last executing test programs: 8m18.180160345s ago: executing program 2 (id=1349): timer_create(0x6, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) gettid() syz_open_dev$sg(0x0, 0x0, 0x8002) mq_open(0x0, 0x50f7bb45f81a15a, 0x120, 0x0) 8m15.358504541s ago: executing program 2 (id=1359): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) 8m13.202115355s ago: executing program 2 (id=1364): mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800004, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xd, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x80010001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0xfff, 0x2, 0x1, 0x5, 0x4, 0x1, 0x0, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x26, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0x2, 0xfd, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x9e5c, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x6, 0x6, 0x8000006, 0x200007, 0xb], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0x7f, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0xe8, 0x5, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0xa, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3aad, 0xffff9a7f, 0x200, 0x6, 0xec2, 0x6, 0xfffffff5, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x80000001, 0x8, 0x20000000, 0xba2, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x282, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x6, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 8m13.115995088s ago: executing program 2 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x46b1, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) 8m11.31680119s ago: executing program 2 (id=1370): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0xfffffffa) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x2}) ioctl$TCXONC(r4, 0x540a, 0x3) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000100)={0x4, 0x80000, "4160ff014ee3ac531449d61c3b8211b92059de624b1a208e", {0xfffff7b0, 0x5}, 0x5}) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 8m7.281623358s ago: executing program 2 (id=1376): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x46b1, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) 7m50.988971065s ago: executing program 32 (id=1376): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x46b1, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) 4m12.581740794s ago: executing program 4 (id=2065): io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x4000, 0x2, 0x64}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000040)={0x0}) 4m12.260101985s ago: executing program 4 (id=2066): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x46b1, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) 4m9.093007423s ago: executing program 4 (id=2075): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x20002, 0x9, {}, {0xee00}, 0x700000000000, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f00000003c0)=@generic={0x1f, "6fa0cdb098606708a3b923f5e5aeca63cbe3147b6416b883a48ea59b8b05980f5b5ed619a3aa87ff18121684d11845be301af25a24af53f22ecd5b5c1a56f35ceca2a1107c63fed526e1306027fbf01a2478f4eed3c0469d67cc945bd6d0bf931e3142994124460690ce4492a3fd936792d9c0dca4413428d7e72cfcc49b"}, 0x80, 0x0}, 0x4000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 4m5.013179542s ago: executing program 4 (id=2086): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) r1 = syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 3m59.654242845s ago: executing program 4 (id=2105): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a80)}, {&(0x7f0000000000)="a1540d2d205bffa0cf9387e4f2fd23f4d7e96b29ecf0f5e13284d7f7e395803b63d9f180af223a0786269065a66d272a333695eb3189298eb9c6a634d4f531c0e02ccb903b2dfbc3200149941d74a8f12bd988cf88bdb51b8fcb43f5bc21ca674c65db0d48e41c8d5a4e24e4277c563d97874090958abaced121fa752f5109c77a0ea71184ede060ade67071cfb342df3b4367b3a319785bdcb495497d4835537934249bef612df74e39d1bf093be2954461ebd3984ea6f038950a6fee0bbd88e6ef8f67012916a3d097ecbd9c60be4aad500dc1b3546575648c4b552b2761ab3efdc848032bb07d087c7ebab20b461ce72c127051d591e360", 0xf9}, {&(0x7f0000001a80)="a1a5962cca31640abbd17a53a2a1d7c30421782fac1a816eaf484de896fe66fc8183e7c7f40628a267dbc7013ac37034482ca0a587fbe70aa54c43980ef3497c42d81822fc3808b239e6f8de7137393ddb3aa8380d3094e587df2e5979f274544e409e9d5ddf997097e5d45eb2b9ffde475d94aab33d4893dd3ce11361ee1a6b6063b7b3107bbf18c3d90a0069a05f648a0177b250b36c5265b4c8068b79be490ce6821312c795eb7489e389ccf24a805a7be949b76d099dfa25b64e8827f137d8e9cdfb2d109664528e522c34444eaa3a242779ef01cc4c2e75ca5836560cb164f6c6ee3d62703dd21240eb5ba8cb112cdbf206b68e664a4c5476f2718866a376eed57ce290316967c1e9a765c3d94351c2282b0dd674bacb32bce53fc248e1bacddf3a3bf497079fb8f741dd7311a2de8b2835fefb973348e67b8354a58f74bfe563854142dc4ca0b979c616c2f773d2bb6496d268079fe8351a7ee7b22d2e1e81334a8c1a5eb540877ffdec01d7675271357686c90985608cc706e389b1e274c798f884a4bdf7b617436739f153c0d9888eeae9a666f0a2ed68c4c610d53359bbc257de1c43a8806177e907d50edcbeb4d8aeed9a971da82aa5725510e706a224e336af937b518116b3119cac0c19b42f2765826da02cee0d5c244d2eba7efb43eba2879713503a0fd5783ea6c7db64a6d50131a41613564a6e1ca0f0f14959612e6b3ada2a55ab7a4cc42c42476fde588419dece64c9b70eb1213d7032c74e0e4a0e1a9d3d75e3e1d58d7d2c80e44278188c8b49b54a5b042e5bcd28c93dc940376733c6439b5ff96484ffd25f428006024ab154b32e21319dda380a95981869e72fc83673c3706389bd20be75324f96b0e0650e890dfe8d6f16fc52fe58ea3a39297daf6b7161278e01ca53bef90f156c20f36baf6244f9af525a836e9699f1ab8b23f159a0d69acbd9fb004db06e01f3cf887301cb87afbbf1db7c2a5c1c5c52368e870a2e037d88572b55ef2f6337ce9673f827588d632a1400b7176d7d6be237e141866405f90dc6c5ad92457f73f53c55f4e97805031561f1fdf0d4c1e7bae8c8c68f8a9d39d43a0eea714bc543abe6d94478247b62c8d4ec1d7a2059ac53b1297532b7580a3ae6668b1a6ceb76873a10e7e96cebae3a0ce389dde4da086655eefb86875c9bf08903993af619bb46eef5991190efd5ecd50d6676d6305582e5dbe3bd1aef0ad8029d114ee75a4095f4053cf13ef52d48c87f68a030ff2ed1ecd4fc1528c6f5cf4c8a0df4dce41270382414e3b457dcaae3a659c87dde729aae62d0b8501cbec0c61551f64151fd887df32a9041d6f119b38c292e6c31a24b80eae629425207ada7f3b2e37dce52d2d9ff970c6abbcb836be1dc3863f6fc2f523a31f0dd70d1ca64065478f1f50c56ccdd483228516ebdd4d79ae1ec0041cad458999c6ada7dec1d3700daae899a95a78360e438b542ac2a4af6f11370a8795b7a5495fa3b2f746580f9372e4f8011d61fcaa121c4b52e8814210916afd7190fd12337247bc02679b3ab64428bb00998f9040fddd2cab89179f5e29457482781c820eebd0b3c9a181855d5542eb46f61b33fac7428a12c1572d0d99cf5a54fb09142b2d41fcabac5f5004ce3a818ba5d358946712df4519c75544bbe1c1b79a3ff68af42adbc61aab6069b4883e1bd4b0315fed981b998f8d1abea0fab392d50b467ed01a45fae3a72015b7e02e282b18e73f327d0c11ea9faf20bcdb7087b4f886b086d9249cc4ebf9fd64778631c23beea9434d6202425e775ea12e2a0977abe36e808c31c47b9d4254a4fedf31052485a642419956fc79a625cf70bdbd0232f8e8ee8b53d9ad77f3925544a3f3eed53a1ad235d6544741d9866b49a31b8f218a52ea61bd27bf335a7668989a5136f03bb9c3d2791221877a38025294698d25e898fac17a705c77beb41a7d7032f00c541446a1fd410873692752e01826599d6e5f6057e638793a18d3cc5137de060977baf9d835ad79d4ed3e427eb0f6ea958bc11a30d1e7d5535af4a657963096f3c10f99f1799916f102cdccc9e06c6982fc030eee45abc360a1f924550402d328ca5a5e32eed282ea212325bacd4cf57ada39cb91c9f0da9b7efcfefdf2840a0646c1f604a3c2c73a8871db5ba13127ff3763ab1f296e73976deb63c106b1d8ba44f78befaddd0d3e203917bf23974fb38719cb72cc63d63797edf2a49ddb4cfbb3bf94ab339a97bb4b79d1c517a92791e437e1ef527c94bc895895cc0f1fd953a4ace7f14d8a6538d169366ca54796c08a02577bb13ae591851520ac0bfee1c3243c144efc3d150be6cfeb150515ea9555b3b8099943991806dc0c4af125985637707bbbaacec9cb4aaa4ec9c2c8cb284cf9f2a5eaad38a49b21570d7f5a868ae6899e36dc5aff74a1843a2ada0e4d28f2bcd04dbb2b1a9c4e6810b800d6879d8db35598f10702e06e3bc87eba0f1be753e79c5aee9b21e2eeff6db74673105e1f414c9ae6e3c82fe02adeb0a59cb3f0913afcc1cace6e37a44d0a196775f1595f150bc6b8b8eb9e461ed61753dbbd1f292501c1ea81742d53d81945e74ea026f2c986c784b703755844b9732c52d3d3ac4a98b938087681b8bfe167f6d9d5063b378543e194cb1c0b3a86cfc586bbccc2353919c5c927b78d766815adba7c1c66dc53f0c2adb49bb75485de690e31daac12b7782899b508ae3c149f08e3eb24b027f98e5dd09572ae7225bf66705712a911e228d36a021431a332e91af9b906d210dc7bc80c34a2dc9d83fb670c706f13d14b08b738d2ae28bc01ba5dda1aa13d395edd8ec39e73c3a15828ee6a63e5fcfe0b4bd17a311bc42a8cf04cb00883a24dcfd1f858601f11317e1ebe2108ac1f29722e72bc372324868274f14c8074f03b3c766ae1bf70f56106ea85c108ed6c6df341627c198d976a63ea2a36f487698757f0a47d6ba5508992e682dcc98a60be6b50c85f5272724742bbf736592aa5a24f4c7c0f32fef3840b92991ed90c79e646beb2653c38f77f0b8d71ae3100b44e24d6f6c30747e0a5358baced6e0336324f1064a8d55c79b9f913b9b5f9e59a30bdfb02b054f07270012c482085df6c92175c0af29d1edb443e34cf4fd40bbf91133fb34892d38d681fe820b1ca4309398c8db6bdadb9b80d398fea48cfa4ab28204735cc34b97e13d106c0486f6054e532e81127eb955fcffc495e76c0ab6668a9a61a9b358bc602f44fc917d8458da4f3aa7f30fcfb40684efd6934abef25ad605e796220e8a76eb15c833e657331d078e791758e0dd9162917c10d6e8690b206f458756c77c95fe91de9362e487f05e2368bc6505aa4be30d959932ad8cbbd595234808f32ad5107e848bb26fa5592741a1aea36d74bfd9d63088a78282175acff67adf38247cd866f593ecd6a25b6101f587af06b2009eb2cda5d1460dcccf9d3d7681e3da1333d25669d89a62032e9f5f389320da063d7f8061d36c106e1e608e0d60e9859521403bb8b0ca630e8bae8f8daf02059f57dcd929cde212f5d3a5f2b6b49651e4deb929e1c136bc7629058d0eac4d2f582a2e9fabb6d1f985e6390c8a69a9a17758f52c9a59969cd48918d001cbf673f08ec1f49821eba565a10bbb6a3d3d998c453a5f9e9a3bfc070a617875c1059a4b9190f269ddf92ac80ae07bb2ff941af213f178234f35b84abfdd86e998120a2465035dde1c9c0863ee7da8efbe5719c12cceefa623f49f23ddbdc0e7ba3b3c92fc5f924d93027259208defbda5b3c4842e813341167d49624b71f7b712b8afcbba7b0964db636f17db6b48cc41040e4b2e07e0993d7751f381dc23339da9074e3ff345bcfb83f587f7f660536883581bbf67116df29a0a75d90986e2d0ef60764df95a1fc8bb0f455cfa1bc0012e0c59f712aab009004536e7d9ef800c7b32f0751954897f1bdac855da30925eb4752f6aeeb0a708ad9b1afaa7e9355c565de55aa4ea29da148fad08844c5a2e03cdf4ee11cc103c527e3e2d7c769546d9bd6c2544dfec99e4ee7e0b7ebe3bc058e6d75bfe957960e3487ef78cf3f96c549119b7a9d8e42d059c43e520863a41547239696294da637576589e9671b7bf725d9db003623a64164e7628c554e3f645b127a8c49279a4c61f7ae89aa5479d83442715aa920929808869d291f84d7e8f4ead5c990f6b496253cd3b4428aed1ec50f258c4a11246ca322788a5242b26c87e17cdc47ef82ba1dc1cc899a404c1dc4332f1f0efb8f075b26545cf83651af56c39dc428c46f66a1771475181cac7b32fab0bc5b87cf616cd15d425507163e68f65c3cc832d24e21e0868b512c4b339bbb3aeea508413191bb97a89b4491fe2eb7e25965c9bf43e231a5c9812fc5c34a325d1c83a9af34f4752e320332b2c97bd9b264f25a123565b1883998d6a89efb11005faaa4c4b5a682eb804165ca30dcbe90fe443317ac9da265bb6215230b54501fa5dfab6c509da18635900aff458ffa3d810a2fc75611d59d8a03a15e8909043b89b2e7072cf8e2a5b634ca4dcb77658188dcde13fe2cb4846587a905f89b3b3b1ba782b0852c5424be433e605ebad7dc1486ac507e6ed10e4498ddf66635a7a775f1111fa9efafdaab8564ab7866072b32431063539d7fed63c87961ec9c127b5e5a767a96582f3dd8f1ec3cfd6ff5db3eb5ff5f3480a4ef1f758ee1a6a35ce5808887eb0196916fec8097a480b547b1ac058431e1e8ef4c3016b85397f5839777fb5255703847f157758132a698d9b377c79449b39862f2bd2a03fa75e8833b57bd8a5bcfd1eb0f2b42cec1ffe1e1bffb6a2b2f9e67562d5a13973b300f2268efa0e1e460a77e3aaa8115056feaa3312c66e370844470895daef4788b2c525e8b7fd3ce064e028d896dcfa6ece68ec424e148f53bb4d86b64e5db9f96dd12d01f171fbe7dc25b069cd92bce5d2c21c154694dba07faa64d8bc9bf25963885e812382cedb565d16d5382d8325188b023f0ad9b5d71a18e2975000f3cdfcad761c452e5b86bea2a98fce8a06266c771ec0c451f0c9fd32be37053ef0af1fc8582154fea5c0266f93f416237fb698820292d700b4208d3632afa3ccca568b3d466c0a7848b8d183d4c44767867aa5b9347b04c6ac8f6e74cbd1974220c759149860f0f86f5b684e5a547c43042636c44bff38a9fc88da0686660579df25dbb1cd06503ab6cc14a0f0eb8aeb59559f7f18bceb95025c6a25d37bbda46d84f9237bfc4d61628650962b28c8051bdf464deb740e5921923b7d64c1660165ea1fdf6ee6ec9a5fe9bbea068acdaa00c7c556e1114522ecc4c20280678a1fc3712ad3bc7a10fc5ae57b970dbdd96b904b5807606f231ff82ff8b035b70f4e1513b55b449d6e7a4c8466447346e4f5dcab4355c504ea276d3d5207e902095eea8fd92028d839f05a438f3f7da26bec43db5d9c89a18c19058cad3654dd81f68ae21013f962a3e8fb521a8be1ea05ee8450b7fdf16b9d10ae828fcf59104bde85503ccd6e1a236b70111262515af05a11f6c7b7c783bfe6ebb866b74051ac6a5d6e5b041c5488b65a16f1f0054e6f80c1eb7a56cc8e5e9359d55b0963f1570f24d8add8f7977210ec05e0e93b4bd4d1cfd711945bf77591fc9b0c7fc2fdc908ac79677a02674cb3151eb0ec7018ee522064093bdf24899f93465e1ec0a7c4405e01baebe4db1f6369f73ca5ad2878db75c21b5ee683e947049f2d832de7ac20f342107def186c5f005d102188cb930abde47ca19d92b2", 0x1000}, {&(0x7f0000000100)}, {&(0x7f00000001c0)}], 0x5, 0x5, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r1, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 3m58.546229634s ago: executing program 4 (id=2099): fsopen(0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x6000, 0x1a000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400005, 0x4, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0xc1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0x0, 0x4, 0x4, 0x2, 0x3, 0x4000009, 0x8892, 0x1, 0x6, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0xe6, 0x200000000000101, 0x2, 0xd, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0x100004000000007, 0x2, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x7, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x40000000000005, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x1, 0xb68e, 0xcc, 0x8, 0x1000003]}) 3m43.467830259s ago: executing program 33 (id=2099): fsopen(0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x6000, 0x1a000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x0, &(0x7f0000000180)=[0x6bd1a311, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x400005, 0x4, 0x401, 0x466c, 0x89004, 0x2, 0x4e, 0x400009, 0x2, 0x49, 0x100000000003, 0x5, 0x400000000002, 0x7fffffff, 0x8, 0x7, 0xc1, 0x8, 0xfffffffffffff000, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0xff, 0x0, 0x4, 0x4, 0x2, 0x3, 0x4000009, 0x8892, 0x1, 0x6, 0x46, 0x2001, 0xfffffffffffffff8, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0xfffffffffffff068, 0x4, 0xe6, 0x200000000000101, 0x2, 0xd, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x3, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x5e7, 0xcdc, 0x100004000000007, 0x2, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x4, 0x1, 0x81, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x80000005, 0x8061d, 0x8, 0x7, 0xf6, 0x4, 0x5, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x7, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x20000000000013, 0x40000000000005, 0x8, 0x1, 0x6, 0x200eb4, 0x3, 0x1, 0xb68e, 0xcc, 0x8, 0x1000003]}) 3m38.19645633s ago: executing program 5 (id=2167): syz_usb_connect(0x0, 0xf2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) 3m33.49275833s ago: executing program 5 (id=2178): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20040885}}, {{0x0, 0x0, &(0x7f0000008a00)=[{&(0x7f00000079c0)="f7", 0x1}], 0x1, 0x0, 0x0, 0x4010}}], 0x2, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) 3m28.606976987s ago: executing program 5 (id=2192): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettimeofday(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x90000009}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x85, 0xb, "0062ba7d82070000000000efffffffff086304"}) r5 = syz_open_pts(r3, 0x80) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) r6 = dup3(r5, r3, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) dup3(r1, r1, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x110a}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0xe}, 0x14}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 3m28.183405341s ago: executing program 5 (id=2194): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0x8000, 0x40000, 0x8, 0x4, 0x1ff}}]}) 3m27.871886332s ago: executing program 5 (id=2195): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYRESDEC]) 3m27.776171686s ago: executing program 5 (id=2196): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x4, @private2, 0x7fd}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[], 0x18}, 0x280400d5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="bb000000000000006111db0c00000000851000000200000c85000000a400000095000000000000009500000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x400002, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x20008804) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4) epoll_create1(0x80000) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x70bd29, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x10001}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000380)) 3m12.179321949s ago: executing program 34 (id=2196): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x4, @private2, 0x7fd}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[], 0x18}, 0x280400d5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="bb000000000000006111db0c00000000851000000200000c85000000a400000095000000000000009500000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x400002, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x20008804) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4) epoll_create1(0x80000) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x70bd29, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x10001}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000380)) 12.498084253s ago: executing program 7 (id=2833): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf251400000008000100000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x20008000) 12.316144339s ago: executing program 7 (id=2834): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$autofs(0xffffffffffffff9c, 0x0, 0x40180, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0xecf86c37d53049ec) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x18, 0x5, 0x1, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r3, 0x0, 0x0) syz_io_uring_complete(r2, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 11.000188674s ago: executing program 3 (id=2838): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_open_dev$video(0x0, 0x485, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$fb0(0xffffffffffffff9c, 0x0, 0x10202, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40002) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000240)=0xfff, 0x4) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) munlockall() r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) 10.296086958s ago: executing program 3 (id=2839): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x7ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0xe8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(0xffffffffffffffff, 0x8b24, &(0x7f0000000040)) 9.594257622s ago: executing program 1 (id=2843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$rtc(0x0, 0x80000001, 0x408000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x24000814) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) r7 = syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r8, r9, 0x0, &(0x7f0000000000)) io_uring_enter(r7, 0x7a98, 0x0, 0x18, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_extract_tcp_res(0x0, 0x9801, 0x4e8dc768) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 9.478111166s ago: executing program 7 (id=2846): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) unshare(0x22000000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, 0x0, 0x0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x404c051) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x4, 0x5, 0x100000001}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000500)=0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000007700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000076c0)={&(0x7f0000001c00)=@deltfilter={0x49f4, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x10, 0xb}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xc4, 0x5}}, @TCA_RATE={0x6, 0x5, {0x67, 0x3}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x46b8, 0x2, [@TCA_BPF_POLICE={0x44c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x24, 0x81, 0xd7e4, 0x0, 0x1, 0x918e, 0x18000, 0x80, 0x3988d2ab, 0x10, 0x1, 0xffffffff, 0x53, 0x4b2, 0x7f, 0xf, 0x400, 0x9be0, 0x2, 0x7fff, 0x2, 0x2, 0x0, 0xf, 0xe, 0x7, 0x6, 0x1, 0x6, 0x526, 0x8, 0x8, 0x4, 0xe, 0x800, 0x8, 0x5, 0xae, 0x6, 0x439, 0xffffffb8, 0x5e, 0xfffffff7, 0x8, 0x7fffffff, 0x0, 0x8000, 0x2, 0xffff8000, 0x6, 0x1, 0x3, 0x3, 0xfffffff7, 0xf8, 0x4, 0x800, 0x101, 0x9, 0xffffffff, 0x6, 0x4, 0x5db8, 0x0, 0xf, 0x523, 0x7, 0x8, 0x5, 0x2, 0x8, 0x4, 0x502eba89, 0x3, 0xfff, 0x7, 0x6, 0x2, 0x1, 0x4, 0x7e6, 0x1ff, 0x9, 0x9, 0x4, 0xb, 0x4, 0x9c65, 0x7, 0x2, 0x6ba94cf1, 0x1, 0x3, 0x3, 0x8, 0x100, 0x498b9cbf, 0x2, 0xffffffff, 0xffffff81, 0x6, 0x6, 0x5, 0x40, 0x4, 0x0, 0x6, 0xe18f, 0x2ac1, 0x1bbe, 0x1, 0x3, 0xfffffff9, 0x6, 0x2, 0x401, 0x1, 0x3, 0x7, 0x6, 0x2, 0x4, 0x6, 0xf, 0xa, 0x8, 0x4, 0x8, 0x400, 0x6f0, 0xfc, 0x2, 0x200, 0x3, 0x4, 0x5, 0x8000, 0x4, 0x6, 0xc, 0x6, 0x6, 0x400, 0x6, 0x8, 0xe, 0x9, 0x1ff, 0x9, 0x7d, 0x4, 0x9, 0x2, 0x4, 0x6, 0xffff969f, 0xe683, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3, 0x96, 0x7, 0xffff17eb, 0x4, 0x3, 0x1ff, 0x0, 0x401, 0x10000, 0x4b, 0x8, 0xe, 0x0, 0x7, 0x7, 0xb, 0x2, 0x78d, 0x6, 0x1, 0x1, 0xfffffff8, 0x8001, 0xfff, 0x6, 0x0, 0x3, 0x3, 0x4, 0x10, 0xbf93, 0x4, 0x40, 0x101, 0xff, 0x3, 0x97, 0x7, 0x2, 0x9, 0x7f, 0x4, 0x7, 0x5, 0x9, 0x2, 0x0, 0xcbd, 0x9, 0x1, 0x0, 0x2, 0x884, 0x8, 0x7ff, 0x8, 0xcc, 0x5, 0x0, 0x0, 0x7, 0x1ff, 0x800, 0x3, 0x5, 0x0, 0x3, 0x4, 0x4, 0x800, 0x8, 0x5, 0x7, 0x85c, 0x1, 0x4, 0x5, 0x1, 0x63, 0x3, 0x6, 0x44, 0x6, 0xb8e, 0x3258, 0x4, 0x50c9d77d, 0x1, 0xb0, 0x5, 0x9, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0xffffffffffffffff, 0xf543, 0x2a, 0x0, {0x6, 0x1, 0xffff, 0x9, 0x3, 0x29}, {0x7, 0x2, 0x4, 0xfff7, 0x2, 0x1ff}, 