscuous mode [ 359.975197][ T8681] syzkaller0: entered allmulticast mode [ 360.733247][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 360.746291][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 361.045364][ T30] audit: type=1800 audit(1785468079.615:16): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.851" name="file0" dev="overlay" ino=879 res=0 errno=0 [ 361.106123][ T8690] ceph: No mds server is up or the cluster is laggy [ 361.178628][ T5632] libceph: connect (1)[c::]:6789 error -101 [ 361.771738][ T5632] libceph: mon0 (1)[c::]:6789 connect error [ 362.480621][ T8711] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 363.382695][ T8728] loop0: detected capacity change from 0 to 164 [ 363.702208][ T8731] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 363.727662][ T8731] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 363.739009][ T8731] overlayfs: failed to look up (tracing) for ino (-66) [ 366.870412][ T8749] netlink: 6 bytes leftover after parsing attributes in process `syz.2.868'. [ 367.594772][ T7347] libceph: connect (1)[c::]:6789 error -101 [ 367.630837][ T8748] ceph: No mds server is up or the cluster is laggy [ 367.657496][ T7347] libceph: mon0 (1)[c::]:6789 connect error [ 367.843962][ T8759] MTRR 0 not used [ 368.027905][ T8762] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 371.371377][ T8797] netlink: 6 bytes leftover after parsing attributes in process `syz.2.885'. [ 371.938625][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 372.032471][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 372.376831][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 372.399528][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 372.413638][ T8802] ceph: No mds server is up or the cluster is laggy [ 372.672461][ T5632] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 372.935825][ T5632] usb 3-1: Using ep0 maxpacket: 32 [ 372.965792][ T5632] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.998787][ T5632] usb 3-1: config 0 has no interface number 0 [ 373.118193][ T5632] usb 3-1: config 0 interface 184 has no altsetting 0 [ 373.169950][ T5632] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 373.204056][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.246831][ T5632] usb 3-1: Product: syz [ 373.278434][ T5632] usb 3-1: Manufacturer: syz [ 373.289889][ T8821] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 373.310581][ T5632] usb 3-1: SerialNumber: syz [ 373.347374][ T5632] usb 3-1: config 0 descriptor?? [ 374.085680][ T5780] libceph: connect (1)[c::]:6789 error -101 [ 374.114419][ T5780] libceph: mon0 (1)[c::]:6789 connect error [ 374.316928][ T8827] ceph: No mds server is up or the cluster is laggy [ 374.405309][ T5760] libceph: connect (1)[c::]:6789 error -101 [ 375.183154][ T5760] libceph: mon0 (1)[c::]:6789 connect error [ 375.568224][ T5632] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 375.610558][ T5632] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 375.753171][ T8852] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 375.761423][ T8852] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 375.770549][ T8852] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 375.778558][ T8852] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 376.543750][ T5632] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 377.138789][ T5632] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 377.272465][ T5632] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 377.539826][ T5632] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 377.552244][ T5632] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 377.643507][ T5795] usb 3-1: USB disconnect, device number 31 [ 377.848966][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.855519][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.233646][ T8870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.687967][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 381.703698][ T8899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.917'. [ 381.721345][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 382.291454][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 382.341362][ T8895] ceph: No mds server is up or the cluster is laggy [ 382.361579][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 385.557478][ T8939] netlink: 68 bytes leftover after parsing attributes in process `syz.5.933'. [ 385.616641][ T8941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.169859][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 386.308258][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 386.732346][ T185] libceph: connect (1)[c::]:6789 error -101 [ 386.742381][ T8958] loop4: detected capacity change from 0 to 40427 [ 386.783527][ T8958] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 386.791306][ T8958] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 386.810293][ T8958] F2FS-fs (loop4): invalid crc value [ 386.820813][ T185] libceph: mon0 (1)[c::]:6789 connect error [ 386.898822][ T8958] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 386.921234][ T8958] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 386.928897][ T8958] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 387.106626][ T8950] ceph: No mds server is up or the cluster is laggy [ 387.310436][ T8969] overlayfs: failed to resolve './file2': -2 [ 387.929129][ T10] libceph: connect (1)[c::]:6789 error -101 [ 387.947258][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 393.085808][ T9000] netlink: 68 bytes leftover after parsing attributes in process `syz.5.948'. [ 393.774639][ T9010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.356737][ T5760] libceph: connect (1)[c::]:6789 error -101 [ 395.399434][ T9019] ceph: No mds server is up or the cluster is laggy [ 395.419055][ T5760] libceph: mon0 (1)[c::]:6789 connect error [ 400.389224][ T9060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.090975][ T9082] ceph: No mds server is up or the cluster is laggy [ 406.106026][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 406.488619][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 406.626976][ T5632] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 407.495264][ T9109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.679865][ T9114] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 407.735163][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.5.983 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.735203][ T9114] Tainted: [L]=SOFTLOCKUP [ 407.735212][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 407.735227][ T9114] Call Trace: [ 407.735237][ T9114] [ 407.735250][ T9114] dump_stack_lvl+0xe8/0x150 [ 407.735295][ T9114] sysfs_create_dir_ns+0x271/0x2a0 [ 407.735338][ T9114] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 407.735380][ T9114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.735411][ T9114] ? do_raw_spin_unlock+0xf5/0x210 [ 407.735448][ T9114] kobject_add_internal+0x622/0xcd0 [ 407.735495][ T9114] kobject_add+0x163/0x240 [ 407.735528][ T9114] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 407.735567][ T9114] ? __pfx_kobject_add+0x10/0x10 [ 407.735612][ T9114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.735649][ T9114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.735678][ T9114] ? get_device_parent+0x366/0x3a0 [ 407.735707][ T9114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.735742][ T9114] device_add+0x3fa/0xb80 [ 407.735773][ T9114] tty_register_device_attr+0x422/0x950 [ 407.735812][ T9114] ? __pfx_tty_register_device_attr+0x10/0x10 [ 407.735851][ T9114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.735880][ T9114] ? tty_port_init+0x136/0x1a0 [ 407.735909][ T9114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.735937][ T9114] ? gsm_dlci_alloc+0x330/0x640 [ 407.735973][ T9114] gsm_activate_mux+0x110/0x2a0 [ 407.736010][ T9114] gsmld_ioctl+0x12d3/0x1930 [ 407.736049][ T9114] ? __pfx_gsmld_ioctl+0x10/0x10 [ 407.736091][ T9114] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 407.736127][ T9114] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.736167][ T9114] ? ldsem_down_read+0x12/0x40 [ 407.736198][ T9114] ? __pfx_gsmld_ioctl+0x10/0x10 [ 407.736225][ T9114] tty_ioctl+0x9bd/0xdd0 [ 407.736252][ T9114] ? __pfx_tty_ioctl+0x10/0x10 [ 407.736279][ T9114] __se_sys_ioctl+0xfc/0x170 [ 407.736307][ T9114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.736335][ T9114] do_syscall_64+0x174/0x580 [ 407.736365][ T9114] ? trace_irq_disable+0x3b/0x140 [ 407.736406][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.736431][ T9114] RIP: 0033:0x7f152759e019 [ 407.736455][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.736477][ T9114] RSP: 002b:00007f152838c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.736503][ T9114] RAX: ffffffffffffffda RBX: 00007f1527826090 RCX: 00007f152759e019 [ 407.736522][ T9114] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 407.736539][ T9114] RBP: 00007f152763500c R08: 0000000000000000 R09: 0000000000000000 [ 407.736554][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.736570][ T9114] R13: 00007f1527826128 R14: 00007f1527826090 R15: 00007fff8bf826a8 [ 407.736614][ T9114] [ 408.026002][ T9114] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 408.069835][ T9123] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 408.161070][ T9131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.174382][ T9125] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 408.288864][ T9123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.384460][ T9130] bond1: (slave erspan0): making interface the new active one [ 408.401093][ T9130] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 409.247756][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 409.265715][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 409.532678][ T7347] libceph: connect (1)[c::]:6789 error -101 [ 409.545951][ T7347] libceph: mon0 (1)[c::]:6789 connect error [ 409.622684][ T9151] ceph: No mds server is up or the cluster is laggy [ 411.511594][ T9196] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 413.065761][ T7347] libceph: connect (1)[c::]:6789 error -101 [ 413.086070][ T7347] libceph: mon0 (1)[c::]:6789 connect error [ 413.125772][ T9205] ceph: No mds server is up or the cluster is laggy [ 413.591898][ T5845] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 413.782158][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 413.820217][ T5845] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 413.864790][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.894915][ T5845] usb 6-1: Product: syz [ 414.013560][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 414.216069][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 414.217209][ T9231] loop0: detected capacity change from 0 to 40427 [ 414.237261][ T9231] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 414.245568][ T9231] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 414.259035][ T9231] F2FS-fs (loop0): invalid crc value [ 414.276784][ T5845] usb 6-1: Manufacturer: syz [ 414.276886][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 414.281527][ T5845] usb 6-1: SerialNumber: syz [ 414.286540][ T5845] usb 6-1: config 0 descriptor?? [ 414.341033][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 414.373740][ T9231] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 414.382567][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 414.421018][ T9231] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 414.430025][ T9231] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 414.453562][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 414.496784][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.555946][ T10] usb 2-1: config 0 descriptor?? [ 414.662150][ T5845] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 414.670544][ T5845] pctv452e: pctv452e_power_ctrl: 1 [ 414.670544][ T5845] [ 414.678559][ T5845] usb 6-1: selecting invalid altsetting 3 [ 414.684461][ T5845] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 414.684461][ T5845] [ 414.697003][ T5845] dvb-usb: bulk message failed: -22 (5/0) [ 415.828545][ T9245] 9pnet_virtio: no channels available for device syz [ 415.895352][ T10] hdpvr 2-1:0.0: unexpected answer of status request, len 45 [ 416.005955][ T10] hdpvr 2-1:0.0: device init failed [ 416.085478][ T10] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 416.506178][ T10] usb 2-1: USB disconnect, device number 22 [ 417.326841][ T9248] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 417.435324][ T9248] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 417.550055][ T9248] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 417.560374][ T9248] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 418.573848][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.723782][ T5845] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 418.734996][ T5845] usb 6-1: media controller created [ 418.857557][ T5845] dvb-usb: bulk message failed: -22 (8/0) [ 418.879016][ T9256] MTRR 0 not used [ 418.883496][ T9256] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 418.923058][ T5845] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 418.963745][ T5845] dvb-usb: MAC address reading failed. [ 421.171008][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.185031][ T9271] uprobe: syz.5.1029:9271 failed to unregister, leaking uprobe [ 422.388342][ T5845] DVB: Unable to find symbol stb0899_attach() [ 422.417759][ T5845] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 422.542712][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 422.552288][ T9282] bridge_slave_1: left allmulticast mode [ 422.558033][ T9282] bridge_slave_1: left promiscuous mode [ 422.569060][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.682050][ T9282] bridge_slave_0: left allmulticast mode [ 422.687980][ T9282] bridge_slave_0: left promiscuous mode [ 422.768038][ T9284] dyndbg: bad flag-op Ø, at start of ØÁñmÆUJ@Úä [ 422.776741][ T9284] dyndbg: flags parse failed [ 422.867695][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.378822][ T9290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.953462][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.046491][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.162129][ T5795] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 424.252373][ T5845] rc_core: IR keymap rc-tt-1500 not found [ 424.322214][ T5795] usb 3-1: Using ep0 maxpacket: 32 [ 424.389976][ T5795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.524707][ T5795] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.572365][ T5845] Registered IR keymap rc-empty [ 424.577156][ T5795] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 424.578618][ T5845] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 424.637738][ T5795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.650608][ T5845] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input8 [ 424.747911][ T5845] dvb-usb: schedule remote query interval to 100 msecs. [ 424.797320][ T5845] pctv452e: pctv452e_power_ctrl: 0 [ 424.797320][ T5845] [ 424.859180][ T5845] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 424.904746][ T5780] dvb-usb: bulk message failed: -22 (4/0) [ 425.007396][ T5780] dvb-usb: error -22 while querying for an remote control event. [ 425.125937][ T5845] usb 6-1: USB disconnect, device number 12 [ 425.245148][ T5780] dvb-usb: bulk message failed: -22 (4/0) [ 425.293988][ T5780] dvb-usb: error -22 while querying for an remote control event. [ 425.695244][ T9305] MTRR 0 not used [ 425.699140][ T9305] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 428.240702][ T5795] usb 3-1: config 0 descriptor?? [ 428.248028][ T5845] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 428.607725][ T5795] usb 3-1: can't set config #0, error -71 [ 428.696557][ T5795] usb 3-1: USB disconnect, device number 32 [ 429.206563][ T9329] comedi comedi0: 8255: I/O base address not correctly aligned [ 429.367377][ T9331] bridge2: entered promiscuous mode [ 429.372946][ T9331] bridge2: entered allmulticast mode [ 430.806498][ T9342] ubi0: attaching mtd0 [ 430.882798][ T9351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.222696][ T9346] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 431.302346][ T9342] ubi0: scanning is finished [ 431.407931][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1054'. [ 431.478711][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1054'. [ 431.580525][ T9350] MTRR 0 not used [ 431.606127][ T9350] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 431.677293][ T9346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.658612][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1054'. [ 434.421830][ T9342] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 434.571803][ T5760] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 435.661735][ T5760] usb 2-1: Using ep0 maxpacket: 32 [ 435.679370][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.692654][ T9381] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 435.710567][ T5760] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.720771][ T9381] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 435.735135][ T5760] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.746412][ T9381] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 435.752192][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.766378][ T9381] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 435.775534][ T5760] usb 2-1: config 0 descriptor?? [ 435.937977][ T9384] syzkaller0: entered promiscuous mode [ 435.949145][ T9384] syzkaller0: entered allmulticast mode [ 436.838325][ T9400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.845703][ T9400] IPv6: NLM_F_CREATE should be set when creating new route [ 436.853123][ T9400] IPv6: NLM_F_CREATE should be set when creating new route [ 436.860483][ T9400] IPv6: NLM_F_CREATE should be set when creating new route [ 437.230434][ T24] usb 2-1: USB disconnect, device number 23 [ 439.284189][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.290789][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.672022][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.722296][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.139798][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 440.222739][ T9439] bridge_slave_1: left allmulticast mode [ 440.295824][ T9439] bridge_slave_1: left promiscuous mode [ 440.339054][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.502097][ T9445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.509474][ T9445] IPv6: NLM_F_CREATE should be set when creating new route [ 440.516877][ T9445] IPv6: NLM_F_CREATE should be set when creating new route [ 440.524292][ T9445] IPv6: NLM_F_CREATE should be set when creating new route [ 440.984056][ T9439] bridge_slave_0: left allmulticast mode [ 441.082053][ T9439] bridge_slave_0: left promiscuous mode [ 441.110508][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.015669][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1096'. [ 446.221376][ T9484] team0 (unregistering): Port device team_slave_0 removed [ 446.548046][ T9484] team0 (unregistering): Port device team_slave_1 removed [ 446.579439][ T9494] mmap: syz.0.1097 (9494) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 448.025459][ T9499] ipip0: entered promiscuous mode [ 448.042126][ T9499] ipip0: entered allmulticast mode [ 449.019304][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.116516][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.398661][ T9521] 9pnet_virtio: no channels available for device syz [ 449.513171][ T9522] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 449.597176][ T9522] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 449.616253][ T9522] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 449.624470][ T9522] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 450.940174][ T9543] kAFS: unable to lookup cell 'ÿ' [ 455.753803][ T9574] fuse: Bad value for 'fd' [ 456.934558][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.968831][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.180428][ T9588] 9pnet_virtio: no channels available for device syz [ 460.544887][ T5641] Bluetooth: hci5: adv larger than maximum supported [ 460.544943][ T5641] Bluetooth: hci5: Malformed LE Event: 0x0d [ 461.612354][ T9605] fuse: Bad value for 'fd' [ 463.015676][ T9613] ubi0: attaching mtd0 [ 463.021782][ T9613] ubi0: scanning is finished [ 463.091476][ T30] audit: type=1800 audit(1785468181.705:17): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1134" name="bus" dev="ramfs" ino=25542 res=0 errno=0 [ 463.287643][ T9613] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 463.471975][ T1122] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.985324][ T9631] syzkaller0: entered promiscuous mode [ 464.014892][ T9631] syzkaller0: entered allmulticast mode [ 464.243335][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 464.403914][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 464.447724][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 464.492701][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.541730][ T24] usb 6-1: Product: syz [ 464.560513][ T24] usb 6-1: Manufacturer: syz [ 464.587090][ T24] usb 6-1: SerialNumber: syz [ 464.598409][ T9644] warning: `syz.0.1147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 464.642885][ T24] usb 6-1: config 0 descriptor?? [ 464.669185][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 464.705246][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 