last executing test programs: 14.086275977s ago: executing program 1 (id=4713): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x200000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000180)={0x100000001}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(0x0, 0x0, 0x22) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)="0010167fbd0a077c617f9c475f952ef9f1ce846e993d2a3cf6286bdf7ec4ca1b8818eca42fcdbd53619159b529e7365900b0b2234f1889325c567700b2714cbb429e226d1805ac34f7e839238eda21bd4b0bfa49d44f353d878d3dc2d9d97019881a2034fbe4ce", 0x67}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000108000000000000d200000000070000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) io_uring_setup(0x483b, &(0x7f0000002fc0)={0x0, 0x6d28, 0x2, 0x0, 0x11f}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 13.893200692s ago: executing program 3 (id=4716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) (async) socket$inet6_udp(0xa, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fsync(r1) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000060000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000010000000008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000b42900"/28], 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000004000000010100008401000080800000", @ANYRES32, @ANYBLOB="0600000000000000000001000000c804f2815e27aebefed0c7334dc659f4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000000000000600000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000080), 0x800) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) 13.654758323s ago: executing program 3 (id=4718): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001140)={0x38, 0x0, 0x0, 0x3, 0xfffffffe, 0x5, 0x40, 0xfffffe0000000003, 0xffff, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 11.839030796s ago: executing program 2 (id=4721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0xff01) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000002240), 0x0, 0x240000c0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xfad4d87013c8c761, 0x1a7) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000891}, 0x20044001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0xc4, r7, 0x200, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "42e0040df826ccb4cc4b1ede00009f6c"}]}, @NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "621a48bafa5d45a9880334db236f0c2f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5a15c21ad65b88080ebce2610f499463bc337b23b6e48c4e320c1f688b49ab39"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b87b66d02623464b8534c77c40382a640f4a163bcb66eee00a876b70c43e5860"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5ff59839064a36de9d6c297c7bc341c47ebb2a20aa0c2d0a34f2f1d05726adc9"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40080}, 0x200440c4) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0x6}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xfffffff000000003, 0x0, 0x4, 0x0, 0x1000000000000000, 0x1c0000000000, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x2, 0xa, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x9, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x1, 0x10000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0x83, 0x104, 0x7, 0xfffc, 0x7785, 0x0, 0x4000000000000004, 0x4, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x80000002000, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x10001, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x5, 0x100000000000, 0xffffffffffffffff, 0x3, 0x200007, 0x0, 0x7, 0xc0c3, 0x0, 0x4, 0x80000000, 0x2000000000000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffefffff, 0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$nl_route(0x10, 0x3, 0x0) 10.742652352s ago: executing program 2 (id=4724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x3) recvfrom$inet(r2, &(0x7f0000000100)=""/64, 0x40, 0x2020, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) timerfd_create(0x7, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x402400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x1, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b102) writev(r7, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) 9.251708765s ago: executing program 2 (id=4727): unshare(0x62040200) syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a002d000100f5fe0012ff000000078a151f75080039000500", 0x27) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x10, 0x9, {0x55, 0xf, 0x82, {0x0, 0x7f}, {0x2, 0x2}, @period={0x1, 0x9, 0x0, 0x2f5, 0x3, {0x1, 0x100, 0xa, 0x4}, 0x0, 0x0}}, {0x53, 0x7, 0x3, {0x5, 0x7ff}, {0xe0, 0x360c}, @period={0x1, 0x7, 0xd, 0x8, 0x7, {0x4, 0x4, 0x9, 0xc}, 0x0, 0x0}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001280), 0x40, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8, 0x1, 0x80000001, 0x0, 0x0}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f000000ce80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000ce40)={&(0x7f0000005c40)=ANY=[@ANYBLOB="ac710000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf254a00000008000300", @ANYRESHEX=r4, @ANYBLOB="0c00990002000000610000000800758004000700046e75800c0112800a00f50008021100000100005c002d8013000000a80af4acd36254d5ca917df1b80ba8000a0000000202020202020000080000000ababf432100000083c28012d8a57cf0e0b3e78f89c25f99c82010154ad922262b7da3398a0000000a000000020202020202000097002a00060207008246060200feffffff08021100000107000000a27a00000100000004040802110000010008000004080211000001feffffff00ffffffffffffe6000000050802110000010b000000831f000200080211000001ac080000feffffff09000000080211000000fbffffff2503010655831f0001090802110000019e0000000900000004000000ffffffffffff020000000006009800060000000400060098580480c8020080080003002afa0000080003000001000055000200524d203ebd13e32d1cb154d7d9fc75c626aa95b150b2731022c188d1ad919b637eb532f9e9a187c7daf5d751a6630ccd88d33b830ccc1b1e9906d531d6f2dcb218affcf1f3a38a54f4ebf943eda82dbcc20000000800030002000000dd0002002ddf7bc3f81baa884749f34121c89ef31d1a395e677c03770c68423d5bef086fe87b92a785552918f33a3b95139e7f73d2c40bd1674f316bd733cf731101310373f9e9d3fb8515b5dd2e0f46fb887f7fb35a4233f2bcdbfa3e7f3e8de25575d3bfa6b4c4b30dd72d48df438c6f32cf2a1f4ddcb6355f6f2d16e6a7ca3a6e7b5fc115f04ec4564ba3c8dca10a333759d8774aac403df8c889440aa122701679cbe4bbd109cad9afbe2b6a2cc39bdb9a723e3f532bf1c48b8febcf10265f91983f364a88d7eac25d353690349a2d4d9e724f4b0e3ef559836aa8000000c10001008e8970c25d88a4052b84403911d88e389c80d0290163043a3e12b8d5f1e41eae7aff595729058a1493e7d1ca8b1ca56fdaab33903f9257451ecdc9e14b9441799533625b9ff332b874ae48f46578823e74d64c67bf3c55cca4ae4f3528aaf23dbaffc07705007c691efe12255094fe2388c06cb12fb7d01fed007192111580bc3b25539932f567d7a09b0f8723cf7aa744ddf10374fcd147d9475c543ca22cd1cc4e0bbc4e3db63f7db7a569ab99f1f29b05e1e203000060d13d52efe7000000b00002007e12da9e7c55db83ad0b7576e2a6439e834d1e02dc75b0a923149d0d55d0c66de17ac13358085fb37c18d1268e068bfe5dbb7aac382c7550ebd340f7f225e0549e8ec8abf2faa5c6cae95ca0a3c78aeecef067bf77e7675bc40caccbe09475a0a9eee5e0f2056867e0569b8fdd2fa4f84a655b45417bf993314b999ac8844fc64711d0738b577466ab84800b1b87a55669fbb26aa88bd116a6c835ff0b3fd1c1f626f064ee18fa538269f87bc4000080080003000900000078000200da565fb100aff9dee408dd4ce212d7e990c0709988ba25ea3a1382f267db219fa39059dc249d6e2216b087197aadcaf56594efb4c8b8a15b3dff4c99eb6f2698b081b9292db32486a8afb10418bf8dde0d996143c5e875aa9ebac6397ba8450cc6907a39827e720a8b9651ee4f0b88b491db5e2f3f00020055864c097f677ed5ab9ef97375c2717ff10d435671be0a9c26a858a15bb1250ff28e84383b1605ca42f9e12c4a06d2366bea6b3e6420cac02981d9004c200080080003008100000027000100d18370fc0c67560ec089a59a7479b7dcb4a0bc5d0f44b707757f6b5fb6a4e69d89eb980004100200f5876683bc3337c71d64b58cbd336d85ca97cf9d7c1a95db7ee7182c5bf1e8b1a2c6713d05c682925812748d0515a38f80e79e893747a50906945579f020a2e16f92a019068d2128d5d8ad79d152b6d2451e6b99d88f5baf915dae6b2c62be041bec1f948bc421b736d4d39266d2bcff9cc63f972f4ef1fb0e03dba779125bd14dc97639bdefc23100fd8741fe24ba73a892bbe4794f38242b3c2d6506a6de7510a2e685dda536e8b55b254ea4646b89af0047d5f73634d31b670466df7fb4881861fcbea1fbb0f64b09f7c00e2a8eab3aebb531b09ddbb8116da012efb84edbac813593e13efb0ea5c368ef3248abad4e51508d6e1e7da79dfd5d00d6cfa6d566e62ad69e0c41619698648de82326e819da675889249a171db8f393bc612cb7ea25dd111876adc6271782e0b1aab830c37239fc95792d2e16d91e9014aa6b0d8a33514614085e4cd13c9361b9c2e299075ff68f3200e1a392ce54675022baf201ef68cef33fc54e62453761df06b81db51b9b19726fcdff0319e7ab7bf6922d9825806581696274ed76defd471ca3b5ae7166e55bd39f494b7baa513763b8aa27714a5d3fb64e85bd16ab53feb628979e3d560a0c8554e7eccd1ab32db1fecccc74e9bc8095f1fa0c960f4a73a50f2fc29adf6fc82c9202e49a158075a006ecdb7903342d81d9303e5e761f7a6d8df979a5f4ab5653beec1ce81ad9ad3de5d155a7f3ac3e942e703521359816db9ae8cf471275dd7043ad4b02d6c8aeb2e3506af281a580c51c3691a1a121e23b52334145dba6bc3c4730372324ea37bf6a42d55de7b2b3712dcdea73e963471c20ea78eaeaf62db1924ae57e9041e7f7edd7216ee3b2c269c8fe08485a119abea7848ad18de5e8881b44367b729253c8b85ae32759a1e0f501261278a7edc01f85131436aeb7ad2672690843f0cf1eeafe12474e8b6d727cfb7521f9f47ba4ed35fec8930b23ec9b66e0e36b82d8b6bcbb4384bed2e2cf2e3c8bbcc0608085eab09a930c0b190b729100fee83e895cce775df839d49c5e8b5e92ff6cdb13a43013ae7e975d7c8466a5046c6cc47cc659e29d9c602ad1508c3c73474237be3e19c694d29c7deae3726849d739881517cb64b249cb05b3718d678eb743c3e5f33c5e1d3b1f2332435c7d2ea332b490d93016feb577d9bce4b84bedf49f135732e36cb99326eb56d13118cbca4773bf32edf186d1a3c088026e1328e2490b78640ee006b288c66cd65d81e6b7fbdb1672c77692aa68e2a65b964f435cb95c233d0cf87bcd1d23ee1a0d2418ff3008bc982c2d1046667dc3c00c7244a59ca4a991008406723dddbd6e53208e437560459e5edf37ee3161fe62b2eac9261acd61de6ed9715f20d744519c2d40a5a46bdc77171749c013728d836ee67e76dce685a6ff8325ce5f1e2f6ffed5a90daabd12775dda3b20c9f59d33d3eb621b18c0c233eef181dbf36b3756a474284162f565703ce69308bc59fd80d46d75dfe783fcbb27fb264d283acee0038f4c29cdc33886f9293a973f5350b31c8dbc8c19522ffd672a90a4a9222f10a3a467d60e79c19417b5c16087d22aebffa14eed00e08a9bcdd5c1cee3199df8461c5f2ab912b92b485e4af9342e4731f3931388581cbe51c5fab7d7850e9fe2a3c7866781a393e2a84eced9b4d0d76048db0e8be8934fd9b817a5fa305daa75525658c236dd8ca17ed8a57455f0a027365229d69e87fb0346e26a097c164a877ef7214498ad212a97c9bd98b8c1b73a53c23fb84c912cfcfd2b2b7f6ecb20b4f5d7eec166ab0470a411cb745acc91ac6b74f7a301266100ad5ca2cf2cede23899b3cfcd9df0767eef32753fadd53b65932f31e9a1e37b4f21d779a014d5656f11d46b5d1d71e0cb3284f45f21c499593f958fb805e168689aa8a8d1f4bbd7b65920f92950961888e005c7f1ce7b72bb4c16eca90dccb7da5bac885edd71b69d534879887615f856007f1f8cd4978a2b60d4d3a2ed9e05f68a6699691d6672a3af2236453de9f6ee68c4b02eb142f3572d90bb257ad9d6774e61e2f5c40aa1097914a556ffa8c63dca3fe849bbb86018887b39a1ceae429a82858a2e3bc1c7fea81d0a24b1b5f9c279d98dd2ec2272e0d6c154daa0bbea2d231296dabba7dcc55e6cc270c1092958290e7192fc328b2c263a7d8b66103c05f4aa830852173be5cdfab86d0346c4c0e0e54ad4312a50952363d9ea9bffcfe55760919517f227d893d3d5d5547e5a93666a978c13a258d3558f4b4844a317df4f5853537e5134972fe9a339761758c542d5c871c791efaaa2bb3c12e912ca077961e0ba5d06d1162f75584f9f733cf4c0efb544b7dbf18a0ac828610c72d1205126cc47c7a2788dbaacfda1652625ff1fc4fdd8bd6e198e316cae50986ce75d19f9685950e05396fc9566ca9e3b6eed2d0fc269c8eef5a1aac701a6378a4493138b0dcb6258b1a635e7a6f3b487da8bf8cc7ebf5d82f3bb91bba563417006bfbd30b112e18b0415a75c29d57d349d927bf1eb4bab930725a06df7ab0310e2e26fcf08a2efa6a7de837ffcb368f2b1bbdd991fd8f9f23e7137f6d056f4fe4a0ba34aefc6eb7bb1ce8c44a77297bc2966ae15f84a56ce2d7a9ad28c2267807a57be92e9065833564eaa4451b1f44813bcf11accad200ffea00c268ca55fd7180621e5a5f55ea9ca895e7189d9035f91b939efa18e8f986b6546605efa321bc25dcc3a8fc9191c4a035f762646d2ec3d03a54586ee0c60fcb7234a650282cd8fbfa7c796f294952572af2a95ffe6b0f5c763e0eb37d4c29ba0ade83f74965616c99ab56ea0da7e8b48ea244f77bc2fe044133218e163ec83127a098a9492ba7d64f191369c25cf26a2ddc801e24c385e6f836d5e6255d4e232a56382a3ae53acecf45de6b0554c9c803946c3f754ca4ead215818c45a4fbf305abc20ca62ab8c334068c85a9ac0f1e68e421b820beec1c3e4301ddbe95d5c8890e11e472d82e94c7845efb4f133948ce65d424d2b90d9a3652f25e638e45f7d8827cfb7c1314d086674231ec55bf5cb9bc4938fec2498f8ec6cbad61faf3fedec385b24d8d244e919ca84b881b670fe391b36b3788cae29c864c6a26c71efa093aabe6aeaeacc8c5bf899053f41f82ba0c683db1adb93d29570395e83843fc72eeb3d7e12b1b76f29449a483da6d9cb150537dee7d34bd6b84ff9257bcc08961112855cea8d4f326be07ae083db7a3ebe78aaefbbb7b99c29ef6af40a3f5d570e8b18994f33967869ebc7af42a86adec70b2d20df1d41d9fcb6c6ae9e4aed47483aedfb81985d62392e237b1d0cf5f51801afd5523c368400bf2725dc8d7b83a234a55df212ad7ef39543fe66ed7203e5b9b69c7ccb15653e64909a47f85835f9de09465e0e7349736ed2148de0c2e3fc85da38a973ec2ba2854d1c1103cd2dc26c1a878e362f3b43db33a552d17dcb3194aaf3e10139f3fe1114db87ae310bd1c53d9d34f3e46cbcb26b1fd6c2bf9ae5e45cb2b3fea6bda727a6ba153de205512d6ce3b332e2b4b83a6598084e0d9e39b7c540dea36af05ecad22ae0a80c202b740069f9a931171048181342c5cf680d375958482790f578f2ce874180929d88237b2dbd4a766064c0e1ff892fb20d82a38bff4a45fbf95854229c72de4817c70680c477f5e6db8f6a56a12c2a93d76b98b1a92a62dd7194520f8768a11e70fea295418fd0a12816375b4df4032f584ba417f295518131eb52f799d249201867675d65ef28b709c22514e6e7e379917bbdd55d10adbc94a18c322c644d101d9f1d4f3de335a72d936ae0e7dd02ea5c6fdeef26754ff9146c60b61c02ae5a0eac4fdcd875cb4eb239eec6050e1b3a18681413692e0d964a9ce198a403363f48c2b59b1de300060d32ca466b150a087dc9e4bc58084b2bce2172118547473cfad695dc9d13228c84bbe38253e051a7453c612879f6a8d3f97cd7eb848532666212cca1444214b4ecee11f70dc93aac33640cff9508501c0bd19d1e6583c9f7e0f9bf229eb101b4243df39c60434ba95e1dffe56798c2cc9f2a898fd16d35c1a4eaf0f49b367a9448510f329362e2dfdde9a99250f9486dcb18802b668c525b3ee4643d67252ccaeb1cb3023a413d28e82394883c823102b3c089d4b331d52bc2cb68b856f66e0ff6c3c50750395a42281e4ff2a2791abaa7ecbb8fbd7559858d90153ce13822cdeda9b05e1d0a75b23fc763ec58a38a308c16ca890dfe665034f6725a7178a1560ab96ef52684c6193bcd9ced4491d02ca8937fe7576fe337cbe9e46c4b8e37876ea955176357c4136d8e8089be9f4d168b96cfbe0902125c780b7aff5c6cdb158fabe7f7c14745cc4b476e7f5542e9d15c1494cc0c4aab3ffe60d0f0b2c8ea05d546363526b491673198be0000411cf213ef101d7d094f6cd5d31e69df11c9dadde8439cd2973d9dcedb44493dc3c76f0c3b1f967414f480680164d64f9b6fa9d18bf980b4953e60dde1706488ac2125233f3f4f74188a55efeea4580032690d911d172a01ddc4ad965b7d12e3b8d3dfa448d24c6ff157ca41cbb49181721b43d0df480884c0a4b2d131a807d133ba53b940a14931662b8d19a625c9db815b93f3b12bb070f178f7ccf1cccf6b1f3435f796ec9b5a7495e3b9581ddad17a39fdbf137367c55a593fa7aad80ae19a884cf3ce5f711a12b1d2c0bd6a59fe89edff4f795cd5cd253d2ac58c1ee32d690325b270448bfaf7868d8e00e28c635548f603265a00e117532908e31d29f8fdf3b8274757bc7c6df08b3dc6755b1323cea0aef77164feceb095a836fb975f88e4c356b4d4c82104fda0b09a7d888c5178b35d1e322d60aec028e47500fadea0b77b7a6eaa5f037d8d1e599d040e158961456316dc9f92c0c1e873eed40bf0c2fe09381aade898369f6998875019485d4d1c30b37b66ae52d035b3ea5d048ac9dfe65b510aae94d71ce397356f0f2dfefea5706d42db8b6e8e13b1ae2f624c0d830f547c85dee2461c3bc335aa23c5d92e2bf9bc9d3cd5b4b7be02084abf54ec35e1ea7ba330dc1ee0e7d0bce6ba43046876f6a32d7d7c8fc4f19a23a9c3fc88b979161a026ad43476712137e7905ccec00dde21666b0fc011c25b2bee271e3382f189830eb26fc54e1f13ed4f68b7308562627c5fbb1341805d1abe4f33fa60395a377eb67b66102a29a0223557043b9d736e3dab951067d148e71e19d3ca7523d4c7f2eb3f770bedbe88b565b2c2c9a68cc2b1a4d11394e4beb7179e0450317c7434733459a9e22c96bc9157b41cba9ddbf17cb77f80d6d46d45dcd08ddd0fcd5a57504aef7ba3d2393618c0ad9ffa72b17254d1bf44d237fac5079af7bb4e2321e5b0bcb7f415c47e0255072f94b61b142d6ba686bca6f3b39640478ddc98b8d273cc080d2d2d7ff889b69acc316f2f06c0328327f081d0b11878c3b8eefd5822b797ed5fe3a71cde97c0ed8544581cac2b41ca735c4c2b4262ee0652af9104b8a3cabdc0dfa5a4ca1b7805bfa257304105fcebd30cc904f6c9ecf73103407c7831c2ed7acdc514411b84174ebce76089d3935383a1a43bf0b5bf0663c1076050e4b3c9a68d96f45f49caab7c28136b27fb22f3cd56cb35f6a2a6de5eb0b682cdd4196d203e032022852c73b2271fd22a6ca6d832285977d4cdb729b73c017df490c645d9847d768408c3655dde55c32b79897daa9e3bcbb7ae36129f4d5776ed1f1cb4d53cd2f19197c915af811c948738c1504f77b6fe376cd660f7f292bf532fda543f08000300cf0b000004100200fd6233e2e6bb259511568a57cae117ff0c6467e78787f1b6eda3c98ff97378ce72bbcd8cc7223a93c7677129b020adb97887ef780d11cc2bddbcfd75410692759663a6d366375aacd7381bbca82cc8f1ecb0d4b2afa73a356cb7721c5e3f6a0992b6ae65c44714d7766177a3d6fe28b717155c279c4f633282153f714a1ed9679e594f8b37f1c9afaa05f5aa09d46392a5ea48e3f10f968e3619e44934d48161bf613ae0d55f6d13617909a822223f43538217f7030f2df2d975ec323c5b554055c65ea3229630d202298b1e64c9f5b68cfa546c14e9d569f4e4389fc4edc76a2190a8a836cd66e0fe91c9fa6c1bf931a44dbac9c48b7db28f6db1cfe65ad41591c955690b7337a0b9840b3ad0dfad5a3237984ba3935a2008c2c8df298926ea3706296f817f423fd90e89794cb1678e92f0bd2294f6b6f0aedc95dccf37dc53ad2b1e30c09aed65e4af30c97e4e33bff48fed5d6d3269c9dbddf84e40cf1d49c29dc94d766796388e8f6e0a0abd221226714e6f524a8b6cf3238cb96e495a74e35a784b2eeffff4363ab80a2e0bfe7e0b6874c891f79420e0ec0af196dce12c969bb335db2212d60bae4aa637aea24675017cbef7231c5573ea4c9dfca5c4e37e4338d6fe67d035532a59a0fbe2e9eb35b50f294e9ebf443e2925ad11311fc0eb829cfb4a739a8cebc1b9510de42ccb8a4316d51be8f485b328fd70d39f4352a8791a71f27bc77e3083fd7714bfdf528c16d218ce68528c63e4fd95b77a7de926e9e6cf5e43e1b296f6e2e593ffc6f9dcc89ef28530005fd360464bca9b281e8cc95d94838ce848b0010b70300ff438643966048a50851719cd3520fc35ae31212772d31893c87a206535c33058cf2aae2a8551d4671e83dc571f687e828c95cdf3fe15918ddd53d4644c3dd91b02d3fcd2d2855cfa1adcb034affa11c18095e1b23bdaffeba36b58fca9b21e5ececddd6b4e63dc16587f8e7ecba8e5a2b734fd246641060cfa93b7ea8e229b245ddcf8db6bd5256199524a929ba4bfd44988458541471b184e6a4a33d42e8274c3c5ab34668e0ae001d0a5cf0bed268e46ec2dc423eb3489fb56febcd11f9312e297d5bf701e80206ea1f41db639d36aff3419eab9f4aeff3a54b6ee03615fad3009e47b55fab833acd596ce95a6d35b69e7898570d5c0eb11fef19d5bb366c3cccc6b4792211f013e78b662d1f1cb05248602b9a27178c1f03e9b250705ffaa90e069ba73156773b3d03ce9455f4c57420631d89906d017a7f89165d06b19e6101e858b16920c477d8b306a411c75b66fb0ff1a02931f4a60fe8ce1fe2d4945807524ce0fa90c68b57e49514ae9823ca7916ba7b8c5cb724ee60efc89d56608b4dea64b93b88c9278eeb644a3fd6bf6994036702699c42555d08d039dcaafbd5254f1b94dd33eaf382f5655256a0b63a15a615f6941b11db70d7fef76439bc9d5bcedaa831b0f51df6e404b59cec557f561da0d966e855155c1cb4dbdb11cbd5634ea291408936e43797edc9c14927e6e1c8c8176a06d53c098965020a28b0027f32ba05a8cbdb570c427ee0d2f52aa16744686b9859ce6806efcb4dae6b0aa58b19dd4d271d9ca4e542398bbbf807d94b6ca4f89d15848254ac71fced95e13501fced0cb1e37d1767b59d8b09b0742049de8e21f9a1ef5902e8d3bda712b6aefd3e9651f8de3a56179ccc201fb63f776a29d96a2273cd5e3d5e47f147a42516656bbf0f88d2de9f62b3d2d640758f29e82d1a461254669e64d5302827d186ec9961309f68394de0106043cfdae8b305334072d934cbee11b912b000844c8da317fc6b0c24657099c458c4b985ce553fed2e153eb8a2709e49659cf6df5f22233ee3d45e2bcd01ea4a05467f17c8565459bb92b702f20e1d88ead520a1f8956441950f31080806f236567a23d4731d1ed54b84e8b8e15b80b6e81f90ea0413541eb34b6a53aa50b88748cb2eead50b0de719b56c98170141f054326fa1a6db18779311f494205051ebc185cc5a234c8fadaa43fa58b0a49cf6718b48b175ed30f6fe47b043f9b5c6d47905f2da57750f1f18d8cd6974fd4e4fd9fd4c800a6f3d8df5c11ac0a9af0a620be2ade61d18557972e55f7c8a4d4e188900e997ded6811230de8366d6dc3f516b7941ef734881ec8b0169c15cdf4dd8ee7036a46f30ca6770316d7a0b5746064e276ea8a80706b9d267f758eb9a6efab411520ff649a31a41e750c781ca0f89bdafdccd9eb8c636a5f64dfa6e125ee31a3f131a13ad8ba375406feaede58112ee3d2bc16832ab0a678ba34c19e377da255dee5d810068edbfe3c6a9ae0f5274bbadbc7d4f837961cf9ca252a8bfbcc53c149630a6ba7e4c89ab05f5cefb48d9de1df3b8d99dbcd14fba8c0b795c59db50c39ff50a35cbc257afecb62407a0df75626e4ddc2754855f69d00a1261bcb6afb6a46dd4fcf018ec65ffdb0629e2908965b94487e3aaaa22ee6e20552c03a6d3f8d033d7421a42668fa742e991b4f3a6041a9a0bff205f9062d825462fdf2835191064a61235c082ed0a380bb2f6eaa50e8ffcd3e6aaf430ea63e1375984a44e4f7f12cdce6c7278e1e0ca277afd12dd9a61d78f2021c03487f9a52e203ee4b9d5c7ae548b522767355e77385e22cf36da19fbdd28d0dc164e853bd90f9ea3d2feb1785f0b4a977563b008cca3b7d09edee3aca2c0ed96f2feac692a4c58b811b28d0baf62b25d461db86f5492f9b20bab3c6e970b1429ef40bdf7f3dc7423aefecffc4e3def51e070b294027b82b05574981302290b17574058de11b4be98ff065c6251304607d0b9bd7a6acae8f571cea18978d2e409de58fe06ec481a36c2e907501fa05b4dbc27828e80a707d53ca053038066efc48650d857e77698268efeb590874cf62ea740a6c1eb1d04583e37e377e9a5215e9940567f2559f2d0e7f18e9a5c017490b55bab0d8041bb8096ec258c2b1347ef67d85e7b0775937623c72240be1032629ec7eec0716d819a6e0bc54af6d677ed38c106bb568637113f7d8e892ca790511d83b890831f05ecdb3197597f65c52d0f6ccc9b933bae6bf1f0eed9f645db3f7e43c63e3329c60667ee701bc46599584384182671b38613e12ec5501c22ae897a4f2b9bed84ff6250dac0282ef94846dd83bccc778a45b80e33c229137b06cafb1dea06dd64397a36ab839be5ca9205a4731c563a2780251a180f4843e72f7db4d44ebcf22511e854c6a1e0fddc819af848230bdada826898cc956d394c29476473170c6f98561d98ed3c91b7dbc24588775ac92397d3b40ed295c864d9be1db4992b5c9907ea7c369146167e06aba78f137bf03993e89f7967200cce4555ae6f0f1b381ccc79497a4e512e4fde7fd2d576ed34f05095b6b37e706b5d2ca6faca32f9126e5d70ec2fcf6a526fc79bd13b8164ffea07c3542c4a446527ebd84e0ee026e416804e8bf653c87dfa28161fb767f8f45e720e8fec2f9cc4a7168cf09da1fb4084a472ccee0b1aa288fd0ec4d7ff7b04ab8c28c25102432f337990bdaa8d9c89702f5ae486e1e074ea010209b9a7871453362c4b2cb3b722fea827d8235ce260f933d99bd05686a64358010ebe62cc32996658c0e714b2e02edd2e621baadc35776d8ad7dd30df978644537087cd4128b12e314523e55f9dc1fde3a30f35f1c5841c9d5582a06c0eab48e39c66b2900794b34ebd654df165b6d94467df11a20ca74169253fcc7aa063be09ebff476702beb4e2f8483fdee87b35fd17138c38d851f4a8c3fe96f65a108e7b404b10b22e6c612e58ddae59b663e468512ce68ef531a5985a4051c67f786fcb30165d5b3e69aa0672431894869e3c8ab4d7a6286a51d00c6c9bb16a83ab1ef3b5c1945d51d6bbc5a23a7c84474a195e2c4880800e23a168f403f86bb2850896902a67292fb52e9b4ce575bbd6cac530704d7fd5ca3e294c8439acdf7b9898007b6c3b8364247f47caba95b692d8f1d17b5dea0ea9b788d8a99bb74cd1d967240bf5d87753cfcd15991baf69f3029d0f5e9e71d42e9cfaa877f0a7713568640388161b9c3bed1431a76d91f8afe5cab6a860a56f923cb69b9374073eff3238743cb0022d7ce729aa01e1c529b3ec9cf57e5f0643c6ab14c28be574d196b44d7b759e7e456c6025b8b796846f5b33de9c3fd9667d5b3656dd64ea13c4d7bd1f8bf774a8e6b8892a3501b1606e84c4de1e3a4f319577fad2f380b0a446d4550e0f602bc4eb28caf796bfeb0c2cc7b05219cdf8caa6bbaf4797e57194cef41ee5fa99adad807a15e6f5954e485d93ae6d469570415b3fb003aa81a0bde3b5fed0d4f7e84664243c4ca928a3d661869215989e1d578c0818973c35c5d5483f9fe7b6a97ad8eeaa25e04b29bbeed6804b7a24ce998251e7832ab1ac7afc1454041496c90625862754b935d53ba7da7fed804c26e5088c856fb6a0020de4384bf7f6c9751b2ce80908858782b836f75ddc60aa8fe79c3794da62017732c16cbff8401d8d3b903f04f4ec69e6613512938497e07abb9033c978fd7b3b6802930aa4176b02e2796e020e750442a2eb797bb0f1876b0916a58e09f24f74de3c00d242deca0d81a644442ceddb3bb09f8cc20a522522ec549d3d2d73bb8556d1663d463b9254deaae9132cdd907593db5b32d8774717702c92c22fae3135f704c7d60379ad6ce2db8fb4e9c675edaa353471f28985ac9e10a0c60448b944da1e6a1ca585db5a326ab952c3de4976a25a1c9258ee040f39fad7025b9ee45f2227a16b98e20a4f35b2b217061e77971236d2df194484e448dbefc440913d7f721b236307edfba852686ca104b7816aa7b487114dd972275f19d6af81d13f133a0508d0b4f06ca0585ef00761f00b1d16acc47f5d079eac0f0fcedbff9d545a9de27a7b079810068647cc20ddaaa4e8cd60a278c55abfcba8520b9ac8aa188859d1dabbb4253e376d26938cb7a3f4313a07effd6f384d1913c57cef68ef69b0b09226310f75c7c39131b0fd62d63b5219b63c9a0be26b6bbb4bf61f7a0a328a9958a31842646ebbb066e52bfc64bff2a655998cb411a3ec9e88538a97dd473681f109898ff1e9b16189397bbdaaf8a440f6d61a6ecf43d414e92668aa5bb3bb1b714e2b784377a1bcba74ecf9513422978fbb4fd8df778a9080f2721aa0a0185505fcd1bffe3c6d2aad002c10f9c9e145e391b588a08c190fde60753840ed574fefe426f8f482ecf04dc40c8fdd0afb021085544ae9bef632ba467322239c76193af0c883f3c094c19527138535628002685257fb43bf050f12cd3be78daca2dd05acaa7f9edfcaf8905b1420402cc0bf413fa71c6eb515c3a4cb7dfeb92b370296b7d83d7cc578b952da61dbc2d5daf5c335bad8eff07353d4fb29fade01a354acb0d0a176e55dd5295df4947e4ce57602d46409d9cf77d265e4ff1e4bd98e2ea727dc6b7e1f3592e2cc7078630907c60eb313dbb524d615feb656ff69204f85b7342c45f114227f0dfc43364ad1478666b416a2bf5af7de4f7c949b2a972b376f55ceb9764c6a661045dc38909e5a4d8987ef6b359ada7ddb731464da3ea40fbff0374b63fabe73b931245381b79fa15c723d050d03bce7d7502f9b742c2d22a37c1e464528f4b8e4c14c9199cabeacfc0a1a0d08d80970b15977b4c2b4d49b35cb6a45f6fc016d7bb3d1e368f854576426ea83e1b62ee4df3fdcf55f6356c5c821e497790f1d64b3ac3d6df9d641d3d70604efdc28c488782eca0f202d63bd604e3d42e8e686b0800030006000000040000809411008008000300000000008400010012cae75f2ac93028d03860e949714a89732fb0fd2255fd223c999fc3fb299a378c607d6fc293d2abb4a05b241401eb16cdf7e652d665d78d56a90397f068b117b1b5ec37b78f94b1d3d80d0fc19d06d62eae2b9aaedb98fc7104b570317e144f70c53b75730bf5d7e8faae5ca6ef69f381f97aa21db80073cd300ef87fa808ca041002000cf96c3acede344fdbddfb985ab66ebfd31a21fb4a9cdba08497602b670dd7a618eb3fac83cfb540ac20ffbefddf0fc12c0b038344b8b1fef06ceb67cb8dbcfb9f05a75675b2c7cce567f31c7ab36ce60fa7fff7cc49f99f8a060fa59bf9bb40f61a02fdc1fc83980f1fdf599885bdd56814293e4b0b195150b3c3b2dfb04e476cb8dc5f7f6f7dae74e5dd4c179e3e165ce498faa4de6d213da214085d571adf835bd198ccfa718a28a26dc9b0300e6f73ede1fe6c692f2b7040f41f8dc69c1e49a5e4b6d749d88d04a995d8143b299b4c2c93bd4a8bd5787ff92f5cdbf2a1340c2879d2f0e7aeecd062b0d0b1a0e46a9dfad0436df1210601ac1a71d93fd5826515ec339c5063ab9eb848d0ff3f15f6407fade2302ac9ccb3a1835d9cb87af7c9b8bff994c8938ff9313f3ee39953244a022c3bab87436b8058083b51102447dda506194b688902cf2c3a68dccd87733d62d7d18e36962c1f74b282688f7c8582bb92ceb76deac92d0b9d1abb3275076b4464b65a77a0e307d035b714d5a3f465ed5a9f80bab3586db3a110a6dd7fa43ea22438e19eb9f43f65bc2987db751eb3c001d56b052c6ae