0x1, 0x0, 0x2}}]}, @TCA_BPF_ACT={0x2ec, 0x1, [@m_connmark={0x16c, 0x1c, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x10000000, 0x9, 0x4}, 0xed}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x800, 0x2, 0x4, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x5, 0x3, 0x1, 0xff}, 0x33}}]}, {0xe8, 0x6, "7d166544264f9c830543969845bf5d36b38aea25da733e01fd1aa6a2cf8611f4b2c82bf468d92cb22854d601038fc0707be9a781ee3528786a64bb74a887c0bf41c7390c724b399cd40fb1ca10597a8ee8a37093275bcd3a0ecbbdfc10c70e5db04961ecef65fa4b39c61057780fb19e104fa76d136b1efcbc85bce71589f41915e06e3b023148aeb026069d05e35b97a30066097552d05d7c2fde4812c4978b18ccffa16fa248482f1d570de4e7b1a3e9b5c0c74dea6fff23f4ea588abc18f74030b7c98f0741604966b78015b5742c0cfaa919ba752e4b6e17ac7fc992ae8ce7498833"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_tunnel_key={0x100, 0x3, 0x0, 0x0, {{0xf}, {0x74, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x5, 0x20000000, 0xa, 0x50f}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x5e, 0x6, "60c928163b7d336de72e1b8adb2a816f5d48ffacc99df529d983d4df7b603a09c460e37e36a69f62c7f546e7c23201be7cab322c655e25eaa464036e5f11ac5277c173063ed0d959aabb67decd14e1371ad46cef660535d5d03a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="dc69b97f2bf1"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x24, 0x6, "458605a104f0626b82b24e23f26c3b8c66ad57884dc55ce5e9da69f6dbef21ba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_ACT={0x3b44, 0x1, [@m_pedit={0x3b40, 0x2, 0x0, 0x0, {{0xa}, {0x2b54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x7, 0x6, 0x1, 0x1, 0x6}, 0x8, 0x95, [{0x8150, 0xab4, 0x9, 0x2, 0x7, 0x2}, {0x9, 0xecd, 0xfc, 0x101, 0x10000, 0xffffffff}, {0x3, 0x4, 0x5, 0x1, 0x40000000, 0xf6}, {0x6a, 0x9, 0x400, 0xf9d, 0xffff7903, 0x5}, {0x9, 0x3d, 0xa, 0x2ea, 0x3, 0x8}]}, [{0xfffff235, 0x8a0f, 0x5, 0x1000, 0x5, 0x7fff}, {0x7fffffff, 0x9, 0x50, 0x9, 0xa, 0x80000000}, {0x8001, 0xa, 0x40000, 0x9, 0x9, 0x9}, {0xf, 0x35, 0x8, 0x6, 0xb, 0xc9}, {0x5c2, 0xd0dd, 0x7fffffff, 0x4, 0x7fff, 0x1ff}, {0x8, 0x7, 0x7, 0x7fffffff, 0xfffffffd, 0x9}, {0x1ff, 0x5f, 0x2, 0x8, 0x6, 0x68fdfcb3}, {0x7, 0x7, 0x200, 0x7b9, 0x9, 0xa8e}, {0x3, 0x8001, 0xfff, 0x1000, 0x200, 0x400}, {0x9, 0x8, 0x2, 0x7fff, 0x4, 0x6}, {0xfff, 0x5, 0xbae3, 0x8, 0x2, 0x1}, {0x1, 0x8, 0x9, 0x5, 0x401, 0x6}, {0x3, 0x7, 0x4, 0x1, 0x8000, 0x7}, {0x5, 0x9000000, 0x8, 0x1, 0x2, 0x9}, {0x2, 0x2, 0x1, 0xfffffff5, 0x6, 0x6cf}, {0x7, 0xa, 0x8000, 0xaac00000, 0x1, 0xffffffff}, {0x4a933bf4, 0xb4, 0xe4d8, 0x2, 0x7ff, 0x9}, {0xcdf, 0x2, 0x2, 0x3, 0xfffffff8, 0x7}, {0xa, 0x10, 0x5, 0x7f, 0x5}, {0xd, 0x5, 0x6, 0x5, 0x7, 0x9}, {0x6517, 0x4, 0x6, 0x0, 0x9, 0x6}, {0x1, 0xa, 0x4, 0x800, 0x7, 0x4}, {0x0, 0xbbee, 0x6, 0x6, 0x1, 0x10001}, {0x3, 0x8, 0x7fffffff, 0x5, 0x9, 0x3}, {0x9, 0x0, 0x9, 0x2f, 0x8, 0x6}, {0x2478, 0x40, 0x4, 0xfffffffc, 0x0, 0x3}, {0x1, 0x8, 0x40, 0x7, 0xe, 0x4}, {0x2, 0x10000, 0x1414, 0x3, 0x6, 0x7}, {0x0, 0x80, 0x3, 0x6, 0x7, 0x7}, {0x8001, 0x10000, 0x0, 0x81, 0x2, 0x123d}, {0x7, 0x8, 0x1, 0x1, 0x7fff, 0x3ff}, {0x35, 0x1, 0xaf90, 0x1, 0x1}, {0xfff, 0x0, 0x4, 0x8, 0x5, 0xffff}, {0x8a, 0x0, 0x6, 0x9, 0x6, 0x401}, {0x7, 0x9, 0x8, 0x0, 0x71, 0x9}, {0x5, 0x3, 0x3, 0x0, 0x7fff, 0x6}, {0x100, 0xffff8000, 0x200, 0x800, 0x0, 0x6}, {0x2, 0x2, 0xfffffffa, 0x4, 0x0, 0x10001}, {0xb, 0x401, 0x2, 0x7ff, 0xfb8, 0x3ff}, {0x29f, 0xff, 0x2, 0x7, 0x2, 0xfffffff2}, {0xa, 0x8, 0x3, 0x1, 0x2, 0x5}, {0x8, 0x9, 0xfffffffc, 0x7, 0x3, 0x9}, {0x4, 0x1ff, 0x52, 0x4, 0xfffff801, 0x100}, {0x8, 0x8, 0x7fff, 0x1, 0x2, 0x8}, {0xe1, 0x62b2, 0x3, 0x72, 0xfffffff8, 0x6}, {0x4, 0x1, 0x910, 0x7fffffff, 0x2}, {0x718dedf5, 0x3, 0x4, 0xf, 0x1000, 0x10000}, {0xfffffffc, 0xffffffff, 0x4, 0x7ff, 0x6, 0x4}, {0x0, 0x1, 0x8, 0xee, 0x1, 0x2}, {0x559, 0x73872a7d, 0xc18, 0x8, 0x9, 0x1}, {0x0, 0x2, 0xbf, 0x3, 0x6, 0xd}, {0x2, 0x80, 0xbb5, 0x2, 0x8, 0xd}, {0x969, 0x6, 0x2, 0x3, 0x1, 0x5}, {0x8, 0x0, 0x80000000, 0x517a, 0x5, 0x9}, {0x80000001, 0x6, 0x9, 0x7, 0x3800, 0x8}, {0xa95, 0x8, 0xc, 0x2, 0x1, 0x9}, {0x5, 0xfffffffd, 0x0, 0x1, 0x0, 0x6}, {0x80000001, 0x40, 0x1, 0x0, 0x81, 0x7ff}, {0x2000, 0xe5, 0x9, 0x80000001, 0x1, 0xd}, {0x1, 0x1ff, 0x1, 0x8, 0xffffff7f, 0x10}, {0x7, 0x9, 0x8, 0x7, 0x0, 0x80000001}, {0xffffffff, 0x1, 0x4, 0xa, 0xe, 0x5}, {0x9, 0x4, 0x8, 0x13, 0x8, 0x5}, {0x7, 0x9, 0x5, 0x6, 0x3, 0x5}, {0xc, 0xfffff001, 0xffff7fff, 0x0, 0xfffffdc8, 0xfffff001}, {0xe, 0x9, 0x3ff, 0x8, 0x5a, 0x1}, {0x8, 0x8, 0x8, 0x4, 0x1, 0xff}, {0x400, 0x10, 0x3, 0x2, 0x4000000, 0x4}, {0x2, 0x15907355, 0x9, 0x9, 0x401}, {0x7, 0x3, 0x4, 0x9, 0x3, 0xfffffff7}, {0x2, 0x3, 0x2, 0x8, 0x0, 0x5}, {0x3, 0x2, 0x9, 0x8, 0x6b, 0x5}, {0x1, 0x8, 0x0, 0x2, 0xc, 0xfffffff9}, {0x1, 0xc70, 0x1, 0x80000001, 0x9, 0x80000001}, {0x10001, 0x9, 0x0, 0x1, 0xb, 0x7}, {0x0, 0xa346, 0x3, 0x0, 0x400, 0x7}, {0x0, 0xe, 0x5521, 0x0, 0x400, 0x4}, {0xfffffffb, 0x9, 0xe, 0x5, 0x9, 0x3}, {0x8c8, 0x0, 0xffffffd1, 0x1, 0x0, 0x3f}, {0x28b, 0xfa1, 0x3, 0x4c6b, 0x1, 0x6}, {0x8, 0x4, 0xb, 0x7fffffff, 0x6, 0x8000000}, {0x7, 0x4f, 0x3, 0x1, 0x3, 0x7fff}, {0x6, 0x2, 0x8, 0x920, 0x2, 0x200}, {0x4, 0x5, 0x6, 0x70d, 0xfffffff9, 0x6}, {0x9, 0x7, 0x4, 0x2d580000, 0x7fffffff, 0x800}, {0xfffffff9, 0x0, 0x6, 0x2, 0x5, 0x1ff}, {0x80, 0x2, 0x53, 0xb, 0x4, 0xf2a}, {0x80000000, 0xfffffff1, 0x2, 0x2, 0x8, 0x4}, {0x80, 0x1, 0x5f, 0x400, 0x4, 0x1}, {0x8, 0x2, 0x7, 0x3, 0x2, 0x8}, {0xdc72, 0x4, 0x8, 0x1, 0x4, 0x5}, {0x9, 0x4, 0x9, 0x8, 0x0, 0x4}, {0x4, 0x1ff, 0x9, 0x5, 0x7, 0x401}, {0x1, 0x7ff, 0x6438e99f, 0xdb, 0x5, 0xe9da}, {0x5, 0x4, 0xdf5a, 0x1, 0x1, 0x3}, {0x401, 0xfffffff7, 0x2, 0xf74, 0x5, 0x3}, {0x4, 0x400a39f, 0x7, 0x97, 0xfffffffd, 0x80000001}, {0x4, 0x6, 0x9, 0x6, 0x1ff, 0x200}, {0x1, 0x2, 0x1000, 0xc, 0xf0d, 0x4}, {0xe, 0xb9, 0x1, 0x7, 0x7fff, 0x5}, {0x7, 0x2, 0x8, 0x9, 0x1000, 0x8}, {0x9, 0x6, 0x7, 0x2, 0x289c, 0x5}, {0x80000001, 0x9, 0xaad2, 0x4, 0x100, 0x5}, {0x7f, 0x0, 0x0, 0x0, 0x1, 0x4}, {0x6, 0x3, 0x9, 0x40, 0x40, 0x101}, {0xf5d8, 0xfffffffe, 0x8001, 0xfe, 0x0, 0x5}, {0x7, 0x4, 0x80, 0xfd4, 0x8}, {0x5, 0x1, 0x3, 0x100, 0x7d2, 0x174}, {0x7, 0x31, 0x8001, 0x7, 0x6}, {0x0, 0x1, 0x1, 0x0, 0x9, 0x3ff}, {0xfffffffb, 0x583, 0x1, 0x200, 0x6, 0xfffffff9}, {0x7, 0x7, 0x9, 0x9, 0x991, 0xf5}, {0x9, 0xfff, 0x8, 0xff, 0x249b, 0x8}, {0x1, 0x39, 0x7, 0xb087, 0xf, 0x5}, {0x200000, 0x4, 0x7, 0x2, 0xfffffffa, 0x6}, {0x1, 0x1, 0x7, 0x7, 0x6, 0xa6}, {0x10, 0x8000, 0x6, 0x4, 0x80, 0x6}, {0x1, 0x1, 0x0, 0x7, 0xf5d4}, {0x3, 0x6, 0xfffffffd, 0x7, 0xb52}, {0xa, 0xffff818d, 0x8, 0x8001, 0x3, 0x9}, {0x10, 0x6, 0x4, 0x800000, 0x8, 0x6}, {0x10, 0x2, 0xf2, 0x0, 0x7, 0x24}, {0x4, 0x5, 0xa48, 0x80000001, 0xffffffff, 0x6}, {0x1ff, 0x2, 0x9, 0xd, 0xfff, 0x3}, {0x2, 0x0, 0x8, 0x200, 0x3ff, 0xfffffffd}, {0x9, 0x5, 0x6, 0x1, 0x9, 0x6}, {0x7bb2ab83, 0x84b, 0x9, 0x12c83671, 0x7, 0x7f}, {0xde6f, 0x1, 0x9, 0x6e, 0x6}], [{}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x4, 0x9, 0x10000000, 0x80000000}, 0x9, 0x3, [{0x101, 0x7, 0xd79e, 0xffffffff, 0x6d, 0x8}]}, [{0x8063, 0x28, 0x8, 0xffffff7f, 0xfffffffa}, {0x3, 0x6b, 0x8, 0xc6, 0x6, 0x81}, {0x5, 0x6, 0xf, 0x1, 0x8, 0x800}, {0xaeb, 0x40, 0x2, 0x81, 0xf3a0, 0xf7}, {0x7, 0x4, 0x9, 0xfffffff9, 0x6b6b, 0x5c0d}, {0xffffffff, 0x1, 0x10, 0x3ff, 0x6, 0xfff}, {0x7, 0x3, 0x7, 0x10000, 0x2, 0xffff7fff}, {0x2, 0xa, 0x8, 0x5, 0x1000, 0x25}, {0xfffffff3, 0x10, 0x2, 0xa0e, 0xc, 0x3f44}, {0x3, 0x1, 0x9, 0x2, 0x1, 0x200}, {0xeda0, 0x32, 0x400, 0x8, 0x7, 0x4}, {0x1, 0x4, 0x1, 0x0, 0x7, 0x5}, {0x7, 0xc6, 0x2d9, 0x2, 0x2, 0x74a7}, {0x2, 0x4, 0x7, 0xfdd, 0x10000, 0x2}, {0x2, 0xfffffff7, 0x6, 0x5f, 0xc}, {0x2c76, 0x6, 0xb4b, 0xc, 0x3, 0x99}, {0x9, 0xe8, 0x8, 0x7f, 0x5, 0xf}, {0xcc6, 0x8, 0x1, 0xde3, 0x1, 0x1}, {0x2, 0x1, 0x80000001, 0x9, 0x3d, 0x7fff}, {0x7ec69423, 0xda, 0xf, 0x4, 0x5, 0xff52}, {0x2, 0x7f, 0x2c9, 0xe706, 0x2, 0x6}, {0x1, 0x3000000, 0x93ea, 0x0, 0x6, 0x6}, {0x8, 0x2, 0x41, 0x59b, 0x1b91, 0x8}, {0x3, 0x9, 0x9, 0x80, 0x87e, 0x1}, {0x1, 0x9, 0x7, 0x0, 0x63f, 0x4}, {0xd22, 0x400, 0x9, 0xffffffff, 0x1, 0x8}, {0x0, 0x0, 0x4, 0x9, 0x1, 0x7fff}, {0xfffffc00, 0x1ff, 0x8, 0x4, 0x6, 0x9}, {0xffffffff, 0x4, 0x7, 0x80000001, 0x3ff, 0x101}, {0x1, 0x4, 0xfffffffe, 0x7, 0x3, 0x200}, {0x2, 0xf0, 0x1, 0x400, 0x0, 0x3}, {0x1, 0x0, 0x7, 0x0, 0x81, 0x400}, {0x6, 0x2, 0x7, 0x7, 0x5, 0x6}, {0x0, 0x5, 0x9, 0x3, 0x8}, {0xfffffffb, 0x0, 0x401, 0x5, 0x9, 0x87}, {0x6, 0x6, 0x3, 0x9, 0x1, 0x4}, {0x8000, 0x6, 0x10, 0x5, 0x8, 0x10001}, {0x9, 0x7f, 0x3, 0x6, 0xf, 0x9}, {0xfff, 0x8000, 0xff, 0x7, 0xfffffffe, 0x3}, {0xfffffffc, 0x9, 0x432, 0x6268, 0x5, 0x8}, {0x7, 0x9, 0x1, 0x0, 0xfffffffa, 0x6905c5b6}, {0x944b, 0x4, 0x7, 0x8, 0x2, 0x80000000}, {0x1, 0x36cc, 0x85, 0x6b, 0xf0000000, 0x96e}, {0xe, 0x4, 0x101, 0x2, 0x9, 0xfffffff8}, {0xe, 0x4, 0x1, 0xfffffff8, 0x7, 0x8}, {0x101, 0x8, 0xffff877a, 0x7, 0x186, 0x5}, {0xfffffeff, 0x8000, 0x10, 0x2, 0x7ff, 0x200}, {0x6, 0x5, 0x2, 0x1, 0x40, 0x2}, {0xd69, 0x9, 0x8ad, 0x60000000, 0x3, 0x5}, {0x6, 0x3, 0x3, 0xffff, 0x9, 0x6481955e}, {0x1, 0x3, 0x6, 0x1, 0x8000000, 0x1}, {0x1ff, 0x8cc7, 0x9067, 0x8001, 0x7, 0x9}, {0xfffff6c8, 0x8, 0x8, 0x74, 0x6, 0x1}, {0x1, 0xffff, 0xfffff001, 0x4, 0x5f, 0x6b59}, {0x6, 0x4, 0x6, 0x1, 0x7, 0x67f}, {0x8fd, 0x0, 0x7b3, 0x699, 0x1, 0xfffffffc}, {0x5, 0x7, 0x0, 0x800, 0x1cc1fd27, 0x6}, {0x80, 0x6, 0x9, 0x7fff, 0x80000001, 0x5}, {0xffffffff, 0x5, 0x1a, 0x2, 0xb, 0x4}, {0x1000, 0x9, 0x5, 0x9, 0x10001, 0x9a1e}, {0x0, 0x3, 0xd, 0xfe, 0x5, 0x8}, {0xa843, 0x8001, 0xa7b, 0xf, 0xa, 0x6}, {0xf84, 0x3, 0x8, 0x4, 0x81, 0x9}, {0x8, 0x6, 0x1, 0x22, 0x400, 0x7}, {0x6, 0x4, 0xffffffff, 0x6, 0x3}, {0x8, 0x1, 0x1, 0x5, 0x2, 0x4}, {0xfffffffa, 0x0, 0xcf, 0xc2, 0x6600, 0x4}, {0x48000000, 0x1, 0x7, 0x4, 0xb, 0x1}, {0x6, 0xa, 0x3, 0x1e06, 0x6, 0xfffffffa}, {0x8000, 0x4, 0xffff0440, 0x1, 0x8001, 0x800}, {0xfffffffe, 0x8, 0x3, 0xfffff001, 0x7}, {0xb, 0x10001, 0x7, 0x6, 0x2, 0xffffffff}, {0x0, 0x6000000, 0x8, 0x6, 0xffffffff, 0x4}, {0x3, 0x81, 0x9, 0x1, 0xa8, 0x2}, {0x10001, 0x40, 0x3, 0x1ae, 0x8, 0x9}, {0x1, 0xea29, 0x21, 0x7, 0x0, 0xbf4b}, {0x1, 0x4, 0x2, 0x8000000, 0x7, 0x200}, {0x6, 0x7fe000, 0x4, 0x9, 0x95, 0x9}, {0x3, 0x6, 0x6, 0x59, 0xe, 0x6}, {0x0, 0xffffffff, 0x4, 0x0, 0x6cba, 0x505}, {0x0, 0x7fffffff, 0xfed, 0x6, 0x81, 0xad0}, {0x7, 0x0, 0x9, 0x2, 0xffffffdf, 0xf4}, {0x0, 0xffffffff, 0x3, 0x2, 0x97, 0x8}, {0x7d, 0x1ff, 0xb7b, 0x7, 0xf, 0x7ff}, {0x0, 0x8, 0x8, 0x0, 0x9, 0xa}, {0x101, 0x80000000, 0x1, 0x7, 0x6, 0x67}, {0x8, 0x8, 0x200, 0x8000, 0x6848, 0xd}, {0x0, 0x5, 0x575, 0x400, 0x179, 0x44}, {0xfffffffb, 0xffffff33, 0x4, 0x1, 0x3}, {0xfff, 0xffffffff, 0x81, 0x5, 0x1, 0x80000001}, {0x356f, 0x5, 0x400, 0xb319, 0x4, 0x5}, {0x4, 0x7, 0x2, 0x5, 0x5, 0x3}, {0x1, 0x10, 0x2, 0x401, 0x5, 0x10}, {0x2, 0x101, 0x7fffffff, 0x87, 0x2128, 0x4}, {0x2, 0x898f, 0x4, 0x4c7d7e87, 0xffffff78, 0x9327}, {0x401, 0x2, 0xd, 0x7, 0xd194, 0xfff}, {0x6, 0x6, 0x5, 0x6a, 0x3, 0x1c5c}, {0x1000, 0x0, 0xa, 0x0, 0x9, 0x400}, {0xffffff00, 0x5, 0x3, 0x0, 0x1c00000, 0x4}, {0x4, 0x0, 0x200, 0x8, 0x7, 0x2}, {0xf4f, 0x0, 0x5, 0xeef, 0x8000}, {0x1000, 0x80, 0x3ff, 0xffff396f, 0xff800000, 0x2}, {0xf82b, 0x7, 0x100, 0x7, 0x3, 0x6}, {0x4, 0x0, 0x1, 0xffff8000, 0x2, 0xe70}, {0x48, 0xc, 0x5, 0x9, 0xb, 0x5}, {0x80, 0x1, 0x9, 0x5, 0x401, 0x3}, {0x6, 0x4, 0x95, 0x6, 0x8, 0x4}, {0x5, 0x1, 0x1, 0x3, 0x0, 0x9}, {0x7, 0x284cd1f5, 0x9, 0x8, 0x800, 0x3}, {0x5, 0xc4, 0x200, 0x80, 0x5, 0x23}, {0x5, 0xd, 0x2, 0x2, 0x81, 0x18000000}, {0x5, 0x1, 0xffffff32, 0x3, 0x7, 0xffff2898}, {0x2, 0x3, 0xe6, 0x9a, 0xf, 0x80000000}, {0x2, 0xb6f, 0xfffffffa, 0x7, 0x81, 0x66}, {0x0, 0x8, 0x14000, 0x2, 0xff, 0x9}, {0xfa, 0x10000, 0xfffffff9, 0x7f, 0x0, 0x6}, {0x7fff, 0xfffffff8, 0x6, 0x9cc, 0xe, 0x307}, {0x1, 0x7, 0xeab4, 0x4, 0x79f}, {0x9, 0x7fff, 0x6, 0x9, 0xbea9, 0x3}, {0x76855cef, 0x200, 0x111, 0x6, 0xd7, 0x81}, {0x0, 0x400, 0x3, 0x2, 0x5, 0x81}, {0x654, 0x7, 0x52, 0x2, 0xd, 0x5}, {0x17d, 0x1, 0x7, 0x3, 0x0, 0x1}, {0x3, 0xde2, 0xffffffff, 0x2, 0x6, 0x5}, {0x27817cb4, 0x3, 0x3, 0x7fff}, {0x0, 0x1, 0x0, 0x4, 0x7, 0x7fff}, {0x54a, 0xc2ec, 0x5, 0x8001, 0xffffffc0, 0x5}, {0x2, 0x8, 0x5, 0x1, 0x6, 0x7d}], [{0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x107dcd85fdb9a820}, {0x1, 0xb0e2050aade19ec9}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x71efda5f04b93aff, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2b916ca0fa273c87}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {}, {}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2, 0x82b1d8c3c2c430e4}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0x7f, 0x5, 0x9, 0x1}, 0x5, 0x5, [{0x4, 0x2, 0xb, 0x1ff, 0x6, 0x10001}, {0x2, 0x1, 0xff, 0x100, 0x3, 0x6}, {0x8, 0x1, 0x3, 0x5, 0x966, 0xfffffff9}, {0xe, 0x5, 0x2, 0x80, 0x8}]}, [{0x5, 0x7fffffff, 0x0, 0xfff, 0x7f, 0x3}, {0x10001, 0x0, 0x4, 0x1, 0x6, 0x9}, {0x81, 0x1, 0x1, 0x1, 0x7, 0x9}, {0x2b, 0x3, 0x10001, 0x9, 0x1ff, 0x10000}, {0x7, 0xb, 0x80000000, 0x400, 0x6, 0x6}, {0x10, 0x1661, 0xa, 0x9, 0x4, 0x8}, {0x2, 0x1000, 0x1ff, 0x3, 0x1, 0xffffffff}, {0x0, 0x0, 0x2, 0x3, 0x6, 0x2}, {0x7fff, 0x3ff, 0xfffffffd, 0x40, 0x2, 0x80000001}, {0x1, 0x1f2d, 0xfffffe01, 0x80000000, 0x1, 0x6}, {0x8, 0x1, 0x5, 0x971, 0x8, 0x80000001}, {0x3ff, 0x10001, 0x800, 0x4a9, 0x5, 0x3}, {0x7, 0x7b7e, 0x3, 0x65, 0x1, 0x7}, {0x5, 0x8, 0xa, 0x6, 0xb8ac, 0x4}, {0x6c5, 0xb, 0x35e6, 0xb, 0x9, 0x4}, {0xb5, 0x6, 0xfffffff7, 0x4982, 0x5, 0xfff}, {0x0, 0xb40b, 0x5, 0x800, 0x3, 0xa}, {0x9, 0x2, 0x2, 0x62, 0xffffff80, 0x6}, {0x9, 0x5, 0x4, 0x6, 0x4f, 0x7}, {0x4, 0x80000001, 0x10000, 0x1, 0x80000001, 0xc}, {0x6, 0x10, 0x0, 0x40, 0x40, 0x7ff}, {0x7fffffff, 0x3, 0x9, 0x5, 0x1, 0x10}, {0x7, 0xc, 0x9, 0x3, 0x4c5a, 0x6}, {0x8, 0xfd7, 0x7e72, 0x80, 0x8, 0x1}, {0x5, 0x5, 0x1de, 0x3, 0x1ff, 0x87d}, {0x18c, 0x4, 0x2f81, 0x20, 0x7, 0x8}, {0x8001, 0x7, 0x80, 0x9, 0x7, 0x5d5}, {0x5, 0xfff, 0x6, 0x6, 0x6, 0x3}, {0x7fffffff, 0x1, 0x7, 0x6, 0x7f, 0x400000}, {0x3, 0x8, 0x7f, 0xb, 0x9, 0x9}, {0x8, 0x4, 0x4, 0xffffffff, 0x0, 0x61}, {0x5, 0x6, 0x9, 0xffff, 0x2, 0xc}, {0x6, 0xff, 0x400, 0x5, 0x6, 0x1}, {0x2e25, 0x50, 0xfffffffc, 0x1fa8, 0x200, 0xe}, {0x4, 0xa0000000, 0x9, 0xb73, 0x4, 0x8}, {0xc7, 0x400, 0x8001, 0x1, 0x8}, {0x8000, 0x3, 0x7, 0x9, 0x3ff, 0xffffffff}, {0xc4, 0x80, 0x0, 0x1, 0x96a}, {0x3, 0x7fff, 0x3, 0xffffffe4, 0x5, 0xb8f}, {0x6, 0x800, 0x1, 0x7ff, 0x8, 0x3}, {0x5c2132dd, 0x81, 0x2, 0x2, 0x8, 0x2}, {0x3, 0x200, 0x3, 0x7, 0x4, 0xfffffffb}, {0x3, 0x1, 0x10, 0x3, 0xfffffffa, 0xfffffff7}, {0x200, 0x5, 0x0, 0x6, 0x6, 0xfffffffe}, {0x6, 0x8, 0x0, 0x7, 0xa33, 0x1}, {0x4, 0x3, 0x18000000, 0x0, 0x400, 0x8}, {0x3, 0x9, 0x2, 0xcf, 0x5, 0x2}, {0x2, 0xab1b, 0x101, 0x200, 0xf90e, 0xb}, {0x1, 0x5, 0x4, 0x5}, {0x200, 0x7f, 0xc, 0x2, 0x401, 0x4}, {0x8, 0x1, 0x5, 0xfffffff9, 0x3ff, 0x1}, {0x8, 0x6c9, 0x4, 0x0, 0x8, 0x5418}, {0x400000, 0x2, 0xd090, 0x5, 0x7}, {0x4, 0x50, 0x2, 0x800, 0x3, 0x6}, {0x7713, 0x9, 0x9, 0x6, 0x6, 0x3}, {0x8, 0x7, 0xfff, 0x1, 0x2, 0x800}, {0x7, 0x6, 0x100, 0x1000, 0x2, 0x1}, {0x0, 0x5, 0x7f, 0x5, 0x7, 0x5}, {0x5, 0x10000000, 0xfffffffe, 0xfffffffb, 0x4, 0x9}, {0x8, 0x4, 0x10001, 0x7, 0x67, 0x7fff}, {0x4, 0x36, 0x4, 0x4, 0x6}, {0xd, 0x0, 0x5, 0xd, 0x9, 0x2}, {0x3, 0x5, 0x8, 0xbfe878d, 0x1, 0x7}, {0x7, 0xec, 0x7, 0x4, 0xb, 0x1b50}, {0x4, 0xa, 0x8, 0x1, 0x2, 0x9}, {0x8, 0x8e4, 0xd, 0x5, 0x3ff, 0x3}, {0x8, 0x1ff, 0x10, 0x401, 0x6, 0x63a48b4e}, {0xfffffffb, 0xf3, 0x5, 0x4, 0x9, 0xaa}, {0x4, 0x8, 0xfffffff9, 0xa, 0x0, 0xd}, {0xbd, 0xe, 0x3, 0x8, 0x2, 0x2}, {0x1, 0x3, 0x1, 0x7fffffff, 0x1, 0x5}, {0x5, 0x6, 0x3, 0xffffffff, 0xa, 0x400}, {0x200, 0x15, 0xff, 0x8, 0x7, 0x2}, {0x2, 0x4221, 0xfffffff3, 0x800, 0x7, 0x2}, {0x3, 0x2, 0x401, 0x37, 0x2, 0x6}, {0x0, 0x8, 0xfffffff7, 0x80, 0x925, 0x9}, {0x10000, 0x2, 0x7, 0xbb9b, 0x3}, {0x1, 0x5, 0x6, 0x0, 0x6, 0x9}, {0x8, 0x2, 0x1, 0x9, 0x8, 0x3}, {0x1, 0x8, 0x6, 0x6, 0x2, 0x7}, {0x81, 0x1, 0x6, 0x1, 0x1, 0x1}, {0xfffff800, 0x6, 0xc95b, 0xc7ca, 0x657, 0xc0ad}, {0x5, 0x4, 0x8, 0x0, 0xffffffff, 0x8}, {0x3, 0x7, 0xfffffff7, 0x3, 0x7fffffff, 0x401}, {0xffffffb2, 0x1000, 0x3, 0x1, 0x7, 0xd}, {0x2, 0x1, 0xc13, 0x0, 0x1, 0x3}, {0x569, 0x700000, 0xa, 0x3ff, 0x1, 0x7}, {0x0, 0xb1a5, 0x8, 0x1, 0x3, 0x8}, {0x1, 0x4, 0x7fffffff, 0x3f7, 0x1, 0x49}, {0x5, 0x60000, 0x401, 0x3, 0x6, 0x81}, {0x7, 0xfff, 0x1, 0xfffffffe, 0x57, 0xd2b}, {0x7, 0x4, 0x80000000, 0x6, 0xb9f, 0x5b0}, {0xaa6, 0x5d, 0x3ff, 0x6, 0x9, 0x3}, {0x4, 0x90e, 0x7, 0x1, 0x7fffffff, 0x80000000}, {0x3, 0x101, 0x7, 0x6, 0xffc0, 0x5}, {0x390e, 0x5, 0x1d, 0x2, 0x8, 0xffff}, {0x0, 0x9, 0x3, 0x5, 0x8, 0xf784}, {0x4, 0xa580, 0x10000, 0x5, 0xf3d0, 0xa287}, {0x6, 0x7f, 0x6, 0x8, 0x1000, 0xbdcd}, {0xed6, 0x4, 0x7, 0x7, 0x1, 0x7}, {0x3, 0x3, 0x7, 0x7f, 0x100, 0xd}, {0x5, 0x7, 0x8, 0x2, 0x2}, {0x1, 0xfffffffa, 0x8, 0x8, 0xfffffff9, 0x2}, {0x4, 0x36, 0xfffffffb, 0x101, 0x3, 0x5}, {0x88, 0x401, 0xc09, 0x100, 0xf, 0xd8}, {0x8, 0x7, 0x9, 0x4, 0x7, 0x668d0f54}, {0x8, 0x4, 0x5, 0x75, 0x10001, 0xcc}, {0x2659, 0x200, 0x0, 0x0, 0x0, 0xc}, {0x3, 0x6, 0x3, 0x81, 0xcc, 0x6}, {0x0, 0x4, 0xa5d9, 0x2, 0x5, 0x7fffffff}, {0x8, 0x7fff, 0x6000, 0xffff4bda, 0x8, 0x7}, {0xe94, 0x7c2, 0x10001, 0x8001, 0x5, 0x5}, {0x7, 0x5, 0x10001, 0x7f, 0x0, 0x7f}, {0x2, 0xff, 0x9, 0xc0, 0x7, 0x6}, {0x5, 0x7, 0x0, 0x9, 0x6, 0x5}, {0x80000001, 0xe, 0x10000, 0x8, 0x3, 0x7}, {0x8, 0x8, 0x0, 0xe1e6, 0x0, 0x2e6}, {0x0, 0x5, 0x8, 0xe, 0xba, 0x7}, {0x10, 0x1, 0x6, 0x7, 0x3, 0x10}, {0x10000, 0x101, 0xeb, 0x7, 0x0, 0x4}, {0x2, 0x94, 0x40, 0x2, 0x5, 0x9}, {0x9f82, 0x2, 0xfffffff8, 0x8, 0x6, 0x9}, {0x8, 0x2, 0x0, 0x5, 0x8, 0x7fffffff}, {0x6, 0x2, 0x1, 0xd, 0xfffffff5, 0x6}, {0x74, 0x8f0, 0xffffff4f, 0x1f, 0x6, 0x8}, {0x9, 0x2, 0xa, 0x1ff, 0x9, 0x8001}, {0xb46, 0x8001, 0x6, 0x25d, 0x2, 0x3}, {0x9, 0x1, 0x0, 0xffff81a3, 0xfff, 0x3}], [{0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x4}, {0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x7c7c7ffcdf734d22}, {0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0xfc4, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x401, 0x7fffffff, 0x0, 0x7, 0x80000001, 0x1, 0x10001, 0x4, 0x4, 0xe, 0x7908, 0x2, 0x8, 0x7fff, 0x1000, 0xfffff001, 0x3, 0x0, 0x6, 0x3, 0xc9, 0x3ff, 0x10001, 0x0, 0x3, 0x9, 0x3, 0x69458dcc, 0x8, 0x1, 0x10001, 0x7, 0x0, 0x2, 0x2, 0x7d, 0xfffffedc, 0x5, 0x6, 0x800, 0x6a67, 0x7ff, 0x0, 0x3215, 0x9, 0xfffffffb, 0x65, 0x3, 0x3, 0x0, 0x7, 0x4, 0x1bbf, 0x7, 0x4, 0x0, 0x14, 0xdd5, 0xb39, 0xff, 0x7, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x2b62, 0x999, 0x7, 0x9, 0x80, 0x0, 0x5, 0xb7, 0x3, 0x4, 0x1, 0x1, 0x9, 0x4, 0x1, 0x101, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6a2c, 0x43c, 0x0, 0x8, 0x6, 0x3, 0x1, 0x80000000, 0xb3980000, 0x3, 0x3ff, 0x4, 0x5, 0x6, 0x6, 0x10, 0xffff, 0x8, 0x2, 0x6, 0x800, 0x4, 0x5, 0x2, 0xffff, 0x2, 0x2, 0x9, 0x4, 0xfffffff8, 0x200, 0x9, 0x2, 0x200, 0x0, 0xfffffff6, 0xf80, 0x4, 0x2, 0x6, 0x5, 0x1, 0x0, 0x9c4, 0x7ba, 0x8, 0x1, 0x80, 0x3, 0x7ff, 0x6d, 0x9, 0x3, 0x1fc, 0xc, 0x6, 0xc219, 0x7, 0x8, 0x2d, 0x6, 0x66, 0xeb26, 0xfff, 0xfffffbc8, 0x8a7, 0x9, 0x80, 0xfffffffa, 0x5, 0xa0, 0x400, 0x2, 0x623b, 0x1de7dfbf, 0x1, 0x2, 0x4, 0x5, 0x30, 0xff, 0x80, 0x101, 0x1, 0x18, 0x3ff, 0x0, 0x8, 0x1, 0x401, 0x9, 0x40, 0x70, 0x39, 0x4bdaf142, 0xd9b, 0x100, 0x6, 0x5, 0x3, 0xffff, 0x81, 0x1, 0xff, 0x3, 0x9, 0xe6c, 0x3b, 0x9, 0x5, 0x8001, 0x5, 0x3, 0x0, 0x4, 0x3, 0x0, 0x4, 0xfffeffff, 0x7fffffff, 0x80000001, 0x8, 0x6, 0x5, 0xfffffffb, 0x65, 0x3, 0x7fffffff, 0x0, 0x1, 0x6, 0xffffffff, 0xb19, 0x5, 0xefce, 0xc, 0x8, 0xb, 0x7, 0x2, 0x8, 0x421, 0x80000001, 0x8, 0x0, 0x2, 0x6, 0x4bfd, 0x6, 0x9, 0x9, 0x6, 0x454, 0x7f, 0x4, 0x8, 0x101, 0xb3, 0x7, 0xfffffff8, 0x4, 0xe, 0x80d5, 0x10, 0xfffffff6, 0x62f7]}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x28c, 0x2, [@TCA_BASIC_EMATCHES={0x288, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xcf9b, 0x1, 0xff}, {0x67, 0xf67, 0x40, 0x2, 0x2, 0x0, 0x2106ae2927e55093}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x3, 0x7, 0xeb}, {{0x4, 0x0, 0x1, 0x1}, {0x3}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x100, 0x2, 0xab7}, {0xc, 0x1, 0x1, "c1"}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x6}, {0x47, 0x10000, 0x9, 0x200}}}]}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_META={0x78, 0x1, 0x0, 0x0, {{0xff, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="34de", @TCF_META_TYPE_VAR="5b77c9d5b408"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7f, 0x1}, {0x4, 0x6}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x6, 0x1}, {0x8000, 0x1}}}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR="b4cf75981d03198e6d", @TCF_META_TYPE_VAR="ed75f6dd3224b1", @TCF_META_TYPE_VAR="f6d5c5359367", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfff, 0x3, 0xffff}, {0x977, 0x7d58, 0x9, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe01}}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xbc, 0x3, 0x0, 0x0, {{0xa, 0x0, 0x1}, "6534688a767a6c5c6b7b909b359c6e78536394541e5f758f71d1f789c0fb2adb12cd49c2fc90e2f724dab9c0b89f36a7ee30069c7feb167c412b46bccb9804add8330fc1e91020d94e74938dca873ac90dc4f1aa0f8a39184c9742a1428fa2b7ac45e4b5e84c98e2eb66bcd9f60aefa5ac7de24834d8930e1ef328975325a4aa0d0555fc2e9ae57b068959f293a888c4de87fb399dfead6cb9899cc8bc7772744ac0af8f3dd6e237a2cb89e4f2c1e7"}}]}, @TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xeaf5, 0x3, 0xec6f}, {0x8, 0x7, 0x7, 0x7}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x3}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x2}, {0xffffffffffffffff, 0x4, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0xfffffff6, 0x5, 0xfff}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x9}, {0xcde8, 0xa, 0x0, "98d514fe84f2561827cf"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8f, 0x8, 0x5}, {0xffffffffffffffff, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9d, 0x2, 0x39}, {0x52, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x401, 0x7, 