last executing test programs: 20m49.790234266s ago: executing program 0 (id=1523): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_GET_NODES(r2, 0x0, 0x20040891) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000180)={'gretap0\x00', 0xd, 0x7}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x5c30b8d635994bae}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r6, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000140), 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) 20m45.185832374s ago: executing program 0 (id=1531): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20m44.688962511s ago: executing program 0 (id=1535): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) lseek(r3, 0x3, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000099}]}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)="a40e1637c822afb9da82fe3f8eef095a424f95d577592377079fc672f4561bb1f2212e32628b47768bf46d42e861e3ddd74f11df09d290104440627db0d261", 0x3f, r0}, 0x64) socket$l2tp6(0xa, 0x2, 0x73) r7 = syz_open_dev$video(&(0x7f0000000000), 0x10a7, 0x80) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x7, 0x3781e4b9, 0x33565348, 0x33565348, 0x2, [{0x8, 0xc81}, {0xfffffff8, 0x5}, {0x1, 0x5}, {0x40, 0x7}, {0x0, 0xd}, {0xfffffffc, 0x4}, {0xdad1, 0x6}, {0x10, 0x7}], 0x2, 0x0, 0x2, 0x1, 0x2}}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3602, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r8, 0x0, 0x0) r9 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x14b141) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0xffff, 0x6, 0x1e, 0x0, 0x0, "f700", "1200", "211c7f74", "fcffffff", ["0500001400", "47979b000000000200", "0c436d743c97c443084000", "ff81000000008000"]}) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) r10 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$DRM_IOCTL_CONTROL(r10, 0x40086414, &(0x7f0000000640)={0x2, 0xda}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20m43.090006705s ago: executing program 0 (id=1538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 20m41.629626691s ago: executing program 0 (id=1539): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 20m37.320560588s ago: executing program 0 (id=1557): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 20m36.18141385s ago: executing program 32 (id=1557): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m42.251774716s ago: executing program 5 (id=3546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 14m41.134318293s ago: executing program 5 (id=3556): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x6f, &(0x7f0000000080)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0xa, 0x3, "71b0b820f43d8a4ace6164387e57727c502f42351e1302e9b621cad5244a782286a37275b9f551322005f91a66b36753a3ab50ff23"}}}}}}, 0x0) 14m40.953081675s ago: executing program 5 (id=3557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d00000004"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14m37.787900849s ago: executing program 5 (id=3579): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffff6, &(0x7f0000000200)=[{0xffffffffffffdff7, 0x0, 0xfffffffffffffffc}], 0x1, 0x6, 0x0, 0x2, 0x7, 0x10}) 14m37.778563752s ago: executing program 5 (id=3580): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004c00)={0x54, 0x43, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x3c, 0x1, 0x0, 0x1, [@nested={0x38, 0x13a, 0x0, 0x1, [@typed={0x2b, 0x118, 0x0, 0x0, @binary="5db0515ed84b8cf27f43510d9fd7bb29680fec0b6edeb81a64017a5a0fbe50362d1c186c060951"}, @typed={0x8, 0xdb, 0x0, 0x0, @fd}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 14m37.536432812s ago: executing program 5 (id=3582): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x7474, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x7, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) write(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 14m22.261136365s ago: executing program 33 (id=3582): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x7474, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x7, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) write(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 24.832602188s ago: executing program 6 (id=9213): socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write(0xffffffffffffffff, &(0x7f0000001340)="89d87d", 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4105, 0x1009}], 0x1, 0x3b, 0x0) 22.340370203s ago: executing program 6 (id=9216): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x2, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) 21.801193609s ago: executing program 3 (id=9218): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008600)=@deltfilter={0x3c04, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x3bc4, 0x2, [@TCA_CGROUP_ACT={0x3bc0, 0x1, [@m_nat={0xac, 0x1b, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1ff, 0x4, 0x8, 0x3}, @local, @loopback, 0xff000000}}]}, {0x59, 0x6, "f24d077c02e36f4ee910f8d4a6200aaddae28e2abb44025bbdd3ce42faa6841a9cf3981b3088f790d94f7c63478e876afb6f285d7c604574b27bb10ea3da7994c9606df38d6a2b4d19c0d1786cd2230f03254ef39b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xbf, 0x2, 0x10000000, 0x4, 0x81}, 0x8, 0x6}, [{0x2, 0x6, 0x2400000, 0x3, 0x0, 0x7fffffff}, {0x66d, 0x8, 0x6, 0x9, 0x5a8ab92c, 0x2e}, {0x4, 0x1, 0xa, 0x2, 0x8, 0x7ff}, {0xc, 0x3, 0x9f51, 0x2, 0xffff, 0xffffffff}, {0x2, 0x9, 0x0, 0x7, 0xe, 0x4}, {0x4, 0x9, 0xfffffffe, 0x2, 0x4, 0x7}, {0x61, 0x5, 0x800, 0x5, 0x6, 0x8}, {0x8, 0x0, 0x4, 0x4, 0x1, 0xfffffffc}, {0xc6b8, 0x0, 0x5, 0x9, 0x6, 0x5}, {0xc, 0x18a6, 0x4, 0x92b3, 0x8, 0x9f94}, {0x3, 0x7, 0xc5ff, 0x4, 0x9, 0x3}, {0x800, 0x5, 0x7, 0x1, 0x0, 0x1}, {0xa, 0x1, 0x7fff, 0x6, 0x9, 0x2}, {0x6, 0x0, 0x200, 0xac4, 0xfffeffff, 0x6}, {0x3d4, 0x8000, 0x4, 0x9, 0x36f, 0x9}, {0xfff, 0x10001, 0x6, 0x5, 0x2, 0x4}, {0x7fff, 0x8, 0x66f, 0x10001, 0x7}, {0x6, 0x1, 0x8, 0x0, 0x4, 0x8}, {0x3, 0x1ff, 0x3, 0x0, 0x96b, 0x2}, {0x5, 0x40, 0x3ff, 0x2, 0x0, 0x92f8}, {0x6, 0xfffffff7, 0x8, 0x2, 0xfffffff9, 0x7f}, {0x2, 0xfffffff7, 0x4, 0x8, 0x5a7d5c34, 0x2}, {0xd, 0x10001, 0x7, 0x9, 0x9, 0x7}, {0xfffffffc, 0x3, 0x6, 0x80000000, 0xfff, 0xc63}, {0xa, 0x2, 0xc737, 0x7676, 0x2, 0x5}, {0x9d, 0x9, 0x0, 0x7, 0x800, 0x5}, {0x0, 0x0, 0xfffff801, 0x7, 0x3, 0xffffffff}, {0x800, 0x3, 0x58, 0x6, 0x9, 0x6}, {0x9, 0xa3, 0x1, 0x3, 0xe56, 0x4}, {0x2, 0x208a, 0x8, 0x401, 0x7, 0x9}, {0xa, 0x1, 0x0, 0x7, 0x7fff, 0xfff}, {0x1, 0x0, 0x9, 0x11, 0x5, 0x1}, {0x9, 0x2, 0x0, 0x0, 0x7, 0x9}, {0x84, 0x1e, 0xfffffffd, 0x80, 0x515b, 0x900c}, {0x1, 0x4, 0xef2c, 0x7fffffff, 0xfffffffa, 0x1}, {0x8, 0xc, 0x47, 0x9, 0x985d, 0x101}, {0x7fffffff, 0xfffff83d, 0x7, 0x1000, 0x9, 0x2}, {0xd6b, 0x3, 0x6, 0x9, 0x8, 0x1}, {0x5, 0xfff, 0x95, 0x9, 0x728, 0x10001}, {0xe97, 0xfffffff9, 0x8ea, 0xee6f, 0x800, 0x5}, {0x5, 0x5, 0xfffffffb, 0x2, 0x87, 0xfffffeff}, {0x200, 0xfffffffc, 0xb15, 0xfffffffc, 0x80000001, 0x8216}, {0x100, 0x0, 0x8, 0x8, 0x3, 0x1}, {0xbd, 0x9, 0x7, 0x5b55, 0x8, 0x92}, {0x2, 0x6, 0x631, 0x8, 0x200, 0x9}, {0x0, 0x0, 0x2, 0xd0f, 0x1000, 0x1}, {0x8, 0x9, 0x8, 0x2, 0x0, 0x749d}, {0x8, 0x5, 0x3, 0x3, 0x9, 0x5}, {0x8, 0x3, 0x21e, 0x80000001, 0x5e8, 0x2a}, {0x8, 0xce0c, 0x8, 0x10, 0x10000000}, {0x8, 0x2, 0x1ff, 0x6, 0x9, 0x9}, {0x81, 0x5, 0x8, 0x10, 0x5, 0xfffffffe}, {0x1, 0x7, 0xbfd, 0x2, 0x9, 0xb}, {0x5, 0x80000000, 0x5, 0xb572, 0x4, 0x4}, {0x7ff, 0x1, 0x80000001, 0xb6, 0xa, 0x43}, {0x5, 0x7fff, 0xbb31, 0x8, 0xfffffff7, 0x8}, {0xa2, 0x100, 0x3, 0x0, 0xb5, 0xb}, {0x2, 0x0, 0x1cf4, 0xfffffffa, 0x4, 0x7}, {0x8001, 0x0, 0x9, 0x8, 0x1, 0x2}, {0x2, 0x0, 0xfa40, 0x3, 0x7}, {0x6, 0x4, 0x0, 0x6, 0x2946, 0x7}, {0x6, 0x3, 0x0, 0x2, 0x5, 0x1}, {0x5, 0x6, 0x88, 0x4, 0x1, 0x4df2}, {0x1, 0x1, 0x4, 0x1, 0x0, 0x6}, {0xfffff001, 0x1, 0x2, 0x79, 0x6, 0xbd15}, {0x1, 0x3, 0x800, 0xc1ab, 0xffff04e2, 0x6a}, {0xffff, 0x4, 0xec4, 0x0, 0x62, 0x9}, {0x0, 0x1, 0x100, 0xfffffff4, 0x7, 0x6}, {0x132, 0x6bfd, 0x5, 0x7, 0x7fff, 0x6}, {0x80, 0x1, 0x2, 0xeff, 0x401, 0x1}, {0x0, 0x7, 0x1, 0x1, 0x9, 0x600000}, {0x3, 0x0, 0x1, 0x94, 0x80000001}, {0x1ff, 0x7f, 0xfffffffd, 0x7, 0x2c6e4479, 0xfffffffa}, {0x7, 0x0, 0x592, 0x5, 0xe0000000, 0x3}, {0x5, 0x2, 0xfffffffd, 0x5, 0x9, 0x7}, {0x1000, 0xde, 0x8, 0x4, 0x8, 0x4}, {0xfff, 0x10000, 0x7fff, 0x99, 0x52, 0xb}, {0x200, 0x5, 0x3, 0x8, 0x6, 0x3}, {0x8, 0x5, 0xcd2, 0x3, 0xaa, 0x9}, {0xb1bb, 0x4, 0x4, 0x80000001, 0x5, 0x5}, {0x1ff, 0xffffffff, 0x5, 0x1000, 0x2, 0x7}, {0x0, 0xffff, 0x0, 0x6, 0x8, 0xe641}, {0x7, 0x329, 0x1, 0x0, 0x3, 0x3}, {0xfffffff9, 0x1, 0x4, 0x7, 0xc, 0x1ff}, {0x3, 0x4dd, 0x0, 0xcbf51f7, 0x200, 0x33}, {0x2, 0x44, 0xffffffff, 0x259, 0x2, 0x7}, {0x5, 0x6, 0x6, 0x2, 0xfffffffe, 0x6}, {0x6, 0x6, 0xfffffff9, 0x6, 0x8, 0x3d8}, {0xec78, 0x101, 0x5, 0xffffffff, 0xffff, 0x10000}, {0xffffffff, 0x3, 0x5c54, 0xfffffc00, 0x3ec1}, {0x0, 0x40, 0x4, 0x1, 0x0, 0xc308}, {0x1, 0x1, 0xb, 0x9, 0x3, 0x9}, {0x10000, 0x6, 0x7, 0xb, 0x8, 0x5}, {0x8, 0x3, 0x7fff, 0x4, 0x6, 0x7}, {0x3, 0x10001, 0x9, 0x5, 0x5d18, 0xc}, {0x4, 0x4, 0x5, 0xbcc, 0x1, 0x3}, {0x78, 0xff, 0xfffffff1, 0x3, 0x4, 0x2}, {0xac, 0x7, 0x81, 0x2, 0x8, 0xffffab7d}, {0x10, 0x0, 0x2, 0x32aa, 0xe, 0x400}, {0x7fffffff, 0x2da, 0x8, 0x40, 0x9, 0x3}, {0xffffaf44, 0x0, 0x80000000, 0x1, 0x6, 0xffff}, {0x5, 0x7, 0x2, 0x80000000, 0x9, 0x6}, {0x8, 0x4508, 0x1ff, 0x1bf86c9e, 0x4, 0x4}, {0x0, 0x5, 0xc97, 0x1e72, 0x2000000, 0x1}, {0x8, 0x100, 0x1, 0x8, 0xff, 0x7}, {0x80, 0x7fffffff, 0x8, 0x2, 0x3ff, 0x7}, {0x3d, 0x2, 0x5, 0x7fffffff, 0xc41b, 0x4879}, {0x0, 0x3, 0xb, 0x7, 0x0, 0xffffffff}, {0xbcc6, 0x0, 0x6, 0x9, 0x80000001, 0x8}, {0x7, 0x5, 0x40, 0x7, 0xffffff7f, 0x7be}, {0x9, 0x5, 0x3, 0x80, 0x8, 0x81}, {0x1, 0x9, 0xfffffffe, 0x5, 0x100, 0xffff}, {0x565, 0x7fff, 0x10, 0x4, 0x3, 0x1}, {0x80000000, 0x4, 0x8, 0x4, 0x0, 0xc7b}, {0x0, 0x0, 0x0, 0x10001, 0xfffff82f, 0x39f}, {0xc8d, 0x11ab2bb0, 0xc, 0x1, 0x8, 0x6}, {0x2, 0xffff, 0x4, 0xffffffff, 0x2, 0x7}, {0x4, 0x3, 0x8, 0x1, 0x3, 0xfffff545}, {0x0, 0x9c3, 0xf, 0x9, 0xcdb, 0x2}, {0x8, 0x7fffffff, 0xcbd, 0x7, 0x8, 0xc}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x1000}, {0x0, 0x68a4, 0x7, 0xffffffff, 0x2, 0xd013}, {0x7fffffff, 0x5, 0x2, 0x80000001, 0x6, 0xf}, {0x8001, 0x8001, 0x1ff, 0xf, 0x5, 0x2}, {0x2, 0x1d, 0x35ed, 0x2, 0x0, 0x81}, {0x8, 0x2, 0x10000, 0x81, 0x5, 0xfffffff0}, {0x4, 0x4, 0x157, 0xc2, 0xbe, 0xb}, {0xa0, 0x2, 0x0, 0x2, 0xc, 0x6}], [{0x4}, {0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x4}, {0x6c2f732ea13eee75}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0xea5db7aed335d0ad, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x0, 0x1}, {0xef0f5e633bc4e1b8}, {0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x2}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x2cc0, 0xf, 0x0, 0x0, {{0xa}, {0x2c94, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1, 0x5, 0x6, 0x56, 0x7fff}, 0x4, 0x50, [{0x7, 0x9, 0x0, 0x7, 0x1, 0x81}]}, [{0xe, 0xb909, 0x2, 0x1, 0x4, 0xe9}, {0x4, 0x0, 0x15754b9a, 0x8, 0x6, 0x401}, {0x6, 0x2, 0xd, 0x8, 0x7}, {0x4, 0xfdd, 0xa6, 0x4, 0x6, 0x93}, {0x200, 0x44f, 0x8, 0x9, 0x800, 0x8}, {0x80000000, 0xb, 0x0, 0x0, 0x5, 0x5}, {0x1fbd, 0x5, 0x4, 0x7, 0x1000, 0xffffff5c}, {0x9, 0x7, 0x1, 0x0, 0x3, 0x160000}, {0xbc, 0xa, 0xfffffffe, 0x1000, 0xe, 0x1}, {0x0, 0x7, 0xb4ad6423, 0x2062, 0x2, 0x4}, {0x7, 0xfffffffb, 0x8000, 0x7ff, 0x8, 0x4584}, {0x0, 0x9, 0x6, 0xfffffffb, 0xfffffffa, 0xffffffc0}, {0x7, 0x0, 0xe90, 0x7, 0xfffffff9, 0xd}, {0x1, 0xffff, 0x3ff, 0xcb56, 0x3, 0x8}, {0x0, 0x1, 0x3, 0x3000000, 0x10001, 0x7}, {0x0, 0x1, 0x9, 0x3, 0x10000, 0x1}, {0x9ab, 0x6, 0x2, 0x9, 0xd, 0x6}, {0x0, 0x4, 0x9, 0x0, 0x400, 0x5}, {0x0, 0x4, 0x1, 0x5, 0xff, 0xffffff01}, {0x80000001, 0x2, 0x0, 0x4, 0x5, 0x2}, {0x4, 0x1f, 0x8000000, 0x1, 0xdc, 0x8}, {0x5, 0x7fff, 0xfff, 0x4, 0x4f8403c6, 0xe}, {0x2, 0x1, 0xe9f9, 0x5, 0xfffffffc, 0x1}, {0x2, 0xffffffff, 0x7, 0x1, 0x6, 0x7}, {0x5, 0x9, 0x3, 0x0, 0x8000, 0x9}, {0x2800, 0x4, 0x8001, 0x0, 0xe8, 0x5}, {0x5, 0x4, 0xaee, 0x2, 0xffffffef, 0x9}, {0x0, 0x2, 0x6, 0x7f, 0x400, 0x5}, {0x3, 0x4, 0xfffffffe, 0x2, 0x0, 0xfff}, {0x8001, 0x2, 0x7fff, 0x2, 0x1, 0x1}, {0x4, 0xc6, 0x1, 0x4, 0x0, 0x4501}, {0x5, 0x4, 0x2, 0x10000, 0x0, 0x9}, {0x8, 0x6, 0x9, 0x1, 0x1, 0xea}, {0x5, 0x1, 0x401, 0xda80, 0x8ab6, 0x4}, {0x7ff, 0x12e, 0x3, 0x9a5, 0x1, 0x9}, {0x7, 0x8001, 0x0, 0xfffff142, 0x9, 0x4}, {0x9, 0x0, 0x3, 0x9, 0x8, 0x4}, {0x135, 0x6, 0x8, 0x9, 0x4ba7, 0x7}, {0x3, 0x2, 0x7, 0x8, 0xf, 0x9}, {0xc3b, 0xbb14, 0x9, 0x6, 0x5, 0x4}, {0x4, 0x7, 0x3c, 0x3, 0x6, 0x2}, {0x6, 0x4, 0x4, 0x2, 0x2, 0x86}, {0x1, 0x6, 0x1d4f, 0x7}, {0x7, 0x7fffffff, 0x9, 0xe, 0x1e2, 0x37}, {0xffffffff, 0x5, 0x80, 0x6, 0x6, 0x6}, {0x6, 0x4, 0x5, 0x5, 0xce, 0x3}, {0x0, 0x8, 0x5, 0x7, 0x5, 0x8}, {0xabc, 0x6, 0x1ff, 0x9, 0x1, 0x2}, {0xa1d, 0xa, 0x4, 0x34, 0x5000, 0x7}, {0x0, 0x370, 0x9, 0xfffffff8, 0x7}, {0x7f, 0x5, 0x7ff, 0x6, 0x2f1, 0x1}, {0xfff, 0x3, 0x2, 0x6, 0x87a6, 0x800}, {0x7fffffff, 0xd, 0x8, 0xfffffffa, 0x74, 0x1}, {0x1, 0x8, 0x2, 0x1, 0x1, 0xae6e}, {0x8, 0x8, 0x7, 0x7, 0x4, 0x101}, {0xe, 0xec, 0x1, 0x7, 0x9, 0x4}, {0xe, 0x8, 0x3, 0x6c4, 0x2, 0x7fffffff}, {0x2, 0xc, 0x8, 0x4, 0x8, 0xf2}, {0x9, 0x25c, 0x10001, 0x2, 0xfffffb00, 0x80000001}, {0x5f, 0x10001, 0x6, 0xb, 0x7f, 0x1ff}, {0x10001, 0x8, 0x8, 0x3, 0x8, 0x40}, {0x6, 0x7ff, 0xad, 0x476, 0xfffffffc, 0xabc}, {0xfffffffa, 0x7, 0xbc94, 0x400, 0x7fffffff, 0x7}, {0x4, 0x3, 0x20, 0xc7f, 0x200, 0x10}, {0x7, 0x60b3, 0x80, 0x7f, 0x19, 0x1}, {0x993, 0x80000001, 0x101, 0x3, 0x3, 0xffffffff}, {0x1, 0x6, 0x1000, 0xe, 0x4, 0x7}, {0xff, 0x1, 0x2, 0x6, 0x3, 0x2a9d}, {0x4, 0xf8, 0x5, 0x3ff, 0xf, 0x6}, {0xffff, 0x0, 0x28000000, 0x5, 0x8, 0x9b6}, {0x7fb4, 0x45ff405d, 0x3, 0x1, 0x78b6, 0x6}, {0xfff, 0x7, 0x2, 0xfffffc00, 0x5, 0x101}, {0x7, 0xb15e, 0x80, 0x7fad, 0x4, 0xff}, {0x81, 0x6, 0x2, 0xdbc, 0x5, 0x9}, {0x80000000, 0xffffff78, 0x40000000, 0xf7, 0xfffffff7, 0x5}, {0x3, 0x52, 0x7b28, 0xff, 0xfff}, {0x4, 0x48bb, 0xfffffff0, 0x0, 0x1, 0x7ff}, {0x3, 0x1, 0x4, 0x0, 0xfffffffa, 0x80}, {0xd22, 0x4000, 0x0, 0x668, 0x2, 0x4}, {0x401, 0xfffffff7, 0x9, 0x6, 0xfffffff0, 0x9}, {0x1, 0x1, 0x3, 0xffff, 0x1, 0xa}, {0x10000, 0x80000000, 0x7, 0x3, 0x1}, {0x56, 0xa96b, 0x9, 0x4, 0x3ff, 0x6}, {0x800, 0x8, 0x380000, 0x3bb9, 0x1, 0xe}, {0x8, 0x8, 0x4af9edf5, 0xd67a, 0x2, 0x45dd}, {0x8, 0x6, 0x78e, 0x6, 0x3, 0x2}, {0x8, 0x4e, 0x6, 0x100, 0x5, 0x200}, {0x5, 0x9, 0x4, 0x784, 0x1ff}, {0x10000000, 0xf, 0x200, 0x1, 0xffffffff, 0x6}, {0xfec1437, 0x38, 0x0, 0xe, 0x5cc8, 0x5}, {0x8, 0x4, 0xfffffe00, 0x3, 0x4, 0xfffffff8}, {0x400, 0x9, 0x0, 0x9ab6, 0x6, 0x700000}, {0x200, 0x7d0e3b03, 0x6, 0x8, 0x9, 0x7}, {0x7, 0x1, 0x3, 0x400, 0x6, 0x97}, {0x8, 0x319, 0xbf7, 0x2, 0x5, 0x3}, {0xe6f, 0xffffff81, 0x2, 0x4, 0x4, 0x5}, {0x3, 0xc05, 0x4, 0xfffffff1, 0x3, 0x8e}, {0xc, 0x1, 0x3, 0x255, 0x696, 0x2}, {0x7fffffff, 0x4d4, 0x56d, 0xa, 0x5, 0x4}, {0x1, 0x9, 0x100, 0x9, 0xfffffff1, 0x1}, {0x6, 0x10000, 0xffffffff, 0x81, 0x8, 0x1}, {0x10001, 0x6, 0x5, 0x6, 0x7fff, 0x101}, {0x6, 0xfffffffe, 0x9, 0xc, 0x0, 0x1}, {0x4, 0x9, 0x100, 0x9, 0x5}, {0x1000, 0x2, 0x0, 0x1, 0x5, 0xa20c}, {0x40, 0x1, 0x9, 0xfffffffa, 0xffffffff, 0x5}, {0xd, 0x2312c86f, 0xfffffba9, 0x8, 0xfffffff8, 0x1}, {0x1, 0xc0, 0x1, 0x7fff, 0x1ac, 0x2}, {0x0, 0x5, 0x8, 0x4, 0xfe7, 0x1ff}, {0x3, 0x7, 0x4, 0x5, 0xeb, 0x7dced482}, {0x9, 0x7, 0x7, 0x7, 0x9, 0x101}, {0x6, 0xf002, 0x7ff, 0x5, 0x4, 0x4}, {0x2, 0x80, 0x5, 0x80000000, 0x4af, 0x4}, {0x3, 0x1, 0x851, 0x2, 0x4, 0x1}, {0x0, 0x1, 0x8, 0x5, 0x1, 0x9}, {0x6, 0x8, 0x1000, 0x18, 0x9, 0x7}, {0x2, 0x327a883f, 0x71, 0x80000001, 0x101, 0x1ff}, {0x3, 0xfffffff8, 0x213, 0x4, 0xef40, 0xd1}, {0x0, 0xffff, 0x3, 0xf, 0x4}, {0x9, 0x8001, 0x7, 0xaef, 0x8, 0x80000000}, {0x7, 0xfffffffc, 0x15a3, 0x7d, 0xcd35, 0x8}, {0x4, 0x3, 0x4, 0x423, 0x6ad}, {0x5, 0x8, 0x908, 0x0, 0xb35, 0xa7}, {0x7, 0x30, 0x1, 0x80000001, 0x2, 0xff}, {0x0, 0x800, 0x5, 0x8001, 0x2, 0x8000}, {0x1, 0x2b0eccd5, 0x7f, 0xc0, 0xb1, 0x8}, {0xa, 0x80, 0xfffffffd, 0x3ff, 0x2}, {0xffffff00, 0x40000, 0x7, 0x683, 0xe1, 0x3}], [{0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x82fd130e52950f21}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x5a06391464af8c75}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x5df81d976022f41d}, {}, {0x6}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x1}, {0x7}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0xea80881ebaa5e974}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x4}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x322304f5, 0x7, 0x1, 0x6}, 0x2, 0x0, [{0xadac, 0xff, 0xc8000, 0x4, 0x6, 0x4}, {0x8, 0x1ff, 0x6, 0x1, 0xfffffffb, 0xc}, {0x9, 0xaa, 0x6, 0x4505, 0x2, 0x3}, {0x4, 0x4, 0x3, 0x3, 0xd, 0x9}, {0x1, 0x80000000, 0x0, 0x4, 0x0, 0xe}, {0x7f, 0xfffffff7, 0x2, 0x8000, 0x6, 0x5}, {0x0, 0x0, 0x6, 0x9, 0x7fffffff, 0x1000}, {0x7, 0xb873, 0x6, 0xffff7fff, 0xf73, 0x20000000}, {0x8, 0x4000000, 0x800, 0x5, 0x7ff, 0x9}]}, [{0x3ff, 0x8001, 0x400, 0x2, 0x0, 0x7}, {0x7, 0x1, 0x10001, 0x5, 0xfffffff6, 0x30f8000}, {0x9, 0x1ff, 0x6, 0x4000000, 0x5, 0x8}, {0xfffffffa, 0x2, 0x9, 0x600000, 0x101, 0x4}, {0x2, 0x6, 0x9, 0x1, 0x401, 0x3}, {0x6, 0x80, 0x9, 0x400, 0x0, 0x101}, {0xe5, 0x0, 0xb, 0x7a, 0x0, 0x9}, {0x101, 0x100, 0x9, 0x68, 0x132481e}, {0xfb8, 0x3, 0x6, 0xfffffeff, 0xfffffff1, 0x5}, {0xffffffc3, 0x4, 0xff, 0x4, 0xfffffff5, 0x1}, {0x1, 0xd, 0x88, 0x7f, 0xff, 0x4a40}, {0x1, 0x2, 0x5, 0x5, 0x7, 0x2a}, {0x4, 0x0, 0x2, 0xfffffeff, 0x9, 0xfffff639}, {0x6ce, 0x1, 0x37f6, 0xbb4b, 0x7, 0x2}, {0x2, 0x0, 0x7fffffff, 0x1, 0xffff438d, 0x1}, {0x7b, 0x8, 0x10, 0x5, 0x3, 0xc140000}, {0x7fffffff, 0x5, 0x4ce2, 0x101, 0x48c, 0x8000}, {0x10000, 0x6, 0x2, 0x4, 0x3ff, 0x5}, {0x2, 0x0, 0xa, 0x9, 0x81e, 0x9}, {0x8, 0x6, 0xffffffff, 0x1, 0x10001, 0x1000}, {0x0, 0x3b99, 0x3, 0x8, 0x8, 0x5}, {0x7, 0xfff, 0x1f5, 0x5, 0xab, 0x6}, {0x3, 0xa, 0x7, 0xfffffffd, 0x3b7f, 0xc1a9}, {0x5, 0x8, 0x8001, 0x7, 0x8c6, 0xfffffffa}, {0x8000, 0x4, 0x5, 0x2, 0x5, 0x68ec}, {0x2, 0x0, 0xb12, 0x4, 0xffffffff, 0x5}, {0x2, 0xc, 0x2, 0x7, 0x81, 0x10000}, {0x91c6, 0xd, 0x8, 0x8, 0x1, 0x3}, {0xf27, 0x92, 0x8, 0x301, 0xc8, 0x6}, {0x3, 0x3ff, 0x1, 0x1, 0x1, 0x2}, {0x4, 0x9, 0x2, 0x1, 0x4, 0x7e5}, {0x401, 0x3, 0x10000, 0x8, 0xffffff54, 0x1}, {0x400, 0x1, 0x8000, 0xff, 0x8, 0xffffffff}, {0x8, 0x2, 0x5, 0x8, 0x1, 0xc}, {0xd38, 0x2, 0xfff, 0x362, 0xba, 0x4}, {0x3, 0x7, 0x3, 0x3ec, 0x8, 0x40c7}, {0xf0ad, 0x80, 0x630, 0x39a7dbf, 0x2, 0x6}, {0x4, 0xb7c, 0x10, 0x3, 0x4, 0xfff}, {0x2, 0x10000000, 0x1b0a, 0x4, 0x81, 0x5}, {0x9, 0x0, 0x0, 0x3, 0x6, 0xffff}, {0xc8, 0x8d, 0x3, 0x6, 0x100, 0x9}, {0x3, 0x9, 0x81, 0x0, 0x77f2, 0x8}, {0xdf, 0x1, 0x1, 0xf1, 0x6, 0x3}, {0xfffffffe, 0x800, 0x9, 0x0, 0x7fffffff, 0x7a4}, {0x7, 0x200, 0xb, 0x4cf7517d, 0x0, 0x9}, {0x5, 0x100, 0x9, 0x4, 0x6}, {0x9fcc, 0x1, 0x1, 0x8, 0x4, 0x7fffffff}, {0x2, 0x4, 0x0, 0x3ff, 0x3, 0x1}, {0xffff0c52, 0x0, 0x2, 0x31, 0x8, 0xffff501d}, {0x1000, 0x80000001, 0x2, 0x8, 0x100, 0x7ff}, {0x10, 0xe3d, 0x8, 0xd4d5, 0x9, 0x4}, {0x9, 0x4, 0x6, 0x7f, 0x5, 0x5}, {0x5, 0x1, 0x4, 0x8, 0xbfd, 0xa5c}, {0xffffffff, 0xd, 0x10000, 0x2, 0x2, 0x8d}, {0x37e, 0x1, 0x7ff, 0x9, 0x8, 0x3}, {0xfffffffd, 0xe, 0x4a, 0x0, 0xd, 0x10001}, {0x0, 0xfff, 0x3, 0x1, 0xfffffff8, 0x9}, {0x7ff, 0x3d8, 0x2, 0x9, 0x8, 0x434}, {0x4, 0x2, 0x0, 0x0, 0x6}, {0x4, 0x4, 0xf6f1, 0x9, 0x1ff, 0xcb}, {0x3, 0x80, 0x40, 0x80000001, 0x1, 0x8}, {0x3, 0xa, 0xe67d, 0x1b1, 0x7e, 0x6}, {0x1ff, 0x20000000, 0x81, 0x3, 0x2, 0x5}, {0x40, 0x7, 0x7, 0x6, 0xb, 0xfffffff8}, {0x80000001, 0x8, 0x5, 0x8, 0x9, 0x7fff}, {0xd24, 0x6, 0x8c, 0x4, 0x8, 0x4}, {0x5, 0x8e, 0x80, 0xfffffffd, 0x2e, 0x10}, {0x401, 0x80, 0x200, 0x789, 0x1, 0x83c9}, {0x5, 0xa5, 0x4d56, 0x80, 0xf, 0x2}, {0x5, 0x9, 0x1, 0x7, 0x7ff, 0x6}, {0xffffffff, 0x7, 0x7, 0x8000, 0x1, 