3c9eb9c8a4af70ce15997a89cb0cfa018900e1fc90dbd586ce1dd2171c4cce53e991af32ccf3087eeb41259c2bfd26c0e17737d373f055ac31d65f4a794fc2001f228df59fe489f5748c21896ec1049245cc22d3f7333b716529b2c6881f20c1ccfa301c4afa4ad0fbcbeefcb8cb914c3506d3507b6cfa9a71357baf2f1c7cfa2e150aff84b9312f43bbd756ac546a7de6af67ab357a449fb32fdda975276ad5e015183dd6fc925bbaad61411ca1091cdba34b0342064946da99da5afc38672091b0d0d38d64f50a0a4b6dc6b930e6e618e37052892d98df3abf0e7850fb84d04068e33962497d00068719e5832b9a4c4581a6d9e62d81fa9e5f99aeba86b9e5c328137ddf3c185c5b2b7ce1f64a5b771f26f8696458aed27e45758a42048dfbff8e9a7a587e3256d951f292c8a161c99024cfaa37a169d3fcb1391c93f6e4752ec648b1c7555613e5b180ad215b539c316fb863774ddccfa28e08e13077638eb9126725d4ee3a7a4f850079597ad634c10ef31c860ceee52f4739639a419bdbd5928827031511cd63bd1a245c76a46c8d13e2ba1997f9f3b6e0dae5c19b1170a8f3aa81b98c14244cc766bcbb958785a79732bc3b3f22f3aa7de72657576ae4a158b33ef4917a5131b8ccdcf788f39148c78aac5b3ce1909609e4aa4fe2307a0a0cc1a9f7cb723901fe69c6ec97a38a50d42e043ba6c75750681bc06e13488d0ffc1f63a25d6168180b687d182d48a130eb4eac75a79444057806f3c0a2ed2c20f0d2ab80b4df6328c9ab1cf44044faff4affe7c497c4813c7359fe3e0e384d03a12f3d7231e553f6403f42f8234adac0e16eb67919308223f31830ffe7f9803aeb385d02e81be2691d07d3ee2a78fc8f9b1f0801ba74f898219c1cb627debfd67041b00f9e7bda2644d35560c1028d431d65fc1768b14393c2f793642e86b38f1b19829ea39d6e7fd87a39a6c62d673cdbd7a1b4f4fd894dff8deedbec67447fe7b37da686001ebf997a9fe1e8939feb84a92eabef2bfb86bd57ebf9648311b643c70f558c5c354c7d50910eba60272971b807143c5b2558dfa7eeee577d939f79020500ce0271f4c1b93871773014305aff5179fb943c01e25654b57f4dea5211bedc117aa1ae8f733ec034a798f61f91435bd919841a122741fc0879208563e27462214197cb184668dd19d84a7ddeaa8b056b042c73a39feef9d9b2190e02e45f3de281659bbd90e51e8b4b5f08b723449cb5a1ca8a27dea759e87c16687b2a05778644014e4a8ab464ce27e16ee4961a79517962788b5f61675c453621439bdf2d517d8c9705146018eeb7cab823477e80c06b633ffc88b9aab10a44e679a401ac8fef6f3d0e5e68d769a211385362f4498a957b3f55e8fd04d18dc4792273abbc43cdac9fa8a0d1b4629dc10025a90dd0a75f7003162753222c102b091ac3f371833850a7fccf8c638465ed153ad2254d3423b1acffdbf8008fdc6bd16ce399e3e2f45cd5e4decf4deda91086b1ecbe1a09030b47a8741d8ea265219302d14b4b174b4296188bfe2e93bc03716981f6b018e898f8232416d6e052555a69ee1e2d62cc7c348f0c1cf717125359f95190d4d586d57b03c494a5c168778ff989ded5419514e353d2ebabaa2d6715b37b01da0f4ad53dc1a478f272f664f51003d39cab46cd68b8caa2699aa72ff712a242484691ffa09a2d556000e847f5935ba47178dc5dcc5d046ca7d529f6d47198ac0356f4e8075eaa6b2eff4861e7a8951303d8066f9184394e5dc5e40b1796986fc314f5014052a03435e2f951502b4f2b9c8434bdffdb8060f9e8597757d4e265b86680b1ae977abe584febba6cfcee5fdbc3344261366a7be9f9237c5756161235d31eefe3834cbac8b270bac6da78ec0396653847b509051c39028c4b14cae85f777270ab65b07adc86015f92ea6b97077e1b6a9db9dc6c884e106685a5593f982907087e26d560c26654fcb56bb82db24f872564ee3284c94d5a6e97114ce5b7eed5af371a95cef414cab2db0837dd332b9705ed843a7192cabd74339f9b193ea0d7ba60f897b47c1ba3a522eb71e024d9bc2dbd417f3bd0bb5ff0ff28e7e85a233366859af45e4513fb9271fe8710225768433282130f3946e0b7468dc31e748d4a7efaf0e5a09aa30c154ea375b5b130a19c1664b2b922fdada1849799cfec07f774ba78953b11f43d3ff0fbd69ef5a7d5cdbffd004227fa61140dcff127da613e73a85a237f5d67bdacaecb01d255f37fae988455012d667370d06fd859935316685e7f082b213c541ba71f083c7b87d81a6d7af213ff4263168a750fb8cb3b3fb85a79b1ecec64a9e1d3693f4d228c75dcfd4ce6235e6b86ebbe9229c236b54acecdd90bb1272e6efd71785c880cf3316bb7b308c452a0283c2c6cfee7e62bb48f39119b0151f52017ee11bdc88c0b1d0c497d159ecb9e7efdae747c46c5bbbf272171d614fd4922efea8907bd39ff3826ba5886a008728b1145ed00611f6d2ca614d70b05723fabd5d74a616fc9bb4aa327b5a35f3b31c30337f0e5bdfc4330422633ba12ca1b35a344d03c1b38c865c3c1ced54d104bfb11b199a7e9f5ea8fdd1c5a682f41606c58bca2e2f50fd0d0dff7d19871454172d533372ac4f74b04c00138c89ae416b7d39c2f9b74ddc8110643ded002138ab3bbe09984b0a2fc4976a1d8294a63dafcd01378c4db7c0f7d90eec4e59be61fe10147f98b7510417c69504a07bed5cf164dc6278e2d589bfd9283c6de27fa39baaa024c50bc0f7f73ecd1783de54a540fbb2697f3f655f1864249157e235f726bb5cd375145f183139b231eedd805209b246956a23e964cd1140564069f5257b7c9f1377ebfac0f9e6f3140177ac4c33556197dba438cb6730a2a4f489dd03fb3df75726390109175bbabcf6a2f6adee6f5eea9d11a97a860ed83957f9ace2a0c34cc2cc8963e7c2eeb6ec61d2a610bde6d1048a9ca315e3db26f3f69a1662227a2e68fc167724a5fcbd0ed8223144156c178b8ecec0598d71b24b3f1fb8891c83c7b35ef777cc53cdb7ee919e20650cab4b7c7387a6888b9f973b22a4144d4ef0a9004a0af4caa7325eb02344303a3bc8fcc49cbd1689ff004eda55b2515494ff6bdae7111806f044c119bf20f544e4561b91a88cc33e789d157c39c2d27bd7a8a302640bf3195a9d0cbfaf26a9809644f2f0c8483d2775010e819323c338c1c49c68318d8e3e11b9eed11253dcdb14539325dcf7bb2dd7b56224a047a2aed0f51b30865a06f4135ac1bb540aa93005791f1233affab2dadbf38b15e35bdd9dc857a6af096c646df926f69ba7ce3f109e6cdc3da02857692e933e566259cec1d245a20a9c9375e0442996a44ebd11207fefd47ef8b12ccfd7771743cbd64e7448eb26e66e92f35db0d5eeed6bc06ce350d1cb741284fd2890e9a54262a3df1727c4e5fa12e64e855d653dbd16bb1a13dabbd82f9a0801d7a7af7838389847678ffb6f70eb31c7d6ff13db6403f4bcd2cec1649134ee9a165482ae19e059a180a35fb4dcb2bc88d5e3bb9811df008248d8e02f501bcceaf2698a5b196e87a790aac38aa71a4c54ed0a05aefd8180b59d9d26144b07174d1839f65cb391f67786b57758309ceeb26ca4cde502f5ede2aa825e9b70ebb91e5938eb189e8a02cfeb614d942792c72bec8d0de16996366590e45dc2c9996e3975ae4f665f91cc49bbafb2e3c83761223d5c4295b502ae8d24226a21464267faa582e81e208152b84e17d6150e7f02c98889946eb93a79c4bdd333893790e9190236e92ce89a4d60302f139e54d8f946ecdf7d4b77e97360c6e82b4f829d28c92aab505cd7d479dd954143b7eea7bfadfd95b5879a697caeb37f1b8a3d3145bf38884b52fa1c8d10409982205c09014167ce43134d3946654ccb1fd33b823a47286d1ede3d252d4f72f2d92a3a44e6731c511aad9f49a8c3708c6e6047bea34c553be55a614ed614b508770e26640d0791d953b57da9d6dbcea24620e5f4da6750822006a8d571c58b4d85c2a6640514bc65f79b3f470a9813dd5115dd64ba3c2cfa0ea1052ccef7292c4d8f5058d780f3647f62b93b6de19d4ed58eda836538d8a081e3dc58b17e824053f07b4c377b54673e3d29c9b257316e2a0ac50832dca47b15aa511518178d1579e393a4f45612292c85d4b6d95dff9c0c513e7d2f62747f1dd4add1b734330b8a36eb1513080d5342f4aa95e5995d8415c1b0a0d38e8575acf85371b8f1f79fa501f8d025a36f0e7739beba8970611264f632e0072ad251738576f0195d8c11b01ae522d1c0a58daadcf4f84040292ecb09c54245be1accc952e6389010536bfbdf4c7985794c6817495e560ba8e3766d094214ff245c14876c96d64a567e2e5623d2a17cb04b0c1b31e6a857ba9e6b7dd5de734ef87d46c01109c6ef9a43d768f82f2ab9a74732a90c2286e26b945041989667a5efbaeac132f3b0b3f39614a7052ac935d2dca58583d9ca3a5b01e1dbc4dc356b90b33f7fddc72b999db87e03519d8c341f69b25d7e40887aa8fbead7437c01dd6a0562908c16a000950db180d4899fa06dbfb714d3d75c5edc579d2dd078530fb88bf6716276fd4e34b0339a2441b2695b1819e36633cc3676c42a28dd92e2e927da593a5fd30b1bb99f74b0b9cf2c26f309509deb6ee950df46b86032b70debfb6cf6e982b06dd6d5816ce5b9b084f04353d05464bc62e6448f6ef638109138bd0298bb1166eb674b426597c912445667f39f27d4a6dd3b97219e0192a60de9a41d69ea585713f7caac7796b719c4e66b4997f4605ab18a5f27b137b0b6d3760ee32d8d0a5af89b97740c5e67fda46f37c80da03edcc98b8296dc348dfa05318655fdac2d584a8fc5a886a48229e14928f5abdabe24d2c4ac7b0a94e0b657c96119785363ab0f7fa3d4487a279b5381d1cf84c449c883819de4e23f5b57efd7780d409af12b88dae11cab8da81dafce631fca349a2c28547fa2db3d5f2c748f0ed72dc3357b4be4c38b3e0ebb818639fc5106de0e16ad681a56acc6ee37ff8e9b7227244abc261d83ebd0ee4c48ca16f94faeea94179606335a972e965a841275b8ffc9a8d67454dde33470ee083535a8cb79d179ccf05cc85ea65cc9aa196f29b866259dc4bf3ac8a8d2b8e6b577ce8e32c84608000300000000000800030004000000cf000100229084293b4dc377fa77eb6065a17e0ee115a17cfcc9cc4b4f7a3615271f0ab0edff072f76b57c92702f92d5af042d31255b82f577d9c76eb6bce485136c0783e402c40a6ffe1194c28475e98e7a14f416e1108f41433bbb90b7b8fa7c7718b28ce86a248dc1b41e93c374bc66e3dcc3f77069de884081a39fa7fbc6c5c60dfea52cdbeb6193f8c034ac04bdf5f3dfae63828abd5ff13e5fe193f5af164375cbd6804f8ed76d4d5287fafba61b03752118a1679f5783a2f0c011619166cab767f4bb7049c4df2b8f9b66fc000f0002001102d1f25d0f0106d8a485000800030000100000080003000b0000009411008004100100f64c266ed68dde3130e0eaa2d5d28d78a63d7e2e504cc15ba01562f9505b320cded7c8b1e3e3a5ab27e5d263bc6b7324201451be41a8b17fa515181bd3e67dc886a6cd7ab1a5c8dc7546dce3235f63161695107393b8bb94b998817ee23e21cdde6e8425ef20527ddfb4ff790b485bcf938285fe0df4e719e26f551316b2cac01cbe4b2c8b62677a994a28b0352c7e5ecccd8a7242179386e332b4c3ad71149758133d99c828288b1ede3e30c0c2232b5b7931b427580b31d83e66507b8eed79268481fd1f21aec0bf176dbba36d245b3d8ae6e66d92a553e8e4d8d2b65852d1e14759cf765816c792890aeeae15e015ef52ed0200a803fd972b846c80a09da00ebba4998a516f564d3b0b9ac2e96fb1628d5359c86ebc748cb4f35f5bd59b354e1a925c1285bdb064d64b0ac5ca2cacd8ce33900f8a3f6e554155fb1c239110e8e04e1967136198341ce4a74d9b2c5c181ffaee72292524d6d5c9de1c36493eae0157ee3eb6493fbdf5e545f5dcb60d2e440f0233d136f3f9db7ecbc55bc392e4baa290aefaf3ef485925d2a686e15d96ccc3795eb1bee96f1123ef1febe862e4e03a91f6261a57915331c6576ff58a80e68e518dde0a391a60217aec507adc25d7f14967b340755665ff1b6e0e5261358c675dc11792179f4757ef5e431420220251f3e513bf803f4a77d193eb05578fd63b387ed9dba184f27a494d8fa8d5c5059563ced629528b6e98d2bf079b99472abe1abaa2f3d7f5a4bead8a83fad143c9570bc1bd292cbe50941eeef73b97aa5a05ab641d97c08157335a0ccca3d131c0782fce1eea6b64264ece7571752597fe7fcf9a7018d18dd5901f2c6ae623a93f8dd17c505b5604c0779eb0a9afef7c2d30a83bff12ea5520ef36a028e994e4f6f6f3e6d87d5dd9cc3f3a36387fe3a63579e339607a99056174f8b8234f68036346741e268d33304bf5464e8302fff8f453ce4ab1bad4ef13d11304793dd4f8050b7d71df5ce9ee19d92cc3481f0d5eabd6ff3d4fcd22e5ac7916cd39ce6f2081b9f3c028912b62c7f88d1bdda2e1eeac74930b7899a2b2f40e2443a7825d6acc6f0361a664f97fc2223b0b71bb044ff6babcbcd9080190f1be1360ad81c11ec928de3c6863b3ee635f621aafdf385c29afc49e6611121097234b7741c81ddf032a7b047be42a498c46e270ece192231fc278d7d11b8197e993ce6f131284e13c970a210ac6660c987052099c1b49b0fd99553f38c5e70bf820d2744cdffd0a0e89422ef8af76c0a02bb400cdd5c1621887067d2547d29f2fc85b5ec84968c4f54fe0f79af9afb6e909c294e47f6887fe52b99d444a6408f92a117d98c2b00050e3918494f178cad558c7f0ba866b1908073f4fa7d355c56ce49e8886da04c8013b85fa313e167b0a7e1f9daf96653be3fb17a47e12013d86b61879044086c1283e6bba26cf2bf5e3ba659438320343f81dfde26cdf7e59a03d0f8b864ee0db40402270fc4e5e67900c2d21b30fb64e8527e9f5ce8002fa4552bea62fcf013bad1d94d75ee6505c8868b6367c9857f31a3ca854df1c681cc4d5947219c2a797b883904e0024a6f02fbb53d60aac59af9f5751ac15e1bc0acb46fbd5036e5e1307085a1269658337a0160fc9b0e389580fbaee60c5b831cef4fb3781a39e0782db4755246791acf9edfd3dcdd3ede16644c5e951106c86854609362c7b0729a714d0ce09f89a4e248098daba2d873ede31f91e91977e4799b90cf9f0d94f6b6210fbee17cc05ad2204a71bd6076a813941e575e574ca4477f0033643ec179ac98257193d32b2434c32cd059b7b03387b14f6881c75fabf3ec7f7bfdfd20d2a084f768fdd3e55ce9833cd0057ab93ad8bb23f7e713e1f330be0a6da67f02230380879e71287fae2c9f3d26e9b4810bdadb041290c710098456aadab5eb9d90324631d9d4eb8d99c2b3fffe1052d1d129e52753f6a5702b598af431c0057cccb22d77d93b910c8cf1f6a2e61aab53cca88c2cca7c0247b761a5aeb8d5092cdc28d828bbf6a45f002bd14d66b246235c22645531f2740e928958cbc6c50df58cf1dfd4ee6f41776791ef59812d248c5b826416a0f07cfdfa64645530c269a2a924d68732717400e3fe8c46e0cc6c59ab184e91678135f9fa4dcea5f05e320702e778822dc10de24812e81b2971ac3549f991b3bf55d8796ba3c77444b9e5d2c04895ea67b1d0eeec595978ee77a663e2733108ec537b1941b3a7dd1558632b05caec73739afb0549a3e89004489fe565d13331f1d6524883769800b4b72dbced1e5eb1bfc4fdc9cf67c00d042e490bc1dfb4161000a2e37333c684e8b67540df953de74e63bb9b56946a4dc65cf100e1a5149c073613a12c3157229d49179b67778a556a405a774d8fe8311210ae9eac1dcc92bdf9f86ae0cc693a84884e70acd7aa9d5a2204ce7da5851df9377fd38076e744efbfbd5d4814464f06e1640a6d8bf2e9c7d786c5317465d541dbd0a2383a20856d3edcf72dc33e3fcefb064cc1d8ccc3e3be0a50b9892da282cd8d101d6733c7273ec7d64a9c737b7df1322ecfcb469e945edf8d6bb3bd551ff78269c0a35827c37139b55877ea1907ec0c9d2a0372efea5913c5eb720e199a85df1b3e99e933c1cae7af4cc8a41bf4330a1981fe06b4d5c501768d56a3686a7c7761449e6dc7438714a9cdbbd73bfb015f2bbc56c71d03e3f60fdcf660a69a537fb0199ab925ce5245aecc14aed7e4356f1404722ca31d2fa5b1cdcb6e8e0c41ca1366327bace63160640ba43ac2f70dae4ec0e25fa677a987822d94bc674ae75a2f9a81ff0e940f923017f899b6ee0ea43c95bdeec08080bc4a5f3eb72c69a23520b2e9b8cd65da1f4e26d7231eba4af8bcdb0062dc7c118ddd22ff00a4f2152e526f362e0ec667bcacea0254f47790c31a11fd4c222668a63f6839f604a8927d9da123e1e79f014cd9f1c008fe17899a2b8e972a9aa937821db3e4cecae56445b7b568a4da7120430e13ba280e67dc9cd202b72c0704dfbd3fb234d3dd9da078540323a1c61aae4e6d2a44cae812404f37b9da78d5891465f0f31724b5a39165319eed5fb3707efd37b374d385ff0d8e757b060e2cc0b9579f52b4a4a310841ac4f537a42e896f78293855dc23453a0eb731c4f42b61e40b3fcbcba13ee14019701e84f86fb71a9cfab5f429a51db02839c4c8694d624f9af8c472466013ef0f95e1aa59f5f69421e87bb6514475714dac983d4f230db0416cce1f18453f58e9a4caa7a310c6647c7ea99c29852d4085cb3a19d37820cb263a526f205e2be7745380f9422bd1e3c5fe43ae88fcf60cacdb29a41da9cf25c67e5e57954ac9f83bc265af1c97d9763eafd0e2248dc5eba10780822c88888b710c97416caadbf4fcaa49367e5335dca607cc35b041cecfdf382f59c24614ea3baa10e799eaef94aa0feb12024c46b2d9ce78ed303ca1b02e9f4501dd4a1c8444e8b9b19e6e0bce18cd0f5449dff7b868a45806c0a8e61a9dacc30bfc79f38ae6058fdbce369fbc9b5345af8c47b2769dc8eb93079c40306bd5c6e5a20c53ad1a69f1169ac4089d7041c47dfe279fb7fe570d634a2aa572f304080e4d6725ac55ffb3da346d963f94a3ef13ea35547e144d00f8d21f42ed97ba872a5e1aba5df6aa0355f3746c8760204d39186777c30b3e22ec260e5cd0140a017fc9c2bc9e2e252d0adae2af3b3d6fc4d2717373de63fd5571764f95c2a506d2c88b98a9675351aed1971692e44e104dae80e2f045386b1eec45d44b9f0f0e978558a4cbec0c0e31b23a58e44c6d805c0131614761c42d7a19d5b16479c038a705acab83d8c08da337b81590e767d3f7e9ec4e6a6f9268a2d1bff63a98a01b743b5b4ebfb4e82ad93be45e595e7ea0d074c2072831f8105a4ac3d086eef4553dce75156c187790e01058bb3da5720ab31699128b40e4ddded4ac99c18702eb57c2aacee0f747510ba2165abec047f84bbc3cd6d6add58e55800d7997a4e6c668d34f4c195fadd018a237c35f6c5db64f8f8a05254758acae3d0b113494b124e8b6768ab712bbcfb0695c39ed6c75f5a45b65b056de76a9db8e5f4053fcd7d5ad03f57f33c53b320c7db6b5a87f676fbe75e9520d25d5fcfdd866b45728af783a1126b1be167f8aca3f4a61cbbfe29ff7d9b13a9881da5fbcbabf20559127873479ab00871de012851f54afb9a04c25d7c3ad7621b288a17fd7c57e0141fee856247274d9eb6c29aa0f7c8bfb2742e951e28e812b55bcb450897da32e38869dfaa2bad6f163ec0907e425a37520fedf67301acbd835e6f07e204cfa6b5c34b71c9060b5a6c0399e8f6d32a857da44124f91a2928759abaf57dc5afc754c7d0af448262061bca3556a13b69d3632f83c75f52af1c2b7288973104e7803cb3214abe18bdda24fa149c338f103aea4e675a2e6de0642a569c932fa93f1bce0707e03f1b29b6cacde3a841ffbe58ff890b6e9873949ed58024c2ade8d09934039fe8a0c9093aff3dfe952e14cd33bc748fca15288ae74b954a266f03da741efb9e40fc1ac6dc8c6b7075a97ad6e5b82f0ec69a5fd2edeeb0b35940b6efa725ea72efe535c46ed7514278306ee68524f523c96e70762ca02467b15efe3b82b0a25ea6eba874a7d3763fe768ae261ff8bb8e29f3c040238c5915622dda59a2d355995e513eb9e9498c39a382635dde1d3303c90f8eecb153938dc604f637d4107f5b84d9ae052577f7484db3c2aa45af3fd4d7fb64f4e6259dcfd902df43d8c3a88360aeb1a871a3a4808a9dbcb7c2d75c5f53b4504172e871d801e6fc2c28ab1803e484da5cf0d8a06756b495542b204e8cc2a40d88939323b23ba8199839a76cf099a38c352a99b381afe6291dc75f106797e1401c5eaf8907e165e027167ecfc31a317dd3fb12089051bc33a2b13b7d56e4f7572034c4f609295b9e8015b23589df05f2520e41a1d07b35ab10769e9ce55a4d7b5597cb362020fe9cb4590f1c79c5dbd98c579498d10aa6051af780d9a2dc41fe52fdc478720b935bb47f31712ed6c4a3c8b1028e81665878d5f3a696b3159829a0d411d4a43620d94472fd0bb9651037db8a67162e2dbecdb6e9493e157aadc2c0bb80423c50e48ef58dce181f7e03a9d40b24e62d4e1c5d1696e7b09ff6615a6e2ccf13ab628e6d636d8623cd2959bfaaae75825acfd51182a9ccec3cfdffae03d18a9395e51c645da9f2f0fdd0450613a45ec879537712ecfc692a3350eb53a8609c214ab2b4cdaa597a805a26b09f1a4059c4263a71751b1165e629f18712e2fe52ae9bc0fafb4e71b8425e9600200deb01a79e4a281af67f9fbea421529a91278f66647e630544447a3d85862357b554d4c9cc4f35cbd070cd9fe68eed66c0d8ecdebf400e807938f31f1a9ef608dade6934ee1b8569406cae4037c8359791b762b5e7c11c471ffbde1885994b5d977826544cd5a4075f686821d527d686637bafcec78d2bfa4f668ca7e40022216a9331bf29a5ff0badee495d42133f43cd60643a485b2975ffe9ec810ef1351b44b8b908b62ec6ec4b80a18aecddb74670fd4102485ec60ce69229287116ab04d37ac9d2e049a8c6a90ce9c7c8f9353aec39412da17c32bbeaafa5ec8be20194c44c041dace86f6b9081b6dad40f76f11103b232c60c379d9ec62a68caaecce403bb9eba0550554f276ebf440502a389b4a10eb4e24663c0539deb905748ae88c42adb10154aa881cca354e1d566c63fb564dedbab31305ce24f4091b9180c330002007b73b131b4b6490412f6163c9ed4725d49b9057ff3a2381f3cba88a5d35933301c6d2dbebe97c472d314a0f462af4600080003000e00000084000200d86d9245f1d0402f8326fe751f2e0ca3cabd00b38adf5f773307b708f5cfeee5a0a1d3ff68a680a097a71ad6ef558c5d3ed7080a5e498c5aeffd1492d1d7136f2f062c7df62fd13ea21ed96cc054bc0523c5d79d5477250846cba30a45111f6e7cbed94951d26044e3ed3c70c19460b07f3a55d2d916a484032ece209f86850c6f000200b36765c95cd0b58e4e349f22b4b3f91a5fbd154a09b72e12698808595950bcbdc81ee1439b57e8614b26c3c91852da4724af088605e1800f2904161ca64b6e47356983412beebfb3827c3d2a77c222eaf714e0043304013e4673bd8564b0851fb1475a72d74bb03539beb100080003008100000004000100120001006b6fd516c13bcbd6d3c1e7ee0c7d000032000200d8538863fbbf50264020391f9640699e48bf5785d6a7bde8f3fa46be053ae304b24e16a9d932e3de6773c66b61820000080003000200000090110080080003000c0000008f0001009ed4671c850f706ba94b68caa633d9333e546f36180881287a9c16de4627a0527ba09161ba743f1ee189ce6bc8a8044c7093247e11ce304a7e602e7d47e95ebfe2e128b74a85f6f06f400b043b14430062a95400e3d760a3ec7ef80e3335a8d39122f9be7e7717e53241ef114db9451299b0001850252ea95e6e88cd937a9e31e12efc17838ee7a510f2280074000100b0098f08fa9c758b464f085915ef56c71ad18310d5df2fd3a3d7acc506f9910abfc7847b9678941c48064e349820c0342ef46dc5906b7727fbc0447855a634c3713fd3fbf1441c198ab6f215eba7b1920a31d94f83f815fd5c1d24a43d3ed6f8a752128329627022017f498fa0f24c2463000100720c96dea3aad65a65ea16086fd38d0440598fec0a9da59b80b3dfec1650eef8d6b5d8dbede65186e9ded6908e764d46173250b8d597459e341daf3542587e8f84068484f455e43dd6e5eb27f45a55ca0710debdc9de84661661a78c413d530008000300c40b0000080003000300000005000100b000000004100100dbbcf8920daa824673b8909e4447203bbcfa0f98fa8213710374168f914c2b5fe2fdc1b10a1921abf0377b76225789f256ef58d7b9f353117441c6744208af6a562c16998631c5f7ba0ab8480ef9a0ca92a9bd9bb846a929dbc5e60acbb1aa47a17956d73c4a15c75ddfadae55c7031978c04179f2c73be6076ce46317272944652d46f6c266379b1ed63d7f81d50a168de8d507552ecaebf693858156710d1b4d5bc53037a9f3909fe23eb919cf1b033d0e808e0bbfcb4dc44c5440585712ee5cc7bd0d4c13d61429220cd3edfb829c7e8198ed2fa7c4db70dbab4d07ac03cbc0745379a863fcb8b7a56ad0dda549be7c14911a7a445a03588a600976e09ccdbdf82739aa0c3234557143ea7f2799a56a5a1d27105493e0065699b9568fcc172c2c3b1a9c35975772651e6a9075248b03cf7bbabf3d4ec97f81597435a1cfa0d7883047e807ad98240ef1c78c922dde14b49a9e6619ab64289c39b46092878770a39ce655d98d60764b75ef9ad3ab46bd2dbfa5e0965f041d25f97e31669de3494c631925b8cd3577112babe892bda1d881764d45f7fe575b520531ec4666758db5e3964cce847120b905c4545263513866e67c234c959a4232ed7092685313183a6a9eb2affc0a23bcf4a752dc80745e7fc83c56dbb4c8614dd567b02b35e20e8b177791da7e1f405bf1b3bcda3a070b1a033f84460898386a8457e72e94429531ec6d086195e0ed3761f197ed2ee3e4ef49e00f4252d1687320792dd7a5282a71dea21b6539d1b7eb41c1adb0e4971e3d0bf8e47bbafe6dd30cababcec8bd7f076c7aed22435e89f8967f9cc340e73e43c774d2180fae49ea0e079101b2099a0c47a748e85f1f1cb93b7dfc81cd44827f3b9769684a90d58ddb073bc5338e447fdfc9be0142503b989b1bd6bb58f3d2a1241d0c79c942773e856eb497fd14cdef1afc7e0beeb962139b132a8c11f81f4b509cddf5f75f3706c4d075ff9904cb8e3e23c63813f279efe042389582ccd35ab35d65ee95037607200bce7b20e5a2a5758ba38e77d39f9ecd563cba41c3cbe4936da65cc574b3c6dc4825caf68763d14a3ae977d7a87b77239e260231d15015c0f82cd4ae592d4278ba48aadc8baaa2fd95f3e5567bf374460e74b07323a9c35e0d4ae041aaac6238496eb07ba40b72b6b45be13371a3d8a4e950f58c45d11121e7be47269ce9e9010d603990fee0657d7280054c65208cd48d2f2aa71c63b83357fcdcc96675b672910cc998fa70bd9ad8cc01bfbcf6f4f76b7c5f51365ec0399e070dcbc1d1950dd1bca65b307c02e90c25ba12ee5069051200e17511c8688d80162a6f17559bc8fca6b214819cbb32a5756a566eabacf55fa4214657328b341fb9263c3117736d12a8d578cb183773d91532230d15a2b3099e8c1df86719f2bb83a2e6d326a4cfb99da230ce78af7bdf3b2bcde52eb88a319a881b2eed4a4d6d867e1119da68e7b50779154a0cbbb373a729ded21621e9ca96c81e3b0a72de5371a8aeb7c9c9dcf63aa99282afc13bf0e7c8ff82059e16f523a8b887be0fb13bfa64796bdb282f8b18e4372277be7e2a48532714d44ada99fb8e1c74ee29458cb4d2d7b5d841050265d453d28e415a4fbd36ad8051b7771f41f160b7377cb57e5386ff2c90039fa339451dd13dca3a26c14a6b55ba6814aa94fd8d99744477bb2535695bd85f709614b3eb101d0f10d66975498cd09018c57d74f69700d7529b0ebffb2cfc86b43125d7b08bd61155f220fb7678cab38f44cd01c94b6d3c558053df759a4b9b1167a09ba0ebe8821571c6725b48e7c2b7fa46ae9b501ac94b58d5338a04ecf2890031348de7bd2c6d14a59a718b08bbab204b8946e9a4c01818613d2d55da372db846b6aec1e080fe81e2e97c4d55961f18b17b6c5e66422fe14cad3cb348e2e73bbf1a2f1c5809499ab2d10df4e2ffc6568e49b6883737b6abfef6ad54564c042243d71ac616ebbf39720a4eca2a1f507ab2d8f8fd95ec4fa42fffe05ae28a00e5d0bd956c29ee30115f87f8a30534edef99c68aeee25fb1f86de8e7543ebb7675e425fb6dfff1b6f7c1729a89e7adeda0c1bbd04ec851670cb232dcbf424221258e166e67549bb01f9dcd7cf120f3f13091760e0e4b0fb05c00ecbd480dd8854cea2932464d56497b3a65cdc50350ad124916ac695375032b9b3689b1e3afbe5ead5b30370c4d6ec0c22ca236b1e1512d22788bbf72f14b273ae2cb89fe76ce53f5c3555e21179a2e4b854b42f88d40cb4464af16dad33b8224c8bca2f12550bdbae249e50de1226b0c19936b6bd31482c4db491d66a576d019c3eae75dcab5cdcfa393c244ebaa5ed4ddc9c47640179aeb62122439f53f31e220c2179306158a24455aa7bed1dd376d2e81e6f9f980248d8844547bda292b75d9f3d4cc34c005d4d1e801ad6089f94c95fcbb9f19557104009aea96457d6bc9982772caedaf5275148e5e9023a024435fb22e77ba616316efcda5e3091904a69cfa0df4bf972b76ae474bd8863672a76c4177b022821a4977c3a68ac4126eb0a3c0a52574e7c2c53427ca78634c6ca1e4c35942fc753cd2a3f2310f5fe87c80bd599ebc65137705d20362d1c8e46c23b15b963c8dba9b55bf0ec39b7798ed0dc02096de0af5e166e54f9798f04402f47f10a364a920966c563264ae5939f79e971e7f5df4d345b751c20649d4b91c6b8a4ef3a308ea0057168d38825c030c9b0233a3fca3f85e519a23f3a53877211a5e6d18adb31ec70591a3c1e9edb229e5aae1cac8e0353f3fbda49c5dc575dbfc82ced5d3928a4e4f8b592039630c88f0faea5308a33c98481ec7b1d5557ef076186352911b68622b6e11244bdfc8cf2324b995b878a03220ac5bf693141b798b9f40ff41e2af30f1009d2aaa897ea45a8fc180332798663f45e5c29741bcd3e04b2da8531215a87d9683ef1be070fe9f7da4059c64210352400b46ccc07e864afdaf7992ae96a4ed13e14f728124e458e1f9696ec2d9a4c587055c19e4f2d352da8624e78c1c3ff8134ea30d9c1bdf397e31f4522307cdf19c8d3eb11d1afc2440cdcf61af22f5bd431135f794fcf4ff37134d69715ce0c4ad74af501c8a4f91e6442c313d6e3dc200b0fec6e0ba9bead6005f3dfe71d9aa4f76b1a20b58bf4378154d9ddd63f91a88da0b42d4968e9fe76a2ba089605af2e34d9d0be3c1e065b9be60931f3d28fb5b4201a615866110382ff658a7a58ca78515d0f5281735fea50ab28f389c2eba6400d7d1bd3f90537f730c3402e78401da024b8b3483cb3a574a609a88999c67d92f7b0715ac866c08bdf89603658abd0cf51313bb05b45e52ab1bc0fec738f31fe6ee50e6c42522440aa43929d90c53355fb9d5a8f4cc519a59aa8cf1dc221c882e90212c53a2761380ab99ce4ee2741fddc7075908bdc4fcd773f0c75fd970e4ce9d9e9a9a9ab97dde8a35742627c8c1a5e2fddc001fa55acd50da230db29fd3701026e80a9810b27d2336261fd522129849ee0be3af1bfa7965085d94de2fdcb3250adc03f75662f8734270221a4bdd8e24e0fbf00118eeda0d348a89b8707f1bd0fa0ff05de3995cbb048c7d8fc21f4ee73a1e36a1bf7e50ddaa776faa1d4a46ffbea752fcdfe06fd393c478dbeb5f015e9c47993c132154479fbe50370f5bfa3bae97bc73c524aa5303d721e2ba2f8b05d18605229ecf5a4f13fe6590f8ce3040f3db8b29d818e864936030e8e44e1679036b6050c463434c86e959cb0df15f0a43544d4f5b121b8cd224581c68014ac5d1de0034eea4bcd3beae76cc78f70ff9a77858a83b680273d711cbb11a7c2a9a5d1c20e59869f77039cb19143ba910176422c159019fc43c12b3c8d239a52f8af419bb5c7296d664af526617e970b6a5e50aeb1c2d4ceecc880f2a867bbd1b654324d82838243159236466e05d5c1286b8dcefef382c3b447f916b4d65e52f6ced855f824427c58df872c9408f731d14c8f5b92077c0dd8edb1b5119f994fbe90b17669675f42d0cb0f6bd9263c66b433232d538247e4df4d00019421a5df8061f7078212d84853e7341ff1c3dfd31321a58e7165bcec5b3f7b88a0c160e9e25690a1089cee3cb779d308eea4de526e83742fcb3cf386f784e6e6d5ba50f3cea3ec61f87a6a673b6156bc0bff5977d52db7e646c3cab9c52d6233834d86d0a22b4ac2cb7fae784c2719f4abed1006b7b8121424329a30d309a12d86c499a62e5c059ef12f45a49502defd6e45a673551b748bc3270f2426f32fd34da36c738beffeec7b01805bfdf93e8e99b6a495ab9ffdebf92a517af67ce498c2ea2023f1062b9fc954a057c15678c430b20d6f55655f71d6f34c14afbb41748ec5228bc0b20aca4d51bf026e5ec70f980f6adb906c60f0ebdf86e676f7dd3100970f2ea4b3e2234ee27fe8c827f59b88ac2362df2150fcd5bbb8a3f89caf1d0c23c8be56c5051f9a694acab702b6763a7575d0e5dccbc07f0693eb75e3b160b794a4e43c32fd07e10d5247f0f369fa57cb6a04bea81fa3ae5ac51f9778d374d7aef819d4ed9e1a1033b97fbaf513cb4310208aefefe3fd605cfe24b1722a2872e0de7796ee7e17207a66def9319f4dde55ea9a4a63a0ea84b250fe71b74850b3fe6a52d072fb77daad62cc6001da9c9acd246c0df36589602181a7997f15f99031795e3b7d61fc357fb9d88e833e75ec7d8b21aa4332413fd340e418fc9305f7cb05060ea6f10548f060a25fa4e1b2f315d09cea1160bc8d2210abcaef516f6753e1212fd2a9f3746e229c88ad4e3b46d658379a3282e126c1a62430b13eaa71e6ff1a21b7775911183801837fc9431603559a0ae610a727167713a878c7c805d3c53461a7433527de4974a6754f9a86f3fb59176f60409a28e23194f1050e1bfdaafa66a5af91c676932906cb98d538a7821b3b7a7c0f7fdd1014bf367db48ca3fa12d17080fc9a4e89a5ae947b18cd51333cfb1b0e394423f16e53e01874f83f59a93e26d59954ef198c6fc87354501d763f809869424b956737f9d2456dda21add69758c630f91e99cddeb363b1e6a03821064d91963edfa08cd22fb0b54a8623b98dbfd223607587d5e6f7ea014bae4e6a217332b43c582487958f782f566f995c7cd90ddbbe1d7e1e95097dfb261be98cc12dbe931dd5d919196d460125670a593dc5c24c35c729778aa9856f5c8f46548f71394e4c5d3ce7ccc4f45808488f165c05a06df8e618d5726f786fd770af5590d2982f14aeb4c07c83b650319622a01d0992af330a11ba599a9c8daa4f508a1bc7a2854d7f1a8bc5a5e894f90155