0x9}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x49f4}}, 0x50) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="060000000114000429bd7000fedbdf2508000100020000000800010000000000080001000100000008000100010000000800018a4cca0413d356bbf41f28abec740001000000080001000000000008000134fc5bb4a0f906e31dcec8be1400000000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x3, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0xc4c4) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x70]}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 9.384902009s ago: executing program 3 (id=2847): syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 8.225910989s ago: executing program 1 (id=2849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 8.108620813s ago: executing program 3 (id=2850): syz_usb_connect(0x0, 0xf2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 6.084739612s ago: executing program 1 (id=2853): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x8800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0x400b601, 0x20, 0x5, 0x38f}, &(0x7f0000000240), 0x0, &(0x7f0000000000)) r5 = socket$inet(0x2b, 0x801, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000040)={0xff, @broadcast, 0x4e25, 0x3, 'dh\x00', 0x33, 0xfffffffe, 0xfffffffc}, 0x2c) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x40000, 0x7c6d, 0xffffffff, 0x8001, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x2, 0xd0, 0x0, 0xff}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 5.668174017s ago: executing program 1 (id=2855): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) 5.339698398s ago: executing program 0 (id=2856): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000c07fa13924dc33ae00009500000000000000"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) r10 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0x9) pread64(r9, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="ef888f00"/13, @ANYRES32=0x0], 0x50) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r11, 0x40045542, &(0x7f0000000080)=0x5) 4.070624941s ago: executing program 0 (id=2859): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010011a"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000274, 0x480c0) 3.978184264s ago: executing program 6 (id=2860): syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 3.722488853s ago: executing program 0 (id=2861): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettimeofday(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x90000009}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x85, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(0xffffffffffffffff, 0x80) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) dup3(r1, r1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x110a}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r9) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, r10, 0x1, 0x70bd2d, 0xe}, 0x14}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 3.721955503s ago: executing program 6 (id=2862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) 3.52015317s ago: executing program 7 (id=2863): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40b, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 3.51761404s ago: executing program 0 (id=2864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x20002, 0x9, {0x0}, {0xee00}, 0x700000000000, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000003c0)=@generic={0x1f, "6fa0cdb098606708a3b923f5e5aeca63cbe3147b6416b883a48ea59b8b05980f5b5ed619a3aa87ff18121684d11845be301af25a24af53f22ecd5b5c1a56f35ceca2a1107c63fed526e1306027fbf01a2478f4eed3c0469d67cc945bd6d0bf931e3142994124460690ce4492a3fd936792d9c0dca4413428d7e72cfcc49b"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="0c3d058bf0e809f628330ab68df591e50993fc566863ffcbea29f2e81a9f442c756bc329d892006b5f566fd3e2c856afb0b0d325259e623d5aad4c55b12af4a45e741abbc6ccf334cfff040eb55eed65985a13e77dc5bdc33c8c577b87759e929425a26f2fd838cffaa72f5b6ea909234d8fac28a1e95e61f27717367eb8459833a26299304852efbb66b224b5da2bbfe600", 0x92}], 0x1}, 0x4000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3.497492911s ago: executing program 6 (id=2865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x2f) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x64, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket(0x1, 0xa, 0x1) setsockopt$WPAN_SECURITY(r7, 0x11e, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x200200004, &(0x7f0000ffb000/0x2000)=nil, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.048946016s ago: executing program 3 (id=2866): socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.299416091s ago: executing program 7 (id=2867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000880)={0x2, 0x40000090, &(0x7f0000000040), 0x0}) 1.846700037s ago: executing program 7 (id=2868): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) r5 = syz_open_dev$media(&(0x7f00000006c0), 0xb893, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd67b1593700303a0020010000000000000000000000080000fe8000000000000000000000000000aa01019078b2000900648b77d207e9840000000000001eff01fc010000000000000000000000000000bdface1f6f40d80000000000000000"], 0x0) 1.74207714s ago: executing program 0 (id=2869): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 1.564253577s ago: executing program 0 (id=2870): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x5, 0x5, 0x5, 0x7a65, 0x8, 0x26, 0x500, 0xfffffffffffffffc, 0x4, 0x2, 0x5}) 619.629089ms ago: executing program 3 (id=2872): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) epoll_create1(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}], 0x1, 0x16, 0xc) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 583.968ms ago: executing program 6 (id=2873): syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, 0x0, &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 395.567286ms ago: executing program 6 (id=2874): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettimeofday(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r3 = epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x90000009}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x85, 0xb, "0062ba7d82070000000000efffffffff086304"}) r4 = syz_open_pts(0xffffffffffffffff, 0x80) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) dup3(r1, r1, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x110a}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r9) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, r10, 0x1, 0x70bd2d, 0xe}, 0x14}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 192.245934ms ago: executing program 1 (id=2875): futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) 110.546426ms ago: executing program 6 (id=2876): syz_usb_connect(0x0, 0xf2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 0s ago: executing program 1 (id=2877): setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010005000000000004000100000001"], 0x24, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0xfffffffe) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6080, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffed0}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c080000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000030000000e00"/28], 0x50) io_uring_setup(0x6582, &(0x7f0000000040)={0x0, 0xa989, 0x20, 0x5, 0x179}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000200)={@local, 0x78}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000002100000000004683000040000000000000"], 0x48) pipe(&(0x7f0000000080)) kernel console output (not intermixed with test programs): mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 780.704530][T11374] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 781.788773][T11385] tipc: Started in network mode [ 781.793797][T11385] tipc: Node identity c2f600fc5173, cluster identity 4711 [ 782.744076][T11385] tipc: Enabled bearer , priority 0 [ 782.755297][T11385] tipc: Resetting bearer [ 782.884729][T11384] tipc: Disabling bearer [ 785.073544][T11416] loop5: detected capacity change from 0 to 128 [ 785.164095][T11416] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 785.181885][T11416] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 786.227429][T11444] tipc: Started in network mode [ 786.244830][T11444] tipc: Node identity e277c83c852b, cluster identity 4711 [ 786.274316][T11444] tipc: Enabled bearer , priority 0 [ 786.323839][T11444] tipc: Resetting bearer [ 786.444974][T11440] tipc: Disabling bearer [ 786.883643][T11449] loop0: detected capacity change from 0 to 40427 [ 786.931677][T11449] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 786.940402][T11449] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 786.952366][T11449] F2FS-fs (loop0): invalid crc value [ 786.990342][T11449] F2FS-fs (loop0): Found nat_bits in checkpoint [ 787.096651][T11449] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 787.103767][T11449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 788.519860][T11470] loop3: detected capacity change from 0 to 32768 [ 788.649524][T11470] JBD2: Ignoring recovery information on journal [ 788.764615][T11470] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 790.040033][T11496] loop1: detected capacity change from 0 to 512 [ 791.086139][T11496] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 791.312708][T11496] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 791.657735][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 798.154807][T11570] overlayfs: failed to resolve './file0': -2 [ 799.912240][T11583] loop3: detected capacity change from 0 to 128 [ 800.027515][T11583] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 800.069384][T11583] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 801.291749][T11609] netlink: 'syz.1.1751': attribute type 6 has an invalid length. [ 801.722371][T11618] overlayfs: failed to resolve './file0': -2 [ 802.642420][T11600] loop4: detected capacity change from 0 to 32768 [ 804.415146][T11600] (syz.4.1750,11600,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 804.430465][T11625] loop5: detected capacity change from 0 to 512 [ 804.660189][T11625] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 804.767618][T11600] (syz.4.1750,11600,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 804.801440][T11625] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 808.699117][T11679] overlayfs: failed to resolve './file0': -2 [ 808.845602][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.852635][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.329977][T11678] overlayfs: failed to resolve './bus': -2 [ 810.420515][T11684] loop3: detected capacity change from 0 to 32768 [ 811.462682][T11684] JBD2: Ignoring recovery information on journal [ 811.603717][T11684] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 812.037745][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 812.695864][T11713] ubi: mtd0 is already attached to ubi31 [ 812.702129][T10020] Bluetooth: Frame is too long (len 12, expected len 4) [ 816.197765][ T4233] Bluetooth: hci5: command 0x0406 tx timeout [ 818.475819][T11776] ubi: mtd0 is already attached to ubi31 [ 818.482265][T10020] Bluetooth: Frame is too long (len 12, expected len 4) [ 820.296202][T11817] loop1: detected capacity change from 0 to 128 [ 820.346882][T11817] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 820.376124][T11817] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 822.757792][T11830] loop0: detected capacity change from 0 to 32768 [ 822.874156][T11830] JBD2: Ignoring recovery information on journal [ 823.184390][T11830] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 823.342825][T11868] tipc: Started in network mode [ 823.362260][T11868] tipc: Node identity 7247d4c44c52, cluster identity 4711 [ 823.409595][T11868] tipc: Enabled bearer , priority 0 [ 823.465701][T11873] tipc: Resetting bearer [ 823.598301][T11867] tipc: Disabling bearer [ 824.634827][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 827.085232][T11920] tipc: Enabled bearer , priority 0 [ 827.129749][T11920] tipc: Resetting bearer [ 827.355261][T11919] tipc: Disabling bearer [ 830.516805][T11959] ubi: mtd0 is already attached to ubi31 [ 830.553821][T10020] Bluetooth: Frame is too long (len 12, expected len 4) [ 832.549383][T11945] loop1: detected capacity change from 0 to 32768 [ 832.630888][T11945] JBD2: Ignoring recovery information on journal [ 832.713990][T11945] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 832.735586][T11976] tipc: Enabled bearer , priority 0 [ 832.843095][T11975] tipc: Disabling bearer [ 834.353517][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 835.180341][T12017] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1857'. [ 835.317023][T12017] device syzkaller0 entered promiscuous mode [ 836.778169][T12035] netlink: 'syz.3.1860': attribute type 4 has an invalid length. [ 837.004773][T12040] overlayfs: missing 'workdir' [ 837.764234][T12034] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 837.875456][T12034] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 841.430871][T12087] overlayfs: missing 'workdir' [ 842.295992][T12062] loop3: detected capacity change from 0 to 32768 [ 843.116322][T12099] loop5: detected capacity change from 0 to 40427 [ 843.290878][T12104] netlink: 'syz.0.1877': attribute type 6 has an invalid length. [ 843.357078][T12099] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 843.364976][T12099] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 843.402492][T12099] F2FS-fs (loop5): invalid crc value [ 843.611420][T12099] F2FS-fs (loop5): Found nat_bits in checkpoint [ 843.659430][T12099] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 843.667108][T12099] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 846.789286][T12146] loop1: detected capacity change from 0 to 512 [ 846.861362][T12146] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 847.031421][T12146] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 847.882786][T12159] netlink: set zone limit has 8 unknown bytes [ 848.072789][T12165] overlayfs: failed to resolve './file1': -2 [ 850.742950][T12190] tipc: Enabled bearer , priority 0 [ 850.767516][T12190] tipc: Resetting bearer [ 851.894671][T12187] tipc: Disabling bearer [ 852.046881][T12210] overlayfs: failed to resolve './file1': -2 [ 852.974921][T12218] loop3: detected capacity change from 0 to 512 [ 853.042512][T12218] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 853.189672][T12218] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 854.127902][T12239] loop4: detected capacity change from 0 to 256 [ 854.501782][T12239] FAT-fs (loop4): Directory bread(block 64) failed [ 854.514156][T12239] FAT-fs (loop4): Directory bread(block 65) failed [ 854.523680][T12239] FAT-fs (loop4): Directory bread(block 66) failed [ 854.564100][T12239] FAT-fs (loop4): Directory bread(block 67) failed [ 854.615305][T12239] FAT-fs (loop4): Directory bread(block 68) failed [ 854.678446][T12239] FAT-fs (loop4): Directory bread(block 69) failed [ 854.730629][T12239] FAT-fs (loop4): Directory bread(block 70) failed [ 854.777737][T12239] FAT-fs (loop4): Directory bread(block 71) failed [ 854.839217][T12239] FAT-fs (loop4): Directory bread(block 72) failed [ 854.898210][T12239] FAT-fs (loop4): Directory bread(block 73) failed [ 854.959276][T12215] kvm: pic: non byte write [ 855.479633][T12262] tipc: Enabled bearer , priority 0 [ 855.561830][T12262] tipc: Resetting bearer [ 855.663779][T12274] overlayfs: failed to resolve './file1': -2 [ 855.960219][T12261] tipc: Disabling bearer [ 857.652690][T12306] loop0: detected capacity change from 0 to 256 [ 857.761704][T12306] FAT-fs (loop0): Directory bread(block 64) failed [ 857.781322][T12306] FAT-fs (loop0): Directory bread(block 65) failed [ 857.822762][T12306] FAT-fs (loop0): Directory bread(block 66) failed [ 857.866407][T12306] FAT-fs (loop0): Directory bread(block 67) failed [ 857.930933][T12306] FAT-fs (loop0): Directory bread(block 68) failed [ 857.965183][T12306] FAT-fs (loop0): Directory bread(block 69) failed [ 858.004161][T12306] FAT-fs (loop0): Directory bread(block 70) failed [ 858.029036][T12306] FAT-fs (loop0): Directory bread(block 71) failed [ 858.070008][T12306] FAT-fs (loop0): Directory bread(block 72) failed [ 858.107542][T12306] FAT-fs (loop0): Directory bread(block 73) failed [ 858.748922][T12325] tipc: Enabled bearer , priority 0 [ 858.816225][T12325] tipc: Resetting bearer [ 859.768634][ T6663] tipc: Node number set to 1734133820 [ 859.939655][T12324] tipc: Disabling bearer [ 860.853579][T12348] ubi: mtd0 is already attached to ubi31 [ 861.640224][T10020] Bluetooth: Frame is too long (len 12, expected len 4) [ 862.658876][T12360] loop0: detected capacity change from 0 to 256 [ 862.848308][T12360] FAT-fs (loop0): Directory bread(block 64) failed [ 862.901771][T12360] FAT-fs (loop0): Directory bread(block 65) failed [ 862.944280][T12360] FAT-fs (loop0): Directory bread(block 66) failed [ 862.981410][T12360] FAT-fs (loop0): Directory bread(block 67) failed [ 863.003208][T12369] loop3: detected capacity change from 0 to 32768 [ 863.014015][T12360] FAT-fs (loop0): Directory bread(block 68) failed [ 863.021575][T12360] FAT-fs (loop0): Directory bread(block 69) failed [ 863.028365][T12360] FAT-fs (loop0): Directory bread(block 70) failed [ 863.043387][T12360] FAT-fs (loop0): Directory bread(block 71) failed [ 863.050252][T12360] FAT-fs (loop0): Directory bread(block 72) failed [ 863.065811][T12360] FAT-fs (loop0): Directory bread(block 73) failed [ 863.102764][T12369] JBD2: Ignoring recovery information on journal [ 863.169379][T12369] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 865.038889][T12385] netlink: 'syz.4.1947': attribute type 6 has an invalid length. [ 865.749727][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 867.055445][T12401] tipc: Enabled bearer , priority 0 [ 867.117276][T12401] tipc: Resetting bearer [ 867.256499][T12400] tipc: Disabling bearer [ 868.715685][T12432] loop0: detected capacity change from 0 to 256 [ 869.298768][T12432] FAT-fs (loop0): Directory bread(block 64) failed [ 869.326854][T12432] FAT-fs (loop0): Directory bread(block 65) failed [ 869.364334][T12432] FAT-fs (loop0): Directory bread(block 66) failed [ 869.384098][T12432] FAT-fs (loop0): Directory bread(block 67) failed [ 869.394542][T12432] FAT-fs (loop0): Directory bread(block 68) failed [ 869.401118][T12432] FAT-fs (loop0): Directory bread(block 69) failed [ 869.459183][T12432] FAT-fs (loop0): Directory bread(block 70) failed [ 869.544805][T12432] FAT-fs (loop0): Directory bread(block 71) failed [ 869.551467][T12432] FAT-fs (loop0): Directory bread(block 72) failed [ 869.599246][T12432] FAT-fs (loop0): Directory bread(block 73) failed [ 870.106992][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.113447][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.663672][T12463] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 874.647488][T12493] netlink: 'syz.4.1978': attribute type 1 has an invalid length. [ 874.838882][T12493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 874.962467][T12500] device ip6erspan0 entered promiscuous mode [ 874.995916][T12500] bond1: (slave ip6erspan0): making interface the new active one [ 875.015526][T12500] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 875.041847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 875.224896][ T4230] Bluetooth: hci5: command 0x0405 tx timeout [ 875.225815][T12505] ceph: No path or : separator in source [ 876.240578][T12518] futex_wake_op: syz.4.1987 tries to shift op by 144; fix this program [ 888.325266][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2009'. [ 888.620710][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'. [ 891.330955][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 891.341540][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 891.351106][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 891.360968][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 891.370085][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 894.549987][ T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 894.673542][T12663] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 894.673542][T12663] program syz.3.2019 not setting count and/or reply_len properly [ 895.275676][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 895.364080][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 895.464158][ T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 896.639457][T12682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 897.205271][ T7] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 897.904160][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.942308][ T7] usb 2-1: Product: syz [ 897.984456][ T7] usb 2-1: Manufacturer: syz [ 897.993812][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 898.011021][ T7] usb 2-1: SerialNumber: syz [ 898.044884][T12695] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2028'. [ 898.084746][ T7] usb 2-1: can't set config #1, error -71 [ 898.169265][ T7] usb 2-1: USB disconnect, device number 8 [ 899.784145][T10097] Bluetooth: hci0: command 0x0c1a tx timeout [ 900.862680][T12747] netlink: 'syz.0.2047': attribute type 6 has an invalid length. [ 900.874234][T10189] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 900.875354][T12747] netlink: 'syz.0.2047': attribute type 6 has an invalid length. [ 901.295206][T10189] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.403103][T10189] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 