464.705246][ T24] [ 464.755734][ T24] usb 6-1: selecting invalid altsetting 3 [ 464.788615][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 464.788615][ T24] [ 464.837893][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 465.069311][ T9647] 9pnet_virtio: no channels available for device syz [ 465.812548][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 466.072750][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 466.235909][ T24] usb 6-1: media controller created [ 466.365117][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 466.543153][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 466.735388][ T24] dvb-usb: MAC address reading failed. [ 467.680471][ T9649] syzkaller0: entered promiscuous mode [ 467.700596][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.768537][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.785431][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.792574][ T9649] syzkaller0: entered allmulticast mode [ 467.801025][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.866066][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.888186][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.063513][ T185] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 468.500169][ T9662] ubi0: attaching mtd0 [ 468.511331][ T9662] ubi0: scanning is finished [ 468.798381][ T9662] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 468.807573][ T9662] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 468.814920][ T9662] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 468.821887][ T9662] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 468.829283][ T9662] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 468.836269][ T9662] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 468.844350][ T9662] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 677006446 [ 468.854278][ T9662] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 468.965764][ T9670] ubi0: background thread "ubi_bgt0d" started, PID 9670 [ 468.995402][ T9671] FAT-fs (nbd5): unable to read boot sector [ 469.205387][ T24] DVB: Unable to find symbol stb0899_attach() [ 469.271270][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 469.522117][ T185] usb 2-1: device descriptor read/all, error -71 [ 469.921892][ T5644] Bluetooth: hci0: command tx timeout [ 470.072146][ T24] rc_core: IR keymap rc-tt-1500 not found [ 470.092542][ T24] Registered IR keymap rc-empty [ 470.197973][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 470.361478][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 470.387559][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input9 [ 470.415457][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 470.431883][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 470.431883][ T24] [ 470.441746][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 470.460530][ T24] usb 6-1: USB disconnect, device number 13 [ 470.480699][ T9683] bridge_slave_1: left allmulticast mode [ 470.546900][ T9685] dyndbg: bad flag-op Ø, at start of ØÁñmÆUJ@Úä [ 470.553406][ T9685] dyndbg: flags parse failed [ 470.617426][ T9683] bridge_slave_1: left promiscuous mode [ 470.624106][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.854582][ T9683] bridge_slave_0: left allmulticast mode [ 470.860498][ T9683] bridge_slave_0: left promiscuous mode [ 470.867663][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.623465][ T9689] i2c i2c-0: new_device: Missing parameters [ 471.863923][ T9689] dvb-usb: bulk message failed: -22 (8/0) [ 472.001788][ T5644] Bluetooth: hci0: command tx timeout [ 472.081364][ T9689] pctv452e: I2C error -22; AA 02 04 01 00 -> aa 02 31 04 04 01 00 [ 472.188828][ T9689] retu-mfd 1-0002: could not read Tahvo revision: -5 [ 472.221836][ T9689] ================================================================== [ 472.229967][ T9689] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 472.237425][ T9689] Read of size 1 at addr ffff888051ace538 by task syz.0.1161/9689 [ 472.245232][ T9689] [ 472.247556][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.0.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.247588][ T9689] Tainted: [L]=SOFTLOCKUP [ 472.247600][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 472.247615][ T9689] Call Trace: [ 472.247624][ T9689] [ 472.247633][ T9689] dump_stack_lvl+0xe8/0x150 [ 472.247672][ T9689] print_address_description+0x55/0x1e0 [ 472.247706][ T9689] ? _raw_spin_lock+0x2e/0x40 [ 472.247728][ T9689] print_report+0x58/0x70 [ 472.247758][ T9689] kasan_report+0x117/0x150 [ 472.247796][ T9689] ? _raw_spin_lock+0x2e/0x40 [ 472.247821][ T9689] ? lockref_get+0x15/0x60 [ 472.247855][ T9689] __kasan_check_byte+0x2a/0x40 [ 472.247889][ T9689] lock_acquire+0x84/0x350 [ 472.247924][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.247951][ T9689] ? do_raw_spin_lock+0x12b/0x2f0 [ 472.247977][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248006][ T9689] _raw_spin_lock+0x2e/0x40 [ 472.248032][ T9689] ? lockref_get+0x15/0x60 [ 472.248065][ T9689] lockref_get+0x15/0x60 [ 472.248098][ T9689] __simple_recursive_removal+0x33/0x520 [ 472.248129][ T9689] ? mntput+0x65/0xc0 [ 472.248152][ T9689] ? __pfx_remove_one+0x10/0x10 [ 472.248177][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248205][ T9689] debugfs_remove+0x5b/0x70 [ 472.248228][ T9689] i2c_device_probe+0x8dc/0xbf0 [ 472.248259][ T9689] ? __pfx_i2c_device_probe+0x10/0x10 [ 472.248287][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248313][ T9689] ? sysfs_do_create_link_sd+0xe0/0x110 [ 472.248347][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248373][ T9689] ? driver_sysfs_add+0x1fe/0x210 [ 472.248401][ T9689] ? __pfx_i2c_device_probe+0x10/0x10 [ 472.248427][ T9689] really_probe+0x254/0xae0 [ 472.248459][ T9689] __driver_probe_device+0x1e8/0x360 [ 472.248489][ T9689] driver_probe_device+0x4f/0x240 [ 472.248520][ T9689] __device_attach_driver+0x270/0x410 [ 472.248552][ T9689] bus_for_each_drv+0x258/0x2f0 [ 472.248589][ T9689] ? __pfx___device_attach_driver+0x10/0x10 [ 472.248623][ T9689] ? __pfx_bus_for_each_drv+0x10/0x10 [ 472.248659][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248685][ T9689] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.248711][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248737][ T9689] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 472.248760][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248789][ T9689] __device_attach+0x2c4/0x450 [ 472.248818][ T9689] ? __pfx___device_attach+0x10/0x10 [ 472.248844][ T9689] ? do_raw_spin_unlock+0xf5/0x210 [ 472.248872][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248898][ T9689] ? _raw_spin_unlock+0x28/0x50 [ 472.248919][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.248948][ T9689] device_initial_probe+0xa1/0xd0 [ 472.248976][ T9689] bus_probe_device+0x12a/0x220 [ 472.249013][ T9689] device_add+0x7d7/0xb80 [ 472.249039][ T9689] i2c_new_client_device+0xa29/0x1130 [ 472.249076][ T9689] ? __pfx_i2c_new_client_device+0x10/0x10 [ 472.249105][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.249131][ T9689] ? __mutex_lock+0x30d/0x1550 [ 472.249158][ T9689] ? new_device_store+0x132/0x530 [ 472.249196][ T9689] new_device_store+0x24b/0x530 [ 472.249231][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.249259][ T9689] ? sysfs_file_kobj+0x1a/0x230 [ 472.249286][ T9689] ? __pfx_new_device_store+0x10/0x10 [ 472.249325][ T9689] ? sysfs_file_kobj+0x1a/0x230 [ 472.249350][ T9689] ? sysfs_file_kobj+0x1a/0x230 [ 472.249378][ T9689] ? __entry_text_end+0x1020b5/0x1020b9 [ 472.249404][ T9689] ? sysfs_file_kobj+0x1e4/0x230 [ 472.249432][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.249458][ T9689] ? sysfs_kf_write+0x166/0x260 [ 472.249487][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.249515][ T9689] ? __pfx_sysfs_kf_write+0x10/0x10 [ 472.249544][ T9689] kernfs_fop_write_iter+0x3a4/0x540 [ 472.249572][ T9689] vfs_write+0x612/0xba0 [ 472.249604][ T9689] ? __pfx_vfs_write+0x10/0x10 [ 472.249630][ T9689] ? __fget_files+0x2a/0x420 [ 472.249664][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.249693][ T9689] ksys_write+0x150/0x270 [ 472.249716][ T9689] ? __pfx_ksys_write+0x10/0x10 [ 472.249743][ T9689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.249766][ T9689] do_syscall_64+0x174/0x580 [ 472.249794][ T9689] ? trace_irq_disable+0x3b/0x140 [ 472.249828][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.249851][ T9689] RIP: 0033:0x7f2e16f9e019 [ 472.249871][ T9689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.249890][ T9689] RSP: 002b:00007f2e17e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 472.249913][ T9689] RAX: ffffffffffffffda RBX: 00007f2e17225fa0 RCX: 00007f2e16f9e019 [ 472.249930][ T9689] RDX: 0000000000000007 RSI: 0000200000000c00 RDI: 0000000000000004 [ 472.249944][ T9689] RBP: 00007f2e1703500c R08: 0000000000000000 R09: 0000000000000000 [ 472.249959][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.249972][ T9689] R13: 00007f2e17226038 R14: 00007f2e17225fa0 R15: 00007ffce14ce178 [ 472.249998][ T9689] [ 472.250006][ T9689] [ 472.743382][ T9689] Allocated by task 9689: [ 472.747697][ T9689] kasan_save_track+0x3e/0x80 [ 472.752377][ T9689] __kasan_slab_alloc+0x6c/0x80 [ 472.757226][ T9689] kmem_cache_alloc_lru_noprof+0x2aa/0x5f0 [ 472.763025][ T9689] __d_alloc+0x37/0x6f0 [ 472.767181][ T9689] d_alloc+0x4b/0x190 [ 472.771159][ T9689] lookup_one_qstr_excl+0xd8/0x360 [ 472.776296][ T9689] start_dirop+0x5c/0x90 [ 472.780535][ T9689] simple_start_creating+0xcc/0x110 [ 472.785736][ T9689] debugfs_start_creating+0xdb/0x1a0 [ 472.791012][ T9689] debugfs_create_dir+0x24/0x350 [ 472.795939][ T9689] i2c_device_probe+0x814/0xbf0 [ 472.800786][ T9689] really_probe+0x254/0xae0 [ 472.805287][ T9689] __driver_probe_device+0x1e8/0x360 [ 472.810566][ T9689] driver_probe_device+0x4f/0x240 [ 472.815596][ T9689] __device_attach_driver+0x270/0x410 [ 472.820988][ T9689] bus_for_each_drv+0x258/0x2f0 [ 472.825838][ T9689] __device_attach+0x2c4/0x450 [ 472.830597][ T9689] device_initial_probe+0xa1/0xd0 [ 472.835615][ T9689] bus_probe_device+0x12a/0x220 [ 472.840499][ T9689] device_add+0x7d7/0xb80 [ 472.844828][ T9689] i2c_new_client_device+0xa29/0x1130 [ 472.850197][ T9689] new_device_store+0x24b/0x530 [ 472.855048][ T9689] kernfs_fop_write_iter+0x3a4/0x540 [ 472.860325][ T9689] vfs_write+0x612/0xba0 [ 472.864553][ T9689] ksys_write+0x150/0x270 [ 472.868871][ T9689] do_syscall_64+0x174/0x580 [ 472.873455][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.879338][ T9689] [ 472.881645][ T9689] Freed by task 23: [ 472.885436][ T9689] kasan_save_track+0x3e/0x80 [ 472.890114][ T9689] kasan_save_free_info+0x40/0x50 [ 472.895130][ T9689] __kasan_slab_free+0x5c/0x80 [ 472.899903][ T9689] kmem_cache_free+0x182/0x650 [ 472.904668][ T9689] rcu_core+0x78b/0x10a0 [ 472.908913][ T9689] handle_softirqs+0x225/0x840 [ 472.913670][ T9689] run_ksoftirqd+0x36/0x60 [ 472.918083][ T9689] smpboot_thread_fn+0x57c/0xa80 [ 472.923016][ T9689] kthread+0x388/0x470 [ 472.927085][ T9689] ret_from_fork+0x514/0xb70 [ 472.931675][ T9689] ret_from_fork_asm+0x1a/0x30 [ 472.936424][ T9689] [ 472.938731][ T9689] Last potentially related work creation: [ 472.944424][ T9689] kasan_save_stack+0x3e/0x60 [ 472.949097][ T9689] kasan_record_aux_stack+0xbd/0xd0 [ 472.954284][ T9689] call_rcu+0xee/0x8b0 [ 472.958340][ T9689] dentry_kill+0x4d3/0x880 [ 472.962744][ T9689] finish_dput+0x1a/0x260 [ 472.967070][ T9689] find_next_child+0x1e7/0x250 [ 472.971849][ T9689] __simple_recursive_removal+0x10b/0x520 [ 472.977565][ T9689] debugfs_remove+0x5b/0x70 [ 472.982095][ T9689] i2c_del_adapter+0x229/0x430 [ 472.986877][ T9689] dvb_usb_i2c_exit+0x64/0xb0 [ 472.991540][ T9689] dvb_usb_device_exit+0x1cb/0x350 [ 472.996658][ T9689] pctv452e_usb_disconnect+0x1b9/0x210 [ 473.002113][ T9689] usb_unbind_interface+0x295/0x9f0 [ 473.007307][ T9689] device_release_driver_internal+0x4f5/0x880 [ 473.013369][ T9689] bus_remove_device+0x444/0x560 [ 473.018306][ T9689] device_del+0x524/0x8f0 [ 473.022625][ T9689] usb_disable_device+0x3d4/0x8d0 [ 473.027654][ T9689] usb_disconnect+0x346/0x9a0 [ 473.032419][ T9689] hub_event+0x1bbb/0x4d30 [ 473.036853][ T9689] process_scheduled_works+0xa8e/0x14e0 [ 473.042394][ T9689] worker_thread+0xa47/0xfb0 [ 473.046980][ T9689] kthread+0x388/0x470 [ 473.051067][ T9689] ret_from_fork+0x514/0xb70 [ 473.055661][ T9689] ret_from_fork_asm+0x1a/0x30 [ 473.060410][ T9689] [ 473.062717][ T9689] The buggy address belongs to the object at ffff888051ace468 [ 473.062717][ T9689] which belongs to the cache dentry of size 312 [ 473.076348][ T9689] The buggy address is located 208 bytes inside of [ 473.076348][ T9689] freed 312-byte region [ffff888051ace468, ffff888051ace5a0) [ 473.090158][ T9689] [ 473.092466][ T9689] The buggy address belongs to the physical page: [ 473.098905][ T9689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51ace [ 473.107652][ T9689] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 473.116160][ T9689] memcg:ffff888051acfed9 [ 473.120381][ T9689] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 473.127933][ T9689] page_type: f5(slab) [ 473.131905][ T9689] raw: 00fff00000000040 ffff88801c2fd8c0 dead000000000100 dead000000000122 [ 473.140475][ T9689] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff888051acfed9 [ 473.149051][ T9689] head: 00fff00000000040 ffff88801c2fd8c0 dead000000000100 dead000000000122 [ 473.157711][ T9689] head: 0000000000000000 0000000800150015 00000000f5000000 ffff888051acfed9 [ 473.166399][ T9689] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 473.175057][ T9689] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 473.183712][ T9689] page dumped because: kasan: bad access detected [ 473.190105][ T9689] page_owner tracks the page as allocated [ 473.195797][ T9689] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9223, tgid 9217 (syz.6.1015), ts 414168889385, free_ts 25720190898 [ 473.218832][ T9689] post_alloc_hook+0x1f9/0x250 [ 473.223601][ T9689] get_page_from_freelist+0x21fa/0x2270 [ 473.229148][ T9689] __alloc_frozen_pages_noprof+0x18d/0x380 [ 473.234954][ T9689] allocate_slab+0x79/0x5e0 [ 473.239447][ T9689] refill_objects+0x2d5/0x350 [ 473.244112][ T9689] __pcs_replace_empty_main+0x2bf/0x6b0 [ 473.249649][ T9689] kmem_cache_alloc_lru_noprof+0x389/0x5f0 [ 473.255449][ T9689] __d_alloc+0x37/0x6f0 [ 473.259603][ T9689] d_alloc_pseudo+0x21/0xc0 [ 473.264130][ T9689] alloc_path_pseudo+0x107/0x220 [ 473.269064][ T9689] alloc_file_pseudo+0xa8/0x1e0 [ 473.273913][ T9689] __anon_inode_getfile+0x129/0x200 [ 473.279102][ T9689] io_uring_create+0x57f/0x990 [ 473.283856][ T9689] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 473.289318][ T9689] do_syscall_64+0x174/0x580 [ 473.293932][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.299816][ T9689] page last free pid 1 tgid 1 stack trace: [ 473.305601][ T9689] free_pages_prepare+0x960/0xa60 [ 473.310621][ T9689] __free_contig_range_common+0x174/0x340 [ 473.316363][ T9689] destroy_args+0x4e5/0x570 [ 473.320858][ T9689] debug_vm_pgtable+0x3f8/0x410 [ 473.325707][ T9689] do_one_initcall+0x250/0x870 [ 473.330472][ T9689] do_initcall_level+0x10a/0x1a0 [ 473.335396][ T9689] do_initcalls+0x59/0xa0 [ 473.339712][ T9689] kernel_init_freeable+0x29d/0x3e0 [ 473.344911][ T9689] kernel_init+0x1d/0x1d0 [ 473.349239][ T9689] ret_from_fork+0x514/0xb70 [ 473.353841][ T9689] ret_from_fork_asm+0x1a/0x30 [ 473.358591][ T9689] [ 473.360894][ T9689] Memory state around the buggy address: [ 473.366508][ T9689] ffff888051ace400: fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb [ 473.374557][ T9689] ffff888051ace480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.382605][ T9689] >ffff888051ace500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.390653][ T9689] ^ [ 473.396524][ T9689] ffff888051ace580: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb [ 473.404574][ T9689] ffff888051ace600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 473.412621][ T9689] ================================================================== [ 473.423679][ T9689] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 473.430909][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.0.