d8d0309a1678ba97c71765acb83a0274dfefad310ff32e39ff995ff532bd72357f6fe822ff46a66be261cdda7040623408515dda73e42a0eb105333d4b0348274b2d1ea27975f515122d0d9d887e0aac8db67b56268df7335b4008dbe692b527df1f7464c20095bea9ce716d8f1b25106e1d2e9a56e5c173f99d3f48adffb5f12eed2cfb0d51af248499702c12fc7acb975fe2626e0d4fc5078dbb030e2caf6a150a3329f412d7ae67ac47e3328ea098b4ac7006f22f76bb32742dbf7d3a619554fb7086824ead0f9c8cae77e77dd8d56937bcb23d801981e3c4c3deefb3c891df384ac61c9d374b3d7dbabefd3689cdbcd2affab960d93e426b98351e74996972319310b39d8580adfb8ef8fea84e9b60bee0e7c12cefde404fef3db28bff36e67722e258de4ca2d074e8fa8c26b8db5cdec038bd2828d800e366cbf66deb5caabe004000200040007000400090094000480900000800800030004000000810001005f222fa1dbda8e5f2040289e6e665ce74de4e94e2c7ff45ff5dd3c2008398bb65e571b7466f3692b8d71e66deddf634aa4152e016135b7c971da3baf16ce9be64d070629bc958c3b36480875cfd3db8a25a26747ea37777a75ca23a6e3efb2b88dbc6c82e34b2da6334a51bf4ddde47072552423598705afe2826ed32c0000000c0012800600eb0040000000ac1312800600eb000600000094137d803b000200ae15d10da6d4d62ffe6f1473764f7665f5ed0a735c540bfc84f15233b54c7c91f51f707831d1f643b392c124958e866717f6bb739d331900ea0003005786250863d0014f308bb65330177486e23835faf96dcee5d3139f5530c2cb1480d3b3f377b1eaf172631f4edcf1b7d55521b1d1cf45f51e465d0645726d8027d3fac6f66bc1954b05316ff5b96e0d2b1029059cfe52bb7db042c04675c00e12807de364ca142bff25dac86e7ff9ed643eff4c76dc9fe725d32f1f4ec1862c91067551ed58938eba0f9d1730c2ea11ca7b8e3b32b9651fef7ce154817da59129e7534a4a395b01005b5d1e030ebb465b24f9626fae0bba0ddfc9c8df64a850cf58f7b79971bb73bccc4d6ab7e3203330fe95979fd300a1066e9fbead754ca2ca0aca4289cdee0000ee000100802ddc50a9d028f3bef3e42b09ada13287fb5d0062b88612ad044f58c4ec9c09e691f9f40a71b831423c280b2fe97a463db5012a91d146b10dc86bb3ead1077a7df0b53a7cf302d9815c7b18f8c1f3c711487e6da342243ca352d2752c7ccac5ab51234ad3b309c0051236c6a4ce12f754e1c442576abae7c167b358c23aefe2ea3c42e7f263f4626c1c8ef91e208be302fd580f93e0da27043cbf284e719e86aaa8d3117a55a1d0e2b8896cf630a651bb794969e6f0f52f9ce5f391d5eacf33e5c74aa658e9b5800203ccdb3c0b74ec9ff5084d624eb6f7fbea42021555999bbbefcdf237a0e1ef11ec00005e000300699badf09d8178e3cd7933ec582eec9c92e5bff7ee2d23c98e7dd126006ccd393a39023380783e0632e559ea75b5ea5f79cb0a8db78c07491bb6aa5ae883fb1624c240d7834120ce034fe2fde25fe7ea5ab02b50a1f7c634bc800000fd000200ccb1a602b60ee92149f98d4d0e3b74858936dd0df30a5a1bf816f0068ee47b112908377ad1f9bc6d90066266515b21420fc967a77b8d65b455904c866c61901fa5b550c3baa6576c13560d015d3e6f68d4bad2ae3144b1aa6df95a058654b711f32ad0a60b414b0c9277038e9d66255fbfc9a55992ec8cf4815862a3d4963144f4f3d9ca243c4d80952e02f2b60579f4e68d59474cafc49397e30f153235a35b21e780d467888e3a82a0a640dbf7a3f3457a65297fd9b33248ed69b0cdacaf6942230fa74b39785d248f7e2c841f70dcf58095272ce3e7ed12ecf339b43e954e08ca9b63856f2679048f7377a8533ade3657f33e6d1ae1f3cf000000110000005d37fc7b351be38194235f12bd000000041002000150d2df01a8152e2596fab06efb81e7363fc67a1c0720476fb4f22bee61a222fc42ec8a2affa9b911924fcca15ff711f4f978c23f727cc043375874dc0e105bf0cdb7bc7fd9c88f6f06c2500580b0532776f1558054fc406e8782501a63631675a45a1401501fc83da85daf5e7a41830cfcc44dd34e5b35b125dec3781b8037dacc2e189eba9d2327211241e87cf13f9dec2726d7c9cf560c5e87d1bb4d04f5f9fb29095970f20c0c9d7082485f6d8fe44c19740850173c7e3f9b9de094308cca689100b97b60f16bba38f80c0fd1fdcdf875e3dbe3d755ef088e4dd9503ed6bcd204675e376635cd52ead9ada37ae44890bfe6feae6d0291ae7e883d9f43f7f469633fac0f12f48513292e410a1028dc82c811e5338e6f189b4ce510e8c78c75eecccec338becba25738ed411224e2fa7f830c582d4f8bb7f3f237b7fc10236195f13ff7fbf3a080011dae6da8bfb65da6dba0dec9d255dc7d4237d68fb68e611b804b71796bed46fd6cfd62436b9a91469d16819257822f8f037ef16d43a82a888a290129dfa8bc1d876fe21ed1d1fa95728685b210aa25855f82aabc36c4edce30d9d144c22a5c93b33ee2af78d59b043d7516ebe8f69aa90396e2072912e97738a6698aa879df52d5cce1d4880a57eea4df814fa963e321bfb1ecf29c2b4519a73a7672c7e76a213e31a9fb38beaa245a92a1e1d70d76a9498ecdf31edf0dc76a7318469bd6b35e5a2ef27fc3529e3fa3dc9cd19f90210932990b368aa6500965b0fef82081a8cdd9e23418b262effa5df248c7c731424aaa73cc786a1721679a64ff27d2a5db5394ff94eef88b597d7872d41a5b065ee109ee859452c1063085dc48f4f7f8ecd72db1335876edce28959d5392c0daa138285a5f046667dc7dd1c7162b4c69147f5ca4dde97e37a2a34bc99b7eea22df1492637df379c19eb252f15f4d417fb1e7d565025b105d3adf23b12dcd8431b1dee3cda145c5ed79f6193ec635b4269ef7596110238b350fadc50bf4c4bf599fbe154ee8620b62d6860743991e72d185f663a72ede3139176d407e0346c8d445f2f3f97fadf031bad42eb30394ede3aae72b92ee3a82032b263c73c42f821a164efc3ac3230c8eba2f405c57fdc20b4a59023fa8dd34589ec5ec4094d54d0f8a371ab33372ee6f34f362bc29aefd94842d235817465db2a8e14e98136d2a63535adcd29fd8e5ecf4bdbc2581e60fe11987104af996bd2e43cf416b10d663109339bc3e99fae4ecdb9af658d5115d6232da266a6d83e761e7608a29f565b6035d06b713a1ee0de0cd93e342c58e1f6a24fdc3ff0c3daad7687a5330bb32a31efdf31eacf5b9e97179bb2a952a99baca2e1edc45110ce05734160d9bd11db7e4b5a2764bcf54ccb6be9ad6c735d46d7c77262df86cb93406f8490c8cf5a9c99856e4780e6464a21f07484611c3c6712567f930d6a8f7828c36f74a449feb8a888dad7d0e9a174d6b7a64cca5fd6ca9626deb1add0e4b2d647c5f0ec1ac0160a62c0a0bee3245087972450063b25cbdb831c869c4ae6b3099938e85039e00bb733dcebbf04b36266a7a125466dfae43dec2ae89cf52632a842c979959f7207730ea4c201b80843c0d37a980406431580cdd6c1cf0564c5cd3e7398c3f209d439faddd4ef2e2d89b09c981c58a51c80b9257f1064c029979665d4606b75d20947d4c2eeb48935efeb107ed569c25b32a8ff52ba551046ba6b8990e587e27eb735c0257793b4a7874bdd505de23c61d86cc63124754344d8c6e59096372451ff74c900989abece67bd2b84a3b6cd937297a7f2c4a7b6974c2ddfe2bf974df47f823034bc7d21c6ee5fc824f36107953112980e60f8e31254c5c183f6fc16abdc64820833a03401aae04ea84a2a7e01ed3e59c90b239cc647f1fe6b3c404aa7b3002aa25c2e8719f9deb6ec24288988ce4665a6960a92bce395291b686199662c9592cbee84cf25ff1e5b46cf4f156b92bc289ed8bc9f9b4dcdad324e91516b141e244f8204f6245bb91c649f5b6ed1e31c7ccd1356539408b43ea171ad8f77c2c5fed34c4a524e8866e23196b879e6c02ae045c78e4de518d42804959677389c4bec9b2693e4ce858815290672e90854ea63729c1e6bf32d95b1e5f2fd3897d21e3d31a26e842412e59023d4c290164891b4a530995e896bde34d0c7bf69e7c55276e9ed83f3453e63c9829c1240d9a122741e091d8dffcc619128feb072d3137c7cbf631dee3fedc0bf6ef07a595d7393d6e4d7ca6bc7420a64df7109851a9b72aca159f169e6f8386682dc487cb1ba198fcdbfb6ae0f42bd3e2b806e17423147114d877fac07839b4b65e5c83853fc53645479cf79720c46d45c22ea0f3b76058cc94dbbe0f012d4e20d3889c71d36a73aaaebdceba93df4f204c4d93b6a9916f9588c2819b60aa05563f7ef9873b5aee0d760416084f6cb206bd7362a8159cedfa2578f9681a5ec4eb018abd98cb96a22be5a3c08ba8bb3fbadecf88cbd324fb83851ca3be5b3ba3dde3e9809c941079d5d9672882bba88ba008f4a94a95e1d649359c9df3e747c5d1a4a8a0a9c90c4b5214efdcabdb0b7f4bf1a8e90f81f6147eba1cdc5153ba9b1ff0b3b225b4fd9bd9134b662c6f6d35145a614cc48c24ca47f7f9688d3847d9f18863eacf7b2436571490098b614c82b261a1a4cec33fa5e3c3ae17d9c6f0ae2318c98035864c94582366a9200dd552f42620c6414c87e5b97f4add114624aff2e76a0ebfc79dfde97ecea8228e211401e4d83218a2d615986c972f6e577f4d1162d5e51f9b10ecd9f531ed4fd4b33cbbdc58145c509487adf5c3f676fa35201efaafc91cd4d726da86ef71ad44f531e9d517a06fd9adda9b4b340605463a8289b095bda6fd9bf1cdb8ea55e3499e26baf7bce0fdc8f3fdae9a7f8b110829cca50b9093154c44e633c2197aee802ac80f2a0b1b2a6e87d6febb523cc4035c5e10b220386e5e272e3e3fa1db0e2baed9fa4ec43c2f4798d1b600fb8da85bc96f72608462b14ea86e1e508de1fe4a1c94e56c7f026725a293d42f53c55d719de5ac7386af3ee1ea8085759c8d149fdf033e0e1ff6b16d4d188b89024aa7fc18cc41fbcbb59d7a8af6333526075132ec72a60280bcb876f2671288956c17a5158941c66ca34eb93bd2f193d77724992b610617444908340c24c451f0f26689896a9a1760de542186dace4aec5b173a687ae34d9ba2817d2da4bab544fe73db93160571728873d94d57885819ef9ae4955aced7444b67386d30798f3a86b68e4ff56538f1431b57b70074b2b088da7dbb3089186e39a9b2393f0bacbb82954d4516ca99e7a4e6c010b2bba17bdde48043173ddf3bec0c935aaab35ae360374ace8bbce4cf60d03fc06dab1d297d4950e66978670acff89224f2a3baee81c94610ed398e0d29cb7370f4a7c40cffa068f1e8d7545c963035f5693ba151ede0cf3afef4f1c045abaf08272bd6f02fb914322d27a3479042c245d1ee2c9db340990cdefb0aec4f37ddad497ca29220ce6428c7ebe36a3a668d5e1f959faab13d14484e7acf9779cf55c965482bfa10ff3bdc7d90bbdea12adb073f591927fda13ce95a614e5b5b6a1e7a1722895e668c94f095fadda48a2b49efe5c41f8788471932a7bda4bd63e677244626ab7c895a69cb0bd2bd4d4d93b0de64f537a927820f9eda2a38e28b0d81d814c5fb1e69c68b7e2fece139577e939babfdf0a881241f02ccc7d29de1e9a78427639eafc7aad670888379c5cc28c33c6f072aa93a86731c8c7409fb201b3c7957b5bd35dc02f40e1f1844a9379753496fb0fa00d102fdc7019bf78dcbf4586334a8dc7d5f188fa8354db92df08c4380bf272764988a8284a48eab06f8deeb3163227b0e9cfe5c2ef24a7b0d5475d9708279d067ef926b49d43b7192a91c510ee394312cbf501d18865c9ac649e61d6e54ef4b75a20c18081e785c707c1cb5d23a74802079308eae905ce20a13d25c868ca0b7f5750ca11e325b6680f244671be0789b97ab21727b38bf01edc598f39be897169de313e4d46622339ca16f198badaee292c061ea8a8227c6db63093b2593c90af991455aa184a15e6aac30cbeb230317e04266ba79d1a40c1d041957d7feb69d246656f9cbd5c174bce124e0c4b121b8b384b841a3a6a5e342a4d2557c8503703fcb29470ad8b800e98ff7a70505112cd8e552461404e1d6e3995e4e02168e8b3db4aae71b65191c19fe2f4db12bdd50a4ade971ebfd0c987afe8b03ddd51d10fcd8e20e4a678058a4d9c7e6ce184786cf0757845420299708c3de12ba4985e51e0d8e8b1c0c781ddf71f8ef449a2adf7a2eb63e452fc1c0edb33e6187c067123460123c6caa9a493141f07fa6022f32d8c4d935690915c6a1e780a286b080234cd5c06ac1f508577abd1b6158e41392279c1eef61642101d5c77d7659e5c6d6e034fc4a44ecd0822246828352481d2871862535ef9c6245e995f520b0af438b9f285c986137756170047b3d9dfea933277fd021049e930fc24f910244bae8cae03694561bcedf886f5025ab69418021da0656a877f6b9f1576723925303f6b9aefc055413dcd67eb7cd40e37566b43d53e78a1a709ededee942c26cbcb956868b2a2005fe600607b8963b045a929252edfeccf12d62ab298f3b2c11557f124757d2041f85f018b662fc1b424663260245379c36c069c5a60d6cb579ae6cc18f7705b03be3d3dac7b8cb9e70c4aa3b76ae32bc402fb725a89da71b61021fd396216a2f2309a47ba86fbd398e861be2ade39df2d8f11d8fcea061db89b5482f883433b5260dd9c1927df27c4fb1ce65e64f10c2abdba1cedb96f4a2080ff2ff139d7e2843684b03e3382dfd1101294adb37c19ad7d12038632708f81726351446163a63a48827d230b131691db0f39c7b8a41211ed94294bbec788b4b3f334c7ab31f60f82c1855239d88330eb6571bd7fb14b67f26b7e8f482d12418e12c03d9a4a9e056f032139abf0d22861dde72090a436cc4aca34448ac8becb7895e03d21d1746d7cae56295b986e3321766aceb2da918192367c6fb50c14b1e58d4ef63b6ef1eb89cda86dfa43db967a48bbd663c61779c38f06c55c644cf7c45e2bb384f914106a7af0fc981658dea7949a5a29e79ee8443333c836c4ed0f4d70b0001ba71280fe5693b6e4099502023e027aab7eb72fa56cf99ae45bc53030f19e19947614d2f5575ebff1d8774490b3e24d8d777b3914d7d12a5cab8d083c2814d96b0f72c5cccd978b321426951fc39c83be3352ac409a928a7f72ea8c30276ca7caf878c650aa9c5b6016efbdd935c5cbe01d85550958f5d3eb993a8e4bdfae2bbff58ac18b69c1858f9fe0fc1168a5f2a5874cae5f58341d5ea5110674106a9523f9e9a87928b2cb398d13656f90a80ded874c0bece84d7b9fcdc1937360e1f5ae732fe2bf6f9e57ec891a4c0840d11424a41098e567ab86f2266aa7620fa1148915d6675fc3ef724ec0249290ed734a8361c836e6953d99e05ad77e2698c90fd74a39874745bea9f0587901657fe0e463857a8e979aa0f49daf612fe8ce56f9faf682656ce3097527ae42c18ad4b9090cc04a27ce67b1d89a738e87668dfd54643079abd36c82682630446579fa42e3034a3d01d7a5ca81814fccc1f992bc2fc6f985c389dcb3ba599737d5991675d198d72326707d8845baba4770bd0936ff93c291cbd9b9872956cb7a5a90d07d51a7d9a2f7e39ef003f60f11635f72bd17665bb18530cc7040087000500f60056000000dc007580d8000e80d40006008e51e51b6e9eb125e2deee6850eca985ed88e7b6eb2b97f9c16a15787c45edc75492041c8cfd2113194186a3afd9bad28812aa52c07df34d54cbe89325e9e08f491677bea68cbcbbdb3b573a60cba5e9ea4661c535570f44c3ff8ab486945db6894a4bac0026045e463a865e96496071fa6883df210d0b4a2cf6449fee342362bf0e8174bf318bdef0724c92d033f81e629fa6e8a15cb3b587b5cae9b1651cf0ffc1d579e7e293b20737798161ed778d727201a47bdba188ddf2d8a1e31fed834af46b4671efbb6a3bae3e3c4e3c3b6708007580040001008802758004000300800204807c02008008000300080000004b000200862801b0d3e604850c538a017c34626208ea14a7ca710de4731bb668c1fa37e7665faec0104cb33f2ab6108d7d024000c98cad2ecefee544bb2685b39e45f51f75e62fb3dd09f0000800030030000000740001005ff1a5b7b3b5c0b91fcb048c2af7fc89ac063fe666bf7b6fac1b300b7db19b93dc09679b019d3d5f7360df736f492f11bafba47c749d06954a4c66168dee500bf61757a6003adb11cc1a6149501c71e5df404a452c6097fea5dfc363a9d56f6084e20e3862e39f89f4658d0625d8020207000100fb7c7f00230001003bae4d0bacf1336230a1419493da0c5a8bd22ae2c6705800c9b71f4fe9dd3d00cc0001001ded38da081e9e09a9d8943fe8a3ed88ce9fa1ec89ecfe34d14342e040af2911269aeecace19ad9421afa08b8a7fa399ef57c23a98d97d94a5ece2c318fa43091d5431f54754384d080c503279a478994fdbe45d2143925dbaf9623ceebc336d12e679a0c8155a0faf688384dffda3ca9a92a329090c758a79b2deb274d89e39a7d0d5f4ecf208f86010b5b81fd92b7ab54224e10e4c1bb2fc81f382d137eff2d0408699bb342df55fa3660fb283d413813b91157298c04b33967e361b364f8f092cea4b843a3c7aaf000100e66d7e9d69fd203ec5ff018d5be224dbb468847f489a6ab3fe2e5563e493fae0d9ea9d647ff400d539b2f679b2422d2fde974d2522e97b1c3b3fe99e13aaa3b9e1b9d05567b93cf6952c7b1cd939bac3457666c17743cfa8d9817ec6af89512f6b934cd4d82b180a5414bf7c4e279d33759ff1a1fae4bd631d8f036553976ea87a650652c3dc16f76ba8842e6781ed9a6b3fb6e0b92ce44a444230a0fee749424735e94748dca8b22902da00080075800400020004007580"], 0x71ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x80400c1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) r10 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000040)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r12 = syz_open_dev$sndpcmp(&(0x7f0000001100), 0x0, 0x80525) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) writev(r12, &(0x7f0000001140)=[{&(0x7f0000001180)="580000001400192340834b80040d8c", 0xf}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0x0, 0x20000000000000b}]}) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1000000000000257}) 7.822359266s ago: executing program 0 (id=4731): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x727140, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000480)={[{@metacopy_on}, {@redirect_dir_nofollow}]}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000240)) (async) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000240)) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000ffa000/0x4000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000ffa000/0x4000)=nil}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x63d, 0x6, 0x8, 0x1, 0x953}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x63d, 0x6, 0x8, 0x1, 0x953}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r1, @ANYBLOB="14000200fe8000000000000000000000000000bb"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffe54) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) (async) bind$inet6(r6, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001400b59500000000000000000a404580", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000bb0800080048060000"], 0x34}}, 0x0) 6.380447723s ago: executing program 3 (id=4734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0xff01) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000002240), 0x0, 0x240000c0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xfad4d87013c8c761, 0x1a7) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xb) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000891}, 0x20044001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0xc4, r7, 0x200, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "42e0040df826ccb4cc4b1ede00009f6c"}]}, @NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "621a48bafa5d45a9880334db236f0c2f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5a15c21ad65b88080ebce2610f499463bc337b23b6e48c4e320c1f688b49ab39"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b87b66d02623464b8534c77c40382a640f4a163bcb66eee00a876b70c43e5860"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5ff59839064a36de9d6c297c7bc341c47ebb2a20aa0c2d0a34f2f1d05726adc9"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40080}, 0x200440c4) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0x6}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xfffffff000000003, 0x0, 0x4, 0x0, 0x1000000000000000, 0x1c0000000000, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x2, 0xa, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x9, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x1, 0x10000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0x83, 0x104, 0x7, 0xfffc, 0x7785, 0x0, 0x4000000000000004, 0x4, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x80000002000, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x10001, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x5, 0x100000000000, 0xffffffffffffffff, 0x3, 0x200007, 0x0, 0x7, 0xc0c3, 0x0, 0x4, 0x80000000, 0x2000000000000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffefffff, 0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$nl_route(0x10, 0x3, 0x0) 6.326175405s ago: executing program 0 (id=4735): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) r2 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000200)={0x4b}) 6.320241149s ago: executing program 1 (id=4736): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x10) close_range(r0, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f00000000c0)=""/64, 0x3f) 6.160937961s ago: executing program 0 (id=4737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_LABELS_MASK={0x10, 0x17, [0x47, 0x4, 0x7]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x6c}}, 0x4000040) 6.102422475s ago: executing program 1 (id=4738): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0xb0c1f, 0x0, 0x0, 0x3, 0x0, 0x2}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) (async) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 5.504207642s ago: executing program 1 (id=4739): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x2e, 0x0, &(0x7f0000000280)) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x27) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000580)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x3}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r4, 0x80796c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x10}, @device_a, @broadcast, @broadcast, {0x7}, @device_b, @void, @value=@ver_80211n={0x0, 0x6, 0x3, 0x2, 0x0, 0x3, 0x1}}}, 0x22) 5.461060133s ago: executing program 0 (id=4740): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x5a8, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x608) syz_usb_connect$uac2(0x1, 0xf7, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0xfb, 0x9, 0x9, 0x8, 0x6}, 0x2e, &(0x7f0000000780)={0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x0, 0x1, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "4dd65a935461524992c9001a0c7ee0a2"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x5}]}, 0x7, [{0xaa, &(0x7f00000007c0)=@string={0xaa, 0x3, "29a4d9c2d42738f950287cdc84a6226c222883ac8fc6dd2e669d022e37220b61102ab37b97b8ebbfd24351d2a527683066c983888ac26d90fe481dd27ca7083cbce946fdb7ea468f9ea15c84e8fe859059d28188c85e10689c5d011d092416e8b22acbf085e5fe936d2a992bfb53f9c8dbc208ad5b68ca2ff6f6ec75297a2eedf745e24a239d7a6c9c4cc77db681455f72e9078d8b31ed9ef9b61de3c67688ec6d04a87ad44b1df7"}}, {0xa, &(0x7f0000000880)=@string={0xa, 0x3, "4464c5bcd2b3911c"}}, {0x60, &(0x7f00000008c0)=@string={0x60, 0x3, "1ae6ab0c94fe5e6ed63af8093db9b95499c0a191806468cc32d1bf5ed461c9e4ce95cecda15b45808b01e8a31f28125ea1e204a33db83cbb859e949914f191b2ae99b0574b589bad0f64e1b979ff1e96e13e8b9f09018772c74892d74886"}}, {0x65, &(0x7f0000000940)=@string={0x65, 0x3, "4617c0dee1425361d920904442cb40eada89dc69d17f52ebdcdaddab0a6369a8b87d902ba2ec8d1586a332fa7e3666319f6bfd14e047393477f6aa9d9c2b4d3fe648b72faf9c9ddfc33c4b10f82f4a4d2f38711e12316df1410aa794d2c66057295182"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x412}}, {0x19, &(0x7f0000000a40)=ANY=[@ANYBLOB="1910004c07cd89643ec63519ba3fade81a97b3d5dcf2e8b74a"]}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r5, &(0x7f0000000040), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5.259465962s ago: executing program 3 (id=4741): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, &(0x7f0000000140)=0x0) r2 = timerfd_create(0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x801, r2, &(0x7f0000000080)="495d4df857bc", 0x6, 0x4}, 0x0, 0x0]) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000020000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000000000000000000000000000000000010000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_getscheduler(r3) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x9b03, 0xfffffffe, 0xfe, 0x7, 0x13, 0x1, 0x6, 0xfa, 0x55, 0x1, 0x40, 0xfff8, 0x80, 0x7, 0x80, [0x6, 0x8e]}}) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r6, 0x40095505, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x108, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r7, &(0x7f0000000540), &(0x7f0000000040)=""/84}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffda) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) write(r8, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800) 4.540407663s ago: executing program 2 (id=4743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f000054a000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x737c03, 0x82) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000023c0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000240)}, {&(0x7f0000002440)=""/211, 0xd3}, {&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f0000000840)=""/81, 0x51}, {&(0x7f00000008c0)=""/233, 0xe9}, {&(0x7f00000009c0)=""/10, 0xa}], 0xa, &(0x7f0000001080)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/62, 0x3e}, {&(0x7f00000021c0)=""/133, 0x85}, {&(0x7f0000002280)=""/162, 0xa2}], 0x4, &(0x7f0000002380)=""/37, 0x25}, 0x80000001}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000320000/0x2000)=nil, 0x2000, 0x27ffff7, 0x10, r5, 0x2000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x168) 4.397787492s ago: executing program 1 (id=4744): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7e9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb8, 0x1}, 0x20) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d0003000000008000000000000000000000070000000000000008fd000000004000050000000000000002"], 0x78) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0xb, 0x8, 0x1, 0x40, 0x322}}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x4, 0x3, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x5, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, {[@timestamp_addr={0x44, 0x44, 0xa2, 0x1, 0xe, [{@private=0xa010101, 0x8}, {@loopback, 0x1d5d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x9}, {@multicast1, 0x8}, {@multicast1, 0x4}, {@multicast1, 0x2}]}, @rr={0x7, 0x27, 0xa0, [@empty, @private=0xa010100, @multicast1, @empty, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100]}, @generic={0x0, 0x4, "9945"}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7}, 0x94) 4.378622707s ago: executing program 3 (id=4745): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x242, 0x102) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 3.487346177s ago: executing program 4 (id=4748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000840000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.262205177s ago: executing program 4 (id=4749): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="83dde77f00f66304fb89af51250fe1916c99862aa3b7944c871da1064b1efe2f0975fe2a00cb1a4c8fcac14e08e0d8cacae9ad1f6341d483bfdc887852027167ec523d179b58a833a1bbf3cbfca910a3265c65864116fa1c108d2307971ef2fce7f495eaf0184a443c9d9f0523c3127e4186bed37455888d883b0800000000000000716b20849b4936c1c8eff741488c2f2b5d0c9aa21b5d1ae0261965ec3a1036c233b299cc73e4000000000000", 0xae}, {&(0x7f00000001c0)=' ', 0x1}, {&(0x7f0000000040)="180df8fd", 0x4}], 0x3}}], 0x1, 0x4400c800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.261978938s ago: executing program 4 (id=4750): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x161400, 0x128) ioperm(0x0, 0x6, 0x7) r0 = socket(0x2a, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.546159059s ago: executing program 4 (id=4751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0xff01) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000002240), 0x0, 0x240000c0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xfad4d87013c8c761, 0x1a7) write$binfmt_script(r6, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000891}, 0x20044001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0xc4, r7, 0x200, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "42e0040df826ccb4cc4b1ede00009f6c"}]}, @NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "621a48bafa5d45a9880334db236f0c2f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5a15c21ad65b88080ebce2610f499463bc337b23b6e48c4e320c1f688b49ab39"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b87b66d02623464b8534c77c40382a640f4a163bcb66eee00a876b70c43e5860"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5ff59839064a36de9d6c297c7bc341c47ebb2a20aa0c2d0a34f2f1d05726adc9"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40080}, 0x200440c4) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0x6}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xfffffff000000003, 0x0, 0x4, 0x0, 0x1000000000000000, 0x1c0000000000, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x2, 0xa, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x9, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x1, 0x10000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0x83, 0x104, 0x7, 0xfffc, 0x7785, 0x0, 0x4000000000000004, 