0xde7}, {0xffff, 0x6, 0x7, 0x9, 0x7, 0xd32}, {0x5, 0x9, 0x6, 0x0, 0x5, 0x5}, {0x0, 0xf8f1, 0x3, 0x7, 0x3}, {0x3, 0x4, 0x0, 0x5, 0x1, 0x3}, {0x0, 0x4, 0x2, 0x8000, 0x400, 0x1}, {0x7, 0x2, 0x7fff, 0x800000, 0xedf, 0x8}, {0x0, 0x80, 0xe5, 0x3, 0x0, 0xfe000000}, {0xb, 0x81, 0x80000000, 0x5, 0xffffffff}, {0x8, 0xfffff417, 0x5, 0x3, 0x9, 0x1000}, {0x1000, 0x6, 0xf4, 0x1, 0x7f, 0x5}, {0x9, 0xffffffff, 0x11d, 0x0, 0x2, 0x6}, {0xa0, 0x8, 0x8, 0x0, 0x8001, 0xd}, {0xe, 0x1ff, 0x2, 0x4, 0x800, 0x3ff}, {0x8, 0x1, 0x4, 0x7, 0x1, 0x754}, {0x5, 0x6, 0x800, 0x8, 0x4, 0x5}, {0xb, 0x7, 0x6, 0x4, 0x7, 0x8d}, {0xffffffff, 0x0, 0xf000, 0x7, 0xfffffff8, 0x1000}, {0x401, 0xead, 0x6, 0x4, 0x4b2c, 0x1}, {0x9, 0x7, 0x6, 0x5, 0x9, 0xe951}, {0x8, 0x7, 0x8, 0x5, 0xc4, 0x2}, {0x46, 0x7, 0x4772, 0xff, 0x80000000, 0x9}, {0x6, 0x0, 0x5, 0x0, 0x7, 0x3}, {0xfffff000, 0x8000, 0x2, 0xac9, 0x7, 0x5}, {0xaf9, 0x8, 0x4, 0x80000000, 0x0, 0x581056fc}, {0x0, 0x5, 0x1, 0xc657, 0x7, 0xffff}, {0x7ff, 0x4, 0x9, 0x8, 0xa9aa, 0x2}, {0x7, 0xb, 0x6, 0xb96, 0xfffffffc, 0x1}, {0xfffffff7, 0x400, 0x80, 0x5, 0x9, 0xade}, {0x4, 0xfffffff7, 0xce36, 0x9, 0x8, 0xffff7fff}, {0x9f5, 0x7, 0x80000000, 0x5, 0x8, 0x5}, {0x80000001, 0x6, 0x6, 0x5, 0x991, 0xffff}, {0x2, 0x800, 0x1, 0x1, 0x9, 0x5}, {0xb, 0x0, 0xb, 0x800, 0x4, 0x8}, {0x0, 0x4, 0xfffffff7, 0x4, 0x8, 0xc}, {0x3, 0x47a9, 0x6, 0xac, 0x3, 0xf5}, {0x7, 0x8, 0x7ff, 0xb, 0x0, 0x9}, {0x5, 0x6, 0x1, 0x8, 0xc, 0x5}, {0x8a, 0x40, 0xf, 0x3, 0x8, 0x400}, {0x6, 0x10, 0xffffff01, 0x4, 0x2, 0x5}, {0x81, 0x5, 0x8, 0x7f, 0x8, 0x8a}, {0x6, 0x7, 0x7, 0x200, 0x1, 0x7f}, {0x3, 0x7fff, 0x7, 0x54, 0x8e000, 0xa3a}, {0x1, 0x1, 0x1ff, 0x2, 0x3, 0xffffffff}, {0x5, 0x6, 0x7, 0xf159, 0x8000000, 0x2}, {0x9, 0x3, 0x81, 0x6, 0x3, 0x4}, {0x10000, 0x379, 0x1249, 0x3, 0xfffffffe, 0x2}, {0x5c3d, 0x3, 0x8001, 0x9b71, 0x14000000, 0x10}, {0x4, 0x56, 0x400, 0x1, 0x200, 0xc1ec}, {0x7, 0x9ea3, 0x9, 0x3d3, 0x800, 0x1}, {0x0, 0x2, 0x81f, 0x1, 0x6, 0xffff}, {0x5, 0xa02, 0x8, 0x4, 0x7765, 0x1}, {0xfffffffe, 0x1, 0xffffffff, 0x1000, 0x2, 0x7}, {0x1, 0x3ff, 0xdb, 0x8001, 0xffff, 0x3}, {0x9, 0x401, 0x2, 0x1, 0x1, 0x8}, {0x800, 0x6, 0x4, 0x0, 0x1, 0x2}, {0x3, 0x401, 0x4, 0x7, 0x2, 0x7}, {0x81, 0xfffffde3, 0x1, 0x1, 0x7f, 0x9}], [{0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x6, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x5, 0x5c357c590e6e68d6}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x6}, {0x3}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2}, {0x4}, {0x3bf642cfe4781362}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0xf1479a4c6f46f77e, 0x1}, {0xf3db4b2520e02a18}, {0x5}, {0x3}, {0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x71aa, 0xe, 0x0, 0x3}, 0x1, 0x4, [{0x8, 0x0, 0x6c, 0x7, 0xffffffff}, {0x32, 0x3, 0x2, 0x8, 0x0, 0x4}, {0x0, 0xffff8000, 0x1, 0xe, 0x10000, 0x3}, {0x1, 0x401, 0x40, 0x2, 0x470, 0x4}, {0x1, 0x200, 0x5695, 0x6, 0x9, 0x56d45d50}, {0x18000000, 0x8, 0x7, 0x5, 0x8, 0x56023ace}]}, [{0x3, 0x80000000, 0x785, 0x5, 0x0, 0x7e6}, {0x0, 0x80000001, 0x10001, 0x0, 0xfffffffe}, {0x9, 0xfffffffb, 0x7ff, 0x7, 0x9, 0xd}, {0xa1, 0x13f8, 0xa50, 0xab6c, 0x3, 0xfffffffe}, {0x4, 0x0, 0x800, 0x5, 0x7ff}, {0x3, 0x5, 0x6, 0x7, 0x0, 0x200}, {0x1000, 0x7fff80, 0x7, 0x7, 0x81, 0x3b1}, {0x3, 0x0, 0xe, 0xc, 0xffff, 0x1}, {0xfffeffff, 0x30, 0xff, 0x3, 0x2, 0x7}, {0x7, 0x7, 0x6, 0x3, 0x7, 0xf1}, {0x7, 0xffffffff, 0x2, 0x0, 0x7500, 0x10}, {0x80, 0x4, 0x2, 0x7, 0x96, 0x7}, {0x80, 0x8, 0x548, 0x3, 0x0, 0x800000}, {0x4, 0x4, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x2, 0x1000, 0xfffeffff, 0x7, 0x8}, {0x6, 0x8, 0x8, 0xa8b9, 0x7, 0x6}, {0x6, 0xffffffff, 0x200, 0xc, 0x4, 0x43}, {0x7, 0x17, 0x6000000, 0x8, 0xfffffff9, 0x9}, {0x4, 0x7, 0x3, 0x4, 0x7fff, 0x5}, {0x1, 0xc00000, 0x8, 0x7, 0x7fffffff, 0x800}, {0x6, 0x4, 0x1c0e, 0x2a, 0x6, 0x4}, {0x9, 0xf80c, 0x3, 0x7, 0x9, 0x7}, {0x1, 0xffff1ebb, 0x80000000, 0x8, 0x3, 0x6}, {0x9, 0x10000, 0x9, 0x1, 0x1, 0x1}, {0x10001, 0xfff, 0x5, 0xd7, 0x1, 0xffff77a4}, {0x8000, 0xd26b, 0x8, 0x600000, 0x3ff, 0x7}, {0x9, 0xffffffff, 0x7, 0x9, 0x80000000}, {0x8, 0x21a, 0x7, 0x7, 0x8, 0xd9}, {0x2, 0x7, 0x3, 0x1, 0x2, 0x8000}, {0x6, 0x3, 0x6, 0x9, 0x3, 0x2bdca878}, {0x1ff, 0x401, 0x6, 0x8, 0x6, 0x90c}, {0x200, 0xf4, 0x8, 0x8, 0x7fff, 0x40}, {0x0, 0xc, 0x5, 0x1000000, 0x2, 0x1}, {0x5db, 0x2, 0x200, 0x16, 0x4, 0x5}, {0x7, 0x30, 0x3, 0x8, 0x8, 0x8}, {0x3, 0x2, 0x3e, 0x2, 0x0, 0x10001}, {0xec, 0x0, 0x9, 0x4, 0x7, 0x11}, {0x7ff, 0x40, 0x401, 0x4, 0x5}, {0x3036, 0x6, 0x8, 0x0, 0x73, 0x8}, {0x8, 0x4, 0x9, 0x80000000, 0xa4, 0x7f}, {0x0, 0x4, 0x10000, 0x5, 0xc, 0xc0a}, {0x7f, 0x8, 0x9, 0x7fff, 0xfffffffc, 0x10}, {0x66, 0x8, 0x401, 0x9a14, 0x14, 0x577}, {0x1, 0xffff, 0x3, 0x2, 0x3, 0xffff7fff}, {0x5, 0xffff8001, 0x3, 0x400, 0x101, 0x2}, {0x5, 0x0, 0x10, 0x7, 0x7, 0xb}, {0x10000, 0x3, 0x7fffffff, 0xb5, 0x1, 0x4}, {0xfffff250, 0x863, 0x4, 0x14, 0x3, 0x7}, {0x6, 0x7fffffff, 0xa, 0x8, 0x5, 0x7}, {0x7, 0xfffffff2, 0x2, 0x8, 0xa841, 0x9}, {0x40, 0x7, 0x3, 0xd, 0x4, 0x4}, {0x8000, 0x10001, 0x61b, 0x40, 0x8001, 0xc}, {0x9, 0x4, 0x5, 0xa0b7, 0x7, 0x3032}, {0x0, 0x7, 0xf4f4, 0x45d, 0x1757, 0x9}, {0x5, 0x7, 0x5, 0x4, 0x0, 0x3}, {0x7, 0x4, 0xfff0, 0x33, 0x40}, {0x3, 0xfffffff9, 0xfffffffc, 0x0, 0x1, 0xd}, {0x6, 0x4, 0x401, 0x1ff, 0x1, 0xa}, {0x22a4, 0x80, 0xfff, 0x1, 0x6, 0x8}, {0x5c, 0x3ef, 0x7, 0xa9, 0x2, 0x1}, {0xde, 0x10, 0x3, 0xa3, 0x8, 0x6}, {0x0, 0x10001, 0x7, 0x1, 0x10, 0x3}, {0x40, 0x4e, 0x2, 0x1ff, 0xff, 0x88}, {0x4f36b26a, 0x6, 0x1, 0xbe, 0x10001, 0x200}, {0x9, 0xc, 0x10001, 0x40000000, 0xce, 0xffff}, {0x0, 0xfffffff8, 0x3, 0x8000, 0x40, 0xc}, {0x534, 0x1ff, 0x0, 0x5, 0x9, 0x3}, {0x2, 0x9, 0x4, 0x1, 0x1, 0x4}, {0x7ff, 0xfffffff9, 0x8, 0x4, 0x81, 0x9}, {0x4, 0x80000001, 0x9, 0x10001, 0x4, 0xb37}, {0x3, 0xd825, 0xa, 0x9, 0x8001, 0x81}, {0xb7, 0x10000, 0x5, 0xca36, 0x5, 0x8}, {0x5, 0x9, 0x6, 0x80000000, 0x3, 0x1}, {0xfffffffe, 0x6, 0x7, 0x6, 0x7, 0x3}, {0xca, 0xfb77, 0x3, 0x3, 0xc, 0x5}, {0x0, 0x3ff, 0xfffffff7, 0x10, 0x3, 0xfffffffd}, {0x7fffffff, 0xffff8001, 0x6, 0x0, 0x800, 0x80000000}, {0x2, 0xf, 0xe, 0x1, 0x9}, {0x298, 0x8, 0x7f, 0x8, 0x5}, {0x6abb, 0x623bcf22, 0x6, 0x3ff, 0xa, 0x6}, {0x4, 0x8, 0x7987, 0x9, 0x10000}, {0x7, 0x9, 0x2, 0xffff7fff, 0xc, 0x4}, {0xfffffffc, 0x3, 0x0, 0x3, 0x5, 0x7}, {0x5, 0x0, 0xff, 0x100, 0x6, 0x3}, {0x6, 0x7f, 0x8, 0x9, 0x8, 0xaeb}, {0x94, 0x0, 0xe, 0x7, 0x8, 0x40}, {0x2, 0x8, 0xd1, 0x6f7570c7, 0xb8c}, {0x6, 0x89, 0x200, 0xf6c6, 0x6, 0x5}, {0x2, 0x4, 0x9, 0x0, 0x7}, {0x3, 0x4, 0x4, 0x5, 0x5, 0x1}, {0x5, 0x4, 0x2, 0xffffd23a, 0x2, 0x7}, {0x0, 0x5, 0x1000, 0x0, 0x7, 0x7}, {0x0, 0xffffff1d, 0x0, 0x74b3, 0x2}, {0x1, 0x63, 0x7, 0x9, 0x7f}, {0xa7b, 0x6, 0x634cab93, 0x2, 0xffffffff, 0x4}, {0x5, 0x98b2, 0x1, 0x5, 0x8, 0x5}, {0x9, 0x400, 0xaa0, 0x3, 0x2, 0xfffffffa}, {0x7, 0x359e, 0x6, 0x7, 0x4, 0x3}, {0x4, 0x9, 0x0, 0x0, 0x7, 0x8}, {0x6, 0x0, 0x3, 0x3, 0xfffff000, 0x40}, {0xe9a, 0x5, 0x0, 0x9, 0x5, 0xd27}, {0x2, 0xb77, 0x0, 0x2, 0x6, 0x3}, {0x80, 0x2, 0x1, 0x6, 0xfffffffd, 0x1}, {0x2, 0x2, 0x8, 0xa, 0xb, 0xa2}, {0x3, 0x5e, 0x0, 0x100, 0x8, 0x200}, {0xfffff838, 0x2, 0x1000, 0x2, 0x1, 0xc}, {0x1000, 0x101, 0xb, 0xfffffffd, 0x3c0, 0x80000001}, {0x8ee5, 0x905b, 0xfffffff9, 0xa, 0x6, 0x5}, {0x136, 0xdd3, 0x8000, 0x0, 0x2, 0x7}, {0x9, 0x8, 0x72, 0x3ff, 0x80000000, 0x5}, {0x10, 0x401, 0x6aec5c81, 0x5, 0x892, 0x200}, {0x1, 0x1, 0xa1a2, 0x9, 0x5, 0x3}, {0xffff1014, 0xa, 0xfffffff8, 0x7, 0x8, 0xd9e3}, {0xfffffffe, 0x6, 0x0, 0x8, 0xff, 0x1}, {0x5ec, 0xc9, 0x9, 0xff, 0x6c, 0x40}, {0x8, 0x1, 0x4d3, 0x447c, 0x2, 0x81}, {0x108a, 0x2, 0x1, 0xffff, 0x8000, 0x2cc10984}, {0x9, 0x8, 0x5, 0x1, 0x1, 0x7}, {0x2, 0xd, 0x7, 0x7c1f, 0x8, 0x2}, {0x3, 0x200, 0x3, 0x0, 0x5, 0x1}, {0x0, 0x9, 0x2, 0x7, 0x7f, 0xf}, {0x0, 0xdb1, 0x6, 0xf, 0x197, 0x5}, {0xa, 0xffff9074, 0x9, 0x6, 0xe28d, 0x3ff}, {0x100, 0x1, 0x2, 0x2, 0x6f7, 0x5}, {0x80, 0x0, 0x3, 0x5, 0x3, 0x7848}, {0x10000, 0x5, 0xa, 0x81, 0x6, 0xc0000000}, {0x2, 0xfa, 0x4, 0x9, 0x10000, 0x4}, {0x0, 0x10000, 0x5, 0x5c73, 0xe, 0x40}], [{0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x86c0e51db2e5d470}, {0x5}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x6}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x65726b16352f73d5, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x6}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x5}, {0x2}, {0x5, 0xffbc1a4fd868407f}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5}, {0x1}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x3}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x3c04}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21.245158256s ago: executing program 3 (id=9221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=[{0xc50, 0x1, 0x8, "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"}], 0xc50}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20.943251519s ago: executing program 6 (id=9222): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20.515387721s ago: executing program 6 (id=9224): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e23, @local}, {0x2, 0x4424, @rand_addr=0x100006}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 20.504611285s ago: executing program 3 (id=9225): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0) 18.593162623s ago: executing program 6 (id=9229): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0xff) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r2, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, &(0x7f0000000c80)=[{0x0}, {&(0x7f00000010c0)="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", 0x570}, {&(0x7f00000020c0)="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", 0x3fb}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000d40)="ff186858c01603b3f9936156224f75af82cf3f57096fc0d88d3570ce95fadb8dec623c43acbc5da6bfa070b9e2786228e8f89b30bac69428729a9ba037e581f7d42c9bc8fa7ab4ac8cbe8f75eb2082b4385e13ed9fd1ae9d3634fd91a3cf536f2465eabf55e460c5f68cdea75390672e30f798b1fbc353b73fbc03950081034fd0138a085c70a02f529aa564fee2c33c9ed82d4b90082b89aad8f9254cd1adacdafe07372ec66f974fdd51b8990c55490490c9bb7416a6e5d6186bee64b24ff0c671d19c70fb70bf064bb0c0cfd0a2d0dd6929a9e3cf90ac3e3416", 0xdb}, {0x0}, {&(0x7f0000000280)="ac06924f448d07a147897c3dc212dc71f7fe1aeb8bb44b7cd2a0119a22281ed794d162ee7e5dad18593aed388b938d1db9f9e51f46ebce24156c4bde", 0x3c}], 0x8) shutdown(r4, 0x1) 17.033060137s ago: executing program 6 (id=9233): socket(0x2b, 0x1, 0x1) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) pipe2$watch_queue(&(0x7f0000000300), 0x80) 14.427989678s ago: executing program 3 (id=9240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 14.34898938s ago: executing program 2 (id=9241): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2}]) io_destroy(r4) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) 13.278903899s ago: executing program 3 (id=9242): socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write(0xffffffffffffffff, &(0x7f0000001340)="89d87df038", 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4105, 0x1009}], 0x1, 0x3b, 0x0) 12.053198333s ago: executing program 3 (id=9244): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x23, 0x5, 0x0) listen(r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) getpgid(r3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) 11.867148878s ago: executing program 4 (id=9245): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)) 11.861198685s ago: executing program 2 (id=9246): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) landlock_restrict_self(r0, 0xe) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 11.796894765s ago: executing program 1 (id=9247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69d80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a", 0x3) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df8398", 0x3d, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 10.124954279s ago: executing program 1 (id=9248): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.820822309s ago: executing program 4 (id=9249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r3, 0x0, 0x0) 9.728849016s ago: executing program 2 (id=9250): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0) 9.601072618s ago: executing program 1 (id=9251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 9.557104639s ago: executing program 1 (id=9252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 5.42891471s ago: executing program 1 (id=9253): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.765075215s ago: executing program 4 (id=9254): socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write(0xffffffffffffffff, &(0x7f0000001340)="89d87df038", 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4105, 0x1009}], 0x1, 0x3b, 0x0) 3.313145473s ago: executing program 2 (id=9255): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x40015, 0x200, &(0x7f0000000880)="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"}) socket$inet_smc(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0xff) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r2, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, &(0x7f0000000c80)=[{0x0}, {&(0x7f00000010c0)="509799937f0a5140fdba05bcdd42dcfb26ada4b588da84d0c425974030bf55dec3e111b0b6a6441b9fe8f3e720e5e1687719f88a72300ecb47299165609fc6dca0cb7ec6f4fdb22c9741492db3c0d8292f0eec65aad49777d74ef3dd3c3f83847ce2cd6809d070ffc2b562d8f0f6b3a6dd6c09172669e9de92ced0934776e2e9fe20beb054b56c7515dff1942d2cb005e04498500f22e40e53e1effdaabb18dfc764bd1f5be0e09443c7070a5a63d312b920f46c866369c28937626134bf86c4efa3c4866c3183141a70264bdf39860d54f224bcc51978f4a41b4e3dd474ea8ca3a5c872bc5517416cf01930cacce8b8263ccda1e790cdcc6de4a902ca84295cff15dcc13269103259e80c6d70fa10721ee0210fb3100e5f7a22f9988ff657133b0933e3922791a1bb73ea25342084b6ff13873ad3f70e72147f4b832b7f0d092d65334f8ca538a6434fef9d25a9edf84e2bc773f3bf9e958baef82646fe3aa244644c06e21f22c6095940409ff43b9f1af80ce63fbae59401cd23744e8fa420a639be1df8aed049dca66e5c3b48c1caa7b9c09bcff2a4550d0d6d7eb310fab05f48a2c35a2960b564db87d162ff9018cf0dcaa4b3b6f687cba112c4a5c3589b3ca19caf207bba98c58507c911d3c4da4062256a51e16f4075c5710d1e03b987c821afa6306aa51cb246bb8cbcf7498aeb6cce5bfb14402cebe5587718017103901e5e8d5abc056066ae1e6d0ef4c4279decfa9fa44f8c41e750807457b18a00ddeedf4bbd7b593df066a8d2e7e27d42d587901ad9a65e9207ea107f23017d168c339c71632654849b5ea9153021635f57511101ea65739130546bc227ed863e90e7be477d44ff9b4f906ad66822fa6050e919d5e067f0e6eba19971fff4d3ff802ca9c38d83d5857df5b4445930f71b399ec4314d077918726e0bcffc012461952680b499811f3c97563a203e8b3a29bf4cad4c98f1a1370458b9c411e6830cfb9c76d47524b6b83d2d7902ba596a360745b8c219095a4d6795184f40f4bcc2fbfe137920bd56841f665a9f39cf0999cc6071bfc91579f8fda1446647d5d611efa88c293bdba883f4f3efb3dbec132b24848ae5f0c47f8f98c810532d94b9b4cb617366d02764a7b10d9c5faedebfdff201aaa4653670fd583fa47c46d26f20e89ef94d6ff0e7ca83201ada4b0cb9a4525ad4840231f2c168456174995a7d63743312436afa97cc7a3cc2dcbc375fa41eb1f772588ca47abe4929faccc036356a83cdacfd7109ab5ad5c6ce9184abd31307667dbb9bf6ea05c878e0c4673a25816dee51d786adbd67620b3178e9fa728d5d9a74743717abeb8f7c811f782e7f8d0b52906bbab8ab91459858b84d859d050883b58e5ab9b88660a1c8915e7a1070c662b071e95237f3d5f2539702be647cbb99e26cc41363918ce40daf337f69e26e23cbe829cbded48573a665d8eda51fba4d40e03263732406b7957733874fccc133aa61ab5d44149f912226f16ff916f0ccc4483f67d96d231bba6268658700a2a8db0f0a52224314cb6073905c5b8db7f9f461af1dd3afdb9733dbbd104ac2b1e72f410891586f86b36f695e811a506ed3b693f73c7f1dfab11a8d47383c92fefcb4eeb1c995e1661b11dc49020cbcfa9ea6525b0410966a54eacf0e9a3806b079c9a30f1f9148aedea90227c69176936ed8b64b18de12d324321eff278a5a4ca418b874d3673c5666e5a419d97e69a7e132f85ba1a34c2ab6984c8c4c05caaecb103964df36ad3ba4fbf8897ab3af35f8b0b7eb01c5a5ffa4ee55bc64548afc7033638b01aabaccac2399ea5d3eb590bbbbbd8a61cf368d49858ce8e5e842968ec26496eba0a19e0872eee16a8e9485844cb4bbf8c4da2defd216e2b46af72969ed829ec48740c7c2548a6b0232e7726171f1880350c4877a123549a24c031ae035d0093312c69e8f721fefe834", 0x570}, {&(0x7f00000020c0)="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", 0x3fb}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000d40)="ff186858c01603b3f9936156224f75af82cf3f57096fc0d88d3570ce95fadb8dec623c43acbc5da6bfa070b9e2786228e8f89b30bac69428729a9ba037e581f7d42c9bc8fa7ab4ac8cbe8f75eb2082b4385e13ed9fd1ae9d3634fd91a3cf536f2465eabf55e460c5f68cdea75390672e30f798b1fbc353b73fbc03950081034fd0138a085c70a02f529aa564fee2c33c9ed82d4b90082b89aad8f9254cd1adacdafe07372ec66f974fdd51b8990c55490490c9bb7416a6e5d6186bee64b24ff0c671d19c70fb70bf064bb0c0cfd0a2d0dd6929a9e3cf90ac3e3416", 0xdb}, {0x0}, {&(0x7f0000000280)="ac06924f448d07a147897c3dc212dc71f7fe1aeb8bb44b7cd2a0119a22281ed794d162ee7e5dad18593aed388b938d1db9f9e51f46ebce24156c4bde", 0x3c}], 0x8) shutdown(r4, 0x1) 2.102261014s ago: executing program 4 (id=9256): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2}]) io_destroy(r4) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) 1.858568284s ago: executing program 34 (id=9233): socket(0x2b, 0x1, 0x1) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) pipe2$watch_queue(&(0x7f0000000300), 0x80) 1.518745104s ago: executing program 2 (id=9258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69d80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 353.914318ms ago: executing program 4 (id=9259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 352.4869ms ago: executing program 2 (id=9260): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)) 45.782568ms ago: executing program 1 (id=9261): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}]}, 0x1c}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 4 (id=9262): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000080)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 268.148431][T25949] netlink: 'syz.4.7169': attribute type 10 has an invalid length. [ 1269.775024][T25961] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1269.948186][T25974] pimreg: entered allmulticast mode [ 1269.972164][T25974] pimreg: left allmulticast mode [ 1270.014082][T25978] netlink: 'syz.4.7181': attribute type 10 has an invalid length. [ 1272.452151][T22928] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1272.602373][T22928] usb 2-1: Using ep0 maxpacket: 8 [ 1272.619990][T22928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.620016][T22928] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1272.653357][T22928] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 1272.653377][T22928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.653387][T22928] usb 2-1: Product: syz [ 1272.653395][T22928] usb 2-1: Manufacturer: syz [ 1272.653402][T22928] usb 2-1: SerialNumber: syz [ 1272.656354][T22928] usb 2-1: config 0 descriptor?? [ 1273.773631][T26011] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1276.942267][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.166030][ T5891] usb 2-1: USB disconnect, device number 95 [ 1279.576945][T26096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7222'. [ 1284.349147][T26180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1284.537161][T26180] bond_slave_0: entered promiscuous mode [ 1284.569037][T26180] bond_slave_1: entered promiscuous mode [ 1284.578264][T26180] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 1284.615090][T26180] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1284.634635][T26180] bond4: (slave macvlan5): Enslaving as a backup interface with an up link [ 1292.360910][ T6061] libceph: connect (1)[c::]:6789 error -101 [ 1292.365074][ T6061] libceph: mon0 (1)[c::]:6789 connect error [ 1292.394579][ T6061] libceph: connect (1)[c::]:6789 error -101 [ 1292.394728][ T6061] libceph: mon0 (1)[c::]:6789 connect error [ 1292.395003][T26271] ceph: No mds server is up or the cluster is laggy [ 1299.243617][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7348'. [ 1299.250880][T26411] vlan2: entered allmulticast mode [ 1299.251248][T26411] bridge0: port 3(vlan2) entered blocking state [ 1299.251459][T26411] bridge0: port 3(vlan2) entered disabled state [ 1299.254403][T26411] vlan2: entered promiscuous mode [ 1299.258905][T26411] netlink: 'syz.4.7348': attribute type 10 has an invalid length. [ 1300.997733][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.997804][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.029249][T26427] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1302.167248][T26463] netlink: 328 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1306.872244][T22928] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1307.022709][T22928] usb 2-1: Using ep0 maxpacket: 8 [ 1307.024917][T22928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.024940][T22928] usb 2-1: config 0 has no interfaces? [ 1307.027497][T22928] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1307.027524][T22928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.027543][T22928] usb 2-1: Product: syz [ 1307.027556][T22928] usb 2-1: Manufacturer: syz [ 1307.027569][T22928] usb 2-1: SerialNumber: syz [ 1307.039821][T22928] usb 2-1: config 0 descriptor?? [ 1307.441401][T26511] fuse: Unknown parameter 'group_id00000000000000000000' [ 1308.600076][T26552] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7398'. [ 1309.811625][T22928] usb 2-1: USB disconnect, device number 96 [ 1309.843114][T26577] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1311.033555][T26612] bond4: option mode: unable to set because the bond device has slaves [ 1311.074059][T26612] bond4: (slave macvlan6): Error -98 calling set_mac_address [ 1311.837321][T26636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7435'. [ 1311.895319][T26639] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1312.057519][T26649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1312.067768][T26649] vlan2: entered allmulticast mode [ 1312.068101][T26649] bridge0: port 3(vlan2) entered blocking state [ 1312.068299][T26649] bridge0: port 3(vlan2) entered disabled state [ 1312.071117][T26649] vlan2: entered promiscuous mode [ 1312.080378][T26649] netlink: 'syz.2.7441': attribute type 10 has an invalid length. [ 1312.111270][T26649] bridge0: port 3(vlan2) entered blocking state [ 1312.115216][T26649] bridge0: port 3(vlan2) entered forwarding state [ 1312.128110][T26649] team0: Device dummy0 failed to register rx_handler [ 1312.197227][T26649] bridge0: port 3(vlan2) entered disabled state [ 1312.994466][T26683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7456'. [ 1314.680203][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7463'. [ 1318.362662][ T5807] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1318.542212][ T5807] usb 7-1: Using ep0 maxpacket: 32 [ 1318.550163][ T5807] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1318.550181][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.550192][ T5807] usb 7-1: Product: syz [ 1318.550199][ T5807] usb 7-1: Manufacturer: syz [ 1318.550207][ T5807] usb 7-1: SerialNumber: syz [ 1318.620795][ T5807] usb 7-1: config 0 descriptor?? [ 1318.661611][ T5807] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1319.296896][T26755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1319.392385][T26755] syz_tun: entered allmulticast mode [ 1319.451566][T26778] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1319.481565][T26754] syz_tun: left allmulticast mode [ 1319.548591][ T5807] gspca_ov534_9: reg_w failed -71 [ 1319.832679][ T5807] gspca_ov534_9: Unknown sensor 0000 [ 1319.832751][ T5807] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1319.842237][ T5807] usb 7-1: USB disconnect, device number 26 [ 1321.212631][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7510'. [ 1321.218760][T26819] netlink: 'syz.4.7510': attribute type 10 has an invalid length. [ 1321.962172][ T5807] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1322.133097][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 1322.135950][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.135977][ T5807] usb 5-1: config 0 has no interfaces? [ 1322.141869][ T5807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1322.141900][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.141917][ T5807] usb 5-1: Product: syz [ 1322.141931][ T5807] usb 5-1: Manufacturer: syz [ 1322.141944][ T5807] usb 5-1: SerialNumber: syz [ 1322.175213][ T5807] usb 5-1: config 0 descriptor?? [ 1322.391951][T26827] fuse: Bad value for 'user_id' [ 1322.392047][T26827] fuse: Bad value for 'user_id' [ 1322.904020][T26848] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1323.622294][ T5807] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1323.782162][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 1323.798389][ T5807] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1323.798416][ T5807] usb 3-1: config 0 has no interface number 0 [ 1323.798448][ T5807] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1323.798459][ T5807] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1323.798474][ T5807] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1323.798487][ T5807] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1323.798499][ T5807] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.852996][ T5807] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1323.853024][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.853043][ T5807] usb 3-1: Product: syz [ 1323.853057][ T5807] usb 3-1: Manufacturer: syz [ 1323.853069][ T5807] usb 3-1: SerialNumber: syz [ 1323.867776][ T5807] usb 3-1: config 0 descriptor?? [ 1324.223025][ T5807] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1324.560720][ C0] iowarrior 3-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 1324.569233][ T5807] usb 3-1: USB disconnect, device number 102 [ 1324.729045][ T810] usb 5-1: USB disconnect, device number 73 [ 1327.561263][T26909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7549'. [ 1329.712698][T26955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1332.107917][T27005] netlink: 328 bytes leftover after parsing attributes in process `syz.6.7586'. [ 1332.244491][T27009] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1332.542174][ T810] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1332.712254][ T810] usb 2-1: Using ep0 maxpacket: 32 [ 1332.719112][ T810] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1332.719141][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.719160][ T810] usb 2-1: Product: syz [ 1332.719174][ T810] usb 2-1: Manufacturer: syz [ 1332.719188][ T810] usb 2-1: SerialNumber: syz [ 1332.740280][ T810] usb 2-1: config 0 descriptor?? [ 1332.758676][ T810] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1333.268270][ T810] gspca_ov534_9: reg_w failed -110 [ 1333.732376][ T810] gspca_ov534_9: Unknown sensor 0000 [ 1333.732475][ T810] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1334.530320][T27070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.544835][T27070] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1334.552932][T27070] syz_tun: entered allmulticast mode [ 1335.815014][T27070] syz_tun: left allmulticast mode [ 1335.893824][ T810] usb 2-1: USB disconnect, device number 97 [ 1336.008851][ T5807] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1336.069243][T27095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1336.162273][ T5807] usb 7-1: Using ep0 maxpacket: 8 [ 1336.164855][ T5807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.164881][ T5807] usb 7-1: config 0 has no interfaces? [ 1336.168310][ T5807] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1336.168339][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.168359][ T5807] usb 7-1: Product: syz [ 1336.168372][ T5807] usb 7-1: Manufacturer: syz [ 1336.168387][ T5807] usb 7-1: SerialNumber: syz [ 1336.234867][ T5807] usb 7-1: config 0 descriptor?? [ 1336.456833][T27089] fuse: Bad value for 'fd' [ 1336.469860][T27113] netlink: 328 bytes leftover after parsing attributes in process `syz.1.7628'. [ 1336.493583][ T6061] usb 7-1: USB disconnect, device number 27 [ 1339.001805][T27134] netlink: 'syz.4.7635': attribute type 25 has an invalid length. [ 1341.248415][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1341.286068][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1341.287719][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1341.300163][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1341.319553][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.325024][ T5882] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1341.472639][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 1341.475214][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.475240][ T5882] usb 7-1: config 0 has no interfaces? [ 1341.478165][ T5882] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1341.478192][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.478211][ T5882] usb 7-1: Product: syz [ 1341.478225][ T5882] usb 7-1: Manufacturer: syz [ 1341.478239][ T5882] usb 7-1: SerialNumber: syz [ 1341.537587][ T5882] usb 7-1: config 0 descriptor?? [ 1341.994735][T27163] fuse: Bad value for 'fd' [ 1342.262220][ T5807] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1342.432095][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 1342.433868][ T5807] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1342.433932][ T5807] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1342.433953][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1342.433965][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1342.433977][ T5807] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1342.434001][ T5807] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1342.434012][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.644852][ T5807] usb 5-1: usb_control_msg returned -32 [ 1342.644896][ T5807] usbtmc 5-1:16.0: can't read capabilities [ 1343.029309][T27186] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1343.030955][ T5807] usb 5-1: USB disconnect, device number 74 [ 1343.429732][T24800] Bluetooth: hci2: command tx timeout [ 1345.036717][ T5866] usb 7-1: USB disconnect, device number 28 [ 1345.547811][T24800] Bluetooth: hci2: command tx timeout [ 1346.052510][T27166] chnl_net:caif_netlink_parms(): no params data found [ 1346.682494][ T5882] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1347.412866][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 1347.600168][T24800] Bluetooth: hci2: command tx timeout [ 1348.249950][ T5882] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1348.250008][ T5882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1348.250030][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1348.250053][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1348.250076][ T5882] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.250116][ T5882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1348.250136][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.380189][T27235] netlink: 328 bytes leftover after parsing attributes in process `syz.2.7664'. [ 1348.509805][T27166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.509927][T27166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.510172][T27166] bridge_slave_0: entered allmulticast mode [ 1348.519747][T27166] bridge_slave_0: entered promiscuous mode [ 1348.557213][T27166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.559062][T27166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.559311][T27166] bridge_slave_1: entered allmulticast mode [ 1348.565809][ T5882] usb 5-1: usb_control_msg returned -32 [ 1348.565856][ T5882] usbtmc 5-1:16.0: can't read capabilities [ 1348.567446][T27166] bridge_slave_1: entered promiscuous mode [ 1348.612202][ T5866] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1348.772428][ T5866] usb 7-1: Using ep0 maxpacket: 8 [ 1348.776840][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.776856][ T5866] usb 7-1: config 0 has no interfaces? [ 1348.780982][ T5866] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1348.781000][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.781011][ T5866] usb 7-1: Product: syz [ 1348.781018][ T5866] usb 7-1: Manufacturer: syz [ 1348.781026][ T5866] usb 7-1: SerialNumber: syz [ 1348.794140][ T5866] usb 7-1: config 0 descriptor?? [ 1348.851315][T27166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.895600][T27166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.953107][T27243] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1348.967569][ T5866] usb 5-1: USB disconnect, device number 75 [ 1349.142660][T27234] fuse: Invalid rootmode [ 1349.287461][T27166] team0: Port device team_slave_0 added [ 1349.290804][T27250] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1349.430615][T27166] team0: Port device team_slave_1 added [ 1349.490274][T25697] bridge_slave_1: left allmulticast mode [ 1349.490304][T25697] bridge_slave_1: left promiscuous mode [ 1349.490536][T25697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.578660][T25697] bridge_slave_0: left allmulticast mode [ 1349.578690][T25697] bridge_slave_0: left promiscuous mode [ 1349.581691][T25697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.672286][T24800] Bluetooth: hci2: command tx timeout [ 1351.470641][ T5891] usb 7-1: USB disconnect, device number 29 [ 1351.568315][T27282] netlink: 328 bytes leftover after parsing attributes in process `syz.2.7674'. [ 1352.795319][T25697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.874599][T25697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.893321][T25697] bond0 (unregistering): Released all slaves [ 1353.098779][ T5807] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1353.239800][T27166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.239818][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.239844][T27166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.242150][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 1353.244281][ T5807] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1353.244333][ T5807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1353.244355][ T5807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1353.244377][ T5807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1353.244398][ T5807] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1353.244438][ T5807] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1353.244459][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.260725][T27166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.260981][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.261008][T27166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.456812][ T5807] usb 2-1: usb_control_msg returned -32 [ 1353.456862][ T5807] usbtmc 2-1:16.0: can't read capabilities [ 1353.638078][T27166] hsr_slave_0: entered promiscuous mode [ 1353.642732][T27166] hsr_slave_1: entered promiscuous mode [ 1353.644164][T27166] debugfs: 'hsr0' already exists in 'hsr' [ 1353.644189][T27166] Cannot create hsr debugfs directory [ 1353.780725][T27305] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1353.826979][T27307] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 1353.829665][ T5807] usb 2-1: USB disconnect, device number 98 [ 1354.192194][ T5915] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1354.352099][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 1354.354751][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.354778][ T5915] usb 3-1: config 0 has no interfaces? [ 1354.357081][ T5915] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1354.357110][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.357128][ T5915] usb 3-1: Product: syz [ 1354.357142][ T5915] usb 3-1: Manufacturer: syz [ 1354.357155][ T5915] usb 3-1: SerialNumber: syz [ 1354.419574][ T5915] usb 3-1: config 0 descriptor?? [ 1354.639094][T27322] netlink: 328 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1354.653128][T27308] fuse: Invalid rootmode [ 1354.731478][ T5807] usb 3-1: USB disconnect, device number 103 [ 1355.968206][T25697] hsr_slave_0: left promiscuous mode [ 1356.005022][T25697] hsr_slave_1: left promiscuous mode [ 1356.006067][T25697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.316284][T25697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.766299][T25697] team0 (unregistering): Port device team_slave_1 removed [ 1357.849412][T25697] team0 (unregistering): Port device team_slave_0 removed [ 1358.282181][T27351] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1358.662585][ T6061] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1358.973272][ T6061] usb 3-1: Using ep0 maxpacket: 8 [ 1359.036953][ T6061] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1359.037011][ T6061] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1359.037034][ T6061] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1359.037057][ T6061] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1359.037080][ T6061] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1359.037121][ T6061] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1359.037142][ T6061] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.388356][ T6061] usb 3-1: usb_control_msg returned -32 [ 1359.388405][ T6061] usbtmc 3-1:16.0: can't read capabilities [ 1360.954165][ T6061] libceph: connect (1)[c::]:6789 error -101 [ 1360.954357][ T6061] libceph: mon0 (1)[c::]:6789 connect error [ 1361.049740][ T5915] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1361.076346][T27379] ceph: No mds server is up or the cluster is laggy [ 1361.249084][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 1361.251791][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.251824][ T5915] usb 2-1: config 0 has no interfaces? [ 1361.283373][ T5915] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1361.283401][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.283418][ T5915] usb 2-1: Product: syz [ 1361.283431][ T5915] usb 2-1: Manufacturer: syz [ 1361.283442][ T5915] usb 2-1: SerialNumber: syz [ 1361.329142][ T5915] usb 2-1: config 0 descriptor?? [ 1361.593652][T27377] fuse: Invalid rootmode [ 1361.691605][ T810] usb 2-1: USB disconnect, device number 99 [ 1361.733560][ T5807] usb 3-1: USB disconnect, device number 104 [ 1361.756592][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.756661][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.126477][ T5891] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1362.354440][ T5891] usb 5-1: device descriptor read/64, error -71 [ 1362.493487][T27406] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1362.602068][ T5891] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1362.732121][ T5891] usb 5-1: device descriptor read/64, error -71 [ 1362.862227][ T5891] usb usb5-port1: attempt power cycle [ 1363.832214][ T5891] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1363.925266][ T5891] usb 5-1: device descriptor read/8, error -71 [ 1364.232148][ T5891] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1365.238583][ T5891] usb 5-1: device descriptor read/8, error -71 [ 1365.238749][T27166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1365.311029][T27166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1365.342829][ T5891] usb usb5-port1: unable to enumerate USB device [ 1365.384897][T27166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1365.422126][ T5915] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1365.457196][T27166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1365.572063][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 1365.574156][ T5915] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1365.574222][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1365.574244][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1365.574265][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1365.574285][ T5915] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1365.574320][ T5915] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1365.574340][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.831637][T27166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.889865][ T5915] usb 2-1: usb_control_msg returned -71 [ 1365.889913][ T5915] usbtmc 2-1:16.0: can't read capabilities [ 1365.956798][T27166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.987202][ T5915] usb 2-1: USB disconnect, device number 100 [ 1366.005517][T25697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.008281][T25697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.039258][T25697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.039406][T25697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.935771][T27166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.113606][T27166] veth0_vlan: entered promiscuous mode [ 1367.121378][T27166] veth1_vlan: entered promiscuous mode [ 1367.162229][ T5891] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1367.198136][T27166] veth0_macvtap: entered promiscuous mode [ 1367.208234][ T5882] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1367.233391][T27166] veth1_macvtap: entered promiscuous mode [ 1367.312082][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 1367.316966][T27166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.325482][ T5891] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1367.325540][ T5891] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1367.325562][ T5891] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1367.325585][ T5891] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1367.325606][ T5891] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1367.325645][ T5891] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1367.325666][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.372111][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 1367.374823][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.374847][ T5882] usb 2-1: config 0 has no interfaces? [ 1367.391310][ T5882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1367.391327][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.391337][ T5882] usb 2-1: Product: syz [ 1367.391344][ T5882] usb 2-1: Manufacturer: syz [ 1367.391352][ T5882] usb 2-1: SerialNumber: syz [ 1367.428709][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1367.494054][ T5882] usb 2-1: config 0 descriptor?? [ 1367.568407][T27166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.604936][T26275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.607497][T26275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.615095][T26275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.641573][T26275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.690895][ T5891] usb 7-1: usb_control_msg returned -32 [ 1367.690940][ T5891] usbtmc 7-1:16.0: can't read capabilities [ 1367.738795][T27463] fuse: Bad value for 'rootmode' [ 1368.170675][T27487] usbtmc 7-1:16.0: control status returned 0 [ 1368.282370][T17239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.282392][T17239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.369064][ T5887] usb 7-1: USB disconnect, device number 30 [ 1368.502739][T17239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.502761][T17239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.239276][ T5887] usb 2-1: USB disconnect, device number 101 [ 1372.228212][T27530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7726'. [ 1372.442471][ T5887] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1372.572182][ T5887] usb 5-1: device descriptor read/64, error -71 [ 1372.843359][ T5887] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1373.019360][ T5887] usb 5-1: device descriptor read/64, error -71 [ 1373.122882][ T5887] usb usb5-port1: attempt power cycle [ 1373.462176][ T5887] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1373.482563][ T5887] usb 5-1: device descriptor read/8, error -71 [ 1374.583198][ T5891] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1374.732486][ T5887] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1374.762598][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 1374.781373][ T5891] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1374.795840][ T5891] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1374.796226][ T5891] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1374.796252][ T5891] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1374.796697][ T5891] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1374.797072][ T5891] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1374.797095][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.292669][ T5891] usb 7-1: usb_control_msg returned -32 [ 1375.383701][ T5891] usbtmc 7-1:16.0: can't read capabilities [ 1376.122136][T27551] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1376.284018][T27551] usb 4-1: Using ep0 maxpacket: 8 [ 1376.336773][T27551] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.336790][T27551] usb 4-1: config 0 has no interfaces? [ 1376.340393][T27551] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1376.340411][T27551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.340422][T27551] usb 4-1: Product: syz [ 1376.340429][T27551] usb 4-1: Manufacturer: syz [ 1376.340438][T27551] usb 4-1: SerialNumber: syz [ 1376.386699][T27551] usb 4-1: config 0 descriptor?? [ 1377.384525][T27558] fuse: Bad value for 'rootmode' [ 1377.505179][ T5915] usb 7-1: USB disconnect, device number 31 [ 1378.591362][ T5887] usb 5-1: device descriptor read/8, error -71 [ 1378.673269][T27577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7738'. [ 1378.693160][ T5887] usb usb5-port1: unable to enumerate USB device [ 1379.592496][ T5866] usb 4-1: USB disconnect, device number 60 [ 1384.712168][T27551] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1384.882246][T27551] usb 3-1: Using ep0 maxpacket: 32 [ 1384.898894][T27551] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1384.898923][T27551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.898942][T27551] usb 3-1: Product: syz [ 1384.898954][T27551] usb 3-1: Manufacturer: syz [ 1384.898961][T27551] usb 3-1: SerialNumber: syz [ 1384.941461][T27551] usb 3-1: config 0 descriptor?? [ 1384.967625][T27551] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1385.614943][T27628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.630838][T27628] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1385.650227][T27628] lo: entered allmulticast mode [ 1385.659834][T27627] lo: left allmulticast mode [ 1385.672980][T27635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7756'. [ 1385.789003][T27551] gspca_ov534_9: reg_w failed -71 [ 1387.372103][T27551] gspca_ov534_9: Unknown sensor 0000 [ 1387.372196][T27551] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1387.387477][T27551] usb 3-1: USB disconnect, device number 105 [ 1392.656315][T27683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7768'. [ 1392.733656][T27685] netlink: 'syz.1.7768': attribute type 10 has an invalid length. [ 1393.418223][T27692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1397.572138][T22928] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1397.830847][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7778'. [ 1397.833568][T27712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7780'. [ 1397.834526][T27712] netlink: 'syz.2.7780': attribute type 10 has an invalid length. [ 1397.876158][T27712] bridge0: port 3(vlan2) entered blocking state [ 1397.876419][T27712] bridge0: port 3(vlan2) entered forwarding state [ 1397.877073][T27712] team0: Device dummy0 failed to register rx_handler [ 1397.914968][T27712] bridge0: port 3(vlan2) entered disabled state [ 1399.245692][ T5866] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1399.822099][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 1399.826093][ T5866] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1399.826111][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.826122][ T5866] usb 7-1: Product: syz [ 1399.826130][ T5866] usb 7-1: Manufacturer: syz [ 1399.826137][ T5866] usb 7-1: SerialNumber: syz [ 1399.893610][ T5866] usb 7-1: config 0 descriptor?? [ 1399.908888][ T5866] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1400.611177][T27726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1400.687807][T27726] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1400.776217][ T5866] gspca_ov534_9: reg_w failed -71 [ 1401.062170][ T5866] gspca_ov534_9: Unknown sensor 0000 [ 1401.062276][ T5866] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1401.065539][ T5866] usb 7-1: USB disconnect, device number 32 [ 1401.132314][ T5915] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1401.342850][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 1401.361668][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.361701][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.387539][ T5915] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1401.387566][ T5915] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1401.387586][ T5915] usb 3-1: Manufacturer: syz [ 1401.409304][ T5915] usb 3-1: config 0 descriptor?? [ 1401.541006][T27751] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7792'. [ 1401.547169][T27751] netlink: 'syz.6.7792': attribute type 10 has an invalid length. [ 1401.667063][T27751] team0: Port device dummy0 added [ 1401.841148][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 1401.841233][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1401.869367][ T5915] usb 3-1: USB disconnect, device number 106 [ 1403.879643][T27779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1404.984560][T27792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1404.984577][T27792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1405.035876][T27795] netlink: 'syz.1.7804': attribute type 10 has an invalid length. [ 1406.660019][T27822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1407.002032][T27551] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1407.972099][T27551] usb 2-1: Using ep0 maxpacket: 32 [ 1407.990018][T27551] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1407.990050][T27551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.990068][T27551] usb 2-1: Product: syz [ 1407.990081][T27551] usb 2-1: Manufacturer: syz [ 1407.990093][T27551] usb 2-1: SerialNumber: syz [ 1408.006261][T27551] usb 2-1: config 0 descriptor?? [ 1408.044460][T27551] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1408.262482][T27840] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1408.262482][T27840] program syz.3.7819 not setting count and/or reply_len properly [ 1408.582612][T27551] gspca_ov534_9: reg_w failed -110 [ 1409.112079][T27551] gspca_ov534_9: Unknown sensor 0000 [ 1409.112177][T27551] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1409.247114][T27858] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7827'. [ 1409.406284][T27863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.426045][T27863] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1409.428169][T27863] syz_tun: entered allmulticast mode [ 1409.482235][T10428] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1409.642053][T10428] usb 7-1: Using ep0 maxpacket: 32 [ 1409.647652][T10428] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1409.647680][T10428] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.647698][T10428] usb 7-1: Product: syz [ 1409.647710][T10428] usb 7-1: Manufacturer: syz [ 1409.647718][T10428] usb 7-1: SerialNumber: syz [ 1409.656731][T10428] usb 7-1: config 0 descriptor?? [ 1410.520651][T10428] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1410.599516][T27850] syz_tun: left allmulticast mode [ 1410.675279][T22928] usb 2-1: USB disconnect, device number 103 [ 1411.074219][T27860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1411.092857][T27860] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1411.328378][T27886] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1411.328378][T27886] program syz.4.7835 not setting count and/or reply_len properly [ 1411.632144][T10428] gspca_ov534_9: reg_w failed -71 [ 1411.922148][T10428] gspca_ov534_9: Unknown sensor 0000 [ 1411.922240][T10428] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1411.927207][T10428] usb 7-1: USB disconnect, device number 33 [ 1411.932440][T27896] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7840'. [ 1412.902134][T10428] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1413.210215][T27918] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1413.210215][T27918] program syz.4.7848 not setting count and/or reply_len properly [ 1413.402142][T10428] usb 3-1: Using ep0 maxpacket: 32 [ 1413.448959][T10428] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1413.448991][T10428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.449011][T10428] usb 3-1: Product: syz [ 1413.449023][T10428] usb 3-1: Manufacturer: syz [ 1413.449036][T10428] usb 3-1: SerialNumber: syz [ 1413.494504][T10428] usb 3-1: config 0 descriptor?? [ 1413.517222][T10428] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1413.526218][T22928] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1413.682134][T22928] usb 7-1: device descriptor read/64, error -71 [ 1413.922913][T22928] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1414.082200][T22928] usb 7-1: device descriptor read/64, error -71 [ 1414.143635][T27908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.191391][T27908] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1414.197596][T27931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7854'. [ 1414.209143][T22928] usb usb7-port1: attempt power cycle [ 1414.219818][T27908] lo: entered allmulticast mode [ 1414.221393][T27905] lo: left allmulticast mode [ 1414.283381][T10428] gspca_ov534_9: reg_w failed -71 [ 1414.452411][T27551] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1414.542115][T22928] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1414.562747][T22928] usb 7-1: device descriptor read/8, error -71 [ 1414.572316][T10428] gspca_ov534_9: Unknown sensor 0000 [ 1414.572392][T10428] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1414.582252][ T5891] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1414.611161][T10428] usb 3-1: USB disconnect, device number 107 [ 1414.612078][T27551] usb 5-1: Using ep0 maxpacket: 8 [ 1414.626514][T27551] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1414.626569][T27551] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1414.626581][T27551] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1414.626593][T27551] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1414.626605][T27551] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1414.626627][T27551] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1414.626638][T27551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.792041][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 1414.796455][ T5891] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1414.796474][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.796520][ T5891] usb 4-1: Product: syz [ 1414.796529][ T5891] usb 4-1: Manufacturer: syz [ 1414.796536][ T5891] usb 4-1: SerialNumber: syz [ 1414.801434][ T5891] usb 4-1: config 0 descriptor?? [ 1414.848639][T22928] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1414.872949][T22928] usb 7-1: device descriptor read/8, error -71 [ 1414.903192][ T5891] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1414.933221][T27551] usb 5-1: usb_control_msg returned -32 [ 1414.933253][T27551] usbtmc 5-1:16.0: can't read capabilities [ 1414.963766][T27936] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1414.982409][T22928] usb usb7-port1: unable to enumerate USB device [ 1415.294259][T27941] usbtmc 5-1:16.0: control status returned 0 [ 1415.492247][T27934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1415.512515][T10428] usb 5-1: USB disconnect, device number 84 [ 1415.550820][T27934] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1415.621685][ T5891] gspca_ov534_9: reg_w failed -71 [ 1415.912009][ T5891] gspca_ov534_9: Unknown sensor 0000 [ 1415.912098][ T5891] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1415.918061][ T5891] usb 4-1: USB disconnect, device number 61 [ 1416.316256][T27958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7866'. [ 1416.584290][T27968] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7871'. [ 1416.723597][ T5882] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1416.882690][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 1416.889827][ T5882] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1416.889845][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.889855][ T5882] usb 4-1: Product: syz [ 1416.889862][ T5882] usb 4-1: Manufacturer: syz [ 1416.889870][ T5882] usb 4-1: SerialNumber: syz [ 1416.942117][ T5891] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1416.970251][ T5882] usb 4-1: config 0 descriptor?? [ 1417.000876][ T5882] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1417.082524][ T5891] usb 2-1: device descriptor read/64, error -71 [ 1417.332274][ T5891] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1417.472201][ T5891] usb 2-1: device descriptor read/64, error -71 [ 1417.582612][ T5891] usb usb2-port1: attempt power cycle [ 1417.652306][T27962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.703566][T27979] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1417.743329][T27980] syz_tun: entered allmulticast mode [ 1417.770586][T27961] syz_tun: left allmulticast mode [ 1417.782362][T27551] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1417.913768][ T5882] gspca_ov534_9: reg_w failed -71 [ 1417.932047][T27551] usb 5-1: Using ep0 maxpacket: 8 [ 1417.934446][T27551] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1417.934481][T27551] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1417.934493][T27551] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1417.934506][T27551] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1417.934517][T27551] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1417.934542][T27551] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1417.934554][T27551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.952263][ T5891] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1417.982312][ T5891] usb 2-1: device descriptor read/8, error -71 [ 1418.199910][T27551] usb 5-1: usb_control_msg returned -32 [ 1418.199938][T27551] usbtmc 5-1:16.0: can't read capabilities [ 1418.212198][ T5882] gspca_ov534_9: Unknown sensor 0000 [ 1418.212312][ T5882] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1418.224700][ T5891] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1418.250219][ T5882] usb 4-1: USB disconnect, device number 62 [ 1418.270485][ T5891] usb 2-1: device descriptor read/8, error -71 [ 1418.373062][ T5891] usb usb2-port1: unable to enumerate USB device [ 1418.564979][T27983] usbtmc 5-1:16.0: control status returned 0 [ 1418.770613][ T5882] usb 5-1: USB disconnect, device number 85 [ 1419.038272][T27989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7878'. [ 1419.714673][T27997] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7882'. [ 1423.153021][ T5882] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1423.192399][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.192467][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.292598][ T5882] usb 2-1: device descriptor read/64, error -71 [ 1423.572159][ T5882] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1423.759289][ T5882] usb 2-1: device descriptor read/64, error -71 [ 1423.871146][ T5882] usb usb2-port1: attempt power cycle [ 1424.222922][ T5882] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1424.382665][ T5882] usb 2-1: device descriptor read/8, error -71 [ 1425.082070][ T5882] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1425.103711][ T5882] usb 2-1: device descriptor read/8, error -71 [ 1425.212654][ T5882] usb usb2-port1: unable to enumerate USB device [ 1429.470696][T28090] netlink: 328 bytes leftover after parsing attributes in process `syz.6.7912'. [ 1429.479349][T28089] binder: BINDER_SET_CONTEXT_MGR already set [ 1429.479365][T28089] binder: 28086:28089 ioctl 4018620d 200000000040 returned -16 [ 1430.612084][ T5891] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1430.742064][ T5891] usb 4-1: device descriptor read/64, error -71 [ 1430.793990][T28106] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1430.982394][ T5891] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1431.324044][ T5891] usb 4-1: device descriptor read/64, error -71 [ 1431.433703][ T5891] usb usb4-port1: attempt power cycle [ 1431.862439][ T5891] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1431.968412][ T5891] usb 4-1: device descriptor read/8, error -71 [ 1432.885587][ T5891] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1432.906826][ T5891] usb 4-1: device descriptor read/8, error -71 [ 1433.028178][ T5891] usb usb4-port1: unable to enumerate USB device [ 1434.665251][T28137] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.665268][T28137] binder: 28136:28137 ioctl 4018620d 200000000040 returned -16 [ 1435.412087][T22928] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1435.585265][T28156] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1435.585265][T28156] program syz.4.7932 not setting count and/or reply_len properly [ 1435.942113][T22928] usb 7-1: Using ep0 maxpacket: 32 [ 1435.947230][T22928] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1435.947259][T22928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.947279][T22928] usb 7-1: Product: syz [ 1435.947292][T22928] usb 7-1: Manufacturer: syz [ 1435.947306][T22928] usb 7-1: SerialNumber: syz [ 1435.952886][T22928] usb 7-1: config 0 descriptor?? [ 1435.980444][T22928] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1436.622209][ T5891] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1436.850738][T28151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1436.872377][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 1436.876489][ T5891] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1436.876524][ T5891] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.876573][ T5891] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1436.876586][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.156247][T22928] gspca_ov534_9: reg_w failed -110 [ 1437.192746][T28170] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1437.286962][T28178] binder: BINDER_SET_CONTEXT_MGR already set [ 1437.286972][T28178] binder: 28177:28178 ioctl 4018620d 200000000040 returned -16 [ 1437.502402][T22928] gspca_ov534_9: Unknown sensor 0000 [ 1437.502488][T22928] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1437.506204][T22928] usb 7-1: USB disconnect, device number 38 [ 1437.519626][T28152] udevd[28152]: setting owner of /dev/bus/usb/007/038 to uid=0, gid=0 failed: No such file or directory [ 1439.717653][ T5915] usb 2-1: USB disconnect, device number 112 [ 1440.338702][T28217] binder: BINDER_SET_CONTEXT_MGR already set [ 1440.338714][T28217] binder: 28216:28217 ioctl 4018620d 200000000040 returned -16 [ 1440.714587][T22928] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1440.862543][T22928] usb 4-1: Using ep0 maxpacket: 32 [ 1440.867611][T22928] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1440.867634][T22928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.867979][T22928] usb 4-1: Product: syz [ 1440.867989][T22928] usb 4-1: Manufacturer: syz [ 1440.867997][T22928] usb 4-1: SerialNumber: syz [ 1440.876137][T22928] usb 4-1: config 0 descriptor?? [ 1440.923083][T22928] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1442.419303][T22928] gspca_ov534_9: reg_w failed -110 [ 1442.474380][T28221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1442.855198][T28240] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1443.052069][T22928] gspca_ov534_9: Unknown sensor 0000 [ 1443.052133][T22928] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1443.056228][T22928] usb 4-1: USB disconnect, device number 67 [ 1443.112082][ T5993] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1443.602078][ T5993] usb 2-1: Using ep0 maxpacket: 8 [ 1443.611718][ T5993] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1443.611736][ T5993] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.611768][ T5993] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1443.611779][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.074431][ T5993] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1444.135735][T28262] binder: BINDER_SET_CONTEXT_MGR already set [ 1444.135770][T28262] binder: 28260:28262 ioctl 4018620d 200000000040 returned -16 [ 1444.533138][ T5993] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1444.533158][ T5993] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.533170][ T5993] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1444.533189][ T5993] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1444.533203][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.536325][ T5993] usb 5-1: config 0 descriptor?? [ 1444.992722][ T5993] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 1444.992745][ T5993] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 1444.993536][ T5993] hid-steam 0003:28DE:1102.001F: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1445.095588][ T5993] hid-steam 0003:28DE:1102.001F: Steam Controller 'XXXXXXXXXX' connected [ 1445.126657][ T5993] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.001F/input/input52 [ 1445.302202][ T5993] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 1445.302225][ T5993] hid-steam 0003:28DE:1102.0020: unknown main item tag 0x0 [ 1445.512118][T27551] usb 2-1: USB disconnect, device number 113 [ 1445.547215][ T5993] hid-steam 0003:28DE:1102.0020: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1446.779790][T10428] usb 5-1: USB disconnect, device number 86 [ 1447.430570][T10428] hid-steam 0003:28DE:1102.001F: Steam Controller 'XXXXXXXXXX' disconnected [ 1447.659539][T28293] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1447.659539][T28293] program syz.3.7974 not setting count and/or reply_len properly [ 1448.442380][T27551] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1448.612546][T27551] usb 3-1: Using ep0 maxpacket: 8 [ 1448.617649][T27551] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1448.617677][T27551] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.617724][T27551] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1448.617745][T27551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.212566][ T5915] usb 3-1: USB disconnect, device number 108 [ 1453.752162][ T5915] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1453.912545][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 1453.922448][ T5915] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1453.922626][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.922646][ T5915] usb 7-1: Product: syz [ 1453.922660][ T5915] usb 7-1: Manufacturer: syz [ 1453.922672][ T5915] usb 7-1: SerialNumber: syz [ 1454.015561][ T5915] usb 7-1: config 0 descriptor?? [ 1454.025360][ T5915] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1455.275918][ T5915] gspca_ov534_9: reg_w failed -110 [ 1455.592027][ T5915] gspca_ov534_9: Unknown sensor 0000 [ 1455.592122][ T5915] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1455.601522][ T5915] usb 7-1: USB disconnect, device number 39 [ 1456.518104][T28436] misc userio: Invalid payload size [ 1458.294912][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1458.298330][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1458.301889][ T5993] libceph: connect (1)[c::]:6789 error -101 [ 1458.302689][ T5993] libceph: mon0 (1)[c::]:6789 connect error [ 1458.333771][T28474] ceph: No mds server is up or the cluster is laggy [ 1465.999072][T28569] misc userio: Invalid payload size [ 1466.222091][T24800] Bluetooth: hci2: command 0x0406 tx timeout [ 1470.942213][ T5882] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1471.094575][ T5882] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1471.094608][ T5882] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.094629][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1471.094661][ T5882] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1471.094682][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.112026][ T5891] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1471.172214][ T5882] usb 3-1: config 0 descriptor?? [ 1471.262230][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 1471.312175][T22928] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1471.313294][ T5891] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1471.313321][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.313581][ T5891] usb 2-1: Product: syz [ 1471.313596][ T5891] usb 2-1: Manufacturer: syz [ 1471.313610][ T5891] usb 2-1: SerialNumber: syz [ 1471.371725][ T5891] usb 2-1: config 0 descriptor?? [ 1471.476937][T22928] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1471.477002][T22928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.478318][T22928] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1471.478345][T22928] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1471.478365][T22928] usb 7-1: Manufacturer: syz [ 1471.483257][T22928] usb 7-1: config 0 descriptor?? [ 1471.607459][ T5882] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 1471.607496][ T5882] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 1471.609825][ T5882] hid-steam 0003:28DE:1102.0021: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1471.662102][ T5882] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' connected [ 1471.689656][ T5882] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0021/input/input54 [ 1471.723597][T22928] rc_core: IR keymap rc-hauppauge not found [ 1471.723619][T22928] Registered IR keymap rc-empty [ 1471.741092][T22928] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1471.799396][ T5882] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 1471.799431][ T5882] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 1471.802280][T22928] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input53 [ 1471.829661][ T5882] hid-steam 0003:28DE:1102.0022: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 1472.063619][ T5882] usb 7-1: USB disconnect, device number 40 [ 1472.882139][ T5891] usb 3-1: reset full-speed USB device number 109 using dummy_hcd [ 1475.176686][ T5882] usb 3-1: USB disconnect, device number 109 [ 1476.404376][ T5882] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' disconnected [ 1477.284148][T10428] usb 2-1: USB disconnect, device number 114 [ 1479.685484][T28794] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8169'. [ 1482.032054][T10428] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1482.212019][T10428] usb 2-1: Using ep0 maxpacket: 32 [ 1482.229806][T10428] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1482.229824][T10428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.229835][T10428] usb 2-1: Product: syz [ 1482.229842][T10428] usb 2-1: Manufacturer: syz [ 1482.229850][T10428] usb 2-1: SerialNumber: syz [ 1482.248513][T10428] usb 2-1: config 0 descriptor?? [ 1482.349865][T10428] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1482.926199][T10428] gspca_ov534_9: reg_w failed -71 [ 1483.212025][T10428] gspca_ov534_9: Unknown sensor 0000 [ 1483.212122][T10428] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1483.233473][T10428] usb 2-1: USB disconnect, device number 115 [ 1485.018768][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.019362][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.248737][T28982] netlink: 328 bytes leftover after parsing attributes in process `syz.6.8250'. [ 1493.285385][T28985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1495.356888][T29016] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1495.356888][T29016] program syz.6.8261 not setting count and/or reply_len properly [ 1497.002616][T29043] netlink: 328 bytes leftover after parsing attributes in process `syz.2.8273'. [ 1497.549547][T29050] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1497.549547][T29050] program syz.1.8275 not setting count and/or reply_len properly [ 1499.662789][ T5891] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1500.142074][ T5891] usb 7-1: Using ep0 maxpacket: 16 [ 1500.145622][ T5891] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.145672][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1500.146985][ T5891] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1500.147013][ T5891] usb 7-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1500.147031][ T5891] usb 7-1: Manufacturer: syz [ 1500.220026][ T5891] usb 7-1: config 0 descriptor?? [ 1500.243350][ T5891] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1500.445447][T29122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8303'. [ 1502.332030][ T5866] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1502.380159][ T5882] usb 7-1: USB disconnect, device number 41 [ 1502.490412][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 1502.524479][ T5866] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1502.524506][ T5866] usb 2-1: config 0 has no interface number 0 [ 1502.844613][T10428] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1503.538390][T10428] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1503.538423][T10428] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.538502][T10428] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1503.538536][T10428] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1503.538558][T10428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.554424][T10428] usb 3-1: config 0 descriptor?? [ 1503.922388][ T5866] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1503.922467][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.922487][ T5866] usb 2-1: Product: syz [ 1503.922500][ T5866] usb 2-1: Manufacturer: syz [ 1503.922514][ T5866] usb 2-1: SerialNumber: syz [ 1503.976012][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1503.976412][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1503.976744][ T5866] usb 2-1: config 0 descriptor?? [ 1503.976852][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1503.977192][T10428] usbhid 3-1:0.0: can't add hid device: -32 [ 1503.977391][T10428] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1504.033650][T10428] usb 3-1: USB disconnect, device number 110 [ 1504.046358][T29209] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8339'. [ 1504.047565][T29209] netlink: 'syz.3.8339': attribute type 10 has an invalid length. [ 1504.115496][T29209] team0: Port device dummy0 added [ 1504.228034][ T5866] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1504.228062][ T5866] usb 2-1: selecting invalid altsetting 1 [ 1504.228075][ T5866] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1504.266267][ T5866] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1504.266621][ T5866] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1504.266677][ T5866] usb 2-1: media controller created [ 1504.307842][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1505.823815][ T5866] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1505.824767][ T5866] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1506.100489][ T5866] usb 2-1: USB disconnect, device number 116 [ 1506.357163][ T5882] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1506.534129][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 1506.827730][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.863576][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1507.109731][ T5882] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1507.109763][ T5882] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1507.109783][ T5882] usb 3-1: Manufacturer: syz [ 1507.166551][ T5882] usb 3-1: config 0 descriptor?? [ 1507.216748][ T5882] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1509.884441][ T5887] usb 3-1: USB disconnect, device number 111 [ 1511.441548][T29303] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1511.441548][T29303] program syz.2.8376 not setting count and/or reply_len properly [ 1511.482143][T10428] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1511.714582][T10428] usb 4-1: Using ep0 maxpacket: 32 [ 1512.300165][T10428] usb 4-1: device descriptor read/all, error -71 [ 1512.682889][T29325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.686626][T29325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.182063][ T5891] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1514.322272][ T5891] usb 7-1: device descriptor read/64, error -71 [ 1514.572234][ T5891] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1514.712254][ T5891] usb 7-1: device descriptor read/64, error -71 [ 1514.822441][ T5891] usb usb7-port1: attempt power cycle [ 1515.162056][ T5891] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1515.188301][ T5891] usb 7-1: device descriptor read/8, error -71 [ 1515.432093][ T5891] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1515.452765][ T5891] usb 7-1: device descriptor read/8, error -71 [ 1515.582430][ T5891] usb usb7-port1: unable to enumerate USB device [ 1516.925255][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8423'. [ 1521.550232][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8435'. [ 1522.276298][ T5866] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1522.332073][T22928] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1522.422065][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 1522.423854][ T5866] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1522.423881][ T5866] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1522.423900][ T5866] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1522.423949][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1522.423969][ T5866] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1522.423993][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1522.424032][ T5866] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1522.424053][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.473623][ T5866] usb 7-1: config 0 descriptor?? [ 1522.512038][T22928] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1522.512070][T22928] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1522.512088][T22928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1522.512110][T22928] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1522.512121][T22928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.523610][T24800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1522.544624][T24800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1522.560838][T24800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1522.577743][T24800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1522.579670][T24800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1522.619873][T22928] usb 4-1: config 0 descriptor?? [ 1522.717418][ T5866] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1522.751592][ T5866] usb 7-1: USB disconnect, device number 46 [ 1522.845980][ T5866] usblp0: removed [ 1523.048497][T22928] usbhid 4-1:0.0: can't add hid device: -71 [ 1523.048573][T22928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1523.074421][T22928] usb 4-1: USB disconnect, device number 70 [ 1523.853924][T29518] netlink: 'syz.6.8463': attribute type 1 has an invalid length. [ 1523.957707][T29526] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8463'. [ 1524.632095][T24800] Bluetooth: hci1: command tx timeout [ 1525.745179][T17683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.382177][ T5866] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1526.665086][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 1526.783163][T24800] Bluetooth: hci1: command tx timeout [ 1526.894029][ T5866] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1526.894057][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.894076][ T5866] usb 7-1: Product: syz [ 1526.894090][ T5866] usb 7-1: Manufacturer: syz [ 1526.894104][ T5866] usb 7-1: SerialNumber: syz [ 1526.905124][T17683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.922552][ T5866] usb 7-1: config 0 descriptor?? [ 1526.962811][ T5866] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1527.281274][T29486] chnl_net:caif_netlink_parms(): no params data found [ 1527.372037][T22928] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1527.552616][T22928] usb 3-1: Using ep0 maxpacket: 8 [ 1527.557804][T22928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.557830][T22928] usb 3-1: config 0 has no interfaces? [ 1527.560434][T22928] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1527.560462][T22928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.560535][T22928] usb 3-1: Product: syz [ 1527.560548][T22928] usb 3-1: Manufacturer: syz [ 1527.560561][T22928] usb 3-1: SerialNumber: syz [ 1527.580770][T22928] usb 3-1: config 0 descriptor?? [ 1527.680653][T29623] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8511'. [ 1527.885790][T17683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.964063][T29625] syz_tun: entered allmulticast mode [ 1527.968089][T29594] syz_tun: left allmulticast mode [ 1527.972407][ T5866] gspca_ov534_9: reg_w failed -110 [ 1528.802210][ T5866] gspca_ov534_9: Unknown sensor 0000 [ 1528.803164][ T5866] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1529.057826][T24800] Bluetooth: hci1: command tx timeout [ 1529.059632][ T5866] usb 7-1: USB disconnect, device number 47 [ 1529.286500][T17683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.188027][T29486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.188404][T29486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.188618][T29486] bridge_slave_0: entered allmulticast mode [ 1530.191080][T29486] bridge_slave_0: entered promiscuous mode [ 1530.231479][T29486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.231678][T29486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.237400][T22928] usb 3-1: USB disconnect, device number 112 [ 1530.256760][T29486] bridge_slave_1: entered allmulticast mode [ 1530.278563][T29486] bridge_slave_1: entered promiscuous mode [ 1530.455381][T29486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.513574][T29486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.691358][T29486] team0: Port device team_slave_0 added [ 1531.753475][T29486] team0: Port device team_slave_1 added [ 1532.076086][T29486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.076105][T29486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.076132][T29486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.084997][T29728] netlink: 92 bytes leftover after parsing attributes in process `syz.6.8553'. [ 1532.091243][T29486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.091261][T29486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.091288][T29486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.262954][T29486] hsr_slave_0: entered promiscuous mode [ 1532.266712][T29486] hsr_slave_1: entered promiscuous mode [ 1532.268834][T29486] debugfs: 'hsr0' already exists in 'hsr' [ 1532.268862][T29486] Cannot create hsr debugfs directory [ 1532.356439][T24800] Bluetooth: hci1: command tx timeout [ 1533.329872][T17683] vlan3: left promiscuous mode [ 1533.329888][T17683] dummy0: left promiscuous mode [ 1533.330170][T17683] bridge0: port 3(vlan3) entered disabled state [ 1533.414709][T17683] bridge_slave_1: left allmulticast mode [ 1533.414739][T17683] bridge_slave_1: left promiscuous mode [ 1533.414995][T17683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.516346][T17683] bridge_slave_0: left allmulticast mode [ 1533.516375][T17683] bridge_slave_0: left promiscuous mode [ 1533.537403][T17683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.926034][T29760] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1535.282857][T17683] bond5 (unregistering): (slave bridge2): Releasing active interface [ 1535.443781][T17683] bond6 (unregistering): (slave bridge3): Releasing active interface [ 1535.743089][T17683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.823758][T17683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.865588][T17683] bond0 (unregistering): Released all slaves [ 1535.896264][T17683] bond1 (unregistering): Released all slaves [ 1535.948326][T17683] bond2 (unregistering): Released all slaves [ 1536.005246][T17683] bond3 (unregistering): Released all slaves [ 1536.066251][T17683] bond4 (unregistering): Released all slaves [ 1536.089720][T17683] bond5 (unregistering): Released all slaves [ 1536.144008][T17683] bond6 (unregistering): Released all slaves [ 1536.171190][T17683] bond7 (unregistering): Released all slaves [ 1538.272002][ T5993] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1538.412108][ T5993] usb 7-1: device descriptor read/64, error -71 [ 1538.772885][ T5993] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1542.352312][ T5993] usb 7-1: device descriptor read/64, error -71 [ 1542.462613][ T5993] usb usb7-port1: attempt power cycle [ 1542.832186][ T5993] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1543.892054][T17683] hsr_slave_0: left promiscuous mode [ 1544.637526][T17683] hsr_slave_1: left promiscuous mode [ 1544.659725][T17683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1544.659805][T17683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.699104][T17683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1544.699124][T17683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.783184][T17683] veth1_macvtap: left promiscuous mode [ 1544.783291][T17683] veth0_macvtap: left promiscuous mode [ 1544.783503][T17683] veth1_vlan: left promiscuous mode [ 1544.783669][T17683] veth0_vlan: left promiscuous mode [ 1545.753782][ T5993] usb 7-1: device descriptor read/8, error -71 [ 1546.068027][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.068097][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.862710][T17683] team0 (unregistering): Port device team_slave_1 removed [ 1546.923752][T17683] team0 (unregistering): Port device team_slave_0 removed [ 1547.247194][T17683] team0 (unregistering): Port device dummy0 removed [ 1547.575342][T30002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8672'. [ 1548.849149][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8686'. [ 1548.929939][T29486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1548.975470][T29486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1549.123886][T29486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1549.200889][T29486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1549.735406][T29486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.280314][T29486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.363662][T17683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.363740][T17683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.416897][ T1371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.416981][ T1371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.225279][T29486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.370406][T29486] veth0_vlan: entered promiscuous mode [ 1552.382415][ T5887] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1552.401544][T29486] veth1_vlan: entered promiscuous mode [ 1552.501063][T29486] veth0_macvtap: entered promiscuous mode [ 1552.516904][T29486] veth1_macvtap: entered promiscuous mode [ 1552.531975][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 1552.534390][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.534422][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.535832][ T5887] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1552.535858][ T5887] usb 7-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1552.535877][ T5887] usb 7-1: Manufacturer: syz [ 1552.736986][ T5887] usb 7-1: config 0 descriptor?? [ 1552.757091][T29486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.793519][T29486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.888077][T17683] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.893494][T17683] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.899585][T17683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.900137][T17683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.190523][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1553.191420][ T5887] usbhid 7-1:0.0: can't add hid device: -71 [ 1553.191528][ T5887] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1553.242012][ T5887] usb 7-1: USB disconnect, device number 52 [ 1553.728832][T28598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.728855][T28598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.083716][T26273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.083730][T26273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.002042][T22928] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1555.152077][T22928] usb 2-1: Using ep0 maxpacket: 8 [ 1555.160599][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1555.169449][T22928] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1555.169500][T22928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1555.169520][T22928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1555.169540][T22928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1555.169561][T22928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1555.169598][T22928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1555.169619][T22928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.202856][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1555.212405][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1555.214465][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1555.215147][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1555.450587][T30171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.453081][T30171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.481975][T30171] bridge3: left promiscuous mode [ 1555.712075][T22928] usb 2-1: usb_control_msg returned -71 [ 1555.712127][T22928] usbtmc 2-1:16.0: can't read capabilities [ 1555.758260][T22928] usb 2-1: USB disconnect, device number 117 [ 1557.052026][ T5887] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1557.202200][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 1557.210303][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.210323][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.236188][ T5887] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1557.236220][ T5887] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1557.236240][ T5887] usb 2-1: Manufacturer: syz [ 1557.249585][ T5887] usb 2-1: config 0 descriptor?? [ 1557.342049][ T5805] Bluetooth: hci5: command tx timeout [ 1557.931748][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 1557.931829][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1557.955725][ T5887] usb 2-1: USB disconnect, device number 118 [ 1558.982714][T26273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.051612][T30166] chnl_net:caif_netlink_parms(): no params data found [ 1559.422502][ T5805] Bluetooth: hci5: command tx timeout [ 1560.431301][ T36] audit: type=1326 audit(1773171225.206:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30203 comm="syz.3.8747" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ed68cc799 code=0x0 [ 1562.440197][ T5805] Bluetooth: hci5: command tx timeout [ 1563.032739][T30166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.032832][T30166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.033042][T30166] bridge_slave_0: entered allmulticast mode [ 1563.073438][T30166] bridge_slave_0: entered promiscuous mode [ 1564.002064][ T810] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1564.199968][T26273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.205049][ T810] usb 4-1: Using ep0 maxpacket: 8 [ 1564.207461][ T810] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1564.207516][ T810] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1564.207546][ T810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1564.207568][ T810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1564.207590][ T810] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1564.207630][ T810] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1564.207651][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.349856][T30166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.350113][T30166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.350448][T30166] bridge_slave_1: entered allmulticast mode [ 1564.381572][T30166] bridge_slave_1: entered promiscuous mode [ 1564.527770][ T810] usb 4-1: usb_control_msg returned -32 [ 1564.527816][ T810] usbtmc 4-1:16.0: can't read capabilities [ 1564.544707][ T5805] Bluetooth: hci5: command tx timeout [ 1564.575526][ T810] usb 4-1: USB disconnect, device number 71 [ 1564.885481][T26273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.797371][T30166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.851368][T30166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.753914][T26273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.523140][T30166] team0: Port device team_slave_0 added [ 1567.537005][T30166] team0: Port device team_slave_1 added [ 1567.646261][T30166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.646278][T30166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.646314][T30166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.653031][T30166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.653047][T30166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.653072][T30166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.680898][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8765'. [ 1567.874279][T30166] hsr_slave_0: entered promiscuous mode [ 1567.875572][T30166] hsr_slave_1: entered promiscuous mode [ 1567.876887][T30166] debugfs: 'hsr0' already exists in 'hsr' [ 1567.876913][T30166] Cannot create hsr debugfs directory [ 1568.366894][ T5891] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1568.974160][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 1568.991808][ T5891] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1569.000811][ T5891] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1569.000840][ T5891] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1569.000863][ T5891] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1569.000886][ T5891] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1569.000930][ T5891] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1569.000952][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.223094][T26273] vlan2: left promiscuous mode [ 1569.223541][T26273] bridge0: port 3(vlan2) entered disabled state [ 1569.295465][T26273] bridge_slave_1: left allmulticast mode [ 1569.295814][T26273] bridge_slave_1: left promiscuous mode [ 1569.297116][T26273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.333504][ T5891] usb 7-1: usb_control_msg returned -32 [ 1569.333550][ T5891] usbtmc 7-1:16.0: can't read capabilities [ 1569.372901][ T5891] usb 7-1: USB disconnect, device number 53 [ 1569.443698][T26273] bridge_slave_0: left allmulticast mode [ 1569.443719][T26273] bridge_slave_0: left promiscuous mode [ 1569.443885][T26273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.533001][T30295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1569.533033][T30295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1571.033311][T26273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.113010][T26273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.159256][T26273] bond0 (unregistering): Released all slaves [ 1571.168867][T26273] bond1 (unregistering): Released all slaves [ 1571.186712][T26273] bond2 (unregistering): Released all slaves [ 1571.204469][T26273] bond3 (unregistering): Released all slaves [ 1571.264199][T30310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8777'. [ 1571.392026][ T5887] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1572.173411][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 1572.520260][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.520286][ T5887] usb 2-1: config 0 has no interfaces? [ 1572.524211][ T5887] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1572.524246][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.524263][ T5887] usb 2-1: Product: syz [ 1572.524277][ T5887] usb 2-1: Manufacturer: syz [ 1572.524290][ T5887] usb 2-1: SerialNumber: syz [ 1572.568928][ T5887] usb 2-1: config 0 descriptor?? [ 1573.076502][T30344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8784'. [ 1573.076533][T30344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8784'. [ 1574.172082][ T810] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1574.203896][ T5891] usb 2-1: USB disconnect, device number 119 [ 1574.912140][ T810] usb 7-1: Using ep0 maxpacket: 32 [ 1574.914431][ T810] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1574.914459][ T810] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1574.914479][ T810] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.914497][ T810] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1574.914546][ T810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1574.914566][ T810] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1574.914589][ T810] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1574.914629][ T810] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1574.914651][ T810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.060064][ T810] usb 7-1: config 0 descriptor?? [ 1575.183639][T30377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1575.183659][T30377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8795'. [ 1577.783706][T26273] hsr_slave_0: left promiscuous mode [ 1577.787884][T22928] usb 7-1: USB disconnect, device number 54 [ 1577.834134][T26273] hsr_slave_1: left promiscuous mode [ 1577.858479][T26273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.858500][T26273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.893045][T26273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.893072][T26273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.984209][T26273] veth1_macvtap: left promiscuous mode [ 1577.986888][T26273] veth0_macvtap: left promiscuous mode [ 1577.987095][T26273] veth1_vlan: left promiscuous mode [ 1577.987184][T26273] veth0_vlan: left promiscuous mode [ 1578.073600][ T810] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1578.142118][ T5807] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1578.202001][T22928] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1578.223673][ T810] usb 3-1: Using ep0 maxpacket: 32 [ 1578.246941][ T810] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1578.246960][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.246970][ T810] usb 3-1: Product: syz [ 1578.246978][ T810] usb 3-1: Manufacturer: syz [ 1578.246986][ T810] usb 3-1: SerialNumber: syz [ 1578.250827][ T810] usb 3-1: config 0 descriptor?? [ 1578.292323][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 1578.313880][ T810] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1578.346428][ T5807] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1578.346444][ T5807] usb 2-1: config 0 has no interface number 0 [ 1578.348575][ T5807] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1578.348592][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.348602][ T5807] usb 2-1: Product: syz [ 1578.348609][ T5807] usb 2-1: Manufacturer: syz [ 1578.348616][ T5807] usb 2-1: SerialNumber: syz [ 1578.356433][T22928] usb 7-1: Using ep0 maxpacket: 8 [ 1578.372472][ T5807] usb 2-1: config 0 descriptor?? [ 1578.392859][T22928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.392938][T22928] usb 7-1: config 0 has no interfaces? [ 1578.422902][T22928] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1578.422931][T22928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.423005][T22928] usb 7-1: Product: syz [ 1578.423019][T22928] usb 7-1: Manufacturer: syz [ 1578.423032][T22928] usb 7-1: SerialNumber: syz [ 1578.467244][T22928] usb 7-1: config 0 descriptor?? [ 1578.544583][ T5807] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1578.544612][ T5807] usb 2-1: selecting invalid altsetting 1 [ 1578.544627][ T5807] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1578.600676][ T5807] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1578.600966][ T5807] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1578.601027][ T5807] usb 2-1: media controller created [ 1578.648782][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1579.075292][T26273] team0 (unregistering): Port device team_slave_1 removed [ 1579.122813][T26273] team0 (unregistering): Port device team_slave_0 removed [ 1579.355640][ T810] gspca_ov534_9: reg_w failed -110 [ 1579.432998][T26273] team0 (unregistering): Port device dummy0 removed [ 1579.556857][T30410] lo: entered allmulticast mode [ 1579.667125][ T810] gspca_ov534_9: Unknown sensor 0000 [ 1579.667226][ T810] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1579.742299][ T5807] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1579.742352][ T5807] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1579.930953][T30398] lo: left allmulticast mode [ 1579.948833][ T5915] usb 3-1: USB disconnect, device number 113 [ 1580.168825][T30417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8805'. [ 1580.201761][ T5915] usb 2-1: USB disconnect, device number 120 [ 1581.334685][T30166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1581.340136][ T5891] usb 7-1: USB disconnect, device number 55 [ 1581.373363][T30166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1581.524394][T30166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1582.860599][ T36] audit: type=1326 audit(1773171247.556:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30450 comm="syz.6.8812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e170cc799 code=0x0 [ 1584.187014][T30166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1585.832329][T30487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8816'. [ 1585.920818][T30490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.923029][T30490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.135547][T30166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.197226][T30166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.245390][T17683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.250212][T17683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.254041][T30498] netlink: 'syz.6.8819': attribute type 1 has an invalid length. [ 1586.352274][T27551] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1586.375030][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.375126][ T1441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.409502][T30498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8819'. [ 1586.502104][T27551] usb 2-1: Using ep0 maxpacket: 32 [ 1586.510048][T27551] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1586.510076][T27551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.510096][T27551] usb 2-1: Product: syz [ 1586.510109][T27551] usb 2-1: Manufacturer: syz [ 1586.510123][T27551] usb 2-1: SerialNumber: syz [ 1586.545547][T27551] usb 2-1: config 0 descriptor?? [ 1586.589730][T27551] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1587.013815][T30492] syz_tun: entered allmulticast mode [ 1587.056140][T30491] syz_tun: left allmulticast mode [ 1587.072049][T27551] gspca_ov534_9: reg_w failed -71 [ 1587.492315][T27551] gspca_ov534_9: Unknown sensor 0000 [ 1587.493294][T27551] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1587.705235][T27551] usb 2-1: USB disconnect, device number 121 [ 1587.804394][T30166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.021641][T30549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8828'. [ 1589.262776][T30554] netlink: 'syz.6.8830': attribute type 1 has an invalid length. [ 1589.367678][T30166] veth0_vlan: entered promiscuous mode [ 1589.388002][T30554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8830'. [ 1589.437228][T30166] veth1_vlan: entered promiscuous mode [ 1589.606203][T30166] veth0_macvtap: entered promiscuous mode [ 1589.667902][T30166] veth1_macvtap: entered promiscuous mode [ 1589.765234][T30166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1589.830427][T30166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.857104][ T1387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.857156][ T1387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.857188][ T1387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.857219][ T1387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.054017][ T810] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1590.211965][ T810] usb 2-1: Using ep0 maxpacket: 32 [ 1590.230980][ T810] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1590.231010][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.231028][ T810] usb 2-1: Product: syz [ 1590.231042][ T810] usb 2-1: Manufacturer: syz [ 1590.231055][ T810] usb 2-1: SerialNumber: syz [ 1590.322444][ T810] usb 2-1: config 0 descriptor?? [ 1590.328298][T26275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.328320][T26275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.361495][ T810] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1590.528003][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.528026][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.582519][T30567] syz_tun: entered allmulticast mode [ 1590.599366][T30565] syz_tun: left allmulticast mode [ 1590.698977][ T810] gspca_ov534_9: reg_w failed -71 [ 1591.691996][ T810] gspca_ov534_9: Unknown sensor 0000 [ 1591.692087][ T810] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1591.696308][ T810] usb 2-1: USB disconnect, device number 122 [ 1592.666474][T24800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1592.741497][T24800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1592.945238][T24800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1593.053333][T24800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1593.149978][T24800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1593.580371][T30597] netlink: 'syz.1.8840': attribute type 1 has an invalid length. [ 1593.780047][T30600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8840'. [ 1594.044874][T30603] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1594.044874][T30603] program syz.3.8841 not setting count and/or reply_len properly [ 1594.812000][T22928] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1594.875122][T30587] chnl_net:caif_netlink_parms(): no params data found [ 1594.936268][T30614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.938270][T30614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.942477][T22928] usb 2-1: device descriptor read/64, error -71 [ 1595.107610][T30587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.107833][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.108365][T30587] bridge_slave_0: entered allmulticast mode [ 1595.111151][T30587] bridge_slave_0: entered promiscuous mode [ 1595.115328][T30587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.115512][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.115702][T30587] bridge_slave_1: entered allmulticast mode [ 1595.121482][T30587] bridge_slave_1: entered promiscuous mode [ 1595.170713][T30587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.180292][T30587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.183820][T22928] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1595.232449][T30587] team0: Port device team_slave_0 added [ 1595.236052][T30587] team0: Port device team_slave_1 added [ 1595.278210][T30587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.278228][T30587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.278253][T30587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.280457][T30587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.280472][T30587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.280496][T30587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.312248][T22928] usb 2-1: device descriptor read/64, error -71 [ 1595.352417][ T5805] Bluetooth: hci4: command tx timeout [ 1595.483024][T22928] usb usb2-port1: attempt power cycle [ 1595.520198][T30622] syz_tun: entered allmulticast mode [ 1595.535642][T30587] hsr_slave_0: entered promiscuous mode [ 1595.536575][T30587] hsr_slave_1: entered promiscuous mode [ 1595.537161][T30587] debugfs: 'hsr0' already exists in 'hsr' [ 1595.537177][T30587] Cannot create hsr debugfs directory [ 1595.540611][T30621] syz_tun: left allmulticast mode [ 1595.822146][T22928] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1595.844771][T22928] usb 2-1: device descriptor read/8, error -71 [ 1596.891987][T22928] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1596.899228][T30635] netlink: 'syz.4.8851': attribute type 1 has an invalid length. [ 1596.913330][T22928] usb 2-1: device descriptor read/8, error -71 [ 1597.023481][T22928] usb usb2-port1: unable to enumerate USB device [ 1597.502118][ T5805] Bluetooth: hci4: command tx timeout [ 1599.979399][ T5805] Bluetooth: hci4: command tx timeout [ 1600.678920][T30587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.885120][T30659] syz_tun: entered allmulticast mode [ 1600.886725][T30659] syz_tun: left allmulticast mode [ 1602.013949][ T5805] Bluetooth: hci4: command tx timeout [ 1602.202089][ T5891] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1602.398259][T30587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.423053][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.423082][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1602.423126][ T5891] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1602.423148][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.523647][ T5891] usb 4-1: config 0 descriptor?? [ 1602.728568][T30696] netlink: 'syz.6.8870': attribute type 1 has an invalid length. [ 1602.945724][T30701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8870'. [ 1603.850505][T30587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.033344][ T5887] usb 4-1: USB disconnect, device number 72 [ 1605.163883][T30587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.268695][T30717] syz_tun: entered allmulticast mode [ 1605.269722][T30716] syz_tun: left allmulticast mode [ 1607.512602][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.512673][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.811166][T30743] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1607.811166][T30743] program syz.6.8883 not setting count and/or reply_len properly [ 1608.089155][T30587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1608.135309][T30587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1608.173344][T30587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1608.242976][T30587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1608.372307][T30757] syz_tun: entered allmulticast mode [ 1608.391540][T30756] syz_tun: left allmulticast mode [ 1608.462475][ T5807] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1608.549659][T30587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.582668][T30587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.591361][T30519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.591574][T30519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.615391][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.615417][ T5807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1608.615454][ T5807] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1608.615476][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.674225][ T5807] usb 4-1: config 0 descriptor?? [ 1608.742923][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.743055][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.547965][T30587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.345397][T30587] veth0_vlan: entered promiscuous mode [ 1611.389357][T30587] veth1_vlan: entered promiscuous mode [ 1611.584154][T30587] veth0_macvtap: entered promiscuous mode [ 1611.590924][T30587] veth1_macvtap: entered promiscuous mode [ 1611.628002][T30587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1611.658075][T30587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1611.658913][ T5887] usb 4-1: USB disconnect, device number 73 [ 1611.872081][T30794] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1611.872081][T30794] program syz.6.8895 not setting count and/or reply_len properly [ 1612.119262][ T1371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.272495][ T1371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.297513][ T1371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.297960][ T1371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.709380][T30802] syz_tun: entered allmulticast mode [ 1612.736805][T30801] syz_tun: left allmulticast mode [ 1612.797745][ T1371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.797764][ T1371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.955776][ T1356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.955792][ T1356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.124914][T30830] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1615.124914][T30830] program syz.6.8907 not setting count and/or reply_len properly [ 1615.252018][ T810] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1615.271676][T30835] syz_tun: entered allmulticast mode [ 1615.288790][T30834] syz_tun: left allmulticast mode [ 1616.616056][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.616083][ T810] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1616.616120][ T810] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1616.616142][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.840181][ T810] usb 4-1: config 0 descriptor?? [ 1618.725563][ T810] usb 4-1: USB disconnect, device number 74 [ 1620.487904][T30876] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1620.487904][T30876] program syz.2.8921 not setting count and/or reply_len properly [ 1620.697211][T30878] syz_tun: entered allmulticast mode [ 1620.719032][T30877] syz_tun: left allmulticast mode [ 1621.322061][T10428] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1621.463489][ T5891] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1621.480145][T10428] usb 4-1: Using ep0 maxpacket: 8 [ 1621.487702][T10428] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.487728][T10428] usb 4-1: config 0 has no interfaces? [ 1621.525362][T10428] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1621.525381][T10428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.525391][T10428] usb 4-1: Product: syz [ 1621.525399][T10428] usb 4-1: Manufacturer: syz [ 1621.525406][T10428] usb 4-1: SerialNumber: syz [ 1621.531211][T10428] usb 4-1: config 0 descriptor?? [ 1621.655741][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.655799][ T5891] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1621.655824][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1621.655858][ T5891] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1621.655878][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.674868][ T5891] usb 3-1: config 0 descriptor?? [ 1621.700542][ T5891] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1622.498375][T30905] syz_tun: entered allmulticast mode [ 1622.502212][T30904] syz_tun: left allmulticast mode [ 1624.297149][T10428] usb 4-1: USB disconnect, device number 75 [ 1625.456573][ T810] usb 3-1: USB disconnect, device number 114 [ 1626.594435][T30946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8946'. [ 1629.972273][ T810] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1630.158001][ T810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.158034][ T810] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1630.158048][ T810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1630.158067][ T810] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1630.158079][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.222278][ T810] usb 3-1: config 0 descriptor?? [ 1630.231207][ T810] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1631.545625][T30988] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1631.545625][T30988] program syz.4.8960 not setting count and/or reply_len properly [ 1632.814542][T27551] usb 3-1: USB disconnect, device number 115 [ 1634.387676][T31027] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1634.387676][T31027] program syz.6.8972 not setting count and/or reply_len properly [ 1635.292149][ T5891] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1635.534559][ T5891] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.534614][ T5891] usb 7-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1635.534640][ T5891] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1635.534682][ T5891] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1635.534705][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.573202][ T5891] usb 7-1: config 0 descriptor?? [ 1635.621647][ T5891] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1638.090425][ T5891] usb 7-1: USB disconnect, device number 56 [ 1639.910195][T31079] netlink: 328 bytes leftover after parsing attributes in process `syz.1.8991'. [ 1644.152965][ T5882] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1645.275773][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.275826][ T5882] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1645.275852][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1645.275886][ T5882] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1645.275908][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.354847][ T5882] usb 4-1: config 0 descriptor?? [ 1645.452441][ T5882] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1645.581751][T31122] netlink: 328 bytes leftover after parsing attributes in process `syz.6.9005'. [ 1645.746017][T24800] Bluetooth: hci1: command 0x0406 tx timeout [ 1646.959045][T27551] usb 4-1: USB disconnect, device number 76 [ 1648.465901][ T5866] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1648.518251][T31156] netlink: 328 bytes leftover after parsing attributes in process `syz.6.9017'. [ 1648.608809][T31158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9018'. [ 1648.614424][ T5866] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.614452][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1648.614484][ T5866] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1648.614504][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.636370][ T5866] usb 3-1: config 0 descriptor?? [ 1649.089068][ T5866] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1650.841126][ T5866] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1650.994368][ T5866] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1650.994394][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.003162][ T5866] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1651.003189][ T5866] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1651.003208][ T5866] usb 5-1: Manufacturer: syz [ 1651.009455][ T5866] usb 5-1: config 0 descriptor?? [ 1651.022770][ T5866] igorplugusb 5-1:0.0: incorrect number of endpoints [ 1651.198597][ T5866] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1651.341948][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 1651.344196][ T5866] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1651.344223][ T5866] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1651.344241][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.344259][ T5866] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1651.344293][ T5866] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1651.344314][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.354220][ T5866] usb 4-1: config 0 descriptor?? [ 1651.569090][T31197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9030'. [ 1651.629887][T31201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9032'. [ 1652.469614][T27551] usb 3-1: USB disconnect, device number 116 [ 1652.648467][ T810] usb 5-1: USB disconnect, device number 87 [ 1653.454946][T31228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9043'. [ 1653.475197][T31231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9042'. [ 1653.717423][T31243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9049'. [ 1653.882028][ T5866] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1653.971434][ T5891] usb 4-1: USB disconnect, device number 77 [ 1654.041960][T27551] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1654.052203][ T5866] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1654.052237][ T5866] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.052259][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1654.052289][ T5866] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1654.052310][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.098802][ T5866] usb 5-1: config 0 descriptor?? [ 1654.284313][T27551] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1654.284342][T27551] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.285786][T27551] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1654.285812][T27551] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1654.285831][T27551] usb 7-1: Manufacturer: syz [ 1654.291254][T27551] usb 7-1: config 0 descriptor?? [ 1654.349810][T27551] igorplugusb 7-1:0.0: incorrect number of endpoints [ 1654.564489][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 1654.564620][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1654.579874][ T5866] usb 5-1: USB disconnect, device number 88 [ 1654.967031][T31260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9055'. [ 1655.113641][T31265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9056'. [ 1656.985713][T31286] syz_tun: entered allmulticast mode [ 1656.987043][T31284] syz_tun: left allmulticast mode [ 1657.490895][ T5807] usb 7-1: USB disconnect, device number 57 [ 1657.622120][T31298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9067'. [ 1659.121965][ T5882] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1659.256163][ T5993] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1659.302153][ T5882] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1659.302184][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.303905][ T5882] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1659.303933][ T5882] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1659.303951][ T5882] usb 5-1: Manufacturer: syz [ 1659.319244][ T5882] usb 5-1: config 0 descriptor?? [ 1659.345609][ T5882] igorplugusb 5-1:0.0: incorrect number of endpoints [ 1659.482436][ T5993] usb 7-1: Using ep0 maxpacket: 32 [ 1659.507616][ T5993] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1659.523016][ T5993] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1659.524738][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.524759][ T5993] usb 7-1: Product: syz [ 1659.524772][ T5993] usb 7-1: Manufacturer: syz [ 1659.524784][ T5993] usb 7-1: SerialNumber: syz [ 1659.564389][ T5993] usb 7-1: config 0 descriptor?? [ 1659.733310][T31334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9082'. [ 1662.108281][ T5882] usb 7-1: USB disconnect, device number 58 [ 1662.138635][ T5891] usb 5-1: USB disconnect, device number 89 [ 1665.232003][T27551] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1665.382451][T27551] usb 2-1: Using ep0 maxpacket: 32 [ 1665.386191][T27551] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1665.389076][T27551] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1665.389104][T27551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.389122][T27551] usb 2-1: Product: syz [ 1665.389136][T27551] usb 2-1: Manufacturer: syz [ 1665.389149][T27551] usb 2-1: SerialNumber: syz [ 1665.428116][T27551] usb 2-1: config 0 descriptor?? [ 1668.224872][ T810] usb 2-1: USB disconnect, device number 127 [ 1668.957220][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.957265][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.651960][ T5891] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1678.844348][ T5891] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.844381][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1678.844418][ T5891] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1678.844439][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.849620][ T5891] usb 5-1: config 0 descriptor?? [ 1678.925706][ T5891] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1681.412205][T24800] Bluetooth: hci5: command 0x0406 tx timeout [ 1681.946605][ T5807] usb 5-1: USB disconnect, device number 90 [ 1684.852016][ T5866] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1685.565103][ T5866] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1685.565135][ T5866] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.565154][ T5866] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1685.565185][ T5866] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1685.565206][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.575970][ T5866] usb 7-1: config 0 descriptor?? [ 1686.046864][ T5866] usbhid 7-1:0.0: can't add hid device: -71 [ 1686.046979][ T5866] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1686.089561][ T5866] usb 7-1: USB disconnect, device number 59 [ 1693.541973][ T5915] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1693.700577][ T5915] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1693.700612][ T5915] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.700633][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1693.700664][ T5915] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1693.700685][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.771361][ T5915] usb 5-1: config 0 descriptor?? [ 1694.236537][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 1694.236655][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1694.267595][ T5915] usb 5-1: USB disconnect, device number 91 [ 1698.267272][ T5807] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1699.100654][ T5807] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1699.100688][ T5807] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.100717][ T5807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1699.100749][ T5807] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1699.100770][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.126104][ T5807] usb 5-1: config 0 descriptor?? [ 1700.307423][ T5807] usbhid 5-1:0.0: can't add hid device: -71 [ 1700.307543][ T5807] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1700.354922][ T5807] usb 5-1: USB disconnect, device number 92 [ 1711.711981][ T5807] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1712.804989][ T5807] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1712.805011][ T5807] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.805023][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1712.805042][ T5807] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1712.805055][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.872955][ T5807] usb 2-1: config 0 descriptor?? [ 1713.391604][ T5807] usbhid 2-1:0.0: can't add hid device: -71 [ 1713.391683][ T5807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1713.426815][ T5807] usb 2-1: USB disconnect, device number 2 [ 1714.574459][T24800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1714.581370][T24800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1714.583944][T24800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1714.595818][T24800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1714.602345][T24800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1715.086148][ C1] ================================================================== [ 1715.086169][ C1] BUG: KASAN: slab-use-after-free in ax25_disconnect+0x19c/0x3c0 [ 1715.086290][ C1] Read of size 8 at addr ffff8880600774c0 by task ktimers/1/29 [ 1715.086309][ C1] [ 1715.086337][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1715.086366][ C1] Tainted: [L]=SOFTLOCKUP [ 1715.086374][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1715.086393][ C1] Call Trace: [ 1715.086406][ C1] [ 1715.086417][ C1] dump_stack_lvl+0xe8/0x150 [ 1715.086506][ C1] print_report+0xba/0x230 [ 1715.086552][ C1] ? ax25_disconnect+0x19c/0x3c0 [ 1715.086603][ C1] kasan_report+0x117/0x150 [ 1715.086669][ C1] ? ax25_disconnect+0x19c/0x3c0 [ 1715.086692][ C1] ax25_disconnect+0x19c/0x3c0 [ 1715.086714][ C1] call_timer_fn+0x192/0x640 [ 1715.086739][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 1715.086755][ C1] ? call_timer_fn+0xd4/0x640 [ 1715.086770][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1715.086787][ C1] ? preempt_schedule_common+0x82/0xd0 [ 1715.086827][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1715.086846][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 1715.086863][ C1] __run_timer_base+0x6a3/0x9f0 [ 1715.086891][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1715.086923][ C1] run_timer_softirq+0xb7/0x170 [ 1715.086946][ C1] handle_softirqs+0x1de/0x6f0 [ 1715.086981][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1715.087022][ C1] run_ktimerd+0x69/0x100 [ 1715.087046][ C1] smpboot_thread_fn+0x541/0xa50 [ 1715.087071][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1715.087095][ C1] kthread+0x388/0x470 [ 1715.087114][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1715.087139][ C1] ? __pfx_kthread+0x10/0x10 [ 1715.087158][ C1] ret_from_fork+0x51e/0xb90 [ 1715.087186][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.087210][ C1] ? __switch_to+0xc7d/0x1450 [ 1715.087264][ C1] ? __pfx_kthread+0x10/0x10 [ 1715.087284][ C1] ret_from_fork_asm+0x1a/0x30 [ 1715.087309][ C1] [ 1715.087353][ C1] [ 1715.087359][ C1] Allocated by task 20813: [ 1715.087399][ C1] kasan_save_track+0x3e/0x80 [ 1715.087425][ C1] __kasan_kmalloc+0x93/0xb0 [ 1715.087448][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 1715.087533][ C1] ax25_create_cb+0x50/0x5a0 [ 1715.087550][ C1] ax25_send_frame+0x445/0x9f0 [ 1715.087605][ C1] rose_transmit_link+0x729/0xac0 [ 1715.087620][ C1] rose_write_internal+0x1256/0x1b60 [ 1715.087640][ C1] rose_connect+0x93b/0x1110 [ 1715.087687][ C1] __sys_connect+0x315/0x450 [ 1715.087764][ C1] __x64_sys_connect+0x7a/0x90 [ 1715.087774][ C1] do_syscall_64+0x14d/0xf80 [ 1715.087816][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.087837][ C1] [ 1715.087840][ C1] Freed by task 16: [ 1715.087845][ C1] kasan_save_track+0x3e/0x80 [ 1715.087857][ C1] kasan_save_free_info+0x46/0x50 [ 1715.087891][ C1] __kasan_slab_free+0x5c/0x80 [ 1715.087902][ C1] kfree+0x1c1/0x6c0 [ 1715.087914][ C1] call_timer_fn+0x192/0x640 [ 1715.087926][ C1] __run_timer_base+0x6a3/0x9f0 [ 1715.087938][ C1] run_timer_softirq+0xb7/0x170 [ 1715.087950][ C1] handle_softirqs+0x1de/0x6f0 [ 1715.087962][ C1] run_ktimerd+0x69/0x100 [ 1715.087974][ C1] smpboot_thread_fn+0x541/0xa50 [ 1715.087988][ C1] kthread+0x388/0x470 [ 1715.087996][ C1] ret_from_fork+0x51e/0xb90 [ 1715.088008][ C1] ret_from_fork_asm+0x1a/0x30 [ 1715.088020][ C1] [ 1715.088023][ C1] The buggy address belongs to the object at ffff888060077000 [ 1715.088023][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 1715.088033][ C1] The buggy address is located 1216 bytes inside of [ 1715.088033][ C1] freed 2048-byte region [ffff888060077000, ffff888060077800) [ 1715.088045][ C1] [ 1715.088048][ C1] The buggy address belongs to the physical page: [ 1715.088084][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060070000 pfn:0x60070 [ 1715.088096][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1715.088106][ C1] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1715.088119][ C1] page_type: f5(slab) [ 1715.088129][ C1] raw: 0080000000000240 ffff88813fe1d000 ffff88813fe17c88 ffffea0001d8b810 [ 1715.088137][ C1] raw: ffff888060070000 0000000800080006 00000000f5000000 0000000000000000 [ 1715.088146][ C1] head: 0080000000000240 ffff88813fe1d000 ffff88813fe17c88 ffffea0001d8b810 [ 1715.088155][ C1] head: ffff888060070000 0000000800080006 00000000f5000000 0000000000000000 [ 1715.088164][ C1] head: 0080000000000003 ffffea0001801c01 00000000ffffffff 00000000ffffffff [ 1715.088172][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1715.088177][ C1] page dumped because: kasan: bad access detected [ 1715.088183][ C1] page_owner tracks the page as allocated [ 1715.088187][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5801, tgid 5801 (syz-executor), ts 82913456262, free_ts 0 [ 1715.088207][ C1] post_alloc_hook+0x231/0x280 [ 1715.088251][ C1] get_page_from_freelist+0x28bb/0x2950 [ 1715.088261][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1715.088271][ C1] allocate_slab+0x77/0x660 [ 1715.088281][ C1] refill_objects+0x334/0x3c0 [ 1715.088290][ C1] __pcs_replace_empty_main+0x371/0x5c0 [ 1715.088301][ C1] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1715.088315][ C1] pskb_expand_head+0x228/0x1320 [ 1715.088352][ C1] netlink_trim+0x1b3/0x2c0 [ 1715.088397][ C1] netlink_broadcast_filtered+0xd6/0x1010 [ 1715.088407][ C1] nlmsg_notify+0xf0/0x1a0 [ 1715.088416][ C1] __dev_notify_flags+0xf2/0x310 [ 1715.088466][ C1] netif_change_flags+0xe8/0x1a0 [ 1715.088477][ C1] do_setlink+0xf82/0x4590 [ 1715.088522][ C1] rtnl_newlink+0x15a9/0x1be0 [ 1715.088532][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1715.088543][ C1] page_owner free stack trace missing [ 1715.088547][ C1] [ 1715.088550][ C1] Memory state around the buggy address: [ 1715.088556][ C1] ffff888060077380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1715.088563][ C1] ffff888060077400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1715.088570][ C1] >ffff888060077480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1715.088576][ C1] ^ [ 1715.088581][ C1] ffff888060077500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1715.088588][ C1] ffff888060077580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1715.088593][ C1] ================================================================== [ 1715.088707][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1715.088727][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1715.088748][ C1] Tainted: [L]=SOFTLOCKUP [ 1715.088753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1715.088760][ C1] Call Trace: [ 1715.088765][ C1] [ 1715.088771][ C1] vpanic+0x56c/0xa60 [ 1715.088788][ C1] ? __pfx_vpanic+0x10/0x10 [ 1715.088801][ C1] ? __pfx___schedule+0x10/0x10 [ 1715.088815][ C1] panic+0xc5/0xd0 [ 1715.088828][ C1] ? __pfx_panic+0x10/0x10 [ 1715.088842][ C1] ? preempt_schedule_common+0x82/0xd0 [ 1715.088856][ C1] ? ax25_disconnect+0x19c/0x3c0 [ 1715.088867][ C1] check_panic_on_warn+0x89/0xb0 [ 1715.088880][ C1] ? ax25_disconnect+0x19c/0x3c0 [ 1715.088890][ C1] end_report+0x73/0x180 [ 1715.088904][ C1] ? ax25_disconnect+0x19c/0x3c0 [ 1715.088914][ C1] kasan_report+0x128/0x150 [ 1715.088928][ C1] ? ax25_disconnect+0x19c/0x3c0 [ 1715.088940][ C1] ax25_disconnect+0x19c/0x3c0 [ 1715.088951][ C1] call_timer_fn+0x192/0x640 [ 1715.088961][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 1715.088972][ C1] ? call_timer_fn+0xd4/0x640 [ 1715.088981][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1715.088991][ C1] ? preempt_schedule_common+0x82/0xd0 [ 1715.089003][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1715.089018][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 1715.089030][ C1] __run_timer_base+0x6a3/0x9f0 [ 1715.089047][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1715.089064][ C1] run_timer_softirq+0xb7/0x170 [ 1715.089078][ C1] handle_softirqs+0x1de/0x6f0 [ 1715.089093][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1715.089107][ C1] run_ktimerd+0x69/0x100 [ 1715.089120][ C1] smpboot_thread_fn+0x541/0xa50 [ 1715.089134][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1715.089150][ C1] kthread+0x388/0x470 [ 1715.089160][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1715.089173][ C1] ? __pfx_kthread+0x10/0x10 [ 1715.089183][ C1] ret_from_fork+0x51e/0xb90 [ 1715.089197][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.089209][ C1] ? __switch_to+0xc7d/0x1450 [ 1715.089221][ C1] ? __pfx_kthread+0x10/0x10 [ 1715.089231][ C1] ret_from_fork_asm+0x1a/0x30 [ 1715.089244][ C1] [ 1715.089719][ C1] Kernel Offset: disabled