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.441764][ T9689] Tainted: [L]=SOFTLOCKUP [ 473.446074][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 473.456120][ T9689] Call Trace: [ 473.459384][ T9689] [ 473.462301][ T9689] vpanic+0x56c/0xa60 [ 473.466329][ T9689] ? __pfx_vpanic+0x10/0x10 [ 473.470841][ T9689] panic+0xc5/0xd0 [ 473.474566][ T9689] ? __pfx_panic+0x10/0x10 [ 473.478988][ T9689] ? _raw_spin_lock+0x2e/0x40 [ 473.483662][ T9689] ? _raw_spin_lock+0x2e/0x40 [ 473.488326][ T9689] check_panic_on_warn+0x89/0xb0 [ 473.493269][ T9689] ? _raw_spin_lock+0x2e/0x40 [ 473.497935][ T9689] end_report+0x73/0x170 [ 473.502180][ T9689] ? _raw_spin_lock+0x2e/0x40 [ 473.506849][ T9689] kasan_report+0x128/0x150 [ 473.511356][ T9689] ? _raw_spin_lock+0x2e/0x40 [ 473.516030][ T9689] ? lockref_get+0x15/0x60 [ 473.520454][ T9689] __kasan_check_byte+0x2a/0x40 [ 473.525345][ T9689] lock_acquire+0x84/0x350 [ 473.529772][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.535400][ T9689] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.540419][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.546048][ T9689] _raw_spin_lock+0x2e/0x40 [ 473.550544][ T9689] ? lockref_get+0x15/0x60 [ 473.554965][ T9689] lockref_get+0x15/0x60 [ 473.559208][ T9689] __simple_recursive_removal+0x33/0x520 [ 473.564838][ T9689] ? mntput+0x65/0xc0 [ 473.568810][ T9689] ? __pfx_remove_one+0x10/0x10 [ 473.573652][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.579280][ T9689] debugfs_remove+0x5b/0x70 [ 473.583775][ T9689] i2c_device_probe+0x8dc/0xbf0 [ 473.588624][ T9689] ? __pfx_i2c_device_probe+0x10/0x10 [ 473.594250][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.599904][ T9689] ? sysfs_do_create_link_sd+0xe0/0x110 [ 473.605451][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.611078][ T9689] ? driver_sysfs_add+0x1fe/0x210 [ 473.616105][ T9689] ? __pfx_i2c_device_probe+0x10/0x10 [ 473.621473][ T9689] really_probe+0x254/0xae0 [ 473.625978][ T9689] __driver_probe_device+0x1e8/0x360 [ 473.631265][ T9689] driver_probe_device+0x4f/0x240 [ 473.636287][ T9689] __device_attach_driver+0x270/0x410 [ 473.641681][ T9689] bus_for_each_drv+0x258/0x2f0 [ 473.646556][ T9689] ? __pfx___device_attach_driver+0x10/0x10 [ 473.652449][ T9689] ? __pfx_bus_for_each_drv+0x10/0x10 [ 473.657827][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.663454][ T9689] ? lockdep_hardirqs_on+0x7a/0x110 [ 473.668669][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.674297][ T9689] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 473.680100][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.685729][ T9689] __device_attach+0x2c4/0x450 [ 473.690491][ T9689] ? __pfx___device_attach+0x10/0x10 [ 473.695769][ T9689] ? do_raw_spin_unlock+0xf5/0x210 [ 473.700877][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.706502][ T9689] ? _raw_spin_unlock+0x28/0x50 [ 473.711341][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.716994][ T9689] device_initial_probe+0xa1/0xd0 [ 473.722019][ T9689] bus_probe_device+0x12a/0x220 [ 473.726894][ T9689] device_add+0x7d7/0xb80 [ 473.731220][ T9689] i2c_new_client_device+0xa29/0x1130 [ 473.736598][ T9689] ? __pfx_i2c_new_client_device+0x10/0x10 [ 473.742404][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.748058][ T9689] ? __mutex_lock+0x30d/0x1550 [ 473.752838][ T9689] ? new_device_store+0x132/0x530 [ 473.757890][ T9689] new_device_store+0x24b/0x530 [ 473.762745][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.768582][ T9689] ? sysfs_file_kobj+0x1a/0x230 [ 473.773432][ T9689] ? __pfx_new_device_store+0x10/0x10 [ 473.778838][ T9689] ? sysfs_file_kobj+0x1a/0x230 [ 473.783684][ T9689] ? sysfs_file_kobj+0x1a/0x230 [ 473.788531][ T9689] ? __entry_text_end+0x1020b5/0x1020b9 [ 473.794070][ T9689] ? sysfs_file_kobj+0x1e4/0x230 [ 473.799026][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.804674][ T9689] ? sysfs_kf_write+0x166/0x260 [ 473.809521][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.815151][ T9689] ? __pfx_sysfs_kf_write+0x10/0x10 [ 473.820346][ T9689] kernfs_fop_write_iter+0x3a4/0x540 [ 473.825631][ T9689] vfs_write+0x612/0xba0 [ 473.829868][ T9689] ? __pfx_vfs_write+0x10/0x10 [ 473.834628][ T9689] ? __fget_files+0x2a/0x420 [ 473.839221][ T9689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.844848][ T9689] ksys_write+0x150/0x270 [ 473.849171][ T9689] ? __pfx_ksys_write+0x10/0x10 [ 473.854016][ T9689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.860076][ T9689] do_syscall_64+0x174/0x580 [ 473.864670][ T9689] ? trace_irq_disable+0x3b/0x140 [ 473.869716][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.875606][ T9689] RIP: 0033:0x7f2e16f9e019 [ 473.880011][ T9689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.899637][ T9689] RSP: 002b:00007f2e17e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.908046][ T9689] RAX: ffffffffffffffda RBX: 00007f2e17225fa0 RCX: 00007f2e16f9e019 [ 473.916009][ T9689] RDX: 0000000000000007 RSI: 0000200000000c00 RDI: 0000000000000004 [ 473.923970][ T9689] RBP: 00007f2e1703500c R08: 0000000000000000 R09: 0000000000000000 [ 473.931969][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.939926][ T9689] R13: 00007f2e17226038 R14: 00007f2e17225fa0 R15: 00007ffce14ce178 [ 473.947903][ T9689] [ 473.951160][ T9689] Kernel Offset: disabled [ 473.955491][ T9689] Rebooting in 86400 seconds..