0x4, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x80000002000, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x10001, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x5, 0x100000000000, 0xffffffffffffffff, 0x3, 0x200007, 0x0, 0x7, 0xc0c3, 0x0, 0x4, 0x80000000, 0x2000000000000000, 0x0, 0x0, 0x1, 0x2, 0xffffffffffefffff, 0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$nl_route(0x10, 0x3, 0x0) 1.485990014s ago: executing program 4 (id=4752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r3 = syz_io_uring_complete(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 1.342342356s ago: executing program 4 (id=4753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0800000000000000e100000000000000e000170200000000000000000b000000000004d500000000"], 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x95) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100"/105], 0x190) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150004000000fed270c70f2dd24e189a32d422c267df4a0943a04baa6f155e6b07545b8be12e91f5d5090799587727c29d6a1c2a13be0b"], 0x44}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x3, 0x8}, {0x6, 0x60, 0x6, 0xffffffff}]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xe, 0x17, 0x100, &(0x7f0000000840)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc0692548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e985c199d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b3060000000dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56551, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x9, 0x80, 0x1, 0xffffffff, 0x91b1}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x10001, 0xfffffffa}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x0) 1.293233569s ago: executing program 0 (id=4754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x59629}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bond={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc, 0x8, 0x0, 0x1, [@remote, @dev={0xac, 0x14, 0x14, 0x38}]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) 1.186755394s ago: executing program 3 (id=4755): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, &(0x7f0000000140)=0x0) r2 = timerfd_create(0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x801, r2, &(0x7f0000000080)="495d4df857bc", 0x6, 0x4}, 0x0, 0x0]) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000020000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000000000000000000000000000000000010000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_getscheduler(r3) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x9b03, 0xfffffffe, 0xfe, 0x7, 0x13, 0x1, 0x6, 0xfa, 0x55, 0x1, 0x40, 0xfff8, 0x80, 0x7, 0x80, [0x6, 0x8e]}}) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r6, 0x40095505, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x108, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r7, &(0x7f0000000540), &(0x7f0000000040)=""/84}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xffda) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) write(r8, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x800) 1.164766383s ago: executing program 1 (id=4756): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x474c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x536, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000400), 0x0, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@polexpire={0x23c, 0x1b, 0x4, 0x70bd2a, 0x25dfdbfe, {{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0xc55, 0x4e21, 0xdcc, 0xa, 0x80, 0x100, 0x2c}, {0xf6, 0x9, 0x5, 0x8000000000000001, 0x8, 0x4, 0xd9, 0x40}, {0x4, 0x3ff, 0x8, 0x8}, 0x3, 0x6e6bbe, 0x1, 0x1, 0x1, 0x1}, 0x9}, [@coaddr={0x14, 0xe, @in6=@private2}, @extra_flags={0x8, 0x18, 0xac}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@broadcast, 0x0, 0x2}}, @policy_type={0xa, 0x10, {0x1}}, @tfcpad={0x8, 0x16, 0x9}, @algo_auth={0xcb, 0x1, {{'blake2b-384\x00'}, 0x418, "4c407e0a1d5fff91b555cb6a07be3154a8865d34c64507a4204b2b98cf5e39bb6aa80b2afb1d55341de5be98381089c4721327d818483fb069f2dee125972e5168d5d15e2da3d9aa4e004d6a3a570b7741dfadb9af8beb1810126aea9eed2ae339efb834df68b8a8e8a3b0bc56048d05fad94454d20e706edf7017196a36e2b2ef5fec"}}, @mark={0xc, 0x15, {0x35075c}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2c, 0x70bd2a, 0x70bd2b, 0x70bd2d, 0xffffff1c, [0xff, 0x3, 0x9, 0xffffffff]}}, @srcaddr={0x14, 0xd, @in6=@empty}, @etimer_thresh={0x8, 0xc, 0x1ff}]}, 0x23c}}, 0x844) r5 = socket(0x1a, 0xa, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="b9ff033189442602000000f086dd6664203d1d283bbf6692e02b6ccc414bd26f8f226c5672c97b72ecd00df3fd0f5d05c4647c9ec1fb", 0x0, 0x64, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012009761e74f00000000000080000000"], 0x26}}, 0x0) 430.355158ms ago: executing program 2 (id=4757): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) (async) io_setup(0x1, &(0x7f0000000300)=0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 64) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 133.387844ms ago: executing program 2 (id=4758): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0xffff, 0x0, 0x4, 0x7fff0001}, {0xfffd, 0x4, 0x29, 0x3}, {0xb, 0x3, 0x4, 0x3}, {0x4, 0x84, 0x36, 0x200df}, {0x2, 0x6, 0x1}, {0x100, 0x6, 0x49, 0x4}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0xffff, 0x0, 0x4, 0x7fff0001}, {0xfffd, 0x4, 0x29, 0x3}, {0xb, 0x3, 0x4, 0x3}, {0x4, 0x84, 0x36, 0x200df}, {0x2, 0x6, 0x1}, {0x100, 0x6, 0x49, 0x4}]}) fanotify_init(0x200, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x2, 0x1, 0x4, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x2, 0x1, 0x4, 0x7fff0000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) syz_open_dev$vim2m(0x0, 0x42e, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) (async) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102377, 0x18fe9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x240008c5) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="620e0066732e686173683a69702c706f727400"]) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000300)={0x2, 0xfffffffffffffff8, 0x86, &(0x7f0000000200)=""/134}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000300)={0x2, 0xfffffffffffffff8, 0x86, &(0x7f0000000200)=""/134}) 0s ago: executing program 0 (id=4759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x100000000000000}, 0x48) kernel console output (not intermixed with test programs): 19138] usb 1-1: USB disconnect, device number 53 [ 1188.272919][T23052] syzkaller1: entered promiscuous mode [ 1188.282102][T23052] syzkaller1: entered allmulticast mode [ 1188.311355][ T5343] rc_core: IR keymap rc-imon-pad not found [ 1188.325834][ T5343] Registered IR keymap rc-empty [ 1188.352360][ T5343] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1188.372018][ T5343] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1188.442719][ T5343] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1188.455459][ T5343] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input117 [ 1188.474251][ T5343] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:36> initialized [ 1188.574394][T18895] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1189.030322][ T5799] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1189.162727][T23063] lo speed is unknown, defaulting to 1000 [ 1189.489077][ T5343] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1189.531483][ T5954] net_ratelimit: 18 callbacks suppressed [ 1189.531503][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1189.581535][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1189.588829][T19137] usb 4-1: USB disconnect, device number 36 [ 1189.657627][ T5343] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1189.660007][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1189.686613][ T5343] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1189.703536][ T5799] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1189.713882][ T5799] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1189.715471][ T5343] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1189.748729][ T5799] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1189.763058][ T5799] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1189.766958][ T5343] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1189.779953][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1189.793209][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1189.800218][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.808844][ T5799] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1189.819549][ T5343] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1189.838427][ T5799] usb 2-1: string descriptor 0 read error: -22 [ 1189.847460][ T5799] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1189.866337][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.900890][ T5799] usb 2-1: config 0 descriptor?? [ 1189.906913][T23060] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1189.915064][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1189.936224][ T5799] hub 2-1:0.0: bad descriptor, ignoring hub [ 1189.949114][ T5799] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1189.975674][ T5799] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input118 [ 1190.030463][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1190.673327][T23068] fuse: Bad value for 'fd' [ 1190.713603][T15718] Bluetooth: hci5: unexpected event for opcode 0x201c [ 1190.735397][ T5343] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1190.760677][ T5343] usb 1-1: USB disconnect, device number 54 [ 1190.774001][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1190.890367][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1191.011493][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1191.138535][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1191.195403][T23076] netlink: 'syz.4.4299': attribute type 11 has an invalid length. [ 1191.214772][ T5799] usb 2-1: USB disconnect, device number 19 [ 1191.257046][T18895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1191.291189][T18895] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1191.315422][T18895] usb 3-1: can't read configurations, error -71 [ 1192.200277][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1192.495190][T23089] random: crng reseeded on system resumption [ 1194.072416][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4304'. [ 1195.313431][T23108] ubi: mtd0 is already attached to ubi16 [ 1195.411411][T15718] Bluetooth: Frame is too long (len 12, expected len 4) [ 1195.821961][T22852] net_ratelimit: 6 callbacks suppressed [ 1195.821981][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1195.963695][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1195.991480][ T5710] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1196.133156][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1196.285115][ T5710] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1196.336337][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1196.342237][ T5710] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1196.344077][ T10] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1196.353401][ T5710] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1196.396131][ T5710] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1196.411065][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.438869][ T5710] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.490815][ T5343] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1196.500266][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1196.815779][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1196.819076][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1197.304330][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.321187][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1197.351964][ T10] usb 3-1: config 0 descriptor?? [ 1197.375899][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1197.430403][T18895] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1197.451899][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1197.454504][ T5710] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1197.465415][ T5343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.473021][ T5710] usb 5-1: USB disconnect, device number 81 [ 1197.491351][ T5343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.504515][ T5343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1197.526247][ T5343] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1197.552843][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.572876][ T5343] usb 1-1: config 0 descriptor?? [ 1197.590678][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1197.599855][T18895] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 1197.609563][T18895] usb 2-1: config 0 has no interface number 0 [ 1197.616041][T18895] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1197.627356][T18895] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1197.638009][T18895] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 53793, setting to 64 [ 1197.678387][T18895] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1197.687672][T18895] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1197.696130][T18895] usb 2-1: Product: syz [ 1197.700484][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1197.707793][T18895] usb 2-1: Manufacturer: syz [ 1197.712855][T18895] usb 2-1: SerialNumber: syz [ 1197.730061][T18895] usb 2-1: config 0 descriptor?? [ 1197.741611][T23133] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1197.765245][T18895] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1197.779214][T18895] xpad 2-1:0.237: probe with driver xpad failed with error -90 [ 1197.787226][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1197.806890][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1198.386050][ T5343] usbhid 1-1:0.0: can't add hid device: -71 [ 1198.406553][ T5343] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1198.419730][ T10] usb 2-1: USB disconnect, device number 20 [ 1198.445593][ T5343] usb 1-1: USB disconnect, device number 55 [ 1199.143131][T23157] loop5: detected capacity change from 0 to 4095 [ 1199.211132][T23158] random: crng reseeded on system resumption [ 1199.693186][ T5710] usb 3-1: USB disconnect, device number 69 [ 1199.715899][T23159] Context (ID=0x0) not attached to queue pair (handle=0x4d2:0x0) [ 1200.390484][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1200.409601][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1200.706185][ T5710] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1200.735120][T23181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23181 comm=syz.4.4322 [ 1200.750091][ T5343] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1200.860308][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 1200.872996][ T5710] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.894072][T13507] net_ratelimit: 20 callbacks suppressed [ 1200.894089][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1200.895578][ T5710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1200.914173][ T5710] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1200.921734][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.929284][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.939616][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.962401][ T5710] usb 4-1: config 0 descriptor?? [ 1200.981761][ T5343] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1201.010288][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1201.016094][ T5343] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1201.042127][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.071203][ T5343] usb 2-1: config 0 descriptor?? [ 1201.133690][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1201.251787][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1201.380318][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1201.389293][ T5710] hid_parser_main: 30 callbacks suppressed [ 1201.389314][ T5710] mcp2221 0003:04D8:00DD.003B: unknown main item tag 0x0 [ 1201.410970][ T5710] mcp2221 0003:04D8:00DD.003B: unknown main item tag 0x0 [ 1201.422155][ T5710] mcp2221 0003:04D8:00DD.003B: unknown main item tag 0x0 [ 1201.444880][ T5710] mcp2221 0003:04D8:00DD.003B: unknown main item tag 0x0 [ 1201.459424][ T5710] mcp2221 0003:04D8:00DD.003B: unknown main item tag 0x0 [ 1201.487605][ T5710] mcp2221 0003:04D8:00DD.003B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1201.511469][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1201.533034][ T5343] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1201.583719][ C1] usb 4-1: input irq status -75 received [ 1201.630303][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1201.670482][ T5711] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1201.741011][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1201.772717][ T5343] usb 2-1: USB disconnect, device number 21 [ 1201.830352][ T5711] usb 1-1: Using ep0 maxpacket: 8 [ 1201.837614][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1201.853783][T23170] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1201.871513][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1201.883465][ T5711] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 1201.898570][ T5711] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.919968][ T5711] usb 1-1: config 7 has no interface number 0 [ 1201.934923][T23170] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1201.954079][ T5711] usb 1-1: config 7 interface 58 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1201.980334][ T5711] usb 1-1: config 7 interface 58 has no altsetting 0 [ 1201.988052][T23170] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1202.000757][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1202.004406][ T5711] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 1202.019865][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.035929][ T5711] usb 1-1: Product: syz [ 1202.042615][ T5711] usb 1-1: Manufacturer: syz [ 1202.052845][ T5711] usb 1-1: SerialNumber: syz [ 1202.073230][T23170] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1202.172159][ T5710] usb 4-1: USB disconnect, device number 37 [ 1202.279596][ T5711] usb 1-1: USB disconnect, device number 56 [ 1202.308838][T23196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1202.322688][T23196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1202.590346][ T5343] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1202.720257][ T5343] usb 5-1: device descriptor read/64, error -71 [ 1202.971363][ T5343] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1203.012867][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1203.171298][ T5343] usb 5-1: device descriptor read/64, error -71 [ 1203.210353][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1203.231137][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1203.252209][ T10] usb 4-1: config 0 has no interface number 0 [ 1203.268226][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1203.287743][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1203.314817][ T5343] usb usb5-port1: attempt power cycle [ 1203.357269][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1203.477192][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1203.525067][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1203.559015][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.638702][ T10] usb 4-1: config 0 descriptor?? [ 1203.772539][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1203.800542][ T5343] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1203.900743][ T5343] usb 5-1: device descriptor read/8, error -71 [ 1204.190741][ T5343] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1204.268073][ T10] usb 4-1: USB disconnect, device number 38 [ 1204.292660][ T5343] usb 5-1: device descriptor read/8, error -71 [ 1204.367691][T23209] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1204.534150][ T5343] usb usb5-port1: unable to enumerate USB device [ 1204.574398][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1205.350299][ T10] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 1205.533471][ T10] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.655207][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1205.761335][ T10] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.823993][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1205.913730][ T10] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.924470][ T5954] net_ratelimit: 30 callbacks suppressed [ 1205.924487][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1205.992281][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1206.113213][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1206.164509][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1206.174501][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1206.757329][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1206.987487][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.084547][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1207.099986][T23247] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1207.106535][T23247] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1207.186267][ T10] usb 2-1: can't set config #168, error -71 [ 1207.198110][T23247] vhci_hcd vhci_hcd.0: Device attached [ 1207.254855][ T10] usb 2-1: USB disconnect, device number 22 [ 1207.290759][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1207.308199][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1207.328394][T23256] fuse: Unknown parameter '0xffffffffffffffff' [ 1207.335218][ T30] audit: type=1326 audit(1777814785.096:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.1.4341" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0db819cdd9 code=0x0 [ 1207.372433][T23256] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1207.460944][ T30] audit: type=1400 audit(1777814785.226:3827): avc: denied { ioctl } for pid=23259 comm="syz.3.4343" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1207.551302][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1207.640324][ T5710] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1207.650523][ T5711] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1207.696681][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1207.840471][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1207.925335][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 1208.010871][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1208.060634][ T5711] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1208.150876][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1208.183267][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1208.194564][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1208.210358][ T5343] usb 38-1: SetAddress Request (2) to port 0 [ 1208.210394][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1208.216415][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1208.228955][ T5343] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1208.260372][ T5710] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1208.268030][ T5710] usb 5-1: can't read configurations, error -71 [ 1208.290510][ T5711] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1208.310283][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.319742][ T5711] usb 3-1: Product: syz [ 1208.330230][ T5711] usb 3-1: Manufacturer: syz [ 1208.341157][ T5711] usb 3-1: SerialNumber: syz [ 1208.351240][ T5711] usb 3-1: config 0 descriptor?? [ 1208.648675][ T5711] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 1208.932609][ T5711] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 1208.965564][ T5711] usb 3-1: USB disconnect, device number 70 [ 1209.009368][T23248] vhci_hcd: connection reset by peer [ 1209.033795][T22216] vhci_hcd vhci_hcd.2: stop threads [ 1209.039046][T22216] vhci_hcd vhci_hcd.2: release socket [ 1209.060254][T22216] vhci_hcd vhci_hcd.2: disconnect device [ 1209.311105][T23278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13656 sclass=netlink_route_socket pid=23278 comm=syz.0.4347 [ 1209.348360][ T30] audit: type=1326 audit(1777814787.116:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.4.4348" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe3a19cdd9 code=0x0 [ 1209.464474][T23282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1209.483661][T23282] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1209.492769][T23282] smc: net device vcan0 erased user defined pnetid SYZ1 [ 1210.232881][T23287] veth7: entered promiscuous mode [ 1210.314882][T23287] veth7: entered allmulticast mode [ 1210.620771][ T30] audit: type=1400 audit(1777814788.306:3829): avc: denied { watch_mount } for pid=23292 comm="syz.4.4353" path="/460/file1" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1211.015685][T22852] net_ratelimit: 19 callbacks suppressed [ 1211.015733][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1211.300955][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1211.374871][T23305] fuse: Unknown parameter '0xffffffffffffffff' [ 