901.414035][T10189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.464702][T10189] usb 6-1: config 0 descriptor?? [ 901.930782][T10189] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 902.930248][T12764] ±ÿ: renamed from lo [ 902.940485][T12748] sp0: Synchronizing with TNC [ 902.950567][ T5190] usb 6-1: USB disconnect, device number 2 [ 903.090963][T12775] loop0: detected capacity change from 0 to 128 [ 903.201627][T12775] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 903.214367][T12775] ext4 filesystem being mounted at /426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 904.951744][T12792] loop4: detected capacity change from 0 to 512 [ 905.014814][T12792] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 905.120370][T12792] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 905.634129][ T5190] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 905.798863][T12797] sctp: failed to load transform for md5: -2 [ 905.904164][ T5190] usb 4-1: Using ep0 maxpacket: 16 [ 906.024226][ T5190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.100722][ T5190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 906.167258][ T5190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 906.183110][ T5190] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 906.194186][ T5190] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.494549][ T5190] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 906.514532][ T5190] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 906.524210][ T5190] usb 4-1: Manufacturer: syz [ 906.598476][ T5190] usb 4-1: config 0 descriptor?? [ 906.840668][T12810] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 906.840668][T12810] program syz.1.2054 not setting count and/or reply_len properly [ 908.469924][T12819] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 908.664759][T12828] loop4: detected capacity change from 0 to 32768 [ 908.777371][ T5190] rc_core: IR keymap rc-hauppauge not found [ 908.783340][ T5190] Registered IR keymap rc-empty [ 908.788902][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.872557][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.959585][ T5190] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 909.011691][T12828] JBD2: Ignoring recovery information on journal [ 909.108612][ T5190] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 909.336154][T12828] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 909.475554][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.225551][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 910.904078][ T4229] Bluetooth: hci0: command 0x0c1a tx timeout [ 910.904178][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.456593][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.484058][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.514029][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.614232][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.644028][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.645173][T12862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 911.699637][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.718489][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 911.734170][ T5190] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 911.803134][ T5190] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 911.852455][T12856] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 911.856467][ T5190] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 911.950669][ T5190] usb 4-1: USB disconnect, device number 7 [ 911.982525][T12856] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 915.534276][T12896] Trying to write to read-only block-device nullb0 [ 915.541085][T12896] Trying to write to read-only block-device nullb0 [ 915.547746][T12896] Trying to write to read-only block-device nullb0 [ 915.554391][T12896] Trying to write to read-only block-device nullb0 [ 915.560957][T12896] Trying to write to read-only block-device nullb0 [ 915.567574][T12896] Trying to write to read-only block-device nullb0 [ 915.574166][T12896] Trying to write to read-only block-device nullb0 [ 915.580752][T12896] Trying to write to read-only block-device nullb0 [ 915.587480][T12896] Trying to write to read-only block-device nullb0 [ 915.608316][T12896] Trying to write to read-only block-device nullb0 [ 919.137172][T12916] netlink: 'syz.4.2086': attribute type 6 has an invalid length. [ 919.207906][T12916] netlink: 'syz.4.2086': attribute type 6 has an invalid length. [ 919.671376][T12919] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 920.128612][T12919] device veth0_vlan left promiscuous mode [ 920.137086][T12919] device veth0_vlan entered promiscuous mode [ 920.144943][T12919] team0: Device veth0_vlan failed to register rx_handler [ 920.364719][T12919] syz.1.2087 (12919) used greatest stack depth: 19920 bytes left [ 920.372650][ T5338] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 924.956465][T12971] loop0: detected capacity change from 0 to 128 [ 925.059051][T12971] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 925.100334][T12971] ext4 filesystem being mounted at /439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 926.570700][T12986] loop1: detected capacity change from 0 to 512 [ 926.702834][T12986] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 926.744048][ T4229] Bluetooth: hci0: command 0x0c1a tx timeout [ 926.858851][T12986] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 929.164261][ T4229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 929.543969][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 929.564206][T10097] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 929.695112][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.809874][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 929.969875][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 930.001792][T10097] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 930.087901][T10097] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 930.152279][ T4229] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 930.295358][T10097] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 930.314009][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.344018][T10097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.399333][T10097] usb 2-1: config 0 descriptor?? [ 930.506285][T10097] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 930.695683][ T4229] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 931.046569][ T4229] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 931.104177][ T4229] usb 4-1: Manufacturer: syz [ 931.124853][ T4229] usb 4-1: config 0 descriptor?? [ 931.199916][T13029] bio_check_ro: 7 callbacks suppressed [ 931.199931][T13029] Trying to write to read-only block-device nullb0 [ 931.244532][T13029] Trying to write to read-only block-device nullb0 [ 931.253108][T13029] Trying to write to read-only block-device nullb0 [ 931.273485][T13029] Trying to write to read-only block-device nullb0 [ 931.293864][T13029] Trying to write to read-only block-device nullb0 [ 931.301274][T13029] Trying to write to read-only block-device nullb0 [ 931.331884][T13029] Trying to write to read-only block-device nullb0 [ 931.354151][T13029] Trying to write to read-only block-device nullb0 [ 931.374089][T13029] Trying to write to read-only block-device nullb0 [ 931.397476][T13029] Trying to write to read-only block-device nullb0 [ 931.561909][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.568562][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.144074][ T4229] rc_core: IR keymap rc-hauppauge not found [ 932.153504][ T4229] Registered IR keymap rc-empty [ 932.178428][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.244110][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.284773][ T4229] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 932.322517][ T4229] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 932.384162][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.396697][ T4233] usb 2-1: USB disconnect, device number 9 [ 932.446267][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.484164][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.532121][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.565332][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.604708][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.664193][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.720157][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.818124][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.864120][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 932.916295][ T4229] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 932.936854][ T4229] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 932.967484][ T4229] usb 4-1: USB disconnect, device number 8 [ 933.773960][ T5190] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 933.904028][ T4233] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 934.013991][ T5190] usb 2-1: Using ep0 maxpacket: 16 [ 934.209382][ T5190] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.230351][ T5190] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.267671][ T5190] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 934.277947][ T5190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.374109][ T4233] usb 1-1: config 5 has an invalid interface number: 75 but max is 0 [ 934.392482][ T4233] usb 1-1: config 5 has no interface number 0 [ 934.412757][ T4233] usb 1-1: config 5 interface 75 has no altsetting 0 [ 934.490309][T13088] xt_TPROXY: Can be used only with -p tcp or -p udp [ 934.584711][ T4233] usb 1-1: New USB device found, idVendor=04fc, idProduct=504b, bcdDevice=52.c4 [ 934.596523][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.609195][ T4233] usb 1-1: Product: syz [ 934.613609][ T4233] usb 1-1: Manufacturer: syz [ 934.622395][ T4233] usb 1-1: SerialNumber: syz [ 934.810532][ T5190] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 934.824054][ T5338] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 935.003124][T13067] i2c i2c-1: unsupported multi-msg i2c transaction [ 935.191830][ T5338] usb 4-1: Using ep0 maxpacket: 32 [ 936.111576][ T5190] usb 2-1: USB disconnect, device number 10 [ 936.144557][ T5338] usb 4-1: config 9 has an invalid interface number: 221 but max is 1 [ 936.153233][ T5338] usb 4-1: config 9 has an invalid interface number: 221 but max is 1 [ 936.169756][ T5338] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 936.222764][ T5338] usb 4-1: config 9 has no interface number 0 [ 936.271412][ T5338] usb 4-1: config 9 interface 221 altsetting 64 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 936.284703][ T5338] usb 4-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 936.309180][ T5338] usb 4-1: config 9 interface 221 has no altsetting 0 [ 936.505369][ T5338] usb 4-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 936.537284][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.593370][ T5338] usb 4-1: Product: syz [ 936.706937][ T5338] usb 4-1: Manufacturer: syz [ 936.751672][ T5338] usb 4-1: SerialNumber: syz [ 937.216143][ T4233] gspca_main: sunplus-2.14.0 probing 04fc:504b [ 937.268803][ T4233] gspca_sunplus: reg_w_riv err -71 [ 937.294412][ T4233] sunplus: probe of 1-1:5.75 failed with error -71 [ 937.331318][ T4233] usb 1-1: USB disconnect, device number 10 [ 937.483407][ T5338] usb 4-1: USB disconnect, device number 9 [ 937.554361][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.734142][ T4233] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 937.852846][T13109] chnl_net:caif_netlink_parms(): no params data found [ 937.959883][T13118] futex_wake_op: syz.3.2145 tries to shift op by 144; fix this program [ 937.975102][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 938.100071][ T4233] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 938.113653][ T4233] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 938.129293][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 938.138799][ T4233] usb 1-1: config 1 has no interface number 0 [ 938.145325][ T4233] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.163256][ T4233] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 938.185099][ T4233] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 938.149169][T13109] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.199958][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.218046][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.256929][T13109] device bridge_slave_0 entered promiscuous mode [ 938.277649][ T4233] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 938.294501][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.323733][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.356235][T13109] device bridge_slave_1 entered promiscuous mode [ 938.367094][T13130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2149'. [ 938.416283][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.446625][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.005080][ T4233] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 939.147046][T13109] team0: Port device team_slave_0 added [ 939.210472][T13109] team0: Port device team_slave_1 added [ 939.372209][T13109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.429040][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.455078][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.523395][T13147] futex_wake_op: syz.3.2156 tries to shift op by 144; fix this program [ 939.619910][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.697900][T13146] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2155'. [ 939.748458][T13146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2155'. [ 939.948742][ T4229] Bluetooth: hci3: command 0x0409 tx timeout [ 939.962575][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.000328][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.026420][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.038213][ T5190] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 940.902181][ T4229] usb 1-1: USB disconnect, device number 11 [ 941.056905][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.286588][T13161] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 941.302911][ T4229] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 941.413559][T13164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.474735][T13164] bond0: (slave rose0): Enslaving as an active interface with an up link [ 941.548710][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 941.569787][T13109] device hsr_slave_0 entered promiscuous mode [ 941.590323][T13109] device hsr_slave_1 entered promiscuous mode [ 941.603203][T13109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.701176][T13109] Cannot create hsr debugfs directory [ 942.392030][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 942.434344][ C0] llc_conn_state_process: llc_conn_service failed [ 942.509021][T13183] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 943.352584][T13109] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 943.371694][T13109] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 943.403566][T13109] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 943.421909][T13109] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 943.583073][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.613821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 943.637808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 943.658074][T13109] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.678782][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 943.696986][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 943.719584][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.726852][ T4665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.762806][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 943.772721][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 943.790289][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 943.809692][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.817025][ T4665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.902409][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 943.979663][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 944.098520][T13197] futex_wake_op: syz.3.2169 tries to shift op by 144; fix this program [ 944.131202][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 944.163324][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 944.292505][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 944.434950][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 944.480795][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 944.521578][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 944.558463][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 944.642590][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 944.668787][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 944.715299][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 944.740965][T13109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 944.867677][ T4665] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.303143][ T6663] Bluetooth: hci3: command 0x0419 tx timeout [ 947.373994][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 947.456164][ T4665] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.143691][ T4665] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.234993][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 948.243172][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 948.274154][ T7] usb 1-1: device descriptor read/all, error -71 [ 948.295841][ T4665] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.334617][T13245] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 948.524681][T13109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.685407][T13269] sctp: failed to load transform for md5: -4 [ 951.884323][ T4665] tipc: Left network mode [ 952.274835][T13299] futex_wake_op: syz.5.2192 tries to shift op by 144; fix this program [ 952.639376][ T4665] bond1: (slave ip6erspan0): Releasing active interface [ 952.677386][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 952.690562][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 952.747334][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 952.756355][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 952.766992][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 952.775461][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.819521][T13109] device veth0_vlan entered promiscuous mode [ 952.898853][T13109] device veth1_vlan entered promiscuous mode [ 952.983856][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 953.002997][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 953.046351][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 953.056319][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 953.085692][T13109] device veth0_macvtap entered promiscuous mode [ 953.098261][T13109] device veth1_macvtap entered promiscuous mode [ 953.178221][T13318] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.223193][T13318] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.272174][T13318] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.286015][T13318] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 953.297321][T13318] device geneve2 entered promiscuous mode [ 953.382431][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.431867][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.471586][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.499760][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.530178][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.556184][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.573973][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.603918][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.614276][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.659746][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.699738][T13109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.716854][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 953.755922][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 953.780040][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 953.812854][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.903588][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.959351][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.970609][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.981688][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.009115][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.031567][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.062419][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.109192][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.119877][T13109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.130379][T13109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.141728][T13109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.163761][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 954.264781][T13346] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 954.849871][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 954.869008][T13109] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.882581][T13109] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.902012][T13109] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.922354][T13109] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.044152][ T7] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 955.057081][ T4229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 955.082767][T13351] futex_wake_op: syz.3.2203 tries to shift op by 144; fix this program [ 955.290491][ T8604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.300435][ T8604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.325781][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 955.423620][ T8604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.434891][ T8604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.465354][ T4665] device hsr_slave_0 left promiscuous mode [ 955.478416][ T4665] device hsr_slave_1 left promiscuous mode [ 955.515333][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.540960][ T4665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.572471][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.592036][ T4665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.604220][ T4665] device bridge_slave_1 left promiscuous mode [ 955.610649][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.620686][ T4665] device bridge_slave_0 left promiscuous mode [ 955.627640][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.642396][ T4665] device veth1_macvtap left promiscuous mode [ 955.648832][ T4665] device veth0_macvtap left promiscuous mode [ 955.655405][ T4665] device veth1_vlan left promiscuous mode [ 955.661783][ T4665] device veth0_vlan left promiscuous mode [ 955.762463][ T4665] bond1 (unregistering): Released all slaves [ 955.856646][ T4665] team0 (unregistering): Port device team_slave_1 removed [ 955.871012][ T4665] team0 (unregistering): Port device team_slave_0 removed [ 955.884989][ T4665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.902368][ T4665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.967961][ T4665] bond0 (unregistering): Released all slaves [ 956.021302][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 956.241831][T13374] futex_wake_op: syz.0.2213 tries to shift op by 144; fix this program [ 959.843104][T13398] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.714754][T13447] futex_wake_op: syz.0.2219 tries to shift op by 144; fix this program [ 966.800749][T13474] netlink: 'syz.6.2223': attribute type 7 has an invalid length. [ 966.827113][T13474] netlink: 'syz.6.2223': attribute type 8 has an invalid length. [ 969.542191][T13525] futex_wake_op: syz.0.2232 tries to shift op by 144; fix this program [ 969.979768][ T4665] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.990668][ T4665] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 971.573911][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 971.584482][ T4665] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.644432][ T4665] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 971.712518][T13516] chnl_net:caif_netlink_parms(): no params data found [ 971.797652][ T4665] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.837053][ T4665] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 971.851479][T13556] futex_wake_op: syz.6.2242 tries to shift op by 144; fix this program [ 971.942477][T13559] ax25_connect(): syz.0.2243 uses autobind, please contact jreuter@yaina.de [ 972.056461][ T4665] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.093934][ T4665] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 972.513622][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.572429][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.624023][T13516] device bridge_slave_0 entered promiscuous mode [ 972.878152][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.885404][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.905024][T13516] device bridge_slave_1 entered promiscuous mode [ 973.225033][T13589] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 973.232441][T13589] /dev/nullb0: Can't open blockdev [ 973.930749][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 974.255744][T13516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.638328][T13516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.802774][T13516] team0: Port device team_slave_0 added [ 974.845780][T13516] team0: Port device team_slave_1 added [ 974.946203][T13516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.991020][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.018415][ T1109] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 975.079029][T13516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.100613][ T4665] tipc: Left network mode [ 975.130754][T13516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.144069][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.154011][ T4233] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 975.208216][T13516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.283948][ T1109] usb 2-1: Using ep0 maxpacket: 16 [ 975.385035][T13516] device hsr_slave_0 entered promiscuous mode [ 975.403448][T13516] device hsr_slave_1 entered promiscuous mode [ 975.411359][ T1109] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.432498][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 975.471971][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 975.485819][T13613] futex_wake_op: syz.6.2255 tries to shift op by 144; fix this program [ 975.498950][ T1109] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 975.514069][ T1109] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 975.538040][T13516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.563940][T13516] Cannot create hsr debugfs directory [ 975.594397][ T4233] usb 4-1: config 0 has no interfaces? [ 975.600116][ T4233] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 975.614316][ T1109] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 975.623394][ T1109] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 975.630379][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.655900][ T4233] usb 4-1: config 0 descriptor?? [ 975.674422][ T1109] usb 2-1: Manufacturer: syz [ 975.720372][ T1109] usb 2-1: config 0 descriptor?? [ 975.917666][ T7] usb 4-1: USB disconnect, device number 10 [ 976.042376][T13516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 976.107091][T13516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 976.125473][ T1109] rc_core: IR keymap rc-hauppauge not found [ 976.131413][ T1109] Registered IR keymap rc-empty [ 976.137462][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.166478][T13516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 976.204103][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.211668][T13516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 976.255019][ T1109] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 976.290346][ T1109] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 976.344861][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 976.365605][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.433554][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.494202][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 976.576379][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.691031][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 976.711260][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 976.757936][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.830005][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 976.852660][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 976.905930][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.913192][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.006019][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 977.039892][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 977.144950][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 977.215651][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.222836][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.484487][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 977.645088][T13653] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2263'. [ 977.674004][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 977.961644][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 978.056512][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 978.431455][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 978.644131][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 978.661829][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 978.666486][ T6663] Bluetooth: hci4: command 0x0419 tx timeout [ 978.671271][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 978.694342][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 978.763202][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 978.825594][T13516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 978.838548][T13659] futex_wake_op: syz.3.2265 tries to shift op by 144; fix this program [ 978.854124][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 978.882199][T13516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 978.894023][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 979.029279][ T1109] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 979.086066][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 979.101269][ T1109] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 979.107943][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 979.122069][ T1109] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 979.134510][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 979.173588][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 979.202171][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 979.213401][ T1109] usb 2-1: USB disconnect, device number 11 [ 979.219652][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 979.227385][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 979.453129][ T4665] device hsr_slave_0 left promiscuous mode [ 979.462868][ T4665] device hsr_slave_1 left promiscuous mode [ 979.483978][T10189] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 979.501978][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.509827][ T4231] usb 7-1: Using ep0 maxpacket: 16 [ 979.541216][ T4665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.567715][ T4665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.583080][ T4665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.651926][ T4665] device bridge_slave_1 left promiscuous mode [ 979.658721][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.671445][ T4665] device bridge_slave_0 left promiscuous mode [ 979.678448][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.692880][ T4665] device veth1_macvtap left promiscuous mode [ 979.716434][ T4665] device veth0_macvtap left promiscuous mode [ 979.734370][ T4665] device veth1_vlan left promiscuous mode [ 979.756122][ T4665] device veth0_vlan left promiscuous mode [ 979.864700][T10189] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 979.895241][T10189] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 979.938282][T10189] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 979.980882][T10189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.804279][ T4231] usb 7-1: unable to get BOS descriptor or descriptor too short [ 980.954583][T10189] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 980.954854][ T4231] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 980.964113][T10189] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input16 [ 980.989365][T10189] input: failed to attach handler kbd to device input16, error: -5 [ 981.119688][T10189] usb 4-1: USB disconnect, device number 11 [ 981.634562][ T4231] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 981.661496][T13713] futex_wake_op: syz.0.2278 tries to shift op by 144; fix this program [ 981.677943][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.788763][ T4231] usb 7-1: Product: syz [ 981.804563][ T4231] usb 7-1: Manufacturer: syz [ 981.809207][ T4231] usb 7-1: SerialNumber: syz [ 981.934241][ T4665] team0 (unregistering): Port device team_slave_1 removed [ 981.941977][ T4231] usb 7-1: can't set config #1, error -71 [ 981.964479][ T4231] usb 7-1: USB disconnect, device number 2 [ 982.094908][ T4665] team0 (unregistering): Port device team_slave_0 removed [ 982.858279][ T4665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.504789][ T4665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.058613][ T4665] bond0 (unregistering): Released all slaves [ 984.118892][T13732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2283'. [ 984.153986][T13732] netlink: 'syz.0.2283': attribute type 7 has an invalid length. [ 984.184035][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 984.202192][T13732] device ip6gretap0 entered promiscuous mode [ 984.239520][T13732] device syz_tun entered promiscuous mode [ 984.255112][T13728] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 984.263761][T13728] device veth0_vlan left promiscuous mode [ 984.270384][T13728] device veth0_vlan entered promiscuous mode [ 984.277336][T13728] team0: Device veth0_vlan failed to register rx_handler [ 984.326254][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 984.403028][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 984.414425][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 984.454542][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.602984][T13756] futex_wake_op: syz.6.2292 tries to shift op by 144; fix this program [ 988.441182][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.459106][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 988.736949][T13807] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2300'. [ 988.968640][T13807] comedi comedi0: Minor 2 could not be opened [ 989.304489][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 989.336837][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.404857][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.461045][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.468937][T13811] futex_wake_op: syz.0.2302 tries to shift op by 144; fix this program [ 989.508993][T13516] device veth0_vlan entered promiscuous mode [ 989.555244][T13516] device veth1_vlan entered promiscuous mode [ 989.710206][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.728268][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.790234][T13516] device veth0_macvtap entered promiscuous mode [ 989.864635][T13516] device veth1_macvtap entered promiscuous mode [ 989.924456][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.970122][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.005660][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.058835][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.079350][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.110609][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.141306][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.178913][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.189207][ T4233] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 990.242749][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.266682][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 990.279366][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 990.340924][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 990.381809][ T8604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 990.423353][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.468510][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.493944][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 990.509492][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.558352][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.602002][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.624182][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.649541][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.676106][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.707364][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.741761][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.746147][ T4233] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 990.802972][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.816707][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.860994][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.864267][ T4233] usb 1-1: config 0 descriptor?? [ 990.910491][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 990.931599][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 991.006927][T13516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.155920][T13516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.230721][T13842] Cannot find add_set index 65532 as target [ 992.028127][T13516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.055104][T13516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.634857][ T4233] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x6 [ 992.714533][ T4233] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 992.726943][ T4233] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 992.778885][ T4233] usb 1-1: USB disconnect, device number 15 [ 992.986572][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.998030][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.042680][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.076509][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.116820][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 993.196798][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.255413][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.295142][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 993.686799][T13859] futex_wake_op: syz.1.2312 tries to shift op by 144; fix this program [ 994.483989][ T1109] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 994.783949][ T1109] usb 2-1: Using ep0 maxpacket: 32 [ 994.914055][ T1109] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 994.933382][ T1109] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 994.963229][ T1109] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 995.004828][ T1109] usb 2-1: config 1 has no interface number 0 [ 995.027221][ T1109] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 995.065841][ T1109] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 995.136825][ T1109] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 995.181736][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.271261][ T1109] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 995.331174][ T26] audit: type=1326 audit(1775199442.124:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.6.2314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61a8dca819 code=0x0 [ 995.654252][ T5190] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 995.710923][T13875] udc-core: couldn't find an available UDC or it's busy [ 995.920907][T13875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 996.074090][ T5190] usb 8-1: Using ep0 maxpacket: 32 [ 996.213375][T13910] futex_wake_op: syz.0.2327 tries to shift op by 144; fix this program [ 996.222167][ T5190] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 996.262780][ T5190] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 996.320564][ T5190] usb 8-1: config 0 interface 0 has no altsetting 0 [ 996.524370][ T5190] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 996.569394][ T5190] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.644162][ T5190] usb 8-1: Product: syz [ 996.677992][ T5190] usb 8-1: Manufacturer: syz [ 996.711084][ T5190] usb 8-1: SerialNumber: syz [ 996.780498][ T5190] usb 8-1: config 0 descriptor?? [ 996.954849][ T1109] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 997.019786][T13926] Illegal XDP return value 4294967274, expect packet loss! [ 997.221460][ T4230] usb 2-1: USB disconnect, device number 12 [ 997.234687][ T4230] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 998.495439][T13955] futex_wake_op: syz.1.2338 tries to shift op by 144; fix this program [ 999.691292][ T4229] usb 8-1: USB disconnect, device number 2 [ 999.960719][T13994] futex_wake_op: syz.6.2350 tries to shift op by 144; fix this program [ 1002.383908][ T1109] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1002.554051][ T6663] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1002.814997][ T6663] usb 2-1: Using ep0 maxpacket: 32 [ 1003.264038][ T1109] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1003.459067][T14059] batman_adv: batadv0: Adding interface: dummy0 [ 1003.466163][ T1109] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1003.474101][ T1109] usb 4-1: can't read configurations, error -71 [ 1003.474095][T14059] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.474134][T14059] batman_adv: batadv0: Interface activated: dummy0 [ 1003.514140][ T6663] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1003.522917][ T6663] usb 2-1: can't read configurations, error -71 [ 1003.654094][T14060] batadv0: mtu less than device minimum [ 1003.677415][T14064] futex_wake_op: syz.3.2363 tries to shift op by 144; fix this program [ 1003.689610][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.702914][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.715734][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.728602][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.741524][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.754364][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.767329][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.780174][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.792994][T14060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1003.883981][ T5338] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1004.564180][ T5338] usb 1-1: config 0 has no interfaces? [ 1004.569719][ T5338] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1004.667605][ T5338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.723623][ T5338] usb 1-1: config 0 descriptor?? [ 1005.246374][ T5338] usb 1-1: USB disconnect, device number 16 [ 1005.574430][ T6663] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1006.387017][ T4197] Bluetooth: Wrong link type (-22) [ 1006.534251][ T6663] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 1006.562403][ T6663] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26259, setting to 1024 [ 1006.590316][ T6663] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1006.617742][T14111] futex_wake_op: syz.3.2374 tries to shift op by 144; fix this program [ 1006.699269][ T6663] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1006.750380][ T6663] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.854837][ T6663] usb 8-1: config 0 descriptor?? [ 1006.915219][T14089] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1007.047219][T14117] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2376'. [ 1007.724154][ T6663] usbhid 8-1:0.0: can't add hid device: -71 [ 1007.730298][ T6663] usbhid: probe of 8-1:0.0 failed with error -71 [ 1007.754510][ T6663] usb 8-1: USB disconnect, device number 3 [ 1008.594021][ T6663] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1008.664075][ T1109] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1008.844005][ T6663] usb 7-1: Using ep0 maxpacket: 32 [ 1009.034887][ T1109] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1009.058298][ T1109] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.102539][ T1109] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1009.124210][ T6663] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1009.147155][ T6663] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.161021][ T1109] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1009.197249][ T6663] usb 7-1: Product: syz [ 1009.210159][ T6663] usb 7-1: Manufacturer: syz [ 1009.222871][ T6663] usb 7-1: SerialNumber: syz [ 1009.265766][ T6663] usb 7-1: config 0 descriptor?? [ 1009.334481][ T1109] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1009.358369][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1009.398206][ T1109] usb 4-1: Product: syz [ 1009.417189][ T1109] usb 4-1: Manufacturer: syz [ 1009.485180][ T1109] cdc_wdm 4-1:1.0: skipping garbage [ 1009.492620][ T1109] cdc_wdm 4-1:1.0: skipping garbage [ 1009.508386][ T1109] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1009.638977][T14169] futex_wake_op: syz.7.2387 tries to shift op by 144; fix this program [ 1009.711095][ T1109] usb 4-1: USB disconnect, device number 14 [ 1009.764363][ T6663] airspy 7-1:0.0: Board ID: 00 [ 1009.769325][ T6663] airspy 7-1:0.0: Firmware version: [ 1010.415245][ T6663] airspy 7-1:0.0: usb_control_msg() failed -71 request 12 [ 1010.509736][ T6663] airspy 7-1:0.0: Registered as swradio24 [ 1010.578189][ T6663] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1010.720251][ T6663] usb 7-1: USB disconnect, device number 3 [ 1010.972158][ T4231] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1011.026814][ T4231] Bluetooth: hci2: Injecting HCI hardware error event [ 1011.125488][T14208] futex_wake_op: syz.1.2399 tries to shift op by 144; fix this program [ 1011.140146][T10020] Bluetooth: hci2: hardware error 0x00 [ 1011.204114][ T4230] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1012.519396][ T4230] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.954149][ T4230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1013.028752][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1013.132672][ T4230] usb 1-1: Product: syz [ 1013.174042][ T4230] usb 1-1: Manufacturer: syz [ 1013.178722][ T4230] usb 1-1: SerialNumber: syz [ 1013.514099][ T5338] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1013.525976][ T4230] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1014.971337][ T5338] usb 7-1: Using ep0 maxpacket: 16 [ 1015.057830][ T6663] usb 1-1: USB disconnect, device number 17 [ 1015.099501][ T6663] usblp0: removed [ 1015.124297][ T5338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.126702][T14256] futex_wake_op: syz.7.2412 tries to shift op by 144; fix this program [ 1015.144517][ T5338] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1015.164939][ T5338] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1015.181814][ T5338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.205148][ T5338] usb 7-1: config 0 descriptor?? [ 1015.338362][ T4186] cgroup: fork rejected by pids controller in /syz1 [ 1015.815849][ T5338] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 1015.883411][ T5338] HID 045e:07da: Invalid code 65791 type 1 [ 1015.893987][ T5190] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1015.911448][ T5338] HID 045e:07da: Invalid code 768 type 1 [ 1015.920596][ T5338] HID 045e:07da: Invalid code 769 type 1 [ 1015.930908][ T5338] HID 045e:07da: Invalid code 770 type 1 [ 1015.938566][ T5338] HID 045e:07da: Invalid code 771 type 1 [ 1015.948621][ T5338] HID 045e:07da: Invalid code 772 type 1 [ 1015.957685][ T5338] HID 045e:07da: Invalid code 773 type 1 [ 1015.963542][ T5338] HID 045e:07da: Invalid code 774 type 1 [ 1015.973593][ T5338] HID 045e:07da: Invalid code 775 type 1 [ 1015.982396][ T5338] HID 045e:07da: Invalid code 776 type 1 [ 1016.093814][ T5338] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0007/input/input17 [ 1016.124006][T10097] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1016.210646][ T5338] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1016.281535][ T5338] usb 7-1: USB disconnect, device number 4 [ 1016.287953][ T5190] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1016.319071][ T5190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.356874][ T5190] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.372650][ T5190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.383985][T10097] usb 1-1: Using ep0 maxpacket: 16 [ 1016.433231][ T5190] usb 4-1: config 0 descriptor?? [ 1016.439683][T14297] fido_id[14297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1016.506351][ T5190] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1016.514274][T10097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.532804][T10097] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1016.625747][T10097] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1016.635749][T10097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.661744][T10097] usb 1-1: config 0 descriptor?? [ 1017.083942][ T5338] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1017.155508][T10097] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 1017.201729][T10097] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input18 [ 1017.279505][T14309] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2420'. [ 1017.298135][T10097] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1017.333447][T14309] net_ratelimit: 10 callbacks suppressed [ 1017.333458][T14309] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1017.349527][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1017.367026][T10097] usb 1-1: USB disconnect, device number 18 [ 1017.444367][ T5338] usb 7-1: config 0 has no interfaces? [ 1017.450543][ T5338] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1017.464123][ T5338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.000942][ T4339] usb 4-1: USB disconnect, device number 15 [ 1018.461527][T14310] fido_id[14310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1018.484967][ T5338] usb 7-1: config 0 descriptor?? [ 1020.036557][ T4339] usb 7-1: USB disconnect, device number 5 [ 1020.952194][T14334] futex_wake_op: syz.0.2427 tries to shift op by 144; fix this program [ 1021.654047][T10097] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1023.420574][T10020] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1023.424052][T10097] usb 1-1: Using ep0 maxpacket: 32 [ 1023.431344][T10020] CPU: 1 PID: 10020 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1023.443404][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1023.453487][T10020] Workqueue: hci3 hci_rx_work [ 1023.458186][T10020] Call Trace: [ 1023.461466][T10020] [ 1023.464395][T10020] dump_stack_lvl+0x188/0x250 [ 1023.469173][T10020] ? show_regs_print_info+0x20/0x20 [ 1023.474372][T10020] ? load_image+0x400/0x400 [ 1023.478987][T10020] sysfs_create_dir_ns+0x26a/0x290 [ 1023.484195][T10020] ? sysfs_warn_dup+0xa0/0xa0 [ 1023.488872][T10020] ? process_one_work+0x85f/0x1010 [ 1023.493992][T10020] ? do_raw_spin_unlock+0x11d/0x230 [ 1023.499197][T10020] kobject_add_internal+0x6e0/0xd90 [ 1023.504401][T10020] kobject_add+0x160/0x230 [ 1023.508855][T10020] ? kobject_init+0x1d0/0x1d0 [ 1023.513563][T10020] ? klist_children_get+0x50/0x50 [ 1023.518592][T10020] ? get_device_parent+0x121/0x3f0 [ 1023.523721][T10020] device_add+0x483/0xfb0 [ 1023.528065][T10020] hci_conn_add_sysfs+0xd1/0x1e0 [ 1023.533010][T10020] le_conn_complete_evt+0xc48/0x15c0 [ 1023.538307][T10020] ? cs_le_create_conn+0x5e0/0x5e0 [ 1023.543426][T10020] ? __mutex_trylock_common+0x155/0x260 [ 1023.548981][T10020] hci_le_meta_evt+0xd59/0x3c90 [ 1023.553836][T10020] ? hci_event_packet+0x37b/0x1370 [ 1023.559042][T10020] ? __lock_acquire+0x7d10/0x7d10 [ 1023.564088][T10020] ? hci_remote_host_features_evt+0x280/0x280 [ 1023.570160][T10020] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1023.575804][T10020] ? mark_lock+0x94/0x320 [ 1023.580133][T10020] ? mutex_unlock+0x10/0x10 [ 1023.584644][T10020] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1023.590633][T10020] ? lock_chain_count+0x20/0x20 [ 1023.595490][T10020] ? __rwlock_init+0x140/0x140 [ 1023.600258][T10020] hci_event_packet+0xe48/0x1370 [ 1023.605196][T10020] ? lockdep_hardirqs_on+0x94/0x140 [ 1023.610403][T10020] ? rcu_lock_release+0x20/0x20 [ 1023.615260][T10020] ? hci_send_to_monitor+0x9c/0x4a0 [ 1023.620465][T10020] hci_rx_work+0x255/0xa10 [ 1023.624894][T10020] process_one_work+0x85f/0x1010 [ 1023.629854][T10020] ? worker_detach_from_pool+0x240/0x240 [ 1023.635486][T10020] ? lockdep_hardirqs_off+0x70/0x100 [ 1023.640801][T10020] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1023.646040][T10020] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1023.651613][T10020] ? wq_worker_running+0x97/0x170 [ 1023.656695][T10020] worker_thread+0xaa6/0x1290 [ 1023.661395][T10020] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1023.667300][T10020] kthread+0x436/0x520 [ 1023.671374][T10020] ? rcu_lock_release+0x20/0x20 [ 1023.676261][T10020] ? kthread_blkcg+0xd0/0xd0 [ 1023.680857][T10020] ret_from_fork+0x1f/0x30 [ 1023.685289][T10020] [ 1023.698586][T10020] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1023.713529][T10020] Bluetooth: hci3: failed to register connection device [ 1023.839224][T10004] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.884792][T10097] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1023.923167][T10097] usb 1-1: config 0 has no interface number 0 [ 1023.945139][T10004] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.053200][T10004] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.104631][T10097] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1025.019985][T10097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.079759][T10097] usb 1-1: Product: syz [ 1025.118201][T10097] usb 1-1: Manufacturer: syz [ 1025.122957][T10097] usb 1-1: SerialNumber: syz [ 1025.156729][T14408] futex_wake_op: syz.6.2441 tries to shift op by 144; fix this program [ 1025.222993][T10097] usb 1-1: config 0 descriptor?? [ 1025.245441][T10004] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.256015][T10097] usb 1-1: can't set config #0, error -71 [ 1025.274782][T10097] usb 1-1: USB disconnect, device number 19 [ 1026.669116][T14433] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1026.676189][T14433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.685399][T14433] vhci_hcd vhci_hcd.0: Device attached [ 1026.840004][T10004] tipc: Left network mode [ 1027.214166][T10189] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1027.380530][T14434] vhci_hcd: connection reset by peer [ 1027.414944][ T4296] vhci_hcd: stop threads [ 1027.419408][ T4296] vhci_hcd: release socket [ 1027.560679][ T4296] vhci_hcd: disconnect device [ 1027.623502][T10097] Bluetooth: hci2: command 0x0409 tx timeout [ 1028.302460][T14406] chnl_net:caif_netlink_parms(): no params data found [ 1028.467544][T14458] futex_wake_op: syz.0.2456 tries to shift op by 144; fix this program [ 1028.676921][T14406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.714148][T14406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.776245][T14406] device bridge_slave_0 entered promiscuous mode [ 1028.801210][T14406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.815453][T14406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.828332][T14406] device bridge_slave_1 entered promiscuous mode [ 1028.972406][T14406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.027618][T10004] device hsr_slave_0 left promiscuous mode [ 1029.039620][T10004] device hsr_slave_1 left promiscuous mode [ 1029.049348][T10004] batman_adv: batadv0: Interface deactivated: dummy0 [ 1029.060749][T10004] batman_adv: batadv0: Removing interface: dummy0 [ 1029.070057][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.126622][T14478] xt_hashlimit: size too large, truncated to 1048576 [ 1029.135797][T10004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.159325][T10004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.217759][T10004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.506543][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 1030.624559][T10004] device bridge_slave_1 left promiscuous mode [ 1030.634950][T10004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.763183][T10004] device bridge_slave_0 left promiscuous mode [ 1030.783548][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.003248][T10004] device veth1_macvtap left promiscuous mode [ 1031.042606][T10004] device veth0_macvtap left promiscuous mode [ 1031.144385][T10004] device veth1_vlan left promiscuous mode [ 1032.523209][T10004] team0 (unregistering): Port device team_slave_1 removed [ 1032.584057][ T6663] Bluetooth: hci2: command 0x040f tx timeout [ 1032.620113][T10004] team0 (unregistering): Port device team_slave_0 removed [ 1032.686797][T10004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.783303][T10004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.170114][T10004] bond0 (unregistering): Released all slaves [ 1033.473473][T14406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.657556][T14406] team0: Port device team_slave_0 added [ 1033.721652][T14406] team0: Port device team_slave_1 added [ 1034.228352][T10189] vhci_hcd: vhci_device speed not set [ 1034.363819][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2466'. [ 1034.403183][T14518] futex_wake_op: syz.3.2467 tries to shift op by 144; fix this program [ 1034.436226][T14406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.498142][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.565355][T14406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.619687][T14406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.696568][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.743179][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 1034.813958][T14406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.080214][T14406] device hsr_slave_0 entered promiscuous mode [ 1035.114878][T14406] device hsr_slave_1 entered promiscuous mode [ 1036.412879][T14406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1036.940162][T14406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1036.988452][T14406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1037.319507][T14406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1037.640221][T14406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.723392][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1037.782235][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.826497][T14406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.922825][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1037.955380][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.004307][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.011416][ T4665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.094153][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.140634][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.194525][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.201627][ T4665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.291920][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.332126][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.379977][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1038.640888][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1039.017364][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1039.066522][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1039.097476][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1039.120071][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1039.174850][T14584] futex_wake_op: syz.6.2478 tries to shift op by 144; fix this program [ 1039.191469][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1039.212886][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1039.242458][T14406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1039.297209][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1039.354616][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1039.373693][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1039.509053][T14595] netlink: 'syz.3.2480': attribute type 10 has an invalid length. [ 1039.829684][T14595] device veth0_vlan left promiscuous mode [ 1040.017734][T14595] device veth0_vlan entered promiscuous mode [ 1041.315418][T14615] misc userio: The device must be registered before sending interrupts [ 1041.840372][T14595] team0: Device veth0_vlan failed to register rx_handler [ 1042.051198][T14595] syz.3.2480 (14595) used greatest stack depth: 19792 bytes left [ 1042.397132][T14637] futex_wake_op: syz.6.2491 tries to shift op by 144; fix this program [ 1042.409772][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1042.427798][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1042.449874][T14406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.508599][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1042.536721][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1042.721932][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1042.751361][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1044.068383][T14406] device veth0_vlan entered promiscuous mode [ 1044.160687][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1044.436347][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1044.505823][T14406] device veth1_vlan entered promiscuous mode [ 1044.638322][T14406] device veth0_macvtap entered promiscuous mode [ 1044.663143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1045.917382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1045.931244][T14406] device veth1_macvtap entered promiscuous mode [ 1046.134192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1046.161061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1046.225703][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.784171][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.877262][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.944295][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.974636][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.059389][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.124113][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.175458][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.255200][T14406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.295565][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.353932][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.415004][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.473959][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.543948][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.574878][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.627875][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.669192][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.724914][T14406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.732761][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1047.762123][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1047.924076][ T5338] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1048.127634][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1048.164020][ T5338] usb 8-1: Using ep0 maxpacket: 16 [ 1048.368572][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1048.474315][ T5338] usb 8-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 1048.495906][ T5338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.511834][ T5338] usb 8-1: Product: syz [ 1048.518522][ T5338] usb 8-1: Manufacturer: syz [ 1048.527220][T14406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.539184][ T5338] usb 8-1: SerialNumber: syz [ 1048.554499][T14406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.607372][T14406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.645576][T14406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.944161][ T5338] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1048.984186][ T5338] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1049.030012][ T7930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.059988][ T7930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.088318][ T5338] usb 8-1: USB disconnect, device number 4 [ 1049.103645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1049.188617][ T3046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.208000][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.227987][ T3046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.321915][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1049.444539][T14701] futex_wake_op: syz.0.2502 tries to shift op by 144; fix this program [ 1051.104081][ T4230] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1051.291287][T14720] autofs4:pid:14720:autofs_fill_super: called with bogus options [ 1051.554083][ T4230] usb 8-1: Using ep0 maxpacket: 32 [ 1051.574350][ T6663] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1051.867265][ T4230] usb 8-1: config 9 has an invalid interface number: 221 but max is 1 [ 1051.887567][ T4230] usb 8-1: config 9 has an invalid interface number: 221 but max is 1 [ 1051.896280][ T4230] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.906510][ T4230] usb 8-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1051.916166][ T4230] usb 8-1: config 9 has no interface number 0 [ 1051.932527][ T4230] usb 8-1: config 9 interface 221 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1051.956351][ T4230] usb 8-1: config 9 interface 221 has no altsetting 0 [ 1051.994114][ T6663] usb 2-1: config 0 has no interfaces? [ 1051.999662][ T6663] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1052.033893][ T6663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.076020][ T6663] usb 2-1: config 0 descriptor?? [ 1052.244237][ T4230] usb 8-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 1052.323325][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.567442][ T4230] usb 8-1: Product: syz [ 1052.658990][ T4230] usb 8-1: Manufacturer: syz [ 1052.799937][ T4230] usb 8-1: SerialNumber: syz [ 1052.935023][ T4339] usb 2-1: USB disconnect, device number 15 [ 1053.871879][ T4230] usb 8-1: USB disconnect, device number 5 [ 1054.132540][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1054.448950][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.499694][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.724236][T14769] futex_wake_op: syz.7.2517 tries to shift op by 144; fix this program [ 1057.898826][ T5338] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1057.924033][ T4230] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1058.280518][ T5338] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1058.294864][ T4230] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1058.311471][ T5338] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.331830][ T4230] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1058.414226][ T5338] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1058.423459][ T5338] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1058.462229][ T5338] usb 7-1: Manufacturer: syz [ 1058.478023][ T5338] usb 7-1: config 0 descriptor?? [ 1058.514067][ T4230] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1058.560949][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.591932][ T4230] usb 8-1: Product: syz [ 1059.249706][ T4230] usb 8-1: Manufacturer: syz [ 1059.331158][ T4230] usb 8-1: SerialNumber: syz [ 1059.344093][ T5338] rc_core: IR keymap rc-hauppauge not found [ 1059.350092][ T5338] Registered IR keymap rc-empty [ 1059.386214][ T4230] usb 8-1: config 0 descriptor?? [ 1059.392988][ T5338] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1059.404191][T14789] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1059.411335][T14789] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1059.425069][ T5338] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 1059.465363][ T4230] usb 8-1: ucan: probing device on interface #0 [ 1059.487494][ T5338] usb 7-1: USB disconnect, device number 6 [ 1059.503979][ T4230] usb 8-1: ucan: invalid EP count (1) [ 1059.517559][ T4230] usb 8-1: ucan: probe failed; try to update the device firmware [ 1059.792968][T14823] autofs4:pid:14823:autofs_fill_super: called with bogus options [ 1060.157944][ T4231] usb 8-1: USB disconnect, device number 6 [ 1060.545416][T14833] program syz.0.2529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1061.262248][T14839] futex_wake_op: syz.3.2531 tries to shift op by 144; fix this program [ 1062.085497][T14847] lo speed is unknown, defaulting to 1000 [ 1062.091516][T14847] lo speed is unknown, defaulting to 1000 [ 1062.099581][T14847] lo speed is unknown, defaulting to 1000 [ 1062.108091][T14847] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1062.119337][T14847] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1062.178552][T14847] lo speed is unknown, defaulting to 1000 [ 1062.185691][T14847] lo speed is unknown, defaulting to 1000 [ 1062.192083][T14847] lo speed is unknown, defaulting to 1000 [ 1062.198581][T14847] lo speed is unknown, defaulting to 1000 [ 1062.204963][T14847] lo speed is unknown, defaulting to 1000 [ 1062.349795][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 1063.444049][ T4230] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1063.844363][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.904000][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.134149][ T4230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1064.159449][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1064.187619][ T4230] usb 1-1: Product: syz [ 1064.203691][ T4230] usb 1-1: SerialNumber: syz [ 1064.285407][ T4230] usb 1-1: selecting invalid altsetting 1 [ 1064.444143][ T4230] cdc_ncm 1-1:1.0: bind() failure [ 1064.521669][ T4230] usb 1-1: USB disconnect, device number 20 [ 1065.875669][T14895] futex_wake_op: syz.1.2548 tries to shift op by 144; fix this program [ 1067.019769][T14912] misc userio: The device must be registered before sending interrupts [ 1068.980141][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2558'. [ 1071.987469][T14964] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2565'. [ 1073.784012][T14984] IPv6: NLM_F_CREATE should be specified when creating new route [ 1074.064082][ T4230] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1074.116287][T14989] futex_wake_op: syz.1.2559 tries to shift op by 144; fix this program [ 1074.434092][ T4230] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1074.452539][ T4230] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1074.473703][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1074.634123][ T4230] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1074.643219][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1074.723942][ T4230] usb 4-1: Product: syz [ 1074.728235][ T4230] usb 4-1: Manufacturer: syz [ 1074.733055][ T4230] usb 4-1: SerialNumber: syz [ 1074.782072][ T4230] usb 4-1: config 0 descriptor?? [ 1075.395459][ T4230] hub 4-1:0.0: bad descriptor, ignoring hub [ 1075.411741][ T4230] hub: probe of 4-1:0.0 failed with error -5 [ 1075.447127][ T4230] usb 4-1: selecting invalid altsetting 0 [ 1075.612975][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2579'. [ 1075.807904][ T5338] usb 4-1: USB disconnect, device number 16 [ 1077.371790][T15053] futex_wake_op: syz.1.2585 tries to shift op by 144; fix this program [ 1078.323240][T15062] binder: 15058:15062 ioctl c0306201 0 returned -14 [ 1078.693405][T15069] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2591'. [ 1079.993187][T15088] futex_wake_op: syz.1.2596 tries to shift op by 144; fix this program [ 1080.050733][T15093] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1080.644900][T15109] netlink: 'syz.6.2601': attribute type 10 has an invalid length. [ 1081.101939][T15109] device veth0_vlan left promiscuous mode [ 1081.142409][T15109] device veth0_vlan entered promiscuous mode [ 1081.157024][T15109] team0: Device veth0_vlan failed to register rx_handler [ 1081.316517][T15118] tipc: Enabled bearer , priority 0 [ 1081.696590][T15118] tipc: Disabling bearer [ 1084.146437][T15164] futex_wake_op: syz.0.2609 tries to shift op by 144; fix this program [ 1087.270286][T15214] futex_wake_op: syz.3.2620 tries to shift op by 144; fix this program [ 1089.203900][ T4229] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1089.960184][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 1090.083961][ T4229] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1090.100310][ T4229] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1090.127215][ T4229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1090.138361][ T4229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1090.149568][ T4229] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.162909][T15251] capability: warning: `syz.1.2630' uses deprecated v2 capabilities in a way that may be insecure [ 1090.173945][ T4229] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1090.184239][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.219394][T15251] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1090.300116][T15251] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1090.537716][T15256] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2633'. [ 1090.574267][ T4229] usb 1-1: usb_control_msg returned -32 [ 1090.580779][ T4229] usbtmc 1-1:16.0: can't read capabilities [ 1090.603261][T15259] futex_wake_op: syz.1.2634 tries to shift op by 144; fix this program [ 1091.235081][ T4229] usb 1-1: USB disconnect, device number 21 [ 1091.363143][T15262] binder: BC_ACQUIRE_RESULT not supported [ 1091.404161][T15264] IPVS: length: 4096 != 8 [ 1091.410646][T15262] binder: 15261:15262 ioctl c0306201 2000000001c0 returned -22 [ 1091.575738][T15267] loop5: detected capacity change from 0 to 7 [ 1091.600269][T15267] Dev loop5: unable to read RDB block 7 [ 1091.620406][T15267] loop5: AHDI p1 [ 1091.635291][T15267] loop5: partition table partially beyond EOD, truncated [ 1092.500145][ T5338] Bluetooth: hci4: command 0x0406 tx timeout [ 1093.181243][T15291] futex_wake_op: syz.7.2647 tries to shift op by 144; fix this program [ 1094.685847][T15312] QAT: failed to copy from user. [ 1095.193457][ T4231] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1095.354150][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 1096.339503][ T4231] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1096.367715][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.381573][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1096.423218][T15334] futex_wake_op: syz.6.2659 tries to shift op by 144; fix this program [ 1096.524355][ T4231] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1097.109534][ T4231] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1097.135623][ T4231] usb 1-1: Manufacturer: syz [ 1097.380986][ T4231] usb 1-1: config 0 descriptor?? [ 1097.453192][ T4231] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1097.934012][ T4231] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1098.189410][ T7] usb 1-1: USB disconnect, device number 22 [ 1098.386640][ T4231] usb 8-1: Using ep0 maxpacket: 32 [ 1098.507867][ T4231] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1098.856515][ T4231] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.947638][ T4231] usb 8-1: config 0 has no interface number 0 [ 1098.954756][ T4231] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1099.134187][ T4339] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1099.204008][ T4231] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1099.223749][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.241767][ T4231] usb 8-1: Product: syz [ 1099.258807][ T4231] usb 8-1: Manufacturer: syz [ 1099.275758][ T4231] usb 8-1: SerialNumber: syz [ 1099.288696][ T4231] usb 8-1: config 0 descriptor?? [ 1099.345875][ T4231] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 1099.357967][ T4231] radio-si470x: probe of 8-1:0.35 failed with error -5 [ 1099.534237][ T4339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.658481][ T4231] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 1099.701388][ T4339] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.704307][ T4231] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 1099.814845][ T4339] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.814999][ T4339] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1099.815183][ T4339] usb 7-1: Product: syz [ 1099.815328][ T4339] usb 7-1: SerialNumber: syz [ 1100.048729][ T4231] usb 8-1: USB disconnect, device number 7 [ 1100.343538][T15369] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1100.366238][T15371] futex_wake_op: syz.0.2672 tries to shift op by 144; fix this program [ 1101.595155][ T4339] cdc_ncm 7-1:1.0: bind() failure [ 1101.620518][ T4339] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1101.634318][ T4339] cdc_ncm 7-1:1.1: bind() failure [ 1101.654550][ T4339] usb 7-1: USB disconnect, device number 7 [ 1102.562516][T15400] futex_wake_op: syz.6.2683 tries to shift op by 144; fix this program [ 1104.184225][ T4231] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1104.494129][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 1105.223075][ T4231] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1105.284044][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1105.292212][ T4231] usb 2-1: Product: syz [ 1105.468066][ T4231] usb 2-1: Manufacturer: syz [ 1105.474082][ T4231] usb 2-1: SerialNumber: syz [ 1105.519837][ T4231] usb 2-1: config 0 descriptor?? [ 1105.548589][ T7] Bluetooth: hci0: command 0x0401 tx timeout [ 1105.588659][ T4231] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1105.596341][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 1105.773961][ T5338] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1106.026283][ T4231] gspca_sn9c2028: read1 error -71 [ 1106.054009][ T5338] usb 8-1: Using ep0 maxpacket: 16 [ 1106.064053][ T4231] gspca_sn9c2028: read1 error -71 [ 1106.069129][ T4231] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 1106.132761][ T4231] usb 2-1: USB disconnect, device number 16 [ 1106.183971][ T5338] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1106.403988][ T5338] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1106.443619][ T5338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.459509][ T5338] usb 8-1: Product: syz [ 1106.463722][ T5338] usb 8-1: Manufacturer: syz [ 1106.524088][ T5338] usb 8-1: SerialNumber: syz [ 1106.566870][ T5338] usb 8-1: config 0 descriptor?? [ 1106.605284][T15438] futex_wake_op: syz.1.2696 tries to shift op by 144; fix this program [ 1106.848882][ T5338] usb 8-1: USB disconnect, device number 8 [ 1106.860979][T15431] delete_channel: no stack [ 1107.655847][T15467] futex_wake_op: syz.7.2708 tries to shift op by 144; fix this program [ 1107.724110][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1109.433937][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 1109.594131][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1109.704105][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.837521][ T7] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1109.848962][ T6663] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1110.144168][ T7] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1110.184156][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.221320][ T7] usb 2-1: Product: syz [ 1110.239207][ T7] usb 2-1: Manufacturer: syz [ 1110.254133][ T6663] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.278751][ T7] usb 2-1: SerialNumber: syz [ 1110.284569][ T6663] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.328157][ T6663] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1110.340380][ T6663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.374210][T15482] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1110.568124][ T7] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1110.624394][ T7] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1110.660968][ T7] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1110.729470][ T7] usb 2-1: USB disconnect, device number 17 [ 1113.054147][T15475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1113.520785][ T6663] usb 1-1: USB disconnect, device number 23 [ 1115.867874][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.874607][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.191791][T15561] ubi: mtd0 is already attached to ubi31 [ 1120.484067][ T4230] Bluetooth: hci0: command 0x0c1a tx timeout [ 1121.727352][T15599] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1121.756366][T15599] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1122.434000][ T4230] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1122.974096][ T4230] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1123.002958][ T4230] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1123.095655][T15619] futex_wake_op: syz.3.2720 tries to shift op by 144; fix this program [ 1123.134750][ T4230] usb 8-1: config 220 descriptor has 1 excess byte, ignoring [ 1123.162040][ T4230] usb 8-1: config 220 has no interface number 2 [ 1123.188795][ T4230] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1123.249612][ T4230] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1123.273306][ T4230] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1123.297617][ T4230] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1123.474482][ T4230] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1123.519548][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.924829][ T4230] usb 8-1: Product: syz [ 1123.929106][ T4230] usb 8-1: Manufacturer: syz [ 1124.013954][ T4230] usb 8-1: SerialNumber: syz [ 1124.014594][T15627] netlink: 'syz.0.2742': attribute type 10 has an invalid length. [ 1124.650844][T15627] device veth0_vlan left promiscuous mode [ 1124.722112][T15627] device veth0_vlan entered promiscuous mode [ 1124.803735][T15627] team0: Device veth0_vlan failed to register rx_handler [ 1124.915182][ T4230] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1124.921647][ T4230] usb 8-1: No valid video chain found. [ 1124.948244][ T4230] usb 8-1: selecting invalid altsetting 0 [ 1125.095104][ T4230] usb 8-1: selecting invalid altsetting 0 [ 1125.100899][ T4230] usbtest: probe of 8-1:220.1 failed with error -22 [ 1125.153904][ T4230] usb 8-1: USB disconnect, device number 9 [ 1127.591890][T15667] futex_wake_op: syz.6.2755 tries to shift op by 144; fix this program [ 1127.794759][T15676] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 1128.039177][T15687] device syzkaller0 entered promiscuous mode [ 1128.054161][ T4230] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1128.534279][ T4230] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1128.584016][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.685578][ T4230] usb 1-1: config 0 descriptor?? [ 1128.812263][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 1128.889014][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 1128.934202][ T4230] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1128.952205][ T4230] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1128.994874][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 1129.018361][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 1129.200975][ T4230] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1129.235316][ T4230] [drm] Initialized udl on minor 2 [ 1129.315481][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 1129.326196][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 1129.390538][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1129.412791][ T4230] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1129.451433][T15695] ceph: No mds server is up or the cluster is laggy [ 1129.568439][ T4339] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1129.580583][ T4230] usb 1-1: USB disconnect, device number 24 [ 1129.626291][ T4339] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1129.670702][ T4339] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1130.727701][T15715] lo speed is unknown, defaulting to 1000 [ 1130.821446][T15721] futex_wake_op: syz.3.2770 tries to shift op by 144; fix this program [ 1132.176812][ T5190] libceph: connect (1)[c::]:6789 error -101 [ 1132.183010][ T5190] libceph: mon0 (1)[c::]:6789 connect error [ 1132.350501][T15735] ceph: No mds server is up or the cluster is laggy [ 1133.440158][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 1133.446280][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 1133.886389][T15765] device syzkaller0 entered promiscuous mode [ 1133.925631][T15770] futex_wake_op: syz.0.2786 tries to shift op by 144; fix this program [ 1134.039075][T10189] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1134.333945][T10189] usb 8-1: Using ep0 maxpacket: 32 [ 1134.344754][T15781] loop5: detected capacity change from 0 to 7 [ 1134.454119][T10189] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1134.475214][ T4177] Dev loop5: unable to read RDB block 7 [ 1134.485867][ T4177] loop5: AHDI p1 [ 1134.489633][T10189] usb 8-1: config 0 has no interface number 0 [ 1134.520240][ T4177] loop5: partition table partially beyond EOD, truncated [ 1134.635742][T15781] Dev loop5: unable to read RDB block 7 [ 1134.641935][T15781] loop5: AHDI p1 [ 1134.646221][T15781] loop5: partition table partially beyond EOD, truncated [ 