1211.413374][T23305] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1211.483458][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1211.760465][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1211.820291][ T10] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 1211.920292][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1212.082790][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1212.220645][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1212.421865][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1212.447240][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1212.460332][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1212.478920][ T10] usb 3-1: can't read configurations, error -71 [ 1212.590527][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1212.720295][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1213.053600][T18895] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1213.353709][ T5343] usb 38-1: device descriptor read/8, error -110 [ 1213.398973][T18895] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.430225][T18895] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1213.505560][T18895] usb 2-1: string descriptor 0 read error: -22 [ 1213.534708][T18895] usb 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 1213.584432][T18895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.907694][T23346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23346 comm=syz.3.4365 [ 1213.918952][ T5343] usb usb38-port1: attempt power cycle [ 1213.947947][T23320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.948313][T23320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.950133][ T5711] usb 2-1: USB disconnect, device number 23 [ 1214.492939][ T5343] usb usb38-port1: unable to enumerate USB device [ 1214.705196][T23358] fuse: Bad value for 'fd' [ 1215.610253][ T5343] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1215.796455][T23377] fuse: Unknown parameter '0xffffffffffffffff' [ 1215.805354][T23377] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1215.860871][ T5343] usb 1-1: Using ep0 maxpacket: 16 [ 1215.867737][ T5343] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1215.878823][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.890523][ T5343] usb 1-1: config 0 descriptor?? [ 1215.899781][ T5343] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1215.983932][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1216.111060][T13505] net_ratelimit: 24 callbacks suppressed [ 1216.111097][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1216.186858][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1216.295608][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1216.309144][ T10] usb 2-1: config 0 has no interface number 0 [ 1216.325129][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1216.334711][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.338315][T15718] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1216.345257][ T10] usb 2-1: Product: syz [ 1216.359345][ T5343] usb 1-1: Detected FT232B [ 1216.364275][ T10] usb 2-1: Manufacturer: syz [ 1216.369330][ T10] usb 2-1: SerialNumber: syz [ 1216.379874][ T10] usb 2-1: config 0 descriptor?? [ 1216.393906][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1216.410344][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1216.410350][ T5710] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 1216.543319][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1216.560082][ T5343] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1216.570685][ T5343] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1216.586139][ T5343] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1216.599042][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1216.634134][ T5343] usb 1-1: USB disconnect, device number 57 [ 1216.641109][ T5710] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1216.648843][ T5710] usb 3-1: can't read configurations, error -71 [ 1216.655377][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1216.670514][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1216.676283][ T5343] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1216.832428][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1217.074088][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1217.082551][ T5343] ftdi_sio 1-1:0.0: device disconnected [ 1217.092232][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1217.096129][ T5711] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1217.112032][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1217.139460][ T10] usb 2-1: USB disconnect, device number 24 [ 1217.180410][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1217.227141][ T10] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1217.240278][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1217.250981][ T10] quatech2 2-1:0.51: device disconnected [ 1217.291678][ T5711] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1217.300104][ T5711] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1217.308525][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1217.318236][ T5711] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1217.329445][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1217.341958][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1217.355142][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1217.364869][ T5711] usb 5-1: string descriptor 0 read error: -22 [ 1217.371327][ T5711] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1217.380561][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.394020][ T5711] usb 5-1: config 0 descriptor?? [ 1217.402484][T23392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1217.411167][ T5711] hub 5-1:0.0: bad descriptor, ignoring hub [ 1217.417885][ T5711] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1217.428969][ T5711] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input121 [ 1217.470252][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1217.532103][T23396] Set syz0 is full, maxelem 0 reached [ 1217.551986][ T5710] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1217.710462][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 1217.733864][ T5710] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1217.753174][ T5710] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1217.769202][ T10] usb 5-1: USB disconnect, device number 88 [ 1217.788253][ T5710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1217.932047][ T5710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1217.951803][ T5710] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1217.965829][ T5710] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1217.987136][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.058486][T23409] random: crng reseeded on system resumption [ 1218.510336][ T30] audit: type=1400 audit(1777814796.246:3830): avc: denied { read } for pid=23404 comm="syz.3.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1218.596304][T23414] netlink: 'syz.0.4386': attribute type 29 has an invalid length. [ 1218.760416][T23415] netlink: 'syz.0.4386': attribute type 29 has an invalid length. [ 1218.845340][T23415] binder: 23412:23415 ioctl c0306201 200000000640 returned -22 [ 1218.879043][T23415] netlink: 'syz.0.4386': attribute type 32 has an invalid length. [ 1218.887029][T23415] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4386'. [ 1219.153489][ T5710] usb 3-1: GET_CAPABILITIES returned 0 [ 1219.169918][ T5710] usbtmc 3-1:16.0: can't read capabilities [ 1219.527388][T23394] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1219.527728][ T10] usb 3-1: USB disconnect, device number 74 [ 1219.558591][T23425] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1220.200312][ T10] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1220.315219][T23458] syz.4.4399 (23458): drop_caches: 2 [ 1220.376816][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1220.398946][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.407171][ T10] usb 1-1: Product: syz [ 1220.416243][ T10] usb 1-1: Manufacturer: syz [ 1220.420956][ T10] usb 1-1: SerialNumber: syz [ 1220.428817][ T10] usb 1-1: config 0 descriptor?? [ 1220.470307][ T5710] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1220.620301][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 1220.627051][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1220.637179][ T5710] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 1220.726978][ T5710] usb 2-1: string descriptor 0 read error: -22 [ 1220.738836][ T5710] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 1220.750673][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.761818][T23461] Invalid logical block size (4) [ 1220.771640][T23461] binder: 23450:23461 ioctl c0285840 200000000000 returned -22 [ 1220.790487][T23461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.802318][T23461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.173077][T13507] net_ratelimit: 27 callbacks suppressed [ 1221.173123][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1221.300504][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1221.420647][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1221.551360][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1221.660550][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1221.770422][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1221.880516][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1221.890569][ T10] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 1221.990486][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1222.100495][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1222.210969][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1222.605910][T23443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1222.724716][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1222.770033][ T5711] usb 1-1: USB disconnect, device number 58 [ 1222.985139][ T5710] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1223.060474][T23467] random: crng reseeded on system resumption [ 1223.478458][T10975] udevd[10975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1223.490023][ T5710] usb 2-1: USB disconnect, device number 25 [ 1224.180425][T23473] netlink: 'syz.1.4402': attribute type 10 has an invalid length. [ 1226.038629][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4406'. [ 1226.122988][T23479] macsec1: entered promiscuous mode [ 1226.142636][T23479] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1226.159806][T23479] macsec1: entered allmulticast mode [ 1226.165500][T23479] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1226.178770][T23479] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1226.186876][T23479] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1226.238887][ T10] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1226.315086][ T5954] net_ratelimit: 14 callbacks suppressed [ 1226.315105][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1226.524460][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1226.686604][ T30] audit: type=1400 audit(1777814804.456:3831): avc: denied { getopt } for pid=23500 comm="syz.4.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1227.772171][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1227.990711][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1228.070841][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 1228.200556][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1228.470891][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1228.680926][ T5343] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1228.746630][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1228.803230][T23526] Set syz0 is full, maxelem 0 reached [ 1228.880227][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1228.896299][ T5343] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1228.896337][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.896362][ T5343] usb 4-1: Product: syz [ 1228.896380][ T5343] usb 4-1: Manufacturer: syz [ 1228.896398][ T5343] usb 4-1: SerialNumber: syz [ 1228.897932][ T5343] usb 4-1: config 0 descriptor?? [ 1228.990328][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1229.813798][T23539] Invalid logical block size (4) [ 1229.817509][T23539] binder: 23519:23539 ioctl c0285840 200000000000 returned -22 [ 1229.829492][T23539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.832713][T23539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.972113][ T5343] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1229.972195][ T5343] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1230.131239][T15718] Bluetooth: hci5: command 0x0c1a tx timeout [ 1231.341147][ T64] net_ratelimit: 13 callbacks suppressed [ 1231.341162][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1231.451222][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1231.488937][ T5799] usb 4-1: USB disconnect, device number 39 [ 1231.563273][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1231.620274][ T5711] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1231.672559][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1231.805473][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1231.814612][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 1231.829175][ T5711] usb 5-1: not running at top speed; connect to a high speed hub [ 1231.850129][ T5711] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 1231.879706][ T5711] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1231.900504][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.923576][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1231.966164][ T5711] usb 5-1: Product: syz [ 1231.971041][ T5711] usb 5-1: Manufacturer: à  [ 1231.976094][ T5711] usb 5-1: SerialNumber: syz [ 1232.080331][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1232.190450][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1232.200863][ T5711] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1232.218695][ T5711] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1232.226994][ T5711] usb 5-1: 2:1 : sample bitwidth 246 in over sample bytes 12 [ 1232.236224][ T5711] usb 5-1: 2:1 : unsupported sample bitwidth 246 in 12 bytes [ 1232.298540][ T5711] usb 5-1: unit 4 not found! [ 1232.330270][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1232.428247][ T5711] usb 5-1: USB disconnect, device number 89 [ 1232.611711][T23576] random: crng reseeded on system resumption [ 1232.902651][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1232.991231][ T30] audit: type=1400 audit(1777814810.766:3832): avc: denied { remount } for pid=23577 comm="syz.2.4428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1232.991272][T23578] tmpfs: Invalid gid '0x00000000ffffffff' [ 1233.570689][ T30] audit: type=1800 audit(1777814811.166:3833): pid=23583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4430" name="file0" dev="overlay" ino=2555 res=0 errno=0 [ 1233.840334][ T5799] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1233.890236][T20228] Bluetooth: hci4: command 0x2016 tx timeout [ 1233.912285][ T50] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1234.007793][ T5799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.020241][ T5711] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1234.039805][ T5799] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df [ 1234.055019][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.072675][ T5799] usb 4-1: config 0 descriptor?? [ 1234.086429][ T5799] pwc: Askey VC010 type 2 USB webcam detected. [ 1234.182988][T23600] ªªªªªª: renamed from vlan0 (while UP) [ 1234.194903][ T5711] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1234.211887][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.229306][ T5711] usb 5-1: Product: syz [ 1234.237983][ T5711] usb 5-1: Manufacturer: syz [ 1234.248851][ T5711] usb 5-1: SerialNumber: syz [ 1234.264852][ T5711] usb 5-1: config 0 descriptor?? [ 1234.738539][T23607] Invalid logical block size (4) [ 1234.741642][ T5799] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1234.925999][T23608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23608 comm=syz.2.4437 [ 1235.343811][T23609] binder: 23587:23609 ioctl c0285840 200000000000 returned -22 [ 1235.461786][T23607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.473261][T23607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.582660][ T5711] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 1236.146595][ T5799] pwc: recv_control_msg error -32 req 02 val 2700 [ 1236.404249][T13507] net_ratelimit: 21 callbacks suppressed [ 1236.404306][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1236.625564][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1236.833704][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1237.030700][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1237.193716][ T5711] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1237.226876][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1237.405240][ T5799] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1237.412838][ T5799] pwc: recv_control_msg error -71 req 04 val 1000 [ 1237.421676][ T5799] pwc: recv_control_msg error -71 req 04 val 1300 [ 1237.428535][ T5799] pwc: recv_control_msg error -71 req 04 val 1400 [ 1237.435448][ T5799] pwc: recv_control_msg error -71 req 02 val 2000 [ 1237.442928][ T5799] pwc: recv_control_msg error -71 req 02 val 2100 [ 1237.449761][ T5799] pwc: recv_control_msg error -71 req 04 val 1500 [ 1237.456698][ T5799] pwc: recv_control_msg error -71 req 02 val 2500 [ 1237.463715][ T5799] pwc: recv_control_msg error -71 req 02 val 2400 [ 1237.470615][ T5799] pwc: recv_control_msg error -71 req 02 val 2600 [ 1237.477469][ T5799] pwc: recv_control_msg error -71 req 02 val 2900 [ 1237.484794][ T5799] pwc: recv_control_msg error -71 req 02 val 2800 [ 1237.491817][ T5799] pwc: recv_control_msg error -71 req 04 val 1100 [ 1237.498650][ T5799] pwc: recv_control_msg error -71 req 04 val 1200 [ 1237.510376][ T5799] pwc: Registered as video103. [ 1237.517088][ T5799] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input124 [ 1237.538783][ T5799] usb 4-1: USB disconnect, device number 40 [ 1237.608310][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1237.653467][ T5711] usb 5-1: USB disconnect, device number 90 [ 1237.741858][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1237.756274][T23621] fuse: Bad value for 'rootmode' [ 1237.759839][ T30] audit: type=1400 audit(1777814815.526:3834): avc: denied { mounton } for pid=23620 comm="syz.4.4442" path="/480/file0" dev="tmpfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1237.833021][ T30] audit: type=1400 audit(1777814815.546:3835): avc: denied { connect } for pid=23622 comm="syz.1.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1237.881337][ T30] audit: type=1400 audit(1777814815.556:3836): avc: denied { setattr } for pid=23620 comm="syz.4.4442" name="file0" dev="tmpfs" ino=2567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1237.907740][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1237.913347][T23625] gfs2: not a GFS2 filesystem [ 1237.971373][ T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1237.986978][ T50] Bluetooth: hci0: Injecting HCI hardware error event [ 1237.997550][T20228] Bluetooth: hci0: hardware error 0x00 [ 1238.022865][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1238.120259][ T5799] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1238.130626][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1238.208144][T23635] netlink: 'syz.1.4447': attribute type 1 has an invalid length. [ 1238.216949][T23637] netlink: 'syz.1.4447': attribute type 1 has an invalid length. [ 1238.270685][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 1238.330814][ T5799] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1238.339049][ T5799] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1238.349120][ T5799] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1238.358950][ T5799] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1238.372247][ T5799] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.389917][ T5799] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1238.399082][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.440306][ T5343] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1238.566888][ T30] audit: type=1400 audit(1777814816.336:3837): avc: denied { call } for pid=23648 comm="syz.1.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1238.587304][ T30] audit: type=1400 audit(1777814816.336:3838): avc: denied { transfer } for pid=23648 comm="syz.1.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1238.608963][ T5343] usb 3-1: config 227 has 0 interfaces, different from the descriptor's value: 1 [ 1238.621858][ T5799] usb 4-1: usb_control_msg returned -32 [ 1238.624291][ T5343] usb 3-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b [ 1238.630504][ T5799] usbtmc 4-1:16.0: can't read capabilities [ 1238.637023][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.670353][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1238.700854][ T5343] usb 3-1: Product: syz [ 1238.712600][ T5343] usb 3-1: Manufacturer: syz [ 1238.718349][ T5343] usb 3-1: SerialNumber: syz [ 1238.903889][ T10] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1238.926443][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.996801][ T10] usb 1-1: Product: syz [ 1239.039524][ T10] usb 1-1: Manufacturer: syz [ 1239.067046][ T10] usb 1-1: SerialNumber: syz [ 1239.330126][ T10] usb 1-1: config 0 descriptor?? [ 1239.455115][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1239.990556][T23667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4454'. [ 1240.352286][T20228] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1240.422556][ T10] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1240.431857][T23642] Bluetooth: MGMT ver 1.23 [ 1240.438266][T19137] usb 4-1: USB disconnect, device number 41 [ 1240.459469][ T10] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 1241.214039][T19137] usb 1-1: USB disconnect, device number 59 [ 1241.254530][T23668] overlayfs: option "workdir=./file1/file0" is useless in a non-upper mount, ignore [ 1241.294033][T23668] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1241.424409][ T7512] net_ratelimit: 19 callbacks suppressed [ 1241.424430][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1241.502748][T19137] libceph: connect (1)[c::]:6789 error -101 [ 1241.509044][T19137] libceph: mon0 (1)[c::]:6789 connect error [ 1241.560343][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1241.597609][ T5343] usb 3-1: USB disconnect, device number 75 [ 1241.625693][ T30] audit: type=1400 audit(1777814819.396:3839): avc: denied { bind } for pid=23674 comm="syz.3.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1241.648169][T23677] ceph: No mds server is up or the cluster is laggy [ 1241.668397][ T30] audit: type=1400 audit(1777814819.416:3840): avc: denied { ioctl } for pid=23674 comm="syz.3.4458" path="socket:[85741]" dev="sockfs" ino=85741 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1241.708075][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1241.749403][T23685] fuse: Bad value for 'fd' [ 1241.780378][T20228] Bluetooth: hci3: unexpected event for opcode 0x201c [ 1241.852196][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1241.900541][T19137] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1242.065916][T23687] netlink: 'syz.4.4459': attribute type 10 has an invalid length. [ 1242.577734][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1242.732983][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1243.014745][T19137] usb 4-1: config 253 has an invalid interface number: 130 but max is 0 [ 1243.026009][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1243.042188][T19137] usb 4-1: config 253 has no interface number 0 [ 1243.238271][T19137] usb 4-1: config 253 interface 130 has no altsetting 0 [ 1243.606766][ T5343] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1243.617668][T19137] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1243.626928][T19137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.635432][T19137] usb 4-1: Product: syz [ 1243.639646][T19137] usb 4-1: Manufacturer: syz [ 1243.644301][T19137] usb 4-1: SerialNumber: syz [ 1243.659805][T23695] overlayfs: failed to resolve './file2': -2 [ 1243.666644][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1243.732715][T23695] overlayfs: conflicting lowerdir path [ 1243.790349][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1244.652595][T19137] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 1244.861470][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1245.155303][T19137] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1245.182367][T23713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=271 sclass=netlink_audit_socket pid=23713 comm=syz.0.4466 [ 1245.195603][ T30] audit: type=1400 audit(1777814822.956:3841): avc: denied { nlmsg_write } for pid=23709 comm="syz.0.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1245.238207][T19137] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 1245.388872][T19137] usb 4-1: media controller created [ 1245.407334][T23710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=271 sclass=netlink_audit_socket pid=23710 comm=syz.0.4466 [ 1245.434319][T19137] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1245.691890][T23721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4467'. [ 1245.704792][T23721] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1245.713662][T23721] smc: net device vcan0 erased user defined pnetid SYZ1 [ 1246.012179][T19137] DVB: Unable to find symbol dib8000_attach() [ 1246.042460][T19137] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 1246.430665][T19137] rc_core: IR keymap rc-dib0700-nec not found [ 1246.458585][T19137] Registered IR keymap rc-empty [ 1246.478641][T19137] dvb-usb: could not initialize remote control. [ 1246.498037][T19137] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 1246.532399][T22216] net_ratelimit: 8 callbacks suppressed [ 1246.532442][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1246.712688][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1247.260378][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1247.410494][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1247.992886][T19137] usb 4-1: USB disconnect, device number 42 [ 1248.019835][T23743] fuse: Bad value for 'fd' [ 1248.051758][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1248.066505][T20228] Bluetooth: hci3: unexpected event for opcode 0x201c [ 1248.328920][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1248.342830][T19137] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 1248.775185][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1248.816145][T23753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1248.905221][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1249.490598][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1249.565487][T23754] netlink: 'syz.2.4474': attribute type 10 has an invalid length. [ 1249.650740][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1251.720540][T22216] net_ratelimit: 1 callbacks suppressed [ 1251.720561][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1251.890442][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1252.098075][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1252.198013][T23773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4480'. [ 1252.210623][T23773] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1252.218425][T23773] smc: net device vcan0 erased user defined pnetid SYZ1 [ 1252.260763][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1252.446767][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1252.638552][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1253.011282][T13507] bond6: (slave bond0): failed to get link speed/duplex [ 1253.173806][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1253.371836][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1253.510876][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1253.819258][T23792] trusted_key: encrypted_key: insufficient parameters specified [ 1254.521017][T23801] fuse: Bad value for 'fd' [ 1254.654604][T23804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4489'. [ 1254.836993][T23810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 1255.076209][T23814] netlink: 'syz.1.4490': attribute type 10 has an invalid length. [ 1255.910948][T23810] tc_dump_action: action bad kind [ 1256.790373][ T7515] net_ratelimit: 15 callbacks suppressed [ 1256.790392][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1256.819324][ T30] audit: type=1326 audit(1777814834.576:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23803 comm="syz.4.4489" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe3a19cdd9 code=0x0 [ 1257.075799][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1257.173450][T23823] Cannot find set identified by id 0 to match [ 1257.220679][T23825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1257.234613][T23825] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1257.243428][T23825] smc: net device vcan0 erased user defined pnetid SYZ1 [ 1257.354214][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1257.383389][T23827] FAULT_INJECTION: forcing a failure. [ 1257.383389][T23827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.532535][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1258.227754][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1258.240386][T23827] CPU: 1 UID: 0 PID: 23827 Comm: syz.0.4481 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.240421][T23827] Tainted: [L]=SOFTLOCKUP [ 1258.240429][T23827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1258.240442][T23827] Call Trace: [ 1258.240449][T23827] [ 1258.240458][T23827] dump_stack_lvl+0x100/0x190 [ 1258.240488][T23827] should_fail_ex.cold+0x5/0xa [ 1258.240517][T23827] _copy_from_iter+0x1f4/0x1690 [ 1258.240550][T23827] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1258.240576][T23827] ? __pfx__copy_from_iter+0x10/0x10 [ 1258.240608][T23827] ? find_held_lock+0x2b/0x80 [ 1258.240629][T23827] ? rawv6_sendmsg+0xb3c/0x4420 [ 1258.240651][T23827] ? rawv6_sendmsg+0xb3c/0x4420 [ 1258.240678][T23827] rawv6_sendmsg+0x244a/0x4420 [ 1258.240711][T23827] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1258.240740][T23827] ? avc_has_perm+0x135/0x1e0 [ 1258.240771][T23827] ? __pfx_avc_has_perm+0x10/0x10 [ 1258.240823][T23827] ? __fget_files+0x21f/0x3d0 [ 1258.240849][T23827] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1258.240873][T23827] ? inet_sendmsg+0x11c/0x140 [ 1258.240899][T23827] inet_sendmsg+0x11c/0x140 [ 1258.240928][T23827] __sys_sendto+0x446/0x4b0 [ 1258.240956][T23827] ? __pfx_inet_sendmsg+0x10/0x10 [ 1258.240983][T23827] ? __pfx___sys_sendto+0x10/0x10 [ 1258.241031][T23827] ? ksys_write+0x1ac/0x250 [ 1258.241059][T23827] ? __pfx_ksys_write+0x10/0x10 [ 1258.241085][T23827] __x64_sys_sendto+0xe0/0x1c0 [ 1258.241112][T23827] ? do_syscall_64+0x90/0xf80 [ 1258.241137][T23827] ? lockdep_hardirqs_on+0x78/0x100 [ 1258.241160][T23827] do_syscall_64+0x10b/0xf80 [ 1258.241183][T23827] ? clear_bhb_loop+0x40/0x90 [ 1258.241209][T23827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.241230][T23827] RIP: 0033:0x7f6c1c79cdd9 [ 1258.241248][T23827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.241268][T23827] RSP: 002b:00007f6c1d5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1258.241289][T23827] RAX: ffffffffffffffda RBX: 00007f6c1ca15fa0 RCX: 00007f6c1c79cdd9 [ 1258.241303][T23827] RDX: 0000000000000016 RSI: 0000200000000300 RDI: 0000000000000003 [ 1258.241317][T23827] RBP: 00007f6c1d5ee090 R08: 0000000000000000 R09: fffffffffffffdfd [ 1258.241331][T23827] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 1258.241343][T23827] R13: 00007f6c1ca16038 R14: 00007f6c1ca15fa0 R15: 00007ffc754c04a8 [ 1258.241372][T23827] [ 1258.642840][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1258.826640][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1258.874518][T23840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 1258.943398][T22216] bond6: (slave bond0): failed to get link speed/duplex [ 1259.207206][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1259.310274][T23844] bond2: option lacp_rate: invalid value (4) [ 1259.515088][T23844] bond2 (unregistering): Released all slaves [ 1259.551095][ T10] usb 3-1: device descriptor read/64, error -71 [ 1259.557733][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1259.604299][T23848] random: crng reseeded on system resumption [ 1259.670790][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1259.820386][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1259.913209][T19137] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1259.974887][ T10] usb 3-1: device descriptor read/64, error -71 [ 1260.150828][ T10] usb usb3-port1: attempt power cycle [ 1260.173984][T19137] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1260.189342][T19137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.204247][T19137] usb 2-1: Product: syz [ 1260.208641][T19137] usb 2-1: Manufacturer: syz [ 1260.214385][T19137] usb 2-1: SerialNumber: syz [ 1260.231744][T19137] usb 2-1: config 0 descriptor?? [ 1260.570681][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1260.662280][ T10] usb 3-1: device descriptor read/8, error -71 [ 1260.923178][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1260.941014][ T10] usb 3-1: device descriptor read/8, error -71 [ 1261.053824][ T10] usb usb3-port1: unable to enumerate USB device [ 1261.579120][T19137] usb 2-1: USB disconnect, device number 26 [ 1262.979368][T23879] netlink: 'syz.3.4502': attribute type 10 has an invalid length. [ 1264.445401][ T13] net_ratelimit: 3 callbacks suppressed [ 1264.445420][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1264.563000][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1265.413911][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1265.574046][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1265.740393][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1265.836979][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1265.870592][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1265.886559][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1265.930343][ T5799] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1266.456261][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1266.572384][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1266.692049][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 1267.643066][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1267.800248][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1268.035797][T23916] FAULT_INJECTION: forcing a failure. [ 1268.035797][T23916] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.097706][T23916] CPU: 0 UID: 0 PID: 23916 Comm: syz.0.4514 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.097740][T23916] Tainted: [L]=SOFTLOCKUP [ 1268.097748][T23916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1268.097761][T23916] Call Trace: [ 1268.097784][T23916] [ 1268.097793][T23916] dump_stack_lvl+0x100/0x190 [ 1268.097822][T23916] should_fail_ex.cold+0x5/0xa [ 1268.097850][T23916] should_failslab+0xc2/0x120 [ 1268.097875][T23916] __kvmalloc_node_noprof+0xfa/0xa00 [ 1268.097905][T23916] ? hash_mac_create+0x3e0/0x1050 [ 1268.097934][T23916] hash_mac_create+0x3e0/0x1050 [ 1268.097958][T23916] ? __pfx_hash_mac_create+0x10/0x10 [ 1268.097981][T23916] ip_set_create+0x6b8/0x14f0 [ 1268.098020][T23916] ? __pfx_ip_set_create+0x10/0x10 [ 1268.098072][T23916] ? find_held_lock+0x2b/0x80 [ 1268.098102][T23916] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 1268.098133][T23916] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1268.098174][T23916] ? __lock_acquire+0x4a5/0x2630 [ 1268.098226][T23916] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1268.098266][T23916] netlink_rcv_skb+0x159/0x420 [ 1268.098292][T23916] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1268.098326][T23916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1268.098365][T23916] ? ns_capable+0xd2/0xf0 [ 1268.098397][T23916] nfnetlink_rcv+0x1b3/0x440 [ 1268.098428][T23916] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1268.098459][T23916] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1268.098490][T23916] netlink_unicast+0x585/0x850 [ 1268.098520][T23916] ? __pfx_netlink_unicast+0x10/0x10 [ 1268.098554][T23916] netlink_sendmsg+0x8b0/0xda0 [ 1268.098585][T23916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.098609][T23916] ? __might_fault+0x90/0x140 [ 1268.098649][T23916] ____sys_sendmsg+0x9e1/0xb70 [ 1268.098673][T23916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.098701][T23916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1268.098740][T23916] ___sys_sendmsg+0x190/0x1e0 [ 1268.098769][T23916] ? __pfx____sys_sendmsg+0x10/0x10 [ 1268.098831][T23916] __sys_sendmsg+0x170/0x220 [ 1268.098862][T23916] ? __pfx___sys_sendmsg+0x10/0x10 [ 1268.098905][T23916] ? rcu_is_watching+0x12/0xc0 [ 1268.098941][T23916] do_syscall_64+0x10b/0xf80 [ 1268.098965][T23916] ? clear_bhb_loop+0x40/0x90 [ 1268.098992][T23916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.099014][T23916] RIP: 0033:0x7f6c1c79cdd9 [ 1268.099032][T23916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.099052][T23916] RSP: 002b:00007f6c1d5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1268.099073][T23916] RAX: ffffffffffffffda RBX: 00007f6c1ca15fa0 RCX: 00007f6c1c79cdd9 [ 1268.099087][T23916] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1268.099100][T23916] RBP: 00007f6c1d5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.099113][T23916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.099126][T23916] R13: 00007f6c1ca16038 R14: 00007f6c1ca15fa0 R15: 00007ffc754c04a8 [ 1268.099160][T23916] [ 1269.141165][T20228] Bluetooth: hci3: command 0x2016 tx timeout [ 1269.253030][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1269.522804][T23925] netlink: 'syz.3.4515': attribute type 10 has an invalid length. [ 1269.615489][ T5799] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1269.616228][ T1048] net_ratelimit: 5 callbacks suppressed [ 1269.616243][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1269.651129][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1269.658218][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1269.672524][ T10] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 1269.687450][ T10] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.740428][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1269.751518][ T10] usb 1-1: config 6 has no interface number 0 [ 1269.774838][ T5799] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1269.787134][ T5799] usb 3-1: can't read configurations, error -71 [ 1269.800675][ T10] usb 1-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1269.870650][ T10] usb 1-1: config 6 interface 113 has no altsetting 0 [ 1269.900776][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1269.916739][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 1269.935174][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1269.956875][ T10] usb 1-1: SerialNumber: syz [ 1269.987709][ T10] ftdi_sio 1-1:6.113: FTDI USB Serial Device converter detected [ 1270.020474][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1270.044461][ T10] usb 1-1: Detected SIO [ 1270.069358][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1270.094098][T23946] veth5: entered promiscuous mode [ 1270.096553][T23948] 9p: Bad value for 'rfdno' [ 1270.099171][T23946] veth5: entered allmulticast mode [ 1270.241831][T23919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.264869][T23919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.280458][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1270.308072][ T10] usb 1-1: USB disconnect, device number 60 [ 1270.327638][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1270.373773][ T10] ftdi_sio 1-1:6.113: device disconnected [ 1270.432393][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1270.564572][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1270.713500][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1270.822579][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1270.940321][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1271.125919][T23977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4531'. [ 1271.136799][T23977] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1271.144372][T23977] smc: net device vcan0 erased user defined pnetid SYZ1 [ 1271.200564][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 1271.346063][T23980] blk_print_req_error: 27 callbacks suppressed [ 1271.346091][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.383061][T23980] buffer_io_error: 14 callbacks suppressed [ 1271.383080][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1271.417460][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.446535][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1271.458453][T23964] ceph: No mds server is up or the cluster is laggy [ 1271.524431][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.595515][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1271.643791][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.693442][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1271.745073][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.810189][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1271.841295][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.844683][T23995] /dev/nullb0: Can't open blockdev [ 1271.883761][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1271.909738][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.934889][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1271.961662][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1271.989895][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1272.007050][T23980] ldm_validate_partition_table(): Disk read failed. [ 1272.013787][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1272.022837][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1272.030754][T23980] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1272.039811][T23980] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1272.047886][T23980] Dev nbd0: unable to read RDB block 0 [ 1272.152826][T23980] nbd0: unable to read partition table [ 1272.738256][T24008] comedi comedi3: mpc624: I/O base address not correctly aligned [ 1272.752754][T19137] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1272.892006][ T30] audit: type=1400 audit(1777814850.666:3843): avc: denied { bind } for pid=24009 comm="syz.3.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1272.913761][ T5738] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1273.138748][T19137] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 1273.153095][T19137] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.172172][ T30] audit: type=1400 audit(1777814850.686:3844): avc: denied { write } for pid=24009 comm="syz.3.4542" path="socket:[87873]" dev="sockfs" ino=87873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1273.195947][T19137] usb 3-1: config 4 has no interface number 0 [ 1273.651945][T20228] Bluetooth: hci5: command 0x0c1a tx timeout [ 1274.160207][T19137] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1274.183581][T19137] usb 3-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.200516][T19137] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1274.609652][T19137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.632487][ T7518] net_ratelimit: 18 callbacks suppressed [ 1274.632513][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1274.640659][T19137] usb 3-1: Product: syz [ 1274.649837][T19137] usb 3-1: Manufacturer: syz [ 1274.654557][ T5738] usb 5-1: Using ep0 maxpacket: 8 [ 1274.660090][T19137] usb 3-1: SerialNumber: syz [ 1274.666458][ T5738] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1274.679258][ T5738] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1274.692008][ T5738] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1274.719165][ T5738] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28192, setting to 1024 [ 1274.730809][ T5738] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1274.741309][ T5738] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1274.755427][ T5738] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1274.781099][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.863182][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1274.925470][T23998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.934148][T23998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.972717][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1275.006821][ T5738] usb 5-1: usb_control_msg returned -32 [ 1275.025532][T24033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4548'. [ 1275.041870][ T5738] usbtmc 5-1:16.0: can't read capabilities [ 1275.052385][ T5343] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1275.100912][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1275.118238][ T5738] usb 5-1: USB disconnect, device number 91 [ 1275.210556][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1275.223586][ T5343] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1275.240808][ T5343] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1275.274985][ T5343] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1275.374782][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1275.538468][ T5343] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1275.545983][T24029] CIFS: Unable to determine destination address [ 1275.563765][ T5343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1276.019246][ T5343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1276.035736][ T5343] usb 4-1: string descriptor 0 read error: -22 [ 1276.042514][ T5343] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1276.052321][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.064134][ T5343] usb 4-1: config 0 descriptor?? [ 1276.073707][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1276.081584][T24023] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1276.097145][ T5343] hub 4-1:0.0: bad descriptor, ignoring hub [ 1276.112405][ T5343] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1276.145949][ T5343] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input127 [ 1276.197452][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1276.431563][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1276.456913][T19137] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1276.517794][T19137] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1276.552552][T19137] dib0700: firmware download failed at 7 with -22 [ 1276.580497][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1276.642728][T19137] usb 3-1: USB disconnect, device number 83 [ 1276.813649][ T5738] usb 4-1: USB disconnect, device number 43 [ 1279.589672][T24090] netlink: 'syz.4.4561': attribute type 11 has an invalid length. [ 1279.601353][T24085] lo speed is unknown, defaulting to 1000 [ 1280.056256][T22852] net_ratelimit: 23 callbacks suppressed [ 1280.056274][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1280.100344][T19137] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1280.320219][ T5738] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1280.723104][T19137] usb 4-1: Using ep0 maxpacket: 16 [ 1280.894274][T19137] usb 4-1: config 0 has no interfaces? [ 1280.898538][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1280.942364][T19137] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1280.993769][T19137] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1281.020803][ T5738] usb 2-1: Using ep0 maxpacket: 32 [ 1281.035149][T19137] usb 4-1: Manufacturer: syz [ 1281.053961][ T5738] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1281.082093][T19137] usb 4-1: config 0 descriptor?? [ 1281.090406][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.130637][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1281.132661][ T5738] usb 2-1: config 0 descriptor?? [ 1281.254188][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1281.427842][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1281.547821][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1281.754759][T20228] Bluetooth: hci4: command 0x2016 tx timeout [ 1281.778741][ T5738] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1281.872491][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1281.888205][ T5738] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1281.898691][ T5738] usb 2-1: media controller created [ 1281.974843][T19137] usb 4-1: USB disconnect, device number 44 [ 1281.984491][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1282.019099][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1282.238318][ T5738] DVB: Unable to find symbol dib7000p_attach() [ 1282.249505][T24088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.276919][ T5738] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1282.281032][T24088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.300740][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1282.442996][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1282.953133][ T5738] rc_core: IR keymap rc-dib0700-rc5 not found [ 1283.003479][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1283.042362][ T5738] Registered IR keymap rc-empty [ 1283.122100][ T5738] dvb-usb: could not initialize remote control. [ 1283.293684][ T5738] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1283.498145][ T5738] usb 2-1: USB disconnect, device number 27 [ 1283.639652][ T5738] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1283.820664][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 1285.661326][ T7518] net_ratelimit: 9 callbacks suppressed [ 1285.661344][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1285.906993][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1286.021231][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1286.150302][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1286.371374][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1286.674538][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1287.066605][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1287.092815][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 