1134.714305][T10189] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1134.738262][T10189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.790734][T10189] usb 8-1: Product: syz [ 1134.816611][T10189] usb 8-1: Manufacturer: syz [ 1134.833887][ T4231] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1134.837999][T10189] usb 8-1: SerialNumber: syz [ 1134.887524][T10189] usb 8-1: config 0 descriptor?? [ 1134.964785][T10189] smsc95xx v2.0.0 [ 1135.264331][ T4231] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1135.272600][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.356977][ T4231] usb 4-1: config 0 has no interface number 0 [ 1135.388774][ T4231] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 1135.487446][ T4231] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 1135.520450][T15788] ubi: mtd0 is already attached to ubi31 [ 1135.588079][ T4231] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1135.613961][T10189] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1135.652624][T10189] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1135.673696][ T4231] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1135.723977][T10189] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1135.783697][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.817965][T10189] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 1135.890027][ T4231] usb 4-1: config 0 descriptor?? [ 1135.891227][T10189] usb 8-1: USB disconnect, device number 10 [ 1135.987450][ T4231] usb-storage 4-1:0.255: USB Mass Storage device detected [ 1136.072724][ T4231] usb-storage 4-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 1136.196544][ T4231] usb 4-1: USB disconnect, device number 17 [ 1137.110583][T15809] futex_wake_op: syz.3.2798 tries to shift op by 144; fix this program [ 1137.543859][T15817] lo speed is unknown, defaulting to 1000 [ 1138.814305][T15831] xt_hashlimit: size too large, truncated to 1048576 [ 1141.266791][T15852] futex_wake_op: syz.7.2812 tries to shift op by 144; fix this program [ 1147.244045][T13607] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1147.293890][T14209] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1147.674038][T13607] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1147.686347][T13607] usb 8-1: can't read configurations, error -71 [ 1147.724306][T14209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.763939][T14209] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1147.803845][T14209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.865274][T14209] usb 4-1: config 0 descriptor?? [ 1147.926733][T14209] pwc: Askey VC010 type 2 USB webcam detected. [ 1148.360219][T14209] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1148.634045][T14209] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1148.674025][T14209] pwc: recv_control_msg error -71 req 04 val 1000 [ 1148.734015][T14209] pwc: recv_control_msg error -71 req 04 val 1300 [ 1148.767035][T15920] futex_wake_op: syz.0.2823 tries to shift op by 144; fix this program [ 1148.771989][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.785042][T14209] pwc: recv_control_msg error -71 req 04 val 1400 [ 1148.844029][T14209] pwc: recv_control_msg error -71 req 02 val 2000 [ 1148.894074][T14209] pwc: recv_control_msg error -71 req 02 val 2100 [ 1148.933990][T14209] pwc: recv_control_msg error -71 req 04 val 1500 [ 1148.984193][T14209] pwc: recv_control_msg error -71 req 02 val 2500 [ 1149.034254][T14209] pwc: recv_control_msg error -71 req 02 val 2400 [ 1149.111318][T14209] pwc: recv_control_msg error -71 req 02 val 2600 [ 1149.184463][T14209] pwc: recv_control_msg error -71 req 02 val 2900 [ 1149.207355][T14209] pwc: recv_control_msg error -71 req 02 val 2800 [ 1149.234222][T14209] pwc: recv_control_msg error -71 req 04 val 1100 [ 1149.373963][T14209] pwc: recv_control_msg error -71 req 04 val 1200 [ 1149.404662][T14209] pwc: Registered as video103. [ 1149.459303][T14209] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 1149.569163][T14209] usb 4-1: USB disconnect, device number 18 [ 1150.768483][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2840'. [ 1151.585310][T15963] futex_wake_op: syz.0.2845 tries to shift op by 144; fix this program [ 1155.526415][T15996] /dev/nullb0: Can't open blockdev [ 1156.376417][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2858'. [ 1156.447306][T16007] netlink: 'syz.6.2858': attribute type 2 has an invalid length. [ 1157.099243][T16014] futex_wake_op: syz.0.2861 tries to shift op by 144; fix this program [ 1158.536419][T16024] netlink: 'syz.0.2864': attribute type 10 has an invalid length. [ 1158.546534][T16024] device veth0_vlan left promiscuous mode [ 1158.553874][T16024] device veth0_vlan entered promiscuous mode [ 1158.563344][T16024] team0: Device veth0_vlan failed to register rx_handler [ 1160.517864][T16054] futex_wake_op: syz.6.2874 tries to shift op by 144; fix this program [ 1160.978730][T16065] lo speed is unknown, defaulting to 1000 [ 1161.311225][T16067] [ 1161.313612][T16067] ====================================================== [ 1161.320660][T16067] WARNING: possible circular locking dependency detected [ 1161.327692][T16067] syzkaller #0 Not tainted [ 1161.332230][T16067] ------------------------------------------------------ [ 1161.339265][T16067] syz.1.2877/16067 is trying to acquire lock: [ 1161.345351][T16067] ffff888072c98c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 1161.356429][T16067] [ 1161.356429][T16067] but task is already holding lock: [ 1161.364032][T16067] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 1161.373726][T16067] [ 1161.373726][T16067] which lock already depends on the new lock. [ 1161.373726][T16067] [ 1161.384162][T16067] [ 1161.384162][T16067] the existing dependency chain (in reverse order) is: [ 1161.393290][T16067] [ 1161.393290][T16067] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1161.401295][T16067] __mutex_lock_common+0x1e3/0x2400 [ 1161.407181][T16067] mutex_lock_nested+0x17/0x20 [ 1161.414627][T16067] rfkill_register+0x33/0x8a0 [ 1161.419943][T16067] hci_register_dev+0x452/0x970 [ 1161.425324][T16067] vhci_create_device+0x32c/0x5c0 [ 1161.430880][T16067] vhci_write+0x391/0x450 [ 1161.435819][T16067] vfs_write+0x745/0xd60 [ 1161.440585][T16067] ksys_write+0x152/0x260 [ 1161.445431][T16067] do_syscall_64+0x4c/0xa0 [ 1161.450368][T16067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1161.456779][T16067] [ 1161.456779][T16067] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1161.464683][T16067] __mutex_lock_common+0x1e3/0x2400 [ 1161.470517][T16067] mutex_lock_nested+0x17/0x20 [ 1161.475802][T16067] vhci_send_frame+0x88/0x100 [ 1161.481002][T16067] hci_send_frame+0x1a9/0x2e0 [ 1161.486197][T16067] hci_tx_work+0x9f9/0x1710 [ 1161.491221][T16067] process_one_work+0x85f/0x1010 [ 1161.496680][T16067] worker_thread+0xaa6/0x1290 [ 1161.501887][T16067] kthread+0x436/0x520 [ 1161.506471][T16067] ret_from_fork+0x1f/0x30 [ 1161.511412][T16067] [ 1161.511412][T16067] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1161.520617][T16067] __flush_work+0x116/0x210 [ 1161.525643][T16067] hci_dev_do_close+0x1e7/0x1030 [ 1161.531101][T16067] hci_unregister_dev+0x2d7/0x580 [ 1161.536651][T16067] vhci_release+0x73/0xc0 [ 1161.541526][T16067] __fput+0x234/0x930 [ 1161.546046][T16067] task_work_run+0x125/0x1a0 [ 1161.551252][T16067] do_exit+0x626/0x20c0 [ 1161.555930][T16067] do_group_exit+0x12e/0x300 [ 1161.561036][T16067] get_signal+0x6ca/0x12c0 [ 1161.565970][T16067] arch_do_signal_or_restart+0xe7/0x12c0 [ 1161.572127][T16067] exit_to_user_mode_loop+0x9e/0x130 [ 1161.577932][T16067] exit_to_user_mode_prepare+0xee/0x180 [ 1161.583993][T16067] syscall_exit_to_user_mode+0x16/0x40 [ 1161.589972][T16067] do_syscall_64+0x58/0xa0 [ 1161.594903][T16067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1161.601324][T16067] [ 1161.601324][T16067] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1161.608967][T16067] __mutex_lock_common+0x1e3/0x2400 [ 1161.614686][T16067] mutex_lock_nested+0x17/0x20 [ 1161.619970][T16067] bg_scan_update+0x44/0x3b0 [ 1161.625086][T16067] process_one_work+0x85f/0x1010 [ 1161.630563][T16067] worker_thread+0xaa6/0x1290 [ 1161.635764][T16067] kthread+0x436/0x520 [ 1161.640355][T16067] ret_from_fork+0x1f/0x30 [ 1161.645303][T16067] [ 1161.645303][T16067] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1161.655141][T16067] __lock_acquire+0x2c42/0x7d10 [ 1161.660533][T16067] lock_acquire+0x19e/0x400 [ 1161.665567][T16067] __flush_work+0x116/0x210 [ 1161.670616][T16067] __cancel_work_timer+0x3f4/0x560 [ 1161.676252][T16067] hci_request_cancel_all+0xcc/0x300 [ 1161.682067][T16067] hci_dev_do_close+0x4e/0x1030 [ 1161.687437][T16067] hci_rfkill_set_block+0x10a/0x190 [ 1161.693156][T16067] rfkill_set_block+0x1c6/0x420 [ 1161.698528][T16067] rfkill_fop_write+0x452/0x560 [ 1161.703903][T16067] vfs_write+0x30b/0xd60 [ 1161.708664][T16067] ksys_write+0x152/0x260 [ 1161.713514][T16067] do_syscall_64+0x4c/0xa0 [ 1161.718546][T16067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1161.725055][T16067] [ 1161.725055][T16067] other info that might help us debug this: [ 1161.725055][T16067] [ 1161.735293][T16067] Chain exists of: [ 1161.735293][T16067] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1161.735293][T16067] [ 1161.751031][T16067] Possible unsafe locking scenario: [ 1161.751031][T16067] [ 1161.758472][T16067] CPU0 CPU1 [ 1161.763831][T16067] ---- ---- [ 1161.770762][T16067] lock(rfkill_global_mutex); [ 1161.775537][T16067] lock(&data->open_mutex); [ 1161.782649][T16067] lock(rfkill_global_mutex); [ 1161.789933][T16067] lock((work_completion)(&hdev->bg_scan_update)); [ 1161.796532][T16067] [ 1161.796532][T16067] *** DEADLOCK *** [ 1161.796532][T16067] [ 1161.804758][T16067] 1 lock held by syz.1.2877/16067: [ 1161.809862][T16067] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 1161.819972][T16067] [ 1161.819972][T16067] stack backtrace: [ 1161.825870][T16067] CPU: 1 PID: 16067 Comm: syz.1.2877 Not tainted syzkaller #0 [ 1161.833351][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.843399][T16067] Call Trace: [ 1161.846681][T16067] [ 1161.849608][T16067] dump_stack_lvl+0x188/0x250 [ 1161.854290][T16067] ? load_image+0x400/0x400 [ 1161.858801][T16067] ? show_regs_print_info+0x20/0x20 [ 1161.864129][T16067] ? print_circular_bug+0x12b/0x1a0 [ 1161.869344][T16067] check_noncircular+0x296/0x330 [ 1161.874292][T16067] ? look_up_lock_class+0x71/0x110 [ 1161.879437][T16067] ? add_chain_block+0x940/0x940 [ 1161.884488][T16067] ? lockdep_lock+0xf1/0x1f0 [ 1161.889091][T16067] ? __lock_acquire+0x12e8/0x7d10 [ 1161.894338][T16067] ? mark_lock+0x94/0x320 [ 1161.898686][T16067] __lock_acquire+0x2c42/0x7d10 [ 1161.903547][T16067] ? rcu_lock_release+0x5/0x20 [ 1161.908316][T16067] ? verify_lock_unused+0x140/0x140 [ 1161.913515][T16067] ? mark_lock+0x94/0x320 [ 1161.917843][T16067] lock_acquire+0x19e/0x400 [ 1161.922349][T16067] ? __flush_work+0xfa/0x210 [ 1161.926959][T16067] ? __lock_acquire+0x7d10/0x7d10 [ 1161.932073][T16067] ? read_lock_is_recursive+0x10/0x10 [ 1161.937443][T16067] ? start_flush_work+0x776/0x820 [ 1161.942475][T16067] __flush_work+0x116/0x210 [ 1161.946971][T16067] ? __flush_work+0xfa/0x210 [ 1161.951558][T16067] ? flush_work+0x20/0x20 [ 1161.955879][T16067] ? try_to_grab_pending+0xfa/0x7f0 [ 1161.961253][T16067] ? mark_lock+0x94/0x320 [ 1161.965647][T16067] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1161.971714][T16067] ? lock_chain_count+0x20/0x20 [ 1161.976648][T16067] ? mark_lock+0x94/0x320 [ 1161.980981][T16067] ? __cancel_work_timer+0x36a/0x560 [ 1161.986353][T16067] __cancel_work_timer+0x3f4/0x560 [ 1161.991466][T16067] ? cancel_work_sync+0x20/0x20 [ 1161.996316][T16067] ? __cancel_work+0x1f9/0x2e0 [ 1162.001078][T16067] ? lockdep_hardirqs_on+0x94/0x140 [ 1162.006278][T16067] ? __cancel_work+0x27b/0x2e0 [ 1162.011142][T16067] ? cancel_work+0x20/0x20 [ 1162.015580][T16067] ? lock_chain_count+0x20/0x20 [ 1162.020438][T16067] hci_request_cancel_all+0xcc/0x300 [ 1162.025731][T16067] hci_dev_do_close+0x4e/0x1030 [ 1162.030584][T16067] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1162.036476][T16067] ? _raw_spin_unlock+0x40/0x40 [ 1162.041328][T16067] hci_rfkill_set_block+0x10a/0x190 [ 1162.046528][T16067] ? rcu_lock_release+0x20/0x20 [ 1162.051390][T16067] rfkill_set_block+0x1c6/0x420 [ 1162.056264][T16067] rfkill_fop_write+0x452/0x560 [ 1162.061301][T16067] ? rfkill_fop_read+0x4d0/0x4d0 [ 1162.066508][T16067] ? common_file_perm+0x110/0x1c0 [ 1162.071665][T16067] ? fsnotify_perm+0x5d/0x560 [ 1162.076344][T16067] ? security_file_permission+0x75/0xa0 [ 1162.081890][T16067] ? rfkill_fop_read+0x4d0/0x4d0 [ 1162.086856][T16067] vfs_write+0x30b/0xd60 [ 1162.091104][T16067] ? file_end_write+0x250/0x250 [ 1162.095954][T16067] ? __fget_files+0x40f/0x480 [ 1162.100738][T16067] ? __fdget_pos+0x1e2/0x370 [ 1162.105326][T16067] ? ksys_write+0x71/0x260 [ 1162.109743][T16067] ksys_write+0x152/0x260 [ 1162.114074][T16067] ? __ia32_sys_read+0x80/0x80 [ 1162.118927][T16067] ? lockdep_hardirqs_on+0x94/0x140 [ 1162.124212][T16067] do_syscall_64+0x4c/0xa0 [ 1162.128630][T16067] ? clear_bhb_loop+0x30/0x80 [ 1162.133393][T16067] ? clear_bhb_loop+0x30/0x80 [ 1162.138244][T16067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.144147][T16067] RIP: 0033:0x7fcac10ca819 [ 1162.148565][T16067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.168171][T16067] RSP: 002b:00007fcabf303028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1162.176643][T16067] RAX: ffffffffffffffda RBX: 00007fcac1344090 RCX: 00007fcac10ca819 [ 1162.184701][T16067] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 1162.192670][T16067] RBP: 00007fcac1160c91 R08: 0000000000000000 R09: 0000000000000000 [ 1162.200760][T16067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1162.208747][T16067] R13: 00007fcac1344128 R14: 00007fcac1344090 R15: 00007ffce8e4e3d8 [ 1162.216758][T16067] [ 1163.639206][ T4185] device syz_tun left promiscuous mode [ 1163.951235][ T5729] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.006369][ T5729] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.100276][ T5729] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.162050][ T5729] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.267287][ T5729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.318414][ T5729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.377637][ T5729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.409044][ T5729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.498614][ T5729] tipc: Left network mode [ 1164.591961][ T5729] device ip6gretap0 left promiscuous mode [ 1165.331019][ T5729] device hsr_slave_0 left promiscuous mode [ 1165.337720][ T5729] device hsr_slave_1 left promiscuous mode [ 1165.346855][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.354593][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.362316][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.372829][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.381008][ T5729] device bridge_slave_1 left promiscuous mode [ 1165.394455][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.402745][ T5729] device bridge_slave_0 left promiscuous mode [ 1165.411083][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.422702][ T5729] device hsr_slave_0 left promiscuous mode [ 1165.430903][ T5729] device hsr_slave_1 left promiscuous mode [ 1165.438057][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.447425][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.455519][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.462958][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.472782][ T5729] device bridge_slave_1 left promiscuous mode [ 1165.479366][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.487253][ T5729] device bridge_slave_0 left promiscuous mode [ 1165.493393][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.503420][ T5729] device veth1_macvtap left promiscuous mode [ 1165.509621][ T5729] device veth0_macvtap left promiscuous mode [ 1165.515942][ T5729] device veth1_vlan left promiscuous mode [ 1165.521711][ T5729] device veth0_vlan left promiscuous mode [ 1165.528390][ T5729] device veth1_macvtap left promiscuous mode [ 1165.534520][ T5729] device veth0_macvtap left promiscuous mode [ 1165.540518][ T5729] device veth1_vlan left promiscuous mode [ 1165.707710][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 1165.719147][ T5729] team0 (unregistering): Port device team_slave_0 removed [ 1165.730492][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.741914][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.783504][ T5729] bond0 (unregistering): Released all slaves [ 1165.870412][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 1165.882629][ T5729] team0 (unregistering): Port device team_slave_0 removed [ 1165.895011][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.906494][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.950473][ T5729] bond0 (unregistering): Released all slaves [ 1167.020164][ T5729] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.049970][ T5729] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.099863][ T5729] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.148227][ T5729] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.240586][ T5729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.287738][ T5729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.328844][ T5729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.357924][ T5729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.446209][ T5729] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.487293][ T5729] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.539599][ T5729] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.587288][ T5729] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.677846][ T5729] tipc: Left network mode [ 1168.759330][ T5729] device hsr_slave_0 left promiscuous mode [ 1168.766793][ T5729] device hsr_slave_1 left promiscuous mode [ 1168.773102][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.781092][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.788985][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.797547][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.807034][ T5729] device bridge_slave_1 left promiscuous mode [ 1168.813258][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.821603][ T5729] device bridge_slave_0 left promiscuous mode [ 1168.828995][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.840471][ T5729] device hsr_slave_0 left promiscuous mode [ 1168.846835][ T5729] device hsr_slave_1 left promiscuous mode [ 1168.853108][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.861195][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.869508][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.878609][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.886578][ T5729] device bridge_slave_1 left promiscuous mode [ 1168.892784][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.901479][ T5729] device bridge_slave_0 left promiscuous mode [ 1168.907794][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.919325][ T5729] device hsr_slave_0 left promiscuous mode [ 1168.925917][ T5729] device hsr_slave_1 left promiscuous mode [ 1168.932069][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.939765][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.947523][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.955051][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.962593][ T5729] device bridge_slave_1 left promiscuous mode [ 1168.968959][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.976725][ T5729] device bridge_slave_0 left promiscuous mode [ 1168.982888][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.994979][ T5729] device veth1_macvtap left promiscuous mode [ 1169.000992][ T5729] device veth0_macvtap left promiscuous mode [ 1169.007306][ T5729] device veth1_vlan left promiscuous mode [ 1169.013062][ T5729] device veth0_vlan left promiscuous mode [ 1169.019396][ T5729] device veth1_macvtap left promiscuous mode [ 1169.025490][ T5729] device veth0_macvtap left promiscuous mode [ 1169.031505][ T5729] device veth1_vlan left promiscuous mode [ 1169.037960][ T5729] device veth1_macvtap left promiscuous mode [ 1169.044230][ T5729] device veth0_macvtap left promiscuous mode [ 1169.050359][ T5729] device veth1_vlan left promiscuous mode [ 1169.187508][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 1169.198352][ T5729] team0 (unregistering): Port device team_slave_0 removed [ 1169.207906][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.220502][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.261203][ T5729] bond0 (unregistering): Released all slaves [ 1169.340176][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 1169.349978][ T5729] team0 (unregistering): Port device team_slave_0 removed [ 1169.360561][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.372041][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.415925][ T5729] bond0 (unregistering): Released all slaves [ 1169.487072][ T5729] team0 (unregistering): Port device team_slave_1 removed [ 1169.497121][ T5729] team0 (unregistering): Port device team_slave_0 removed [ 1169.507619][ T5729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.519484][ T5729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.562515][ T5729] bond0 (unregistering): Released all slaves [ 1169.638572][ T4339] lo speed is unknown, defaulting to 1000