1287.120626][ T5738] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1287.600676][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1287.772679][T22853] bond6: (slave bond0): failed to get link speed/duplex [ 1287.875214][T24178] syzkaller1: entered promiscuous mode [ 1287.890282][T24178] syzkaller1: entered allmulticast mode [ 1287.992756][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1289.170348][T20228] Bluetooth: hci4: command 0x2016 tx timeout [ 1289.320845][T24210] netlink: 'syz.3.4589': attribute type 39 has an invalid length. [ 1289.585362][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1289.688837][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1291.018179][T24227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1291.030572][T24227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1291.121632][ T7518] net_ratelimit: 11 callbacks suppressed [ 1291.121665][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1291.237766][ T5738] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1291.295664][ T5738] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1291.341224][ T5738] usb 3-1: can't read configurations, error -71 [ 1291.401099][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1291.581251][T24239] veth7: entered promiscuous mode [ 1291.611066][T24239] veth7: entered allmulticast mode [ 1291.664969][T24243] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24243 comm=syz.0.4593 [ 1292.213584][T22852] bond6: (slave bond0): failed to get link speed/duplex [ 1292.277967][T24250] fuse: Unknown parameter 'fd0xffffffffffffffff0xffffffffffffffff00000000000000000000' [ 1292.360397][T15718] Bluetooth: hci3: unexpected event for opcode 0x201c [ 1292.367728][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1292.501859][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1292.630295][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1292.641858][T19137] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1292.751607][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1292.836500][T19137] usb 5-1: Using ep0 maxpacket: 8 [ 1292.878394][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1292.941824][T19137] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1293.042720][T19137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.050479][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1293.212996][ T137] bond6: (slave bond0): failed to get link speed/duplex [ 1293.345690][T19137] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1293.378820][T19137] pvrusb2: ********** [ 1293.393006][T19137] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1293.578823][T19137] pvrusb2: Important functionality might not be entirely working. [ 1293.689559][T24266] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4603'. [ 1294.536690][T19137] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1294.551553][T19137] pvrusb2: ********** [ 1294.580067][ T2354] pvrusb2: Invalid write control endpoint [ 1295.010403][T20228] Bluetooth: hci3: command 0x2016 tx timeout [ 1295.181399][ T30] audit: type=1400 audit(1777814872.956:3845): avc: denied { map } for pid=24276 comm="syz.2.4606" path="socket:[88651]" dev="sockfs" ino=88651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1295.269724][ T2354] pvrusb2: Invalid write control endpoint [ 1295.284582][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1295.297844][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1295.309022][T19137] usb 5-1: USB disconnect, device number 92 [ 1295.312003][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1295.329736][ T2354] pvrusb2: Device being rendered inoperable [ 1295.344188][ T2354] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1295.354664][ T2354] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1295.381085][ T2354] pvrusb2: Attached sub-driver cx25840 [ 1295.387212][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1295.399370][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1295.430731][T24292] netlink: 'syz.2.4609': attribute type 1 has an invalid length. [ 1295.525106][ T5711] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1295.650803][ T5710] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1295.685502][ T5711] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1295.696123][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.705566][ T5711] usb 4-1: Product: syz [ 1295.710436][ T5711] usb 4-1: Manufacturer: syz [ 1295.715040][ T5711] usb 4-1: SerialNumber: syz [ 1295.723442][ T5711] usb 4-1: config 0 descriptor?? [ 1296.231590][T24298] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24298 comm=syz.2.4610 [ 1296.231793][ T5710] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1296.249144][ T7515] net_ratelimit: 8 callbacks suppressed [ 1296.249161][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1296.399615][T24300] Invalid logical block size (4) [ 1296.412366][ T5710] usb 2-1: config 0 has no interface number 0 [ 1296.427438][T24300] binder: 24274:24300 ioctl c0285840 200000000000 returned -22 [ 1296.480779][T24300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.495176][T24300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.924046][ T5711] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1297.146436][ T5710] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1297.166010][ T5711] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1297.221481][ T5710] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1297.240260][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1297.242684][ T5711] usb 4-1: USB disconnect, device number 45 [ 1297.283785][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.311922][ T5710] usb 2-1: Product: syz [ 1297.316121][ T5710] usb 2-1: Manufacturer: syz [ 1297.321110][ T5710] usb 2-1: SerialNumber: syz [ 1297.443432][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1297.511553][ T5710] usb 2-1: config 0 descriptor?? [ 1297.540681][ T5710] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1297.668300][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1297.770240][T19137] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1298.120867][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1298.555232][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1298.817114][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1298.989429][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1299.121145][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1299.533957][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1299.700891][ T5711] usb 2-1: USB disconnect, device number 28 [ 1299.734065][ T5711] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1299.754045][T19137] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 1299.763183][T19137] usb 5-1: config 253 has no interface number 0 [ 1299.770474][T19137] usb 5-1: config 253 interface 130 has no altsetting 0 [ 1299.779536][T19137] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1299.796209][T19137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.810208][T19137] usb 5-1: Product: syz [ 1299.814381][T19137] usb 5-1: Manufacturer: syz [ 1299.818980][T19137] usb 5-1: SerialNumber: syz [ 1299.893667][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1299.917134][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1300.841771][T19137] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 1300.872715][T19137] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1300.898469][T19137] dib0700: firmware download failed at 7 with -22 [ 1301.300470][ T7515] net_ratelimit: 14 callbacks suppressed [ 1301.300504][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1301.363891][T24344] ip6t_srh: unknown srh match flags 4000 [ 1301.421358][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1301.530809][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1301.550702][ T5711] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1301.610525][ T1217] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1301.640346][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1301.690427][ T5711] usb 2-1: device descriptor read/64, error -71 [ 1301.751100][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1301.784488][ T1217] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1301.797982][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.809087][ T1217] usb 4-1: Product: syz [ 1301.816525][ T1217] usb 4-1: Manufacturer: syz [ 1301.821736][ T1217] usb 4-1: SerialNumber: syz [ 1301.861905][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1301.888060][ T1217] usb 4-1: config 0 descriptor?? [ 1301.930324][ T5711] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1301.948873][T19137] usb 5-1: USB disconnect, device number 93 [ 1301.984080][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1302.070472][ T5711] usb 2-1: device descriptor read/64, error -71 [ 1302.110232][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1302.202903][T24352] Invalid logical block size (4) [ 1302.214895][T24352] binder: 24348:24352 ioctl c0285840 200000000000 returned -22 [ 1302.230713][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1302.238852][T24352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.252159][T24352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.417341][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1302.694561][ T5711] usb usb2-port1: attempt power cycle [ 1303.010459][ T1217] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1304.352693][ T1217] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1304.508832][T19137] usb 4-1: USB disconnect, device number 46 [ 1304.732406][T24363] fuse: Bad value for 'fd' [ 1304.788091][ T50] Bluetooth: hci3: unexpected event for opcode 0x201c [ 1305.090658][T19137] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1305.260272][T19137] usb 5-1: Using ep0 maxpacket: 16 [ 1305.275896][T19137] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1305.297607][T19137] usb 5-1: config 42 has an invalid interface number: 178 but max is 0 [ 1305.315964][T19137] usb 5-1: config 42 has no interface number 0 [ 1305.335686][T19137] usb 5-1: config 42 interface 178 has no altsetting 0 [ 1305.362276][T19137] usb 5-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 1305.383188][T19137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.860628][T19137] usb 5-1: Product: syz [ 1305.873495][T19137] usb 5-1: Manufacturer: syz [ 1305.890233][T19137] usb 5-1: SerialNumber: syz [ 1306.020292][ T5799] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1306.210973][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.267982][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4635'. [ 1306.435643][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.450085][ T5799] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1306.460759][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.462428][ T5954] net_ratelimit: 24 callbacks suppressed [ 1306.462444][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1306.485285][ T5799] usb 3-1: config 0 descriptor?? [ 1306.557377][T24385] random: crng reseeded on system resumption [ 1306.643300][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4635'. [ 1307.064725][T24375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.078476][T24375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.131354][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1307.150683][T24035] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1307.240265][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1307.306593][ T5799] hid-led 0003:1D34:000A.003D: unknown main item tag 0x0 [ 1307.320428][ T5799] hid-led 0003:1D34:000A.003D: item fetching failed at offset 2/3 [ 1307.322689][T24035] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1307.337766][ T5799] hid-led 0003:1D34:000A.003D: probe with driver hid-led failed with error -22 [ 1307.367662][T24035] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1307.386034][T24035] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1307.401477][T24035] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1307.423428][T24035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1307.450369][T24035] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1307.463619][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1307.481276][T24035] usb 4-1: string descriptor 0 read error: -22 [ 1307.500230][T24035] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1307.509296][T24035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.527721][T24035] usb 4-1: config 0 descriptor?? [ 1307.542147][T24383] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1307.550535][T24035] hub 4-1:0.0: bad descriptor, ignoring hub [ 1307.558092][T24035] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1307.565053][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1307.616938][T24035] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input132 [ 1307.619316][T24375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.630733][T19137] uvcvideo 5-1:42.178: Found multiple Units with ID 1 [ 1307.661556][T19137] uvcvideo 5-1:42.178: Found UVC 0.00 device syz (045e:00f8) [ 1307.670549][T19137] uvcvideo 5-1:42.178: No valid video chain found. [ 1307.680543][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1307.705359][T24375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.781708][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1307.797583][T19137] usb 5-1: USB disconnect, device number 94 [ 1307.846153][T24375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.900850][T24375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.910736][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1307.962749][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 1307.985766][T24397] FAULT_INJECTION: forcing a failure. [ 1307.985766][T24397] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.008527][T24375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.041169][T24375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.049664][T24397] CPU: 1 UID: 0 PID: 24397 Comm: syz.4.4638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1308.049691][T24397] Tainted: [L]=SOFTLOCKUP [ 1308.049695][T24397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1308.049703][T24397] Call Trace: [ 1308.049708][T24397] [ 1308.049713][T24397] dump_stack_lvl+0x100/0x190 [ 1308.049732][T24397] should_fail_ex.cold+0x5/0xa [ 1308.049750][T24397] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1308.049766][T24397] should_failslab+0xc2/0x120 [ 1308.049780][T24397] __kmalloc_noprof+0xe0/0x850 [ 1308.049797][T24397] ? kfree+0x1dd/0x6c0 [ 1308.049814][T24397] tomoyo_realpath_from_path+0xb6/0x690 [ 1308.049833][T24397] tomoyo_path_number_perm+0x23c/0x580 [ 1308.049846][T24397] ? tomoyo_path_number_perm+0x22e/0x580 [ 1308.049860][T24397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1308.049888][T24397] ? find_held_lock+0x2b/0x80 [ 1308.049900][T24397] ? __fget_files+0x215/0x3d0 [ 1308.049914][T24397] ? hook_file_ioctl_common+0x149/0x410 [ 1308.049930][T24397] ? __fget_files+0x215/0x3d0 [ 1308.049951][T24397] ? __fget_files+0x21f/0x3d0 [ 1308.049968][T24397] security_file_ioctl+0xd3/0x230 [ 1308.049983][T24397] __x64_sys_ioctl+0xb7/0x210 [ 1308.049997][T24397] do_syscall_64+0x10b/0xf80 [ 1308.050011][T24397] ? clear_bhb_loop+0x40/0x90 [ 1308.050026][T24397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.050038][T24397] RIP: 0033:0x7efe3a19cdd9 [ 1308.050049][T24397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.050060][T24397] RSP: 002b:00007efe3af71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.050072][T24397] RAX: ffffffffffffffda RBX: 00007efe3a415fa0 RCX: 00007efe3a19cdd9 [ 1308.050080][T24397] RDX: 0000200000002100 RSI: 0000000000008929 RDI: 0000000000000003 [ 1308.050087][T24397] RBP: 00007efe3af71090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.050094][T24397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.050101][T24397] R13: 00007efe3a416038 R14: 00007efe3a415fa0 R15: 00007ffe9b6b7ac8 [ 1308.050126][T24397] [ 1308.060692][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1308.066813][T24397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1308.245578][T24375] ubi: mtd0 is already attached to ubi16 [ 1308.324055][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1308.370673][T24035] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1308.397815][T24407] hsr0: entered promiscuous mode [ 1308.404862][T24407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4641'. [ 1308.405399][T19137] usb 4-1: USB disconnect, device number 47 [ 1308.421028][T24407] hsr_slave_0: left promiscuous mode [ 1308.446452][T24407] hsr_slave_1: left promiscuous mode [ 1308.464336][T24407] hsr0 (unregistering): left promiscuous mode [ 1308.523859][T24035] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1308.533606][T24035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.545033][T24403] lo speed is unknown, defaulting to 1000 [ 1308.556531][T24035] usb 2-1: Product: syz [ 1308.565677][T24035] usb 2-1: Manufacturer: syz [ 1308.575086][T24035] usb 2-1: SerialNumber: syz [ 1308.591210][T24035] usb 2-1: config 0 descriptor?? [ 1308.902933][T24416] Invalid logical block size (4) [ 1308.911016][T24416] binder: 24398:24416 ioctl c0285840 200000000000 returned -22 [ 1308.933350][T24416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.943877][T24416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.714776][T24035] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 1309.797562][T24035] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1310.457703][T19137] usb 3-1: USB disconnect, device number 86 [ 1310.550304][T24035] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1310.825134][T24035] usb 4-1: Using ep0 maxpacket: 8 [ 1310.948864][T24035] usb 4-1: config 3 has an invalid interface number: 175 but max is 0 [ 1311.016292][T24035] usb 4-1: config 3 has no interface number 0 [ 1311.509657][T24035] usb 4-1: config 3 interface 175 has no altsetting 0 [ 1311.516850][T13505] net_ratelimit: 19 callbacks suppressed [ 1311.516868][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1311.542462][T24035] usb 4-1: New USB device found, idVendor=095a, idProduct=3003, bcdDevice=32.bd [ 1311.556830][T24035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.587820][T24035] usb 4-1: Product: syz [ 1311.614042][T24035] usb 4-1: Manufacturer: syz [ 1311.629862][T19137] usb 2-1: USB disconnect, device number 32 [ 1311.655549][T24035] usb 4-1: SerialNumber: syz [ 1311.660431][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1311.800515][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1311.919327][T24035] kaweth 4-1:3.175: couldn't find required endpoints [ 1311.927320][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1311.963006][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 1311.998394][T24035] usb 4-1: USB disconnect, device number 48 [ 1312.060595][T24437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1312.069529][T24437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1312.510775][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1312.517798][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 1312.705261][ T30] audit: type=1400 audit(1777814890.476:3846): avc: denied { create } for pid=24440 comm="syz.1.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1313.194043][ T30] audit: type=1400 audit(1777814890.536:3847): avc: denied { write } for pid=24440 comm="syz.1.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1313.212428][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1313.231602][ T5799] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1313.373459][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1313.423158][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.460216][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.489151][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1313.521847][T24455] veth9: entered promiscuous mode [ 1313.526923][T24455] veth9: entered allmulticast mode [ 1313.532506][ T5799] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1313.541603][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.551185][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1313.561532][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1313.620222][T19137] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1313.693006][ T5799] usb 1-1: config 0 descriptor?? [ 1313.810326][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1313.871860][T19137] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1313.897709][T19137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.927892][T19137] usb 5-1: config 0 descriptor?? [ 1313.933070][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1314.161316][T19137] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 1314.440048][T19137] hackrf 5-1:0.0: Could not detect board [ 1314.467968][T19137] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 1314.504565][ T5799] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1314.536158][T19137] usb 5-1: USB disconnect, device number 95 [ 1314.602680][ T5799] usb 1-1: USB disconnect, device number 61 [ 1314.725968][T24469] fido_id[24469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1314.754513][T24035] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1315.051038][T24035] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1315.179095][T24035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.336980][T24035] usb 4-1: Product: syz [ 1315.390203][T24035] usb 4-1: Manufacturer: syz [ 1315.416440][T24035] usb 4-1: SerialNumber: syz [ 1315.453999][T24035] usb 4-1: config 0 descriptor?? [ 1316.413983][T24487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24487 comm=syz.4.4661 [ 1316.531267][T24491] Invalid logical block size (4) [ 1316.681158][T24492] binder: 24466:24492 ioctl c0285840 200000000000 returned -22 [ 1316.721948][ T5954] net_ratelimit: 15 callbacks suppressed [ 1316.721986][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1316.742472][T24491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.754096][T24491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.028658][T24035] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1317.059201][T24494] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1318.728106][T24035] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1318.991988][T24486] batadv_slave_1: entered promiscuous mode [ 1319.000243][ T30] audit: type=1400 audit(1777814896.766:3848): avc: denied { write } for pid=24463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.354221][T24501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.407193][ T30] audit: type=1400 audit(1777814897.156:3849): avc: denied { write } for pid=24512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.524101][T24501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.173205][T24501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.243821][ T5711] usb 4-1: USB disconnect, device number 49 [ 1320.315690][T24501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.362278][T24501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.485326][T24501] veth1_vlan: left promiscuous mode [ 1320.500511][T24501] veth0_vlan: left promiscuous mode [ 1320.515818][T24501] veth0_vlan: entered promiscuous mode [ 1320.540288][T24501] veth1_vlan: entered promiscuous mode [ 1320.573761][T24501] veth1_macvtap: left promiscuous mode [ 1320.593046][T24501] veth0_macvtap: left promiscuous mode [ 1320.616124][T24501] veth0_macvtap: entered promiscuous mode [ 1320.632532][T24501] veth1_macvtap: entered promiscuous mode [ 1320.696001][T24501] 8021q: adding VLAN 0 to HW filter on device ªªªªª» [ 1320.716634][T24501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1320.737930][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1320.747408][T24501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1320.757477][T24501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1320.765068][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1320.832625][ T64] bond6: (slave bond0): failed to get link speed/duplex [ 1320.842506][T24499] batadv_slave_1: left promiscuous mode [ 1320.868345][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.875579][ T7522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.916333][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.923569][ T7522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.170827][T24035] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1321.754284][ T5954] netdevsim netdevsim4 ªªªªª»: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.771353][ T5954] netdevsim netdevsim4 ªªªªª»: set [1, 1] type 2 family 0 port 20000 - 0 [ 1321.785958][T24035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.806067][T24035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.816779][ T5954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.850451][ T5954] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1321.859508][T24035] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1321.905467][T24035] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1321.927291][ T5954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.946235][T24035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.962865][ T5954] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1321.990373][T24035] usb 4-1: config 0 descriptor?? [ 1322.004102][ T5954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.073561][ T5954] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1322.151734][ T5738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1322.201114][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1322.249775][ T30] audit: type=1400 audit(1777814900.016:3850): avc: denied { write } for pid=24524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1322.375478][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1322.392664][ T5738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1322.485416][T24035] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1322.503103][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1322.631452][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1322.689043][T24563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4678'. [ 1322.723540][T24035] usb 4-1: USB disconnect, device number 50 [ 1322.748064][ T30] audit: type=1400 audit(1777814900.516:3851): avc: denied { write } for pid=24560 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1322.830624][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1322.976359][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1323.055023][ T1048] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1323.261606][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1323.635021][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1323.700743][T24035] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1324.115348][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1324.380826][T24035] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 1325.261125][T24589] netlink: 'syz.3.4685': attribute type 10 has an invalid length. [ 1325.347480][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1325.381248][T24035] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1325.982335][T24571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.027730][ T7515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.056278][T24035] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1326.091419][T24035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.123604][ T7515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.149007][T24035] usb 5-1: Product: syz [ 1326.168363][T24035] usb 5-1: Manufacturer: syz [ 1326.183282][T24035] usb 5-1: SerialNumber: syz [ 1326.217898][T24035] usb 5-1: config 0 descriptor?? [ 1326.227210][T24579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1326.239643][T24035] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1326.258372][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1326.275033][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1326.283184][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1326.291300][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1326.312564][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1326.321840][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1326.356462][T24035] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1326.773104][ T5738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.852968][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1326.887698][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1326.920077][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1326.951152][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1326.987979][T24035] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1327.019313][T24035] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1327.060997][T24035] usb 5-1: USB disconnect, device number 96 [ 1327.092097][T24035] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1327.240858][ T5738] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1327.300697][T13505] net_ratelimit: 9 callbacks suppressed [ 1327.300715][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1327.338006][T24035] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1327.724184][T24035] keyspan 5-1:0.0: device disconnected [ 1327.735612][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1327.776073][T24607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24607 comm=syz.4.4690 [ 1327.853482][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1327.884922][ T5738] usb 1-1: config index 0 descriptor too short (expected 8475, got 27) [ 1327.924888][ T5738] usb 1-1: config 0 has an invalid interface number: 200 but max is 2 [ 1328.057154][ T7518] bond6: (slave bond0): failed to get link speed/duplex [ 1328.071564][ T5738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.086704][ T5738] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1328.095850][ T5738] usb 1-1: config 0 has no interface number 0 [ 1328.108752][ T5738] usb 1-1: too many endpoints for config 0 interface 200 altsetting 2: 229, using maximum allowed: 30 [ 1328.128340][ T5738] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1328.184868][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1328.186368][ T5738] usb 1-1: config 0 interface 200 has no altsetting 0 [ 1328.252983][ T5738] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 1328.290847][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.310324][ T5738] usb 1-1: Product: syz [ 1328.331926][ T5738] usb 1-1: Manufacturer: syz [ 1328.357976][ T5738] usb 1-1: SerialNumber: syz [ 1328.360322][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1328.404082][ T5738] usb 1-1: config 0 descriptor?? [ 1328.552734][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1328.651209][T24604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.667286][T24604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.694455][T24604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.952195][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1329.510644][T24604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.585481][T24604] syzkaller0: entered promiscuous mode [ 1329.588757][T24626] binder: 24625:24626 ioctl c0306201 0 returned -14 [ 1329.608158][T24626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4697'. [ 1329.611672][T24604] syzkaller0: entered allmulticast mode [ 1329.618864][ T5799] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1329.731681][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1329.873447][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1329.947319][ T5799] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1330.050963][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1330.294706][ T5799] usb 4-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 1330.336713][ T5799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1330.378123][ T5799] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1330.398642][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.414279][ T5799] usb 4-1: Product: syz [ 1330.443481][ T5799] usb 4-1: Manufacturer: syz [ 1330.454635][ T5738] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 1330.455989][ T5799] usb 4-1: SerialNumber: syz [ 1330.512974][ T5738] usb 1-1: USB disconnect, device number 62 [ 1330.544426][ T5799] usb 4-1: selecting invalid altsetting 1 [ 1330.564364][ T5799] usb 4-1: unit 6 not found! [ 1330.642715][T24639] xt_hl: Unknown TTL match mode: 255 [ 1331.543960][ T5799] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1331.737718][ T5799] usb 4-1: USB disconnect, device number 51 [ 1333.483076][T23973] udevd[23973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.302586][ T13] net_ratelimit: 12 callbacks suppressed [ 1334.302607][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1334.420232][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1334.540217][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1334.681138][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1334.810545][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1335.038604][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1335.948260][T24700] blktrace: Concurrent blktraces are not allowed on loop5 [ 1335.950791][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1336.272670][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1336.560525][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1336.710746][ T5954] bond6: (slave bond0): failed to get link speed/duplex [ 1337.341642][T20228] Bluetooth: hci4: command 0x2016 tx timeout [ 1337.812398][T24720] tmpfs: Bad value for 'mpol' [ 1338.381400][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1338.702078][T24714] SET target dimension over the limit! [ 1339.349396][ T7515] net_ratelimit: 12 callbacks suppressed [ 1339.349415][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1339.410172][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 1339.436096][T24738] lo speed is unknown, defaulting to 1000 [ 1339.610232][T24035] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1339.828712][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1340.215319][T24035] usb 3-1: config 0 has no interfaces? [ 1340.231066][T24035] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1340.260643][T24035] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1340.297186][T24035] usb 3-1: Manufacturer: syz [ 1340.329641][T24035] usb 3-1: config 0 descriptor?? [ 1340.335013][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1340.610744][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1340.740310][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1340.779922][T24754] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1340.850411][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1340.888080][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4731'. [ 1341.126884][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4731'. [ 1341.139397][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1341.288455][T24762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24762 comm=syz.4.4732 [ 1341.968960][ T13] bond6: (slave bond0): failed to get link speed/duplex [ 1342.111833][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1342.241181][T24764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1342.251053][ T7522] bond6: (slave bond0): failed to get link speed/duplex [ 1342.967903][ T5738] usb 3-1: USB disconnect, device number 87 [ 1342.991906][ T30] audit: type=1400 audit(1777814920.756:3852): avc: denied { execute } for pid=24785 comm="syz.1.4739" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=92516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1343.128077][T24785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.340267][T24035] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1343.526970][T24035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.605915][T24035] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1343.668777][T24035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.844005][T24035] usb 1-1: config 0 descriptor?? [ 1343.890837][T24035] pwc: Askey VC010 type 2 USB webcam detected. [ 1344.085790][T24788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.128390][T24788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.360961][ T7515] net_ratelimit: 12 callbacks suppressed [ 1344.361087][ T7515] bond6: (slave bond0): failed to get link speed/duplex [ 1344.447977][T24035] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1344.467702][ T5738] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1344.606867][T24035] pwc: recv_control_msg error -32 req 02 val 2700 [ 1344.690020][T24035] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1344.713357][T24035] pwc: recv_control_msg error -32 req 04 val 1000 [ 1344.747067][T24035] pwc: recv_control_msg error -32 req 04 val 1300 [ 1344.778322][T24807] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4746'. [ 1344.787771][T24807] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4746'. [ 1344.798511][ T30] audit: type=1400 audit(1777814922.566:3853): avc: denied { name_bind } for pid=24806 comm="syz.4.4746" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1344.820987][ T5738] usb 4-1: device descriptor read/64, error -71 [ 1344.830046][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1345.084967][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1345.130250][ T5738] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1345.698293][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1345.760251][ T5738] usb 4-1: device descriptor read/64, error -71 [ 1345.820253][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1345.870445][ T5738] usb usb4-port1: attempt power cycle [ 1346.107839][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1346.307940][T13505] bond6: (slave bond0): failed to get link speed/duplex [ 1346.370653][ T5738] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1346.960802][ T5738] usb 4-1: device descriptor read/8, error -71 [ 1346.976332][T24827] 9p: Bad value for 'rfdno' [ 1346.998795][ T30] audit: type=1400 audit(1777814924.746:3854): avc: denied { append } for pid=24826 comm="syz.4.4752" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1347.046607][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1347.125583][T24035] pwc: recv_control_msg error -71 req 02 val 2000 [ 1347.175241][T24035] pwc: recv_control_msg error -71 req 02 val 2100 [ 1347.200616][T24035] pwc: recv_control_msg error -71 req 04 val 1500 [ 1347.235002][T24035] pwc: recv_control_msg error -71 req 02 val 2500 [ 1347.259477][T24035] pwc: recv_control_msg error -71 req 02 val 2400 [ 1347.267620][ T5738] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1347.285806][ T7512] bond6: (slave bond0): failed to get link speed/duplex [ 1347.300074][T24035] pwc: recv_control_msg error -71 req 02 val 2600 [ 1347.326930][T24035] pwc: recv_control_msg error -71 req 02 val 2900 [ 1347.380659][T24035] pwc: recv_control_msg error -71 req 02 val 2800 [ 1347.430518][T24035] pwc: recv_control_msg error -71 req 04 val 1100 [ 1347.441305][T24035] pwc: recv_control_msg error -71 req 04 val 1200 [ 1347.520823][ T5738] usb 4-1: device not accepting address 55, error -71 [ 1347.578539][T24035] pwc: Registered as video103. [ 1347.894182][ T5738] usb usb4-port1: unable to enumerate USB device [ 1347.956640][T24035] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input137 [ 1348.091708][T24832] bond0: Removing last arp target with arp_interval on [ 1348.096986][T24035] usb 1-1: USB disconnect, device number 63 [ 1348.165795][T24832] bond0: entered allmulticast mode [ 1348.229828][T24832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.251000][ T1048] bond6: (slave bond0): failed to get link speed/duplex [ 1355.010449][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1386.370332][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1453.450077][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1453.457049][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23973/1:b..l [ 1453.465912][ C0] rcu: (detected by 0, t=10502 jiffies, g=166745, q=741 ncpus=2) [ 1453.473706][ C0] task:udevd state:R running task stack:26472 pid:23973 tgid:23973 ppid:4977 task_flags:0x400140 flags:0x00080000 [ 1453.488713][ C0] Call Trace: [ 1453.491987][ C0] [ 1453.494909][ C0] __schedule+0x10e9/0x6820 [ 1453.499432][ C0] ? __pfx___schedule+0x10/0x10 [ 1453.504278][ C0] ? mark_held_locks+0x40/0x70 [ 1453.509042][ C0] preempt_schedule_irq+0x50/0x90 [ 1453.514058][ C0] irqentry_exit+0x1fe/0x790 [ 1453.518648][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1453.524099][ C0] RIP: 0010:rcu_is_watching+0x80/0xc0 [ 1453.529477][ C0] Code: 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 65 ff 0d 40 c9 1d 12 <74> 07 5b 5d c3 cc cc cc cc e8 42 f3 88 ff 5b 5d e9 1b 64 a0 09 48 [ 1453.549334][ C0] RSP: 0018:ffffc90007bd7a48 EFLAGS: 00000286 [ 1453.555392][ C0] RAX: 0000000000000001 RBX: ffff8880b8433da8 RCX: ffffffff82b91799 [ 1453.563355][ C0] RDX: 0000000000000000 RSI: ffffffff8c1c3580 RDI: ffffffff8e1d3920 [ 1453.571314][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1453.579271][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1453.587228][ C0] R13: ffff88801f2b4000 R14: ffff88801dae3780 R15: ffffc90007bd7cc0 [ 1453.595197][ C0] ? kernfs_root+0x199/0x2a0 [ 1453.599788][ C0] ? rcu_is_watching+0x12/0xc0 [ 1453.604551][ C0] ? kernfs_root+0xee/0x2a0 [ 1453.609046][ C0] lock_release+0x245/0x310 [ 1453.613550][ C0] kernfs_root+0xf3/0x2a0 [ 1453.617876][ C0] kernfs_dop_revalidate+0x516/0x7e0 [ 1453.623162][ C0] lookup_fast+0x3c7/0x600 [ 1453.627570][ C0] ? inode_permission+0x374/0x620 [ 1453.632604][ C0] link_path_walk+0x7d4/0x1cc0 [ 1453.637378][ C0] path_lookupat+0x74/0xc40 [ 1453.641880][ C0] filename_lookup+0x202/0x590 [ 1453.646643][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 1453.651944][ C0] ? strncpy_from_user+0x19d/0x2d0 [ 1453.657062][ C0] ? do_getname+0x191/0x390 [ 1453.661571][ C0] do_readlinkat+0xd3/0x370 [ 1453.666080][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 1453.671199][ C0] __x64_sys_readlink+0x78/0xc0 [ 1453.676049][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1453.681240][ C0] do_syscall_64+0x10b/0xf80 [ 1453.685825][ C0] ? clear_bhb_loop+0x40/0x90 [ 1453.690498][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.696383][ C0] RIP: 0033:0x7f9e60d153a7 [ 1453.700788][ C0] RSP: 002b:00007ffe85bc36e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 1453.709189][ C0] RAX: ffffffffffffffda RBX: 00007ffe85bc3f30 RCX: 00007f9e60d153a7 [ 1453.717150][ C0] RDX: 0000000000000400 RSI: 00007ffe85bc3af0 RDI: 00007ffe85bc36f0 [ 1453.725108][ C0] RBP: 0000000000000200 R08: 0000557d3647bc29 R09: 0000000000000000 [ 1453.733068][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe85bc36f0 [ 1453.741037][ C0] R13: 00007ffe85bc3af0 R14: 0000557d3647eca4 R15: 0000557d3647ebcc [ 1453.749029][ C0] [ 1453.752055][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g166745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1453.764461][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=96799 [ 1453.772348][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g166745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1453.783795][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1453.793749][ C0] rcu: RCU grace-period kthread stack dump: [ 1453.799620][ C0] task:rcu_preempt state:I stack:28904 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1453.811541][ C0] Call Trace: [ 1453.814813][ C0] [ 1453.817739][ C0] __schedule+0x10e9/0x6820 [ 1453.822262][ C0] ? __pfx___schedule+0x10/0x10 [ 1453.827105][ C0] ? find_held_lock+0x2b/0x80 [ 1453.831780][ C0] ? schedule+0x2bf/0x390 [ 1453.836109][ C0] schedule+0xdd/0x390 [ 1453.840175][ C0] schedule_timeout+0x127/0x280 [ 1453.845032][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1453.850407][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1453.855693][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1453.861495][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1453.866955][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1453.871716][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1453.877002][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 1453.882461][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1453.887399][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1453.892597][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1453.898401][ C0] rcu_gp_kthread+0x179/0x230 [ 1453.903077][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1453.908273][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1453.914079][ C0] ? __kthread_parkme+0x18c/0x230 [ 1453.919099][ C0] ? kthread+0x13a/0x450 [ 1453.923337][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1453.928530][ C0] kthread+0x370/0x450 [ 1453.932604][ C0] ? __pfx_kthread+0x10/0x10 [ 1453.937193][ C0] ret_from_fork+0x72b/0xd50 [ 1453.941787][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1453.946899][ C0] ? __switch_to+0x800/0x1100 [ 1453.951585][ C0] ? __pfx_kthread+0x10/0x10 [ 1453.956173][ C0] ret_from_fork_asm+0x1a/0x30 [ 1453.960954][ C0] [ 1453.963964][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1453.970286][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1453.975488][ C1] NMI backtrace for cpu 1 [ 1453.975507][ C1] CPU: 1 UID: 0 PID: 24838 Comm: syz.1.4756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.975531][ C1] Tainted: [L]=SOFTLOCKUP [ 1453.975538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1453.975549][ C1] RIP: 0010:__remove_hrtimer+0x8f/0x440 [ 1453.975578][ C1] Code: d0 7c 08 84 d2 0f 85 31 03 00 00 44 8b 35 cd 74 e3 0e 31 ff 44 89 f6 e8 af 2a 14 00 45 85 f6 0f 85 d7 02 00 00 e8 f1 2f 14 00 <48> 8d 7b 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f [ 1453.975594][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000046 [ 1453.975609][ C1] RAX: 0000000080010002 RBX: ffff888033a03300 RCX: ffffffff81f45d20 [ 1453.975621][ C1] RDX: ffff888069df2500 RSI: ffffffff81f45a2f RDI: ffff888069df2500 [ 1453.975634][ C1] RBP: ffff8880b8528600 R08: 0000000000000005 R09: 0000000000000000 [ 1453.975645][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1453.975656][ C1] R13: ffff8880b85284c0 R14: 0000000000000001 R15: 0000000000000000 [ 1453.975667][ C1] FS: 00007f0db90516c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 1453.975685][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1453.975697][ C1] CR2: 00007f6c1c9e8158 CR3: 000000003ce5e000 CR4: 00000000003526f0 [ 1453.975709][ C1] Call Trace: [ 1453.975715][ C1] [ 1453.975725][ C1] __hrtimer_run_queues+0x359/0xa00 [ 1453.975775][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1453.975797][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1453.975823][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1453.975845][ C1] [ 1453.975851][ C1] [ 1453.975857][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1453.975878][ C1] RIP: 0010:__schedule+0x260/0x6820 [ 1453.975896][ C1] Code: 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 ed 64 00 00 83 3d 2c c8 4c 05 02 0f 84 35 3c 00 00 0f 1f 44 00 00 9c <58> fa f6 c4 02 0f 85 65 30 00 00 8b bd f8 fe ff ff e8 ea 50 63 f6 [ 1453.975912][ C1] RSP: 0018:ffffc9000f1af938 EFLAGS: 00000297 [ 1453.975925][ C1] RAX: 0000000000000003 RBX: ffffffff8b8b3b6d RCX: 1ffffffff21af39c [ 1453.975937][ C1] RDX: 0000000000000000 RSI: ffffffff8defa991 RDI: ffffffff8c1c3600 [ 1453.975948][ C1] RBP: ffffc9000f1afaa0 R08: 0000000000000000 R09: fffffbfff21af36a [ 1453.975959][ C1] R10: ffffffff90d79b57 R11: 0000000000000000 R12: 0000000000000000 [ 1453.975970][ C1] R13: dffffc0000000000 R14: ffff8880b853b240 R15: 0000000000000000 [ 1453.975983][ C1] ? schedule+0xdd/0x390 [ 1453.976007][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1453.976028][ C1] ? plist_check_list+0x1b8/0x280 [ 1453.976058][ C1] ? __pfx___schedule+0x10/0x10 [ 1453.976075][ C1] ? find_held_lock+0x2b/0x80 [ 1453.976091][ C1] ? schedule+0x2bf/0x390 [ 1453.976110][ C1] schedule+0xdd/0x390 [ 1453.976127][ C1] futex_do_wait+0x88/0x180 [ 1453.976145][ C1] __futex_wait+0x1c4/0x300 [ 1453.976163][ C1] ? __pfx___futex_wait+0x10/0x10 [ 1453.976180][ C1] ? smp_call_function_many_cond+0x5de/0x1700 [ 1453.976203][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 1453.976222][ C1] ? futex_hash+0x2ad/0x370 [ 1453.976245][ C1] ? futex_hash+0x141/0x370 [ 1453.976268][ C1] futex_wait+0xe6/0x370 [ 1453.976285][ C1] ? __pfx_futex_wait+0x10/0x10 [ 1453.976309][ C1] ? add_device_randomness+0xb7/0xf0 [ 1453.976338][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 1453.976365][ C1] do_futex+0x1ef/0x350 [ 1453.976389][ C1] ? __pfx_do_futex+0x10/0x10 [ 1453.976412][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 1453.976432][ C1] ? security_capable+0x80/0x260 [ 1453.976448][ C1] ? hidinput_configure_usage+0x3854/0x7df0 [ 1453.976474][ C1] __x64_sys_futex+0x34f/0x4d0 [ 1453.976500][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1453.976523][ C1] ? __x64_sys_clock_settime+0x1c9/0x2a0 [ 1453.976543][ C1] ? rcu_is_watching+0x12/0xc0 [ 1453.976570][ C1] do_syscall_64+0x10b/0xf80 [ 1453.976590][ C1] ? clear_bhb_loop+0x40/0x90 [ 1453.976610][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.976628][ C1] RIP: 0033:0x7f0db819cdd9 [ 1453.976644][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.976660][ C1] RSP: 002b:00007f0db90510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1453.976676][ C1] RAX: ffffffffffffffda RBX: 00007f0db8416098 RCX: 00007f0db819cdd9 [ 1453.976688][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0db8416098 [ 1453.976698][ C1] RBP: 00007f0db8416090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.976709][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.976720][ C1] R13: 00007f0db8416128 R14: 00007fff7b092680 R15: 00007fff7b092768 [ 1453.976738][ C1